New answers tagged

2

From your router (or whatever is handling DNS resolution), you can delegate queries for ad-related names, say all Those for the ad.example.com domain, to your domain controllers. This would allow non-ad related names to still be resolved even if the domain controllers are down.


6

You solve this by having more than one domain controller running DNS in your environment. A domain-joined client should use only domain controllers for DNS.


0

I know this is an old post, but I'm leaving a message here for the future. I've found two situations that happened not to be firewall related even though that was the first place I looked. After reviewing the firewall logs I found that the inbound UDP 161 requests were being accepted. In Services, check the Security tab on the SNMP service and ensure ...


0

I think the following recommendation is probably what's tripping it but we've never followed this recommendation and never had any serious issues. We do however use write protective hardware, battery backed raid controllers and such, "To ensure durability of Active Directory writes, do not deploy a virtual domain controller’s database files (the Active ...


3

With Powershell you can do something like this : Get-ADComputer -filter {*} -searchbase "OU=xx,OU=xx,DC=xx,DC=xx"| Where-Object {$_.name -like "CMP*"} | Move-ADObject -TargetPath "ou=Com,dc=xx,dc=xx" Get-ADComputer selects the computers of your AD. Where-Object only with their name corresponding to the wildcard Move-ADObject and finally you your ...


0

A bit of research. Most likely the user who created a file will also be the file's owner. By switching on file auditing (which was on as I said in my question), it is possible to look at who made changes to the file as well.


0

One of your certificates is most likely expired. Either deploy ADCS and make a new primary root certificate, or just delete the expired certificates and create new ones. Hope this helps.


1

I'm pretty sure that you'll either need to execute that on the remote server HOST or from a powershell remoting session to HOST. Your local machine doesn't know who HOST\GROUP is. You could probably use the SID, like the accepted answer on the linked question suggested.


2

By default, Windows does not record that type of information. So if you haven't turned on that type of logging and you're looking for something that already happened, you're out of luck.


8

There's no good reason NOT to use a standard Hyper-V or VMware ESXi setup for this simple use case. What is wrong with those industry-leading options? It's strange to ask for "free, open source, Windows compatible, enterprise-ready, and secure" and ignore the two largest players in the market. The VMware ESXi hypervisor is FREE. But paid variants start ...


0

If you press 'c' to configure, you should be able to see which disks are missing. Considering it was a power outage, you should be prepared for the worst-case scenario, that several drives have died. You will likely need to add new drives, re-build your array and restore from a backup.


0

Problem is how to setup in WS2k8 authentication of SMTP server. Looks like there is no option to setup authorized SMTP connection. So you can setup only anonymous unsecure SMTP server. File Server Resource Manager Options:


0

Assuming you use roaming profiles, you could just set the "Profile Path" and "Home folder" parameters for a given user with a script. However, only one profile can be active at a time of course.


2

You could probably use the ADMT if you wanted to create a new domain, but as you want to have a minimal impact on your user base then the logical thing to do is to join the samba host as a new domain controller (DC) in the same AD domain. After that the AD objects should be replicated to the new DC and you should replicate the sysvol and netlogon shares ...


0

Do something more awesome, $computername="DC-server", "Hp-pc" $AVGProc = Get-WmiObject -computername $computername win32_processor | Measure-Object -property LoadPercentage -Average | Select Average $OS = gwmi -Class win32_operatingsystem -computername $computername | Select-Object @{Name = "MemoryUsage"; Expression = {“{0:N2}” -f ((($_....


0

The is an early version of a library to access "volume shadow copies" called libvshadow.


2

32-bit Powershell requires 32-bit Outlook objects and 64-bit powershell requires 64-bit Outlook. So yes, you do need an Outlook installation to run the script. Edit: Actually, you require the MAPI (Mailing API). Which comes with Outlook. If you have an SMTP server available, you could use Send-MailMessage as described here


0

I recommend moving DNS services to a Linux system. Windows Domains are not the same thing as Internet domains, but I see clients confuse this all the time. And, the less exposed your Windows environment is exposed to the Internet, the happier you'll be.


