Tag Info

New answers tagged

4

In response to your comment: Your comment is valid if the data I want to protect is some kind of business deeds with sensitive financial figures. But, consider I am doing it for a software company that wants to protect their programmers to upload their software source files to their private cloud storage (they are usually 1000+ files). and your ...


0

How about create a new scope, or you can configure the lease time for ip address.


0

I would suggest building a temporary "place holder" server on whatever hardware you have that can support the OS, a workstation maybe? All you're looking for is a temporary staging platform to allow you to move everything to the newly installed 2012 OS. While you can upgrade I think most recommend fresh builds over upgrades.


0

You can also try to reset the computer account with the AD MMC. Or with Powershell Reset-ComputerMachinePassword or cmd NETDOM RESETPWD /Server:<name of any domain controller> /UserD:<domain admin account> /PasswordD:<password>


0

Provided you have an installation of Windows Server 2008 R2 64-bit you can probably get away with an in-place upgrade. Domain controllers that run 64-bit versions of Windows Server 2008 or Windows Server 2008 R2 can be upgraded to Windows Server 2012. Technet article


2

The reason you need to rebind the server to the domain is most likely related to the 30 day password for computers. When you restore a machine from snapshot, you're also reverting the password that machine knows and uses to authenticate to the domain. The domain will then refuse to service your computer. Re-adding it to the domain resets the password, and ...


0

Adding to Nathan C's answer. The proper supported way of cloning an AD joined computer is by using sysprep. While normally you can safely say that your new machine will get a new RID, microsoft recommends using sysprep. So unless you can be absolutely sure you won't cause any unforeseen issues it's generally better to follow the recommendations. However it ...


3

With all servers that are domain-joined, you need to sysprep them first. Revise your steps to the following: 1) Clone the machine using VMWare tools. 2) Boot without network connection. 3) Run C:\windows\System32\sysprep\sysprep.exe and tick "Generalize". Allow it to reboot. 4) Name the machine and connect it to the network and join as normal. The ...


0

OK, so the problem was that the server where the SQL Server is running, all in a sudden was removed from the DNS. :-/ Not sure why, the server can ping to the rest of the data center, but the rest of the data center cannot ping or access this server. Rebooting the server resolved this issue.


1

Sounds like a DNS issue to me. To confirm, I'd add server name and IP to the hosts file on the computer with issues and see if that resolves the problem.


0

For me, rebooting my VPS fixed the problem. It manifested itself firstly as the IIS web server not being able to talk to the sql server. I could connect to the SQL Server then I found this SSTP problem. It may be to do with a proxy server and a mail server I also have running on this box - like too many connections or something.


0

This was solved by deleting an old dependent update that wasn't needed any more. – Ericrobert just now edit


1

Event 4624 null sid is the valid event but not the actual user's logon event. The reason for the no network information is it is just local system activity. Windows talking to itself. The "anonymous" logon has been part of Windows domains for a long time--in short, it is the permission that allows other computers to find yours in the Network Neighborhood ...


-1

The logon type 8 occurs when the password was sent over the network in the clear text. Basic authentication in IIS is most possible cause for this kind of login failure. As for as I know there are five commonly used Microsoft IIS based services with Basic Authentication by end users via either by their Desktop or Mobile device, such are OWA client, MS ...


0

Patch all firmware and do some stresstest on the server & memory scanning. Seem a hardware problem as this Cd is supposed to work good.


1

You are missing spaces in your command. Review the syntax and try again.


0

Yes, but it is far more complicated than making them a local admin. It's also tricky to split out "printer install" rights from "install rights" in general. You can use software like SuRun or Privilege Manager (Dell / ScriptLogic) to work like sudo in *nix - you can specify specific programs that can be elevated to admin, or you can edit ACLs for users ...


