Tag Info

New answers tagged

2

Just mentioning a trick I do not see mentioned here yet. Take this file for example: C:\Folder1\Really Long Path\Such Recursion\So Deep\Wow\Still Going\I will run out of ideas soon\I have organizational problems\Obsessive compulsive subdirectory disorder\Here is a guid for no good reason\936DA01F-9ABD-4d9d-80C7-02AF85C822A8\Almost there\Tax ...


0

Just mentioning a trick I do not see mentioned here yet. Take this file for example: C:\Folder1\Really Long Path\Such Recursion\So Deep\Wow\Still Going\I will run out of ideas soon\I have organizational problems\Obsessive compulsive subdirectory disorder\Here is a guid for no good reason\936DA01F-9ABD-4d9d-80C7-02AF85C822A8\Almost there\Tax ...


1

There's no such cmdlet for that http://technet.microsoft.com/en-us/library/jj821822(v=sc.20).aspx But if you export settings for endpoint protection in xml file and place it somewhere in your network you can push installation with powershell in the following way: $computers = Get-Content "C:\computer.txt" foreach ($computer in $computers) { #The ...


0

If you right-click or shift+right-click and choose 'run as administrator' option you should get a dialog box to enter in credentials for a user than can install software.


0

Use Start Roles REST API, if possible. I believe the PowerShell equivalent allows starting only one Role at a time.


0

Workstation rebooted and seemed to figure itself out. It may be that, even though gpupdate/force had been run on the machine numerous times, it wasn't applying new policy as it should have been. But it's working now.


0

If you want accurate result (but not necessarily fast), you can do partition level image backups, and then write a tool that will compare them cluster by cluster or whatever resolution for change detection you want. Important feature that you want from the OS and the file system is volume snapshotting, so that you take atomic snapshot of image no matter ...


0

If the application support it, sure. Set it in the application. I'm sure you've seen these settings in many browsers. If not, then you can run the application as a different user, and set the IE proxy settings for that user as well.


7

Run dcdiag and check replication to ensure that your AD is healthy Safely migrate all FSMO roles to other servers Ensure that at least one other DC is also a GC Run dcdiag and check replication to ensure that your AD is healthy again Assuming you don't have any other applications on the DC, particularly non-AD-integrated DNS, you should be good to ...


-2

Better answer to what has already been suggested. Set multiple triggers but do it by month so separate trigger for each month and you can choose which days to run. Triggers will be checked sequentially and if they meet the date requirement, that specific trigger will run. Holidays and weekends can be left unselected. At the beginning of each year you ...


0

You need configure SNMP agent to accept requests from remote hosts. To configure SNMP agent in windows, follow the steps given below: Click Start, point to Settings, and then click Control Panel. Double-click Administrative Tools and then double-click Computer Management. In the console tree, click Services and Applications and then click Services. In the ...


0

I am using MDT and I inject KMDF 1.11 into my Win7 image at the Postinstall phase. I believe this would work for what you're attempting. You may have a bit of trial and error to get the drive letter to populate. I would hazard a guess that the target OS at the Postinstall phase is X:.


0

We ended up contacting Microsoft regarding this and after several weeks of useless tests, turns out there is a bug in WDS name and approve and PXE booting when using UEFI over BIOS and unattended domain joining is simply non-functional over UEFI when pxe booting with WDS name and approve. Long story short, keep using BIOS if you want automated joins with ...


4

Windows server downtime for updates is inevitable. Service downtime is avoidable, however. The key is to realize that downtime needs to be measured by service availability, not the status of individual servers. For your SQL Server instance, your best bet is to implement some form of multi-server instancing. One technique that Microsoft allows in SQL Server ...


0

The error message is quite obvious: the Domain Controller holding the Schema Master FSMO role isn't replicating correctly; either it has a problem which is preventing it from replicating, or the problem is in your other DC(s). You should check your environment for replication errors.


2

Azure Automation runbooks are just PowerShell Workflows, which can be run in the PowerShell ISE on your local machine as well. The only thing special about runbooks compared to PowerShell Workflows is in runbooks you can use the "Automation activities" (Get-AutomationVariable, Get-AutomationPSCredential, etc). We don't have a blog post about this out for ...


-1

I am pretty sure that i had jump into the same exact problem like you. And I was lucky, because it has been solved. But I'm not quite sure which step did the trick for this issue. (Because it just solved when my pc reboot and up) *Note: without these sections, rebooting will not solve anything And here is what I've done: - Delete all ip6 Tunnel Adapter ...