1

If you have domain controler, it's simple. Start Active directory, create new Security group and set Members, Members of and Security to reflect privileges you want to allow new group: https://technet.microsoft.com/en-us/library/cc733146%28v=ws.11%29.aspx More about AD Security groups: https://technet.microsoft.com/en-us/library/dn579255%28v=ws.11%29.aspx


0

This is Max token size. The token will only consume that much memory if necessary. It doesn't mean that ALL Kerberos tokens will always be 48000 bytes. This problem is usually only found in large enterprises with many security groups, that have been accumulating for years. In Windows2012, there is a new hard limit for the number of groups a user account ...


2

As per the documentation the syntax is as follows: robocopy <Source> <Destination> [<File>[ ...]] [<Options>] There's a few oddities with your script: /S copies subdirectories (but not empty ones) /E copies subdirectories including empty ones. /E implies /S so you can drop the /S However /Mir is described thusly "Mirrors a ...


2

I recently was and still am in your shoes. You don't only need the list folder permission. You will need Travese Folder List Folder Read attributes Read extended attributes Read permissions see here. Unfortunately there is no Windows equivalent to the functionality that Novell offers. Additionally letting users manage permissions is not ...


0

As mentioned already you can create task in gui, export and call xml: SCHTASKS /Create /TN "TaskOnEvent" /xml "C:\TaskOnEvent.xml" ...You do NOT have to specify any triggers if you create via the GUI.


1

Did you try creating a link using a destination as a parameter? "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "www.yahoo.com" This works for me but does have the added issue of only working on 64-Bit machines (Because of the (x86))


1

Domain trust or lack of has nothing in common with ability to map network drive. Domain trust allows you to use (export, permission to share) credentials (password database) from one domain in another (one-way trust), it allows you to share credentials between AD domains too. (two-way trust)


2

As far as I know, userAccountControl will always have a value even if it's zero. Your issue might be that the user making the query doesn't have permission to read the attribute for some reason. That would be strange if you haven't changed permissions in AD from the defaults. It's also easy to test by using a Domain Admin account to do the query. It may ...


0

this is an issue with any Microsoft failover cluster using Server 2012 or below using either disk majority or node and disk majority. The Disk witness is a point of failure for the cluster. Even if all nodes are up, if the disk witness fails (we loose access to it) the cluster goes down. so what to do? 1) Make sure your disk witness is highly available so ...


0

You can capture it without storing it locally but you will need a UNC path on the network because you still have to store it somewhere. The work around isn't very intuitive either. Once your PXE booted in the capture image and to the window that is asking where to store the new image, you check the upload image to WDS server option and connect the server ...


0

I've found a possible solution that has worked for me. I've created 'Desktop' folder under 'C:\Windows\System32\config\systemprofile\'. Later I added the user and give it rights. Then I restarted the DCOMCnfg and it was ok.


0

It's essentially a pre-staging area from memory. Writes it locally, then saves to a network location you specify. I don't think there is a way around the local path in the first instance.


0

Yes, the Server can get unstabble. https://support.microsoft.com/en-us/kb/2697865 Maybe this hotfix helps you.


0

You may also want to look into Syncplify.me Server! which scales up pretty well, even in multi-node HA (high-availability) deployments, and supports local as well as Windows and Active Directory users and groups. For 40 (or even 100) concurrently connected clients the machine you have (64 bit Windows 2008 with 32 GB RAM) will work just fine, but it can ...


0

you may type in cmd "systeminfo" then easily you can detect about 32bit or 64bit


1

I wouldn't use the security tab direct, Instead Right click the OU and use the delegation of control wizard. Through there you can delegate the right to create, delete and manage user accounts or if you only want to give someone the ability to create use accounts, choose to create a custom task and then only assign the right to create user accounts. As for ...


0

from the IIS log. it shows that the web service could not be reached or it not available " /webservice/webservice.asmx 400 ". Run the web service separate to confirm if the web service is up and running in the same server where the windows service is hosted. Also this could be a network issue if the windows service and the web service are in different ...


1

Most likely not - direct usage of Volume ID's is typically not supported. You could always start with a MountVol.exe command to map to a drive, then proceed from there.


0

we have noticed same issue. After each server restart the SSL certificates are removed. The warning in EventLog appear on our machines right after start of TrendMicro OfficeScan. But even uninstalling the virus scanner did not changed anything. The problem persist after each restart. Our research end with confirmation, that all settings are done correct in ...



Top 50 recent answers are included