2

start PGAdmin3 , connect server , select Tools -> Server Configuration -> postgresql.conf, and look for data_directory variable


1

As a superuser you could run the query SHOW data_directory; From http://dba.stackexchange.com/questions/1350/how-do-i-find-postgresqls-data-directory


0

I am Chetan Savade from Symantec Technical Support Team. I would suggest to use customized policy provided by Symantec. Symantec has created a policy that can be import into the Symantec Endpoint Protection Manager (SEPM). This policy is very powerful and offers significant zero day protection against new threats. Hardening Symantec Endpoint Protection ...


0

First of all you won't be able to access a CSV from the 2008 R2 cluster and the 2012 R2 cluster at the same time. Second, you should consider using SCVMM 2012 R2 (System Center Virtual Machine Manager) to migrate your virtual machines between the clusters. SCVMM will be able to move the VMs from the 2008 R2 cluster CSVs to the 2012 R2 cluster CSVs and ...


0

Check VMFS for metadata inconsistency, it's done with VMware Ondisk Metadata Analyser Before you start VOMA from the CLI of your ESXi host, take care of the following guidelines: Shut down all virtual machines running on the VMFS datastore make sure that the VMFS volume is not in use by other hosts (best practice: unmount the datastore on the other ...


0

Another solution is to maintain two separate root folders, each with their own web.config, but create links to the directories/files in the other root folder, so you only have to maintain the source in one location. Powershell goes something like this to create the links the first time: function mklink { cmd /c mklink $args } Get-ChildItem "root-source" | ...


0

Yes. I've served the exact same code/files from multiple AppPools for years; it works fine. But all instances will read web.config identically since Microsoft's standard functionality wasn't written to do what you're trying to do. So you will have to implement your own custom solution for determining what instance the code is running under and choose the ...


1

Please check your receive connectors in the EAC under the Mail Flow section. Look for the connector that has binding with port 25 (generaly the default connecor with your mail server name or Default - Frontend-your mail server name). Click on Edit this connector and under Security (Second option in the list) scroll down to the bottom to find anonymous users. ...


1

Normally Symantec Endpoint blocks this by default, and a more common request is to allow for the behavior instead of deny it. At any rate, you can use the steps in this article. Simply replace Allow Traffic with Disallow Traffic.


1

You'll need both the Domain Functional Level and the Forest Functional Level to be 2008 R2. To understand the differences, consult this page from Microsoft: http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels%28v=ws.10%29.aspx You'll note that there's no difference between 2008 R2 and 2012 R2 FFL - so that should be ...


0

If you want to set up a Linux service/application to authenticate to an IIS service endpoint, you can get the Linux box to authenticate to an IIS hosted windows site like this: Ensure your IIS Site windows authentication providers are set in this order for Windows Auth: NTLM Negotiate Create a Principal for the account you want to authenticate as: Login ...


1

edit: Actually it depends on what you really want to achieve. Provided you want to secure resources the task is accessing with ACL - here is the way: Ability in Windows 7 and Windows Server 2008 R2 to apply a SID to every scheduled task and use that SID to apply permissions elsewhere in the Operating System. ...


1

Do not know about those specific updates but yes, it appears an update of .Net can modify web.config: http://www.asp.net/whitepapers/aspnet4/breaking-changes. Something to consider: sometimes there are default settings that "roll" down a configuration tree. There may be something "higher up" that got locked down and what you are seeing is an attempt to ...


4

Here is Microsoft's Performance Tuning Guidelines document for Windows Server 2008 R2: http://download.microsoft.com/download/6/B/2/6B2EBD3A-302E-4553-AC00-9885BBF31E21/Perf-tun-srv-R2.docx There are 136 pages of performance tuning guidelines in that document. You might also get some interesting info from support.microsoft.com/kb/214397/en-us You might ...


0

Start by disabling large send offload, the network stack wait to send the packet to fill the buffer, with the option at off it send more small packets, but help for speed intensive app.


0

Migrate your files to another server that you own... else its like keeping a safe in an airport walkway


3

The only way to prevent an administrator from accessing a file or files is by encrypting them with a key which the other administrator does not have. In that vein, you could look into using EFS to encrypt your Plesk files, but any permissions or access restrictions you place on the files in question can be undone by any user with administrator rights - ...