0

I believe the following is bulletproof, provided the user has access to WMIC and TEMP points to a valid path where the user has write privileges. This is the end result of some collaborative work at http://www.dostips.com/forum/viewtopic.php?f=3&t=6133. @echo off :getPID [RtnVar] :: :: Store the Process ID (PID) of the currently running script in ...


1

Mapped drives are usually not available to system processes since the mapping is tied to an interactive user session. Try using a UNC path to the file instead.


0

For the simple case of < 200 IPs you first need to iterate through the file and get all the IP addresses into a single string. Then you can call the netsh command twice outside the loop (once for inbound traffic and once for outbound). In order to allow it to cope with more than 200 IPs I've added a counter into the for loop. Once you exceed 200 IPs it ...


0

If I understood correctly: you're working on a windows host, locally connected as "winuser" account; on such host, you can succesfully use "putty" to SSH-access a remote host (let's call it "remote_host") authenticating as the remote "root" user. Let's suppose you're authentication is "password-based"; you have a putty profile for "remote_host", that ...


0

This is a loaded question. There are two ways to go about what you want. Sysprep and image - This means creating a generalized version of the OS and then using it to create a bunch of new VMs. This is advantageous when you want the ability to clone (but grant new usernames and password, computer names, etc to) the VMs. This also allows the VMs to co-exist ...


2

Look at the "Caveats & Legal Disclaimers" section on http://cyber-defense.sans.org/blog/2011/10/25/windows-firewall-script-block-addresses-network-ranges and then look at how their Import-Firewall-Blocklist.ps1 script works.


8

You have 2 problems with your code: 1) IF only does a numeric comparison if the string on both sides evaluates to a number. Your left side is numeric, but your right side has quotes, which forces the entire comparison to be done using string semantics. Numeric digits always sort higher than a quote character, so it always reports TRUE. As austinian ...


3

Take out the "s from around the number, and the script almost works correctly. Using the "s forces a string comparison instead of a numerical comparison. As dbenham notes, CMD only stores (and compares) numbers as 32-bit signed ints. Since we're checking for GB, we can reasonably ignore several of less significant digits. If we remove the last 6 digits, ...


0

I would suggest building a temporary "place holder" server on whatever hardware you have that can support the OS, a workstation maybe? All you're looking for is a temporary staging platform to allow you to move everything to the newly installed 2012 OS. While you can upgrade I think most recommend fresh builds over upgrades.


0

Provided you have an installation of Windows Server 2008 R2 64-bit you can probably get away with an in-place upgrade. Domain controllers that run 64-bit versions of Windows Server 2008 or Windows Server 2008 R2 can be upgraded to Windows Server 2012. Technet article


0

There's in no built-in way in Windows to route traffic by ports (maybe on server with RRAS, but not that I remember). You can use a local instance of proxy as suggested on StackOverflow.


3

If you want one GPO configuration for all types of OSs, then you must either use "%UserProfile%\Desktop" (and then the policy should apply on each user separately) or use a custom script.


0

i think this topic will help you Click here http://blogs.technet.com/b/askds/archive/2014/02/17/adding-shortcuts-on-desktop-using-group-policy-preferences-in-windows-8-and-windows-8-1.aspx


0

In enterprise environments it is not possible. You will have to publish new code signing certificates via group policies manually: Computer Configuration\Windows Settings\Security Settings\Public Key Services\Trusted Publishers section.


0

I had the same issue on Windows 2008 R2 with WPAD record. To fit it we add fake DNS record to hosts file like 1.1.1.1 WPAD and after restart the update client it stop using proxy. In some cases the Server needs to be rebooted after WPAD block. Cheers, Andrey


0

Problem was caused by Windows OpenSSL, which can't work with sha256 algorithm. Solution, I found - edit config file /etc/openvpn/easy-rsa/openssl-1.0.0.cnf(or other, depending on OpenSSL version on your server), and set: default_md = md5 instead of default_md = sha245 Then - re-generate all you server and client's certificates and keys ...


0

Old question, but for posterity... I suspect you need to update your PATH to include the directory in which your ansible and ansible-playbook executables are located. Check if they're in your path on *nix: which ansible-playbook If not, fix that first, or try using the full path to the executable in the script. This may be of interest, ...


