Tag Info

Hot answers tagged

11

If you can safely limit the supported clients of your service to systems supporting Server Name Indication, having only one IP address should be sufficient. See this article for a list of supported clients.


10

Nope. The "Hide extensions for known file types" is a preference that you can set via Group Policy. And if it's only a preference, then the user can undo it. Basically, as long as the user has write/modify access to the file, they can rename it to whatever they wish. It's not a Group Policy thing, but an NTFS thing. The only way to really prevent a user from ...


5

You should not install SQL Server on your Domain Controller. Yes Join the new server to the same domain as the clients. Why would you do otherwise?


3

Open EAC (Exchange Admin Center). Select Mail Flow on the Left Panel Menu. Select Accepted Domains from the Top Menu. Click the + icon. Enter a name in Name, enter the fqdn of the subdomain in Accepted Domain. ("subdomain.example.com"). Select Authoritative domain. Select Save Don't forget to add/update an MX record for the subdomain. To confirm the ...


3

In order to satisfy this one specific scenario, all you really have to do is open port 389 on whatever firewall separates the domain controller from the internet. Everything will be clear text over the wire. Kerberos will not be used. You may also desire some sort of externally resolvable DNS name (though not strictly technically required.) You may also have ...


3

If all they have is a small domain, migrate it into your existing domain. Microsoft provides a tool just for this purpose, the appropriately named Active Directory Migration Tool (ADMT). Read more about it here: https://technet.microsoft.com/en-us/library/Cc974332(v=WS.10).aspx


3

The IP address is not relevant for SSL/TLS on websites. What is important is that the name the browser uses (e.g. example.com) matches the name listed in the certificate. So, if you install the cert on many servers and somehow make sure you can reach them all with the same DNS name, things should work. Does your application require load balancing? Would ...


3

When you connect by IP address the SSH connection goes directly to your server but if you use the domain name it goes through Cloudflare defenses. My suggestion would be to either use direct.pollnote.com (I think CloudFlare creates it automaticaly but people often remove it) or add your own alias like ssh.pollnote.com and disable CloudFlare protection on it. ...


2

Domain Administrators group is, by default, member of local Administrators group of all the member servers and computers and as such, from a local administrators point of view, rights assigned are the same. The difference come in when working on Active Directory. Domain Administrators have elevated rights to administer and make changes to it. It is highly ...


1

A Domain Administrator is a domain account that has administrative access to all machines in the domain, clients as well as servers. That level of access should be strictly limited to authorized administrators. A Local Administrator is a local user account on one machine and has administrative access there, and no access at all to any other machine in the ...


1

Manually install the client connector as detailed at http://blogs.technet.com/b/sbs/archive/2015/07/23/client-connector-availability-with-windows-home-server-small-business-server-and-windows-server-essentials-for-supported-client-os.aspx


1

You need to enable auditing. https://technet.microsoft.com/en-us/library/cc771070.aspx Once you have auditing enabled, you can see who has browsed, opened/read, written folders and files. EDIT Oh, wait, you're on Windows 8. You can't do that on Windows 8. You'll need to download an auditing app and install it on your system if you want audit ...


1

After a long time and support requests to our official microsoft support station (where they had no explenation for the problem), i accidenttaly solved the problem: i replaced one of the DCs which did not make any problems, but the server was initialy build for other purposes, so it was placed in the wrong subnet. And then, the same errors as above showed, ...


1

If you shut everything down, then take snapshots of everything as they are shutdown, and when you revert back, you shut everything down and revert everything back to the same snapshot, you should be fine.


1

Of all the hoops I had to jump through, this was the EASIEST SOLUTION by far: http://www.em-soft.si/myblog/elvis/?p=403 Just install WS2012R2E, CANCEL the WIZARD, use the Powershell (run as admin), and enter the commands, HIT "Y" to continue (finish) WIZARD.... than VOILA! It's DONE! SIMPLE AS THAT. Why is something that should be SO simple so ...


1

First of all you need to make sure the SSL mod is enabled a2enmod ssl then you need to change your config to something like this: <VirtualHost *:443> SSLEngine On SSLCertificateFile /etc/ssl/localcerts/www.test-site.com.crt SSLCertificateKeyFile /etc/ssl/localcerts/www.test-site.com.key SSLCertificateChainFile ...


1

You might consider using Hyper-V to install these servers as virtual instances on the same hardware. A second server as a host would easily support all this. I would also recommend adding a second domain controller as a VM to back up the first.



Only top voted, non community-wiki answers of a minimum length are eligible