Hot answers tagged

28

This is not going to be an IT tech answer, but hopefully useful nonetheless. Speaking from years of experience, you will not be able to convince your boss to do everything differently. The primary reason for this is that he is the boss while you are just his subordinate. You are in the wrong position to push fundamental changes. Can you live with the ...


18

You need to focus on how it helps them, not on what you "want." we have coped for years without an issue And you don't want to start now! There have been a number of data breaches lately, including Target, Home Depot, and more. Home Depot spent $43,000,000 on its data breach in only one quarter. Target paid $10,000,000 in a settlement. An ...


13

Although I wouldn't be surprised if in practice the registration requirements are only checked on registration and not for renewals, you don't have to lose your domain when you leave Europe. A number of registrars provide trustee services that allow the registration of a .FR domain to people/organisations that don't qualify directly and your domain can be ...


10

No, this is not possible if the OU is located at the root level in the parent domain (there is instead no issue if the OU is located in a subtree). Reference: http://support.microsoft.com/en-us/kb/240147. The KB article is very old and only mentions Windows 2000, but the limitation still applies as of Windows Server 2012 R2. Oddly, the official guide ...


9

The answer to "how PCI compliant" you are is Not Very (edited based on a comment). Your CC terminals might be okay if the tills themselves don't hold any data. Now to pick apart the "not worth it" list... We have coped for years without an issue This may well be true, but the problem is perception. This will be your biggest hurdle. Employees can be ...


7

When you connect by IP address the SSH connection goes directly to your server but if you use the domain name it goes through Cloudflare defenses. My suggestion would be to either use direct.pollnote.com (I think CloudFlare creates it automaticaly but people often remove it) or add your own alias like ssh.pollnote.com and disable CloudFlare protection on it.


7

That COMPANY_NT is the NetBIOS name for your domain, which was configured when it was set up - it doesn't actually have any relation to NT legacy cruft, that's just the name that someone picked. Your domain will need to always have a NetBIOS name - you can't get rid of that.. but if you want, you can change the name with rendom so that it no longer says "NT"...


7

Here are my thoughts: Management very rarely understands technology and its place in business. Most times, management has misconceptions about what technology is and how it affects business. Yes, it's true that mismanagement of technology often leads to wasteful spending, but proper management increases productivity dramatically. Waste generally happens ...


6

You will likely run into the same problem with CNAME records. Your best long-term solution is to continue using NetSol as a registrar, but move your DNS services elsewhere, to somewhere without arbitrary limits like your current provider has. I'm a big proponent of AWS Route 53. It's easy to use, very reliable, cheap, easy to automate things via their API, ...


5

There's no good reliable starting point for a WHOIS client. It's more or less an "illusion" that you can use whois without also specifying the whois server to query. I'll refer to my answer here http://serverfault.com/a/615848/183318 for the available means of finding the proper WHOIS server for a TLD. Only the method of querying IANA (WHOIS or http) is ...


5

I'm assuming you're meaning you have something of the form example.com and mobile.example.com ? There is nothing inherently wrong with these being served from different IPs for load balancing or other purposes. It's not going to be an intelligent distribution of traffic based on actual load - but if it meets your needs : then as a cheap and easy solution I ...


5

While there are tools that can rename a domain, it can be a complicated process. You have a couple options. 1. You can add an alternate UPN so that @domain.com is valid. 2. You can migrate to a new domain. I'd try the upn route first


5

This is not possible at all. In order to grant permissions to domain users on a computer (including adding them to local groups), the computer needs to be joined to the domain.


5

There is a wealth of public information on how the DC Locator process works. Essentially it performs a series of DNS lookups and LDAP pings, and also attempts to stratify the results by selecting the closest domain controller. It's unusual for Windows DC Locator to continue to use a failed domain controller, unless the domain controller is passing the ...


5

From nginx documentation: In this configuration nginx tests only the request’s header field “Host” to determine which server the request should be routed to. If its value does not match any server name, or the request does not contain this header field at all, then nginx will route the request to the default server for this port. In the configuration ...


