Tag Info

New answers tagged

0

It is not possible to change the window color when using the basic theme. I don't remember where I read this (it's been a long time since I posted this), but Microsoft did this on purpose because changing colors is a "feature" you have to pay for in some developing countries. The basic theme is the only one supported in the Windows Starter and Home Basic ...


0

All of this is covered in the Windows documentation on shares, file permissions, and groups. Scenario 1: Everyone will have full access. Access is cumulative. Scenario 2: Everyone but Guest will have full access As to why some users only had read-only in Scenario 1, it would have to be that some users have full vs. read-only file (NTFS permissions). ...


1

If it's an AD account, then by "network hiccup" I would mean that windows is having trouble looking up the account, which sometimes happens when there's a connectivity issue. It might also be that your account doesn't have the privileges to look up a domain account (being a local account, perhaps?). However, my Adobe Flash Player Updater on my ...


30

It's a SID, or Security Identifier. If it's showing the string rather than a "friendly name," it sounds like the new server doesn't recognize the account.


0

I have a feeling you are not pushing your routes correctly from the server. I noticed that your gateway for the VPN is an IPv6 address. Try using the push option in server.conf to push your routes. You might also want to add the server directive so you can reserve the client subnet. If you're on linux you will need to have net.ipv4.ip_forward = 1 on the ...


0

Not being too Windows savvy wrt. OpenVPN, FWIW, here is my bid on what the culprit might be here: Looking at the output from your Windows route command, it seems you are missing a gateway entry for the OpenVPN network. True, you have an address on the VPN net (the 172.16.1.40 address), but no gw is defined for that net. On my box, I have access to several ...


0

Yes. Windows Server 2008 R2 and newer has a technology that specifically works this way. It's called Direct Access. It's easier to setup in most network architectures under Server 2012. The client must be Windows 7 Enterprise or Ultimate, or Windows 8 Enterprise. It uses IPSec and HTTPS; it works based on the machine containing a cert from your domain, and ...


1

Use encrypted volumes with a 3rd party encryption utility like TrueCrypt. This is the only way to prevent an admin from having access to data it should not have. It is sufficient against an honest admin, but it is not sufficient against a malicious admin, which could still install key-loggers or use remote access tools to view the volume content while a ...


3

Set the service to manual start. In the same script that you run to copy the files, start the service. This script can be run by the task scheduler as any user.


-1

I wrote up my experience here: http://www.returnbooleantrue.com/2015/04/making-your-windows-kvm-guest-boxes-fly.html You can certainly add VirtIO after you finish installing windows.


0

I won't change the correct answer, as the Windows Easy Transfer tool helped me good enough at the time. Recently I wanted to move my profile from one domain user to another again. I found another tool which worked like a charm "User Profile Wizard" by ForensiT. The only problem I got was with the Dynamics CRM Plugin for Outlook, which I hade to reinstall.


1

No the primary use case for EAP-TLS it to perform mutual authentication using certificates. Both the supplicant and server must provide a certificate. If you want to use password based authentication, EAP-PEAPv0 has been available on the Windows platform since Windows 2000 SP4. For that to work, you'll need the NT-Password or Cleartext password of the user ...


0

Yes, windows does have a iptables equivalent, it is via the tool netsh and the portproxy interface. The command to do what you want would be netsh interface portproxy add v4tov4 listenport=8080 connectport=80 Note, that this will only do IPv4 connections, if you also want to forward IPv6 connections you would also need to do netsh interface portproxy ...


1

It turns out that it's in the default user's registry hive, just not the hive that everyone is familiar with. There is another smaller hive in a deeper subdirectory called UsrClass.dat. The same keys are in there. We will be pushing this out to all of our computers, and modifying all of our WIM images: reg load "HKU\temp" ...


0

Long shot... I know this is NTLM, but there are some aspects of NTLM that might be factoring in time skew (There's this: http://superuser.com/questions/395966/how-inaccurate-must-the-clocks-time-be-for-ntlm-requests-to-be-denied-due-to-th which leads to this: http://support.microsoft.com/en-au/kb/976918). Might want to check the clocks.


1

Most likely you have some open file handles to the server in question, even if they aren't actually connected. The existing handles may have not had access (or are using invalid credentials) when they were set up. Rebooting the client PC is the ultimate solution to resolving the issue, however you could use tools like Process Monitor to search for open file ...