0

OpenSSL 0.9.7 is WAY old and does not support SHA256, and therefore cannot verify your server's cert. You must either upgrade the client OpenSSL to at least 0.9.8 (which isn't binary compatible thus probably requires recompiling, or obtaining a different compilation of, OpenVPN), OR change to a server cert signed with SHA1-RSA. "SHA1 is bad": Browsers and ...


0

If you want to avoid the download/upload you have to look for online applications. Google docs is very good for office documents. Your main requirement (having the same url for a document everywhere) is solved. This also solves your cross-platform problem and access problem (you need a webbrowser). For large documents you could work with multiple smaller ...


0

For me, rebooting my VPS fixed the problem. It manifested itself firstly as the IIS web server not being able to talk to the sql server. I could connect to the SQL Server then I found this SSTP problem. It may be to do with a proxy server and a mail server I also have running on this box - like too many connections or something.


5

OK, it's pretty seriously hacky to mess with sAMAccountName it's defined in the Windows spec: http://msdn.microsoft.com/en-us/library/ms679635%28v=vs.85%29.aspx http://msdn.microsoft.com/en-us/library/ms677605(v=vs.85).aspx It exists for compatibility reasons, and I can't honestly think of a good reason to trample it - you can modify your LDAP schema and ...


0

You probably want to use the web based remote desktop and instead of launching into a session, use it to launch the app instead within the RDP session. If you do this, then there is no setup on the user side. If you use MSTSC, then you can still do the same thing, but the users have to add the app to launch. You can lock down the username they login with ...


0

You don't have to disable SSL3. You can enable SSL3 and have POODLE mitigated. # Copy and paste this in PowerShell then restart your server $cipherSuitesOrder = @( 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256', 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P384', 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256', 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P384', ...


3

Extending on Ryan's approach using 2 tasks, one triggered by "Power Gone", and an "abort" button task, triggered by a "Power Restore" event In case you need to do something more generic (not every executable has an abort switch like shutdown), and want to maintain a few-minute buffer before you start sending emails to management, wiping disks or ...


6

This is a neat idea. I would write this for you in Powershell or C#, in a few hours, for a very modest fee. ;) Just kidding. How about this... Use Task Scheduler to create two tasks. Each task will be triggered on an Event Log event. Task number one will trigger based on the "AC power is gone" event, and it would execute an action like shutdown /s /t ...


0

This is not really an answer, but it might grow into one if you provide more details. Here are some steps you need to do to narrow the problem: Check if you can reach other hosts from the bad machine, i.e. find out if the problem is related to the overall connectivity of this machine or is only for the connection between the one machine and the specific ...


-1

If you are looking for a scriptable and automatable SFTP client that not only runs on Windows, but it is designed with Windows in mind (it does not mimic Linux-style shell-like scripts, but it uses high level object-oriented languages like JavaScript) you may want to take a look at Syncplify.me FTP Script.


-1

There's a SYSPREP lab about /generalize and SID: http://www.sysadmit.com/2014/11/windows-sysprep-sid.html


0

I know it's an old question, but adding some knowledge for people who come across it later, like me I am looking to do the same, and found a microsoft tool which does the p2v to a VHD file, which I believe is natively recognized by VirtualBox and can be made to work with vmware too. http://technet.microsoft.com/en-us/sysinternals/ee656415


3

Create a file named directories.txt: C:\dir1 C:\dir2 C:\dir3 C:\dir4\subdir Then write a Powershell script named RobocopyDirsFromList.ps1: Foreach ($Directory In Get-Content .\directories.txt) { robocopy "$Directory" "h:\UserHome" /E /SEC /Copy:DATSOU /log:c:\logfile.txt } Note: I've not tested this, please test first.


2

Create a www host in blahblahblah.com zone internaly and make it point to your public IP. If you really want to use the blahblahblah.com without the www, you can check, the name should resolve to your DC, so add the IIS role on the DC, add the domain blahblahblah.com in IIS, and do a 302 redirect to www.blahblahblah.com.


3

You rename the internal Active Directory domain to be someInternalName.blahblahblah.com.


3

I think you are going to find that both Chef and Puppet have strong Windows support. I'm biased so I would point you to one of those over the other, but it's really for you to decide which one works better for you. Both tools have had support since 2011 and both are investing heavily in making that support better. Puppet Specific As I mentioned, I'm a bit ...



Top 50 recent answers are included