Tag Info

New answers tagged

0

I would imagine you need to configure a 'split-tunnel', which is not configured by default. A split tunnel will allow you to access the internet directly from your Surface rather than traversing your tunnel and accessing the internet through your server/router. If that violates your security policy then you have a routing issue in RRAS. If you need a ...


1

You also need to disable Admin Approval Mode Disable Admin Approval Mode To disable AAM Start>Run> Type "secpol.msc">hit enter In the interface double click Local Policies> double-click Security Options. Scroll down and double-click User Account Control: Run all administrators in Admin Approval Mode. Select the Disabled option, and then click OK. ...


0

Can't Comment yet...But: What is the exact wording of your UAC setting? There are a few different levels, and some of them are stupid. Also have you done a GPupdate, and a restart between disabling UAC and attempting to change permissions?


0

Just Delete desktop.ini from all user folders (subdirectories of the share). I tested this, and it instantly displayed the proper name. desktop.ini is hidden by default which makes it a little more tricky, but I can't see anything the users would miss with it gone; There is all of three lines of information in there. Edit: To quickly blow away all ...


0

Usually you should trust your sysadmins and anyone in the server's local Administrators group as well. I've never done it in my environments (15 clustered services, ~80TB disk space, ~4000 shares), but that doesn't mean you can do it. If there are only certain people that you're concerned about having access, you could create a (local or domain) group that ...


2

Is there a Linux root equivalent in Windows that can have access to a file without granting full control? You could make sysadmins use plain User accounts and give them accounts with Administrator access when they need to do administrative tasks like assign permissions . The security dialogs all support UAC now, after all. However, elevation through ...


1

Is there a Linux root equivalent in Windows that can have access to a file without granting full control? No. Unless your Administrator user has permissions to perform an action on a file (either explicitly, or through group membership), he will not be able to perform the action on the file. The exception, which you have noted, is file/folder ...


4

WMI You can access WMI parameters directly with WMI client installed on Linux machine: sudo aptitude install wmi-client Here is an example of wmic usage from command line: wmic -Uuser%pass //192.168.0.2 "SELECT FileSize FROM Win32_PageFile WHERE Path=c:\" Examples of using wmic is here. Here is the guide how to create your own Nagios plugin, change it ...


0

https://technet.microsoft.com/en-us/library/cc753058.aspx#BKMK_CMD For basic volumes, the unallocated space must be on the same disk as, and must follow (be of higher sector offset than) the partition with focus. The unallocated space with which you want to extend, your volume must be after the volume to be extended!


0

You can use the Win32_FontInfoAction class to retrieve information on installed fonts that have been registered at the same time that the associated software element was installed. I highlighted that definition b/c the class is blank on my machine, presumably b/c I have not installed any fonts. However, I'll answer this question as it might work for you: I ...


1

I've done something similar, but with Altiris rather than SCCM. (I imagine you could also run it through Group Policy.) Not using WMI, but just scripting. What I would have done: Create a network share. Give the user who'll be running the script (System Center Management service user, whatever) write access to the share. Modify the script so that the ...


3

Yeah, sadly, I think you're going to end up installing nsclient++. My first thought was to just write a vbscript or powershell script to check the size of the page file, but my first attempts returned null results because Windows is managing my pagefile. Apparently, this is a common thing. However, this plugin appears to work. It's also a lot more ...


2

Write a script with a never-ending loop like this: do { # check whatever you want to check and react to it... Start-Sleep -Seconds 30 } until ($false) Press CRTL+C to terminate


0

Acronis Backup Advanced can do that. It can transfer by scheme - physical-virtual, virtual-physical, virtual-virtual, physical-physical


0

So I finally solved the problem. I did various stuff to resolve the problem, for example the registry solutions RyanTommons91 proposed, I compared the registry of 2 identical machines (healthy and unhealthy) which learned me nothing, even installed CCcleaner although I would not recommend doing this on any server system. Nothing seemed to solve the problem. ...


0

After experimentation, this is where I put the gemrc file: C:\ProgramData Be sure to remove the leading dot from the filename. In this directory, the gemrc applies to all users, not just the currently logged in user, which is the way we want it. If it was just for a single user, Belmin's answer would have been the correct answer.


0

"By default, DNS will perform round-robin rotation for all resource record types." https://technet.microsoft.com/en-us/library/dd197418(v=ws.10).aspx That document is specific to Windows Server 2003 and Windows Server 2008. I'm not aware of any change in the default behavior in 2012. The DNS server you use will ask for the NS records and try them in the ...


4

Sure, you could use some sort of smart card, but those are to be used as a second factor, in conjunction with a password. Honestly, being able to remember secure credentials are an essential part of modern life. It is perfectly reasonable for you to require them to remember their passwords. If your users have trouble remembering passwords, recommend they ...