5

This... doesn't really make any sense. IP addressing has nothing at all to do with domain membership. If you are replacing a machine with a new one, the new one will not automatically be a domain member just because it has the same IP address (or name) of the old one; you'll need to join it to the domain, using the standard procedure (change the domain ...


5

A forest is a security boundary. A domain is a management boundary. With modern delegation, fine-grained password policies, and item-level targeting in GPO, its entirely possible to create management boundaries within a single domain as well. There's no "right" answer. Evaluate your situation and choose whichever is most appropriate based on your ...


4

I regularly compile a list from IANA and PSL into a XML file including whois server, registrar, second level domains and if possible a regular expression for availabilty: https://github.com/whois-server-list/whois-server-list


4

The DC/DNS server should use it's own ip address for primary DNS and should use 127.0.0.1 for secondary DNS (assuming a single DC/DNS server). The clients should use the DC/DNS server for DNS. You can configure the DNS server properties to use the Forwarders of your choice to resolve external DNS names.


4

No, there's nothing wrong with that. The primary advantage to that is that it bypasses the default location for new computers. That advantage (or another that I haven't thought of) may or may not be compelling to you, depending on what policies you have in place in various OUs.


4

I don't think switching record types really addresses the core problem which is a limit to the number of records that your DNS service provider allows. Disregarding the question of whether using the use of CNAME records would be appropriate in your scenario, presumably such a switch would just mean that you would hit the same limit but now instead for how ...


4

This happens on shared hosting when someone tries to access a site with https and their site doesn't have a certificate configured. Someone goes to https://anothersite.com and https://yoursite.com loads instead because it's your certificate. BTW, your certificate is expired.


4

You can do this by putting a reverse proxy before your servers and direct to the proper one when request for particular site is sent to that proxy. You can use mod_proxy of Apache: http://httpd.apache.org/docs/2.2/mod/mod_proxy.html Or you can try something more lightweight like ngnix.


4

Dealing with the WHOIS protocol is quite messy. At least for human digestion it's typically most practical to use a client that has been pre-configured in such a way that it can present a mostly consistent interface to the user. Doing so means having a very extensive configuration with not only information about which servers to use for particular queries ...


4

The Group Policy Setting inhibits the upgrade from actually happening. If you click the upgrade icon, you will get a message that the administrator has disabled upgrades. The setting does not kill the offer program (GWX.exe) if it is already running. The official supported method for opting out of the Windows 10 upgrade is documented here: https://support....


4

The way to do this (for any equipment) is recognize that the MAC address of the camera is static even if the IP is not, and to act on the DHCP server. It may be possible for the DHCP server to update DNS with the new IP address, recognizing the equipment either by MAC or some more complicated protocol with a login/password. I would probably not recommend ...


3

From how I read that, I think you may be confusing the delegation information administered through the registrar with some DNS hosting service provided by the same company. If you are switching to an entirely different set of nameservers it is important that you update the delegation information, not the data inside your zone hosted at their DNS service. ...


3

Currently your email is going to mx0.123-reg.co.uk and mx1.123-reg.co.uk as indicated by the MX records in your DNS zone. If you want your email to go to the host named mail.yourdomain.com (as represented by the A record in your DNS zone) then you need to change the MX record(s) to reflect that. The MX record is used to designate the host or hosts that ...


3

The name of an Active Directory domain is only for internal usage, thus you could name it anything you want; however, in an Active Directory environment, the domain name also acts as the DNS suffix for all computers in the domain, and the domain controllers act as internal DNS servers which are (or at least behave as they were) authoritative for that DNS ...


3

It is SBS, you need to make sure you are running the script from http://connect/ otherwise, it will fail to join the PCs in the correct location. Next, make sure they are all located in AD under: Domain.local -> My Business -> Computers -> SBSComputers If they are in a different OU outside of the MyBusiness OU, then they may not show in the console and ...



Only top voted, non community-wiki answers of a minimum length are eligible