Tag Info

Hot answers tagged

3

Try just stop default Windows Time synchronization service and use Your own. It Ok as long as time in sync with domain in 5 min window.


3

With all servers that are domain-joined, you need to sysprep them first. Revise your steps to the following: 1) Clone the machine using VMWare tools. 2) Boot without network connection. 3) Run C:\windows\System32\sysprep\sysprep.exe and tick "Generalize". Allow it to reboot. 4) Name the machine and connect it to the network and join as normal. The ...


2

You can't use DNS to map port numbers (except for SRV records, but that doesn't apply here). What you could do is to put up a reverse proxy in front of those services that forward the requests to different other hosts and ports depending on the host name in the HTTP request.


2

You need to create the child domain with a new domain controller, not with the existing domain controller.


2

If you set up your secondary machine as a backup server, you'll need a few settings. relay_domains= myemployersdomain.com You will also be using your transport_maps like this: myemployersdomain.com relay:[the.actual.server] Then you would (as Falcon says) need the relay_recipient_maps with either a wildcard entry, or an entry for you, and your boss. ...


2

The whole point of the domain part of the email address is that it indicates which set of SMTP servers is responsible for delivery of mail for the whole domain. Put another way: you cannot subdivide domains like that. However, it sounds like what you really want to do (besides circumventing policy, but this is an interesting question theoretically so I'm ...


2

Here is a little shell script which implements Alnitak's answer: #!/bin/sh S=${IFS} IFS=. for P in $1; do TLD=${P} done IFS=${S} echo "TLD: ${TLD}" DNSLIST=$(dig +short ${TLD}. NS) for DNS in ${DNSLIST}; do echo "Checking ${DNS}" dig +norec +nocomments +noquestion +nostats +nocmd @${DNS} $1 NS done Pass the name of the domain as parameter: ...


2

Use processmonitor and allow right only where they need them. (aka file registry hive and file folder) This can be done via gpo to give thoses kind of permissions. Did that for acad in exemple, and now that work good without admin right. Be aware this is a long process. Edited: Test out App-V if you can too, the application run like it as admin right as ...


2

The reason you need to rebind the server to the domain is most likely related to the 30 day password for computers. When you restore a machine from snapshot, you're also reverting the password that machine knows and uses to authenticate to the domain. The domain will then refuse to service your computer. Re-adding it to the domain resets the password, and ...


2

Old post, but relevant question. The computer object will have an SID attached of which object created it. Use ADSIedit for this. Also, AD Audit Logging: http://technet.microsoft.com/en-us/library/cc731607(v=ws.10).aspx


1

Your problem appears to be with WGA (Windows Genuine Advantage validation/anti-piracy). mpa.one.microsoft.com is one of the domains used by this DRM scheme, and an error message saying that domain can't be reached strongly suggests that a failure to reach this domain is causing the XP clients to kill the connection you're trying to make. So, your first ...


1

What yagmoth555 said. We used this--it grants administrative privileges to processes, not users. (I was primarily asked to grant those privileges to software installers.) Before we had that, we experimented on which directories/registry keys/etc. needed to be writable by users for specific software to run, which usually (but not always) worked. I will ...


1

Can you renew the selfcertificate that exchange create when you install it ? After that install it locally it each computer.


1

You can either have the elements of your application be served under a new hostname (app.cluelessclient.com), the server can issue redirects to the client, or the server can redirect requests to your server as a proxy (proxy_pass, etc). This is the general idea for the entire web/app/db model of modern web services.


1

Your clients... do they use other DNS resolvers besides just the domain controller that you took offline? The redundancy in Active Directory does no good if your clients have no failover DNS server with which to locate an alternate domain controller... Personally, I would recommend configuring all your domain members to use two domain controllers in their ...


1

Windows supports synching time with non-domain servers. Just be aware that if the time interferes radically with the domain time, kerberos tickets will stop working and shares/printers/etc. will start to fail.


1

When connecting to a domain network, but using a local login, the "." in default domain name for logon in gpedit.msc does not change the user name to authenticate locally by default. Whenever I log off the local user to change to the local admin, I always have to type ".\" or I get a bad user name or password error. Manually entering the "computer name" in ...



Only top voted, non community-wiki answers of a minimum length are eligible