Tag Info

New answers tagged

0

"Why don't you just run the installer as Administrator? Right click... Run as administrator." This is only in case of installing software, in case of changing windows settings (network, system etc.) there is no option 'run as administrator'. I don't want regular users to have administrator rights, but in case of emergency system administrator should be able ...


0

If you right-click or shift+right-click and choose 'run as administrator' option you should get a dialog box to enter in credentials for a user than can install software.


0

Workstation rebooted and seemed to figure itself out. It may be that, even though gpupdate/force had been run on the machine numerous times, it wasn't applying new policy as it should have been. But it's working now.


1

Your problem appears to be with WGA (Windows Genuine Advantage validation/anti-piracy). mpa.one.microsoft.com is one of the domains used by this DRM scheme, and an error message saying that domain can't be reached strongly suggests that a failure to reach this domain is causing the XP clients to kill the connection you're trying to make. So, your first ...


0

You can also try to reset the computer account with the AD MMC. Or with Powershell Reset-ComputerMachinePassword or cmd NETDOM RESETPWD /Server:<name of any domain controller> /UserD:<domain admin account> /PasswordD:<password>


2

The reason you need to rebind the server to the domain is most likely related to the 30 day password for computers. When you restore a machine from snapshot, you're also reverting the password that machine knows and uses to authenticate to the domain. The domain will then refuse to service your computer. Re-adding it to the domain resets the password, and ...


0

Adding to Nathan C's answer. The proper supported way of cloning an AD joined computer is by using sysprep. While normally you can safely say that your new machine will get a new RID, microsoft recommends using sysprep. So unless you can be absolutely sure you won't cause any unforeseen issues it's generally better to follow the recommendations. However it ...


3

With all servers that are domain-joined, you need to sysprep them first. Revise your steps to the following: 1) Clone the machine using VMWare tools. 2) Boot without network connection. 3) Run C:\windows\System32\sysprep\sysprep.exe and tick "Generalize". Allow it to reboot. 4) Name the machine and connect it to the network and join as normal. The ...


-1

This is for Windows 8, not sure will this help. Just have a look and inform me the result.


1

What yagmoth555 said. We used this--it grants administrative privileges to processes, not users. (I was primarily asked to grant those privileges to software installers.) Before we had that, we experimented on which directories/registry keys/etc. needed to be writable by users for specific software to run, which usually (but not always) worked. I will ...


0

probably this solution is not available OOTB (out of the box). We have SharePoint 2010 in our environment and when opening via IE it does not ask for the credentials. All other places it ask for the domain user name and password every time you visit. My believe is if there would have been any solution, MS would have provided it with SharePoint as this ...


2

Use processmonitor and allow right only where they need them. (aka file registry hive and file folder) This can be done via gpo to give thoses kind of permissions. Did that for acad in exemple, and now that work good without admin right. Be aware this is a long process. Edited: Test out App-V if you can too, the application run like it as admin right as ...


0

dig +trace is generally the most straightforward way to inspect the chain of delegations. However, glue records are in the additional section and by default trace output does not include the additional section. You will need to specify explicitly that you want this included in the output. dig +trace +additional example.com If the idea is to check the ...


2

Here is a little shell script which implements Alnitak's answer: #!/bin/sh S=${IFS} IFS=. for P in $1; do TLD=${P} done IFS=${S} echo "TLD: ${TLD}" DNSLIST=$(dig +short ${TLD}. NS) for DNS in ${DNSLIST}; do echo "Checking ${DNS}" dig +norec +nocomments +noquestion +nostats +nocmd @${DNS} $1 NS done Pass the name of the domain as parameter: ...


0

This turned out to be DNSSEC configuration. DNSSEC was supported for domain.net by the old registrar and not on the new one I transferred to. As I was pointing name servers for the new registrar further to some cloud hosting, it became very hard to know what was wrong where. For some reason which I still don't understand I was able to access the domain from ...


0

Not an issue with CloudFlare at all because we're not running on the domain in any way (it looks like you may be trying to activate through a hosting partner).


1

When connecting to a domain network, but using a local login, the "." in default domain name for logon in gpedit.msc does not change the user name to authenticate locally by default. Whenever I log off the local user to change to the local admin, I always have to type ".\" or I get a bad user name or password error. Manually entering the "computer name" in ...


1

Your clients... do they use other DNS resolvers besides just the domain controller that you took offline? The redundancy in Active Directory does no good if your clients have no failover DNS server with which to locate an alternate domain controller... Personally, I would recommend configuring all your domain members to use two domain controllers in their ...


1

You can either have the elements of your application be served under a new hostname (app.cluelessclient.com), the server can issue redirects to the client, or the server can redirect requests to your server as a proxy (proxy_pass, etc). This is the general idea for the entire web/app/db model of modern web services.


0

After you log in as "MFC\user.name" and then log out, does it still show "E5530\user.name"? Also, is there a local user with the same username as the domain user? If so, would you consider changing one of those? so that you may be able to login directly as user.name and it won't change need "MFC\" before it.


0

Where are the DCs connected - one on each switch, or both on one switch? Where are clients connected? Wondering about how traffic is getting across those switches - trunk/bridge or routed?


1

Windows supports synching time with non-domain servers. Just be aware that if the time interferes radically with the domain time, kerberos tickets will stop working and shares/printers/etc. will start to fail.


0

Try the step listen there with your godaddy certificate; The Name on the security certificate is invalid or does not match the name of the site - PART 2 In resume; Get-ClientAccessServer -Identity exchange2 | FL and validate the URL, make them fit the external URL; Set-ClientAccessServer -Identity "mbx1" –AutodiscoverServiceInternalURI ...


3

Try just stop default Windows Time synchronization service and use Your own. It Ok as long as time in sync with domain in 5 min window.


1

Can you renew the selfcertificate that exchange create when you install it ? After that install it locally it each computer.


0

You can view DNS propagation via http://www.whatsmydns.net but you can identify if this is the issue by having your local resolver test the domain for you at location1 and location2 and comparing (as you are attempting to do already) If it's working from a host you control, but not 'remote' hosts, my instinct would be to look at the zone and your domain ...


2

Old post, but relevant question. The computer object will have an SID attached of which object created it. Use ADSIedit for this. Also, AD Audit Logging: http://technet.microsoft.com/en-us/library/cc731607(v=ws.10).aspx


0

Try clicking the "Locations..." button and selecting "Entire Directory". If it starts working, then you have an LDAP issue. Selecting "Entire Directory" forces the Select dialog to use a GC port to execute the query. Selecting a specific domain will cause it to use an LDAP port.


2

You can't use DNS to map port numbers (except for SRV records, but that doesn't apply here). What you could do is to put up a reverse proxy in front of those services that forward the requests to different other hosts and ports depending on the host name in the HTTP request.


0

As per CA/B forum new guideline for depreciation of local domain names in SSL certificates, no CA will issue SSL for local domain name. Also you can not acquire ssl for netBios names and IP address. Till date idle set up for exchange server access to local network used .local domain name and for external use public domain names for outlookanywhere and owa. ...


0

OSX 10.9 does support it. Windows 7 does not (does not request it in "parameter request list" - option 55 - in DHCP request).


0

I think you're conflating the issue more than it deserves. Assuming your cert already has the external name on the certificate and you've imported it and set the proper services for it it's actually fairly simple to tell Outlook clients to look for that cert. There are three main things you'll want to change, just remember best practices and export these ...


-1

The solution for my problem was to go control panel > users > manage credentials. For some reason there as a credential for my Nas there. After I removed it everything worked.



Top 50 recent answers are included