Tag Info

Hot answers tagged

51

ICANN explains this pretty well in their blog (http://blog.icann.org/2008/09/abkhazia-kosovo-south-ossetia-transnistria-my-oh-my/): As at this time, Abkhazia, Kosovo, Transnistria, Somaliland, South Ossetia and others are not in the ISO 3166-1 standard, so ICANN is not in a position to grant any corresponding country-code domain for them. By ...


16

No, there is no "global" list; every company maintains their own classifications. So you will have to contact each one individually.


12

What you're doing in heading down a route that will bring you nothing but pain, heartache and absolutely no sympathy from any support personnel. While you can join a Microsoft PC to a non-Windows Domain, there are few scenarios when this is actually a good idea. So, basically, what I'm saying is - don't do this. Build a Windows Server Domain Controller, not ...


12

Yes, you will have to buy another certificate* The asterisk wildcard character * will only match 1 label in a resolved FQDN. This behavior reflects RFC 4592 Section 3.3, in its description of DNS label matching and fallback to the asterisk label. If you only need to secure a single endpoint under the .internal.mycompany.com. namespace, you don't need a ...


10

The latter. .uk is a CCTLD, or Country Code Top-Level Domain; .co.uk is a subdomain thereof. The whole of the .uk namespace is operated by Nominet Ltd. For many years, direct registration under .uk hasn't been allowed, and the namespace has been split into the subdomains we know and love (including .co.uk, .org.uk, .net.uk, .me.uk, .parliament.uk, and so ...


9

You will not need to rejoin clients or re-create users if you are doing a domain rename. I don't know what step-by-step guide you're looking at, but the step-by-step guide to domain rename from Microsoft doesn't contain such instructions. I've done several domain renames in Windows 2003 single-forest, single-domain environments with and without Exchange ...


8

Do not even bother trying to use an old-style domain. No reason. Samba 4 running as an Active Directory Domain Controller is a perfectly viable setup that works without problems. We have it running in quite a few locations now without problems. There is support for group policies, and the various management tools from Windows work for managing the users, ...


8

The General Case: How do I remotely issue a CLI command to thousands of Windows domain computers at once? As with most things in our profession, your easiest approach is generally to break the job down into simple, discrete tasks, and then either perform those tasks in sequence, or string them back together (such as by putting them all into a single ...


7

The first MX means that the IP addresses in the MX record(s) for the domain you're actually attaching the SPF record to should be accepted as valid. The second one means that IP addresses in the MX record(s) for the domain mail.mydomain.com should be accepted as valid. If this SPF record is for the domain mail.mydomain.com, then the second one is redundant. ...


6

No, that is not possible. If you create a local account with the same username+password, that should work for many activities. It's fairly easy to setup and test, so you may want to try that.


6

Stop using terminology that hasn't been in use in 14+ years. Domain Controllers are no longer referred to as PDC and BDC. If the server is unrecoverable then you'll need to create a new domain on a new server. You can create it using the same FQDN and NetBIOS name as the previous domain but you'll need to join all of the clients to the new domain. There's ...


5

This is where I think a lot of people get this wrong. When you hear or read There can only be one SBS server on the network what you should understand is that they're using the term network in the colloquial sense. What they mean is There can only be one SBS server joined to, and a member of, the same Active Directory domain. You can have, and I've seen ...


5

Really? Honestly, this question is so lazy, I almost don't want to answer it... but I guess I dedicated 6 seconds on Google to finding the answer, so I may as well share it. To get OS Version: Get-ADComputer -Filter * -Property * | Format-Table Name,OperatingSystem,OperatingSystemServicePack,OperatingSystemVersion -Wrap –Auto Oh, and look, ...


5

If you can't use rendom.exe because you have an Exchange organization in your environment, you have to create a new Active Directory domain and use a tool like ADMT to migrate users, groups, and computers into the new domain. Some applications do not support migration in this manner - Exchange is one of them. You will have to configure an Exchange ...


5

Most likely if you are blocking ports on a Windows machine and it has a problem with these ports listed below then you are using a third-party firewall and you will need to reconfigure. As for a Windows machine with the built in firewall, I have never had a problem with the ports being blocked. The other thing that comes to mind here would be to make sure ...


