Tag Info

Hot answers tagged

16

No, there is no "global" list; every company maintains their own classifications. So you will have to contact each one individually.


12

I think the concept you're struggling with is glue records. From that linked article above: For example, if the authoritative name server for example.org is ns1.example.org, a computer trying to resolve www.example.org first resolves ns1.example.org. Since ns1 is contained in example.org, this requires resolving example.org first, which presents a ...


12

What you're doing in heading down a route that will bring you nothing but pain, heartache and absolutely no sympathy from any support personnel. While you can join a Microsoft PC to a non-Windows Domain, there are few scenarios when this is actually a good idea. So, basically, what I'm saying is - don't do this. Build a Windows Server Domain Controller, not ...


10

The latter. .uk is a CCTLD, or Country Code Top-Level Domain; .co.uk is a subdomain thereof. The whole of the .uk namespace is operated by Nominet Ltd. For many years, direct registration under .uk hasn't been allowed, and the namespace has been split into the subdomains we know and love (including .co.uk, .org.uk, .net.uk, .me.uk, .parliament.uk, and so ...


9

You will not need to rejoin clients or re-create users if you are doing a domain rename. I don't know what step-by-step guide you're looking at, but the step-by-step guide to domain rename from Microsoft doesn't contain such instructions. I've done several domain renames in Windows 2003 single-forest, single-domain environments with and without Exchange ...


8

Do not even bother trying to use an old-style domain. No reason. Samba 4 running as an Active Directory Domain Controller is a perfectly viable setup that works without problems. We have it running in quite a few locations now without problems. There is support for group policies, and the various management tools from Windows work for managing the users, ...


8

The General Case: How do I remotely issue a CLI command to thousands of Windows domain computers at once? As with most things in our profession, your easiest approach is generally to break the job down into simple, discrete tasks, and then either perform those tasks in sequence, or string them back together (such as by putting them all into a single ...


8

I'm going to take the opposite tack as @TheCleaner. Those Domain Admin accounts' password hashes are probably laying all around your network, just waiting for a pass-the-hash scenario. Because of that, I'd recommend you remove those accounts from Domain Admins immediately, and start using them as limited users. (You should still change the passwords, too.) ...


6

No, that is not possible. If you create a local account with the same username+password, that should work for many activities. It's fairly easy to setup and test, so you may want to try that.


5

Nothing is wrong, this is the way permissions with UAC work. Try the search function next time :-) User in domain admin group cannot access directory the group has permission to access


5

This is where I think a lot of people get this wrong. When you hear or read There can only be one SBS server on the network what you should understand is that they're using the term network in the colloquial sense. What they mean is There can only be one SBS server joined to, and a member of, the same Active Directory domain. You can have, and I've seen ...


5

If you can't use rendom.exe because you have an Exchange organization in your environment, you have to create a new Active Directory domain and use a tool like ADMT to migrate users, groups, and computers into the new domain. Some applications do not support migration in this manner - Exchange is one of them. You will have to configure an Exchange ...


5

Most likely if you are blocking ports on a Windows machine and it has a problem with these ports listed below then you are using a third-party firewall and you will need to reconfigure. As for a Windows machine with the built in firewall, I have never had a problem with the ports being blocked. The other thing that comes to mind here would be to make sure ...


5

Why is xy.com the default if you don't want it to be? Add a new default virtual host that does nothing but return a 404. Then add xy.com as a virtual host entry. It'll only get used if requested.


5

You need to create additional domain controllers. Each domain needs its own Domain Controller, you cannot create multiple domains using the same domain controller. I would like to create a new domain along with root domain. This also requires a new domain controller. In addition, this can be configured as a new forest, or as a child domain with another ...


5

Hopefully, this will be a little clearer for you, even though it's a bit wordy. That part of the slide is slightly incorrect -- the root servers don't ask any other servers for records on your behalf. In that example, all of the heavy lifting is done by Google's 8.8.8.8 server To better explain this, you first need to know the difference between an ...