3

Unfortunately, as for as admin rights are concerned you either trust the person or you don't. You can change the NTFS permissions and ownership of the folders, but they can take ownership of the folder themselves and change the permissions, delete the folder, etc.


10

No. There is no way to prevent an admin from being an admin. You cannot simultaneously have your files encrypted in such a manner so as to keep them safe from the prying eyes of another administrator on the system, and have an application seamlessly decrypt and access those files in a way that an administrator could not also mimic. To suggest otherwise ...


2

TLS 1.0 is enabled by default in Server 2008 R2. Applies To: Windows 7, Windows 8, Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Vista [...] This subkey controls the use of TLS 1.0. Applicable versions: As designated in the Applies To list that is at the beginning of this ...


0

Check there: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols You will see TLS 1.0\Client\ & TLS 1.0\Server. In each folder create those two key: DWORD DisabledByDefault:0 DWORD Enabled:1 You can do the same trick for TLS 1.1 or 1.2 if the keys are not there


0

Try clicking the "Locations..." button and selecting "Entire Directory". If it starts working, then you have an LDAP issue. Selecting "Entire Directory" forces the Select dialog to use a GC port to execute the query. Selecting a specific domain will cause it to use an LDAP port.


0

Please deleguate AD right on the OU where you store contact (you can change from the default user's OU), deleguate the Exchange Recipient Administrators right on Exchange to manage those contact and then install the Exchange's console into the user computer. The fact you deleguate right in the correct OU make sure the user can only manage contact, as she ...


1

In a domain environment, you don't need to save credentials, but somehow, sometimes, Windows will do if for you anyway. You can remove the cached credentials by navigating: Control Panel/User Accounts/Manger your Credentials And then clicking "remove from vault"


1

Cached credentials will cause Windows to try and contact the print server with your old password, which of course fails and eventually locks out your account. To fix, simply log off and back on the affected machine with your new password. You can even lock/unlock the screen to get a similar effect.


7

It looks about right to me. Different areas of the operating system may use different counters and slightly different arithmetical formulae and different levels of rounding/precision. The "Task Manager" guy and the "systeminfo" guy probably aren't arriving at the same "up time" in exactly the same way. But they're both "close enough." I like this ...


0

I had a same problem with Asus Mainboard lan. It was fixed by installing a latest driver from realtek website


1

This is more of an FYI, i am still unsure what the best practice is for this one, but here is what i did. I demoted the old KMS host, then removed the DNS entry for it. Then promoted the new host and manually created the DNS entry for it. All working as it should be now.


0

for me it was in HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate\DisableWindowsUpdateAccess I set it to 0


0

Just to document this alternative solution in case someone else is facing this issue (however, without seeing the "SAXParseException" in Solr's application server logs): If you check this class: http://grepcode.com/file/repo1.maven.org/maven2/org.apache.solr/solr-core/4.3.0/org/apache/solr/servlet/SolrDispatchFilter.java/ You will see that it will return ...


3

There are two main settings you'll want to configure: First, you'll want to enable No auto-restart with logged on users for schedules automatic updates installations. This setting will ensure that the computer will never automatically restart for update installation if a user is logged on, effectively preventing anyone getting interrupted in the middle of ...


2

In filezilla server control panel go to the users menu and select the user you want to modify. Click "shared folders" in the left menu and click on the directory you want to modify permissions for. Unhceck "Write" and select "append" and only check "list" in the directories permissions. If you want to edit a user group put the selected users in a group you ...


0

nslookup.exe -type=SOA TheDomain ExternalDnsServer How long is the nameserver set to hold onto records (see the "refresh" field of the SOA record)? nslookup.exe -type=A -debug TheDomain ExternalDNSServer How long is the nameserver instructing clients to hold onto responses (see the "ttl" deliver with each record)?



Top 50 recent answers are included