5

Why is xy.com the default if you don't want it to be? Add a new default virtual host that does nothing but return a 404. Then add xy.com as a virtual host entry. It'll only get used if requested.


5

Why not simply change the default VHost to a deny one? <VirtualHost *:80> ServerName lol.no DocumentRoot /var/empty/httpd <Location /> Deny from all Allow from none </Location> </VirtualHost> <VirtualHost *:80> ...your VHost goes here... </VirtualHost>


5

You need to create additional domain controllers. Each domain needs its own Domain Controller, you cannot create multiple domains using the same domain controller. I would like to create a new domain along with root domain. This also requires a new domain controller. In addition, this can be configured as a new forest, or as a child domain with another ...


5

Most software installation programs for Windows require Administrator rights to function properly. This is an artifact of the design (or lack thereof, some might say) of the Windows platform. While there is an increasing trend toward software that installs only within the writable directories accessible to a limited (i.e. non-Administrator) user (things like ...


5

Hopefully, this will be a little clearer for you, even though it's a bit wordy. That part of the slide is slightly incorrect -- the root servers don't ask any other servers for records on your behalf. In that example, all of the heavy lifting is done by Google's 8.8.8.8 server To better explain this, you first need to know the difference between an ...


5

I hadn't heard of Univention before. It looks like it's a distribution of Linux and Samba with some "baked-in" management tools. It looks like you can install either Samba 3 or Samba 4 (per this screenshot. There appear to be known issues with Windows Server 2012 joining a Samba 3 domain, so that may be your problem. I'd compare the DNS settings on the ...


5

Strict-Transport-Security - includeSubdomains The problem is the scope of the HSTS header, it includes all subdomains. If accessing http://demo.xml-director.info with a browser first it'll work fine. However, upon first access to https://xml-director.info/ or https://www.xml-director.info the browser will receive a HSTS header for all subdomains set to ...


5

While you can create 2,147,483,393 unique entries in a domain, you probably won't create even a fraction of this in most environments. Regardless 2,147,483,393 is the only hard limitation you have in AD. When it comes to members in a group, there are soft limits which are simply recommendations based on stress tests done by Microsoft and practical use cases ...


4

When you add the new 2012 domain controller all the Active Directory objects will be replicated automatically to it. There is no need to re-add anything. In order to work in 2012 native mode, you will have to move the FSMO roles from the 2003 machine to the 2012 machine and demote the 2003 machine.


4

Since no one gave you a solution on how to have postfix insert a message-id that reflects your domain and I had the same issue, I figured I would share how I was able to have postfix do so: 1) Add to the end of /etc/postfix/main.cf header_checks = regexp:/etc/postfix/header_checks 2) Insert a replace string in header_checks ...


4

you can use dnsmasq on 127.0.0.1 for resolving from /etc/hosts and place resolver 127.0.0.1 to nginx config


4

I believe your admin has some incorrect assumptions on how SIDs work in a domain environment. The machine SID does not directly correlate to the SID generated for the machine in Active Directory. The whole bit about machines not being able to login or join due to another machine being online really implies that your admin's understanding of AD is less than ...


4

How does this machine SID play any role in the success of joining a domain or logging in to the computer with AD credentials? What happens when two systems with the same machine SID try to do it? Does the "SID conflict" our admin said has anything to do with this? Why might running newSID help? It wouldn't help. There's some other problem that's being ...


4

You haven't said which version of Windows the workstations are running, but the easiest thing to do is to launch Group Policy editor to create the policies (like TheCleaner described). Then copy the user and computer folders from the first machine's %systemroot%\system32\grouppolicy\ to the new machine's same location, then either reboot or run gpupdate ...


4

Per Microsoft, this is not possible: When you deploy a new forest, you are prompted to set the forest functional level and then set the domain functional level. You cannot set the domain functional level to a value that is lower than the forest functional level. Forest takes precedence as the minimum functional level of each domain in the forest: ...



Only top voted, non community-wiki answers of a minimum length are eligible