Tag Info

Hot answers tagged

4

Before we get going I want to make a pedantic point, more for the benefit of the general readership than yourself. we just push it via SCCM SCCM is a pull-based technology. I know what you meant but I find that with my tier-1 guys, every opportunity I get to emphasize that SCCM is not a push-based technology helps them understand it quicker. I've ...


4

It seems no one touched on the possibility of using a task sequence to handle this, so allow me to list the benefits (assuming you're not really familiar with them in general, but please read even if you are): If everything you install and configured is handled w/ SCCM, you should be able to use a task sequence to accomplish this. Primarily for OSD, using a ...


2

You haven't specified if the SSO software uses Active Directory credentials, so a solution would be to make use of Active Directory's "Logon Hours" function. It's at a per-user level, but can easily be scripted in Powershell (this being an example). Basically, set the logon hours to "deny" logon at your SCCM update window and the users will be unable to log ...


2

You are typically accepting a terms of use agreement when you log in or click OK. So in general it's mostly for legal purposes.


1

I have normal user and i want to block all commands to the user except set of commands are { cd , exit , ls } can any one please help me over here


1

One point to note that burned me is ... pam_shells.so pam_shells.so - this requires that all the allowable shells be in /etc/shells. With NIS, because we have many different distro's of Linux and Solaris, our NIS shells are all /usr/local/bin/ On the machines themselves, in /usr/local/bin/ we create soft links to the shells. i.e. ...


1

Disable "Interactive logon: Do not display last user name" in your AD GPO as well.


1

No... you can't make someone log on against their will. Edit: OK... you might be able to do something funny with a custom GINA (if using Windows XP) or a Credential Provider (if using Vista or above.) Credential Providers have to be in native code, so no .NET, etc.. The effort required would be significant.


1

Log onto a Windows AD DC server for the domain (assuming Windows Server 2008 or newer). Create a new Group Policy object (GPO) (use the Group Policy Management Console). Modify the GPO's scope by using a Security Filter so that only your user account is affected by the polices in this GPO (GPMC -> Scope Tab -> Security Filtering; remove all existing users ...



Only top voted, non community-wiki answers of a minimum length are eligible