0

You do not need a 2012 domain controller or functional level to get newer Group Policy settings. You can get the newer ADMX/ADML files from Microsoft and install them into SYSVOL. They are backwards compatible. Microsoft Downloads: ADMX for IE 11 As for the nuts and bolts of what you're trying to do an the issues you're encountering: What method are you ...


0

the simple solution in this case would be running the gpupdate /force command throughout the specified OU. although i'm eager to know if you found another solution.


0

This is usually in relation to AGPM - do you have it installed anywhere? I typically run it on my local machine (I am running Windows 8.1) and then I pull the PC in question. AGPM = Advanced Group policy management It comes with MDOP if you have MSDN/TechNet. If not, you need to run Group Policy management from a machine with windows 8 kernel (2012 R2, ...


1

"Load and unload device drivers" should do the trick. (Computer Settings -> Policies -> Security Settings -> Local Policies -> Load and unload device drivers) Be aware that this may grant more privileges than you intend. That said, granting "Load and unload device drivers" to Power Users is arguably more secure than making your users local administrators. ...


5

There are settings in the Server 2008/2012 policies that aren't accessible on your 2003 server I believe, such as "Do not connect to any Windows Update Internet locations" under the Computer settings you show above. I believe the settings you are looking for in a 2003 environment are: Disable access to Windows Update The correct policy for v6 ...


1

Use a program to extract the files in the ISO file. I like using 7Zip, but others have pointed out several other tools that would work as well. Once you've done that Microsoft has provided directions to install various Office components via GPO, as it's not deployed like most MSI files are (you have to run a script and install it that way). See directions ...


0

When you can get access via the IP but not the name, it may be a sign that Kerberos auth is failing, and it is falling back to NTLM for authentication. It sounds like you're saying all other workstations are okay, and only this one is affected? Does the workstation in question have a valid domain account? Can this worstation access other file servers ...


1

There might be 'share name' renamed. I think you have the permissions to access the resource that's why you can access the share not by share name but by IP address. Please check in the share name.


0

If I don't have a backup and Flashback is disabled, I would do something like this: select 'drop table ' || table_name || ' cascade constraints purge;' from dba_tables where table_name in ( select object_name from dba_objects where owner = 'SYS' and object_type = 'TABLE' and created > 'DATE-OF-IMPORT-HERE'); Of course you need to check twice ...


0

The issue is not related to VMs at all! I discovered the cause of the issue on the host system's TCP/IP configuration after more trial & error. The issue was located here: System Preferences > Network > Advanced > TCP/IP tab > DHCP Client ID field I had input the host name of the computer in this field. I removed it, and the erroneous MAC addresses ...


0

If you want to overwrite the task if it's already there, use the /F switch. The switch is also explained in the schtasks /Create /? help and here.


0

Open up a Command Prompt in Administrator mode and run the following commands : netsh interface ipv6 set privacy state=disabled store=active netsh interface ipv6 set privacy state=disabled store=persistent netsh interface ipv6 set global randomizeidentifiers=disabled store=active netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent ...


0

You've got (b) wrong. You don't put in routes between the two NICs in the Win 7 box. Windows already knows to route from one network to the other when you put it in routing mode. What you might have to do on the Win 7 box is add routes to any other networks that are behind other routers. The other thing you'll have to do is configure all the controllers to ...


2

The bit about having remote users contact Windows Update might require a bit of effort, depending on how your VPN is set up, but the rest is very possible. It's pretty easy to use GPOs to assign different WSUS servers to client at different AD sites, and AD sites are defined by subnet. So assuming that's all configured properly, this is a fairly simple ...


0

I'm assuming you're Windows 7 systems are at least Professional, Ultimate or Enterprise as they are the versions that can join a domain. I ran across a hotfix for Windows 7 clients that can't locate the Active Directory Management Gateway service. It might be worth exploring. https://support.microsoft.com/en-us/kb/969429


1

How exactly does ping -a resolve the host name? This is called reverse DNS. Forward DNS resolves names into IP addresses. Reverse DNS resolves IP addresses into names. When you type ping -a 1.2.3.4 into your computer, it issues the DNS query PTR 4.3.2.1.in-addr.arpa. PTR stands for pointer record. Why is everything except 'ping -a 192.168.99.3' work ...



Top 50 recent answers are included