5

I hadn't heard of Univention before. It looks like it's a distribution of Linux and Samba with some "baked-in" management tools. It looks like you can install either Samba 3 or Samba 4 (per this screenshot. There appear to be known issues with Windows Server 2012 joining a Samba 3 domain, so that may be your problem. I'd compare the DNS settings on the ...


5

Here's my quick recommendation...since you can easily work "backwards" at this point to get what you want. Rename the existing accounts in AD to something like "Mark-Admin". Change their display name and user logon name (username). The SID will stay the same so it's similar to having someone go from their maiden to married name in essence. All ...


4

Since no one gave you a solution on how to have postfix insert a message-id that reflects your domain and I had the same issue, I figured I would share how I was able to have postfix do so: 1) Add to the end of /etc/postfix/main.cf header_checks = regexp:/etc/postfix/header_checks 2) Insert a replace string in header_checks ...


4

Currently the authoritative DNS servers for your domain are dns1.xordad.com and dns2.xordad.com (this matches what WHOIS says, which is a good sign). dns1.xordad.com will return recursive queries (eg, it resolves google.com correctly) but does not know it's authoritative for cctools.ir. Do you also run dns1.xordad.com or is that from your ...


4

Fix your website first. Both can be blacklisted, but it's usually just the IP. Different lists keep different information.


4

Each blacklist deal has its own blacklisting/whitelisting method. Some use domains, some use single IPs (/32), some bigger ranges (/24).


4

I personally like AD, but you've already said you've decided against it. So... VPN Connections to connect them to the office. (Routing and Remote Access/OpenVPN/Cisco AnyConnect/What came with your router/etc.) LogMeIn or something similar on the clients. You can run WSUS outside of a domain. There are registry keys to help you with that, and they can ...


4

It seems that you have already thought of everything. Simply turning them off will make the AD balk at you at most, and might slow some operations in edge cases. Nothing should break. The only danger (and it's not clear from the available information wether it's a real danger) I see here is that your virtualization platform might have dependencies on your ...


4

As with most things, the best (and first) precaution you should take is ensuring you have proper backups, and that they are restore-tested. Otherwise, I can't think of any precautions you need to take before demoting your domain controllers. You ran (and passed) dcdiag, you're not demoting a FSMO role holder, they're not the last DCs in the domain, your ...


4

When you add the new 2012 domain controller all the Active Directory objects will be replicated automatically to it. There is no need to re-add anything. In order to work in 2012 native mode, you will have to move the FSMO roles from the 2003 machine to the 2012 machine and demote the 2003 machine.


4

Really? Honestly, this question is so lazy, I almost don't want to answer it... but I guess I dedicated 6 seconds on Google to finding the answer, so I may as well share it. To get OS Version: Get-ADComputer -Filter * -Property * | Format-Table Name,OperatingSystem,OperatingSystemServicePack,OperatingSystemVersion -Wrap –Auto Oh, and look, ...


4

I believe your admin has some incorrect assumptions on how SIDs work in a domain environment. The machine SID does not directly correlate to the SID generated for the machine in Active Directory. The whole bit about machines not being able to login or join due to another machine being online really implies that your admin's understanding of AD is less than ...


4

How does this machine SID play any role in the success of joining a domain or logging in to the computer with AD credentials? What happens when two systems with the same machine SID try to do it? Does the "SID conflict" our admin said has anything to do with this? Why might running newSID help? It wouldn't help. There's some other problem that's being ...


4

You haven't said which version of Windows the workstations are running, but the easiest thing to do is to launch Group Policy editor to create the policies (like TheCleaner described). Then copy the user and computer folders from the first machine's %systemroot%\system32\grouppolicy\ to the new machine's same location, then either reboot or run gpupdate ...



Only top voted, non community-wiki answers of a minimum length are eligible