0

If you are always repeating the same disks then you could just put them in as static. I've done this for USB keys. SELECT DISK 6 CLEAN CREATE PART PRI SELECT PART 1 ACTIVE ASSIGN FORMAT FS=fat32 quick label="WINPE" SELECT DISK 7 CLEAN CREATE PART PRI SELECT PART 1 ACTIVE ASSIGN FORMAT FS=fat32 quick label="WINPE" EXIT


1

I've put it in the user's (user that runs Puppet) home (%HOMEPATH%). This should be one of the paths RubyGems looks for the gemrc file.


0

Oddly, we have a backup VPN server which worked 2 months ago and the settings are exactly the same (or appear to be on the surface). Other than checking Windows Adv Firewall settings, are there any other settings which would be blocking the routing?


0

looks like its your client who is trying to update a record . Do you have a reverse record zone ? It could be a problem on dhcp with right to update the zone . Its new or a old problem ?


0

You might need explicitly add the php version you are trying to handle by appending it to x-httpd-php AddHandler application/x-httpd-php5 .php


0

Reinstall RRAS, this time use 'Custom' and only select VPN Server. Also include the results of route print on the client machine, the client needs to know how to get to the remote subnet, not the server. You can play with manually adding routes on the client machine as well.


2

I thought about making the change to have it never reboot while there are users logged onto the server but that doesn't really "fix" the issue at hand. You probably don't want the "no auto reboot with logged in user" enabled. This can cause behavior where an update is applied while someone is connected to the server, and when the user logs off the ...


1

I have seen situations multiple times regarding domain controllers hosting shares. They require a security signature on SMB that can dramatically slow file transfer rates to and from domain controllers especially on legacy hardware as the encryption process taxes the processor pretty hard. Here is the registry key ...


1

I would avoid using multiple sites/virtual directories pointing to the same physical folder. Especially if you're planning on adding more clients/sites, deployment/config changes will take down all of the sites depending on when/how you update. Having separate sites gives you an advantage of being able to deploy one at a time, for example to test a new ...


0

iptables is a firewall. It does not mitigate a DDoS attack, because by the time the traffic reaches your software firewall, it has already consumed your bandwidth and succeeded in its purpose. Any firewall software on Windows (including the built-in one) is every bit as successful at mitigating DDoS attacks as iptables is on Linux. The only real solution ...


5

What you're talking about is a feature called "fine-grained password policies", and requires a domain functional level of Server 2008 or higher. There's a nice, easy step-by-step instruction guide on enabling and using fine-grained password policies on the Technet blogs, if you'd like to take a look, but it's not all that complicated. The thing that trips ...


0

Is this okay for you? Command: define command{ command_name check_win_memusage command_line $USER1$/check_nrpe -H $HOSTADDRESS$ -p 5666 -c checkMem -a MaxWarn=$ARG1$ MaxCrit=$ARG2$ ShowAll type=$ARG3$ } Service: check_win_memusage!90%!95%!paged


0

Potentially a candidate for a unattended join using SysPrep? Big credit to: http://mitchyb.blogspot.co.uk/2013/08/configuring-custom-sysprep-file-for-aws.html Find the AWS sysprep file, default is C:\Program Files\Amazon\Ec2ConfigService\sysprep2008.xml Add in the generalise section: <component name="Microsoft-Windows-Security-SPP" ...


0

I have seen this before. I fixed it the hard way. There was a problem with the NIC driver binding to the IP stack. I booted the system without a NIC. Installed a loopback adapter. Set an IP to the adapter. Configured and it worked. I then installed an Intel NIC (the NIC I was using was not very desirable, won't name manufacturer) and everything was fine. ...


1

Never had this issue myself, It's a server, I don't know how far you are willing to go, but here are a couple of possible solutions: open regedit Now go to following key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network In right-side pane, you'll see a binary key "Config". Select it and press Delete key on your keyboard. You ...


0

Problem solved! Both Zabbix Agent and Server have a "Timeout" parameter which specify how long Zabbix will wait for a check to finish (external, SNMP). The default value is 3s and it takes the Zapache Shell Script a little over 4s to execute, so one needs to adjust both timeouts to accomodate that. If you just adjust at the agent (as I have done at ...


1

The problem you're having is that the network connection is most likely not yet set up when the sync is triggered. You should set up a scheduled task that runs at start-up, that waits until a network connection has been established. If this doesn't work, there are some older solutions to this problem, I can vouch for the top answer in that link as the batch ...


-3

i'm using virutal machine with ms dos 6.22. rd command can't have parameters... to delete c:\folder\folder\folder with files and whatever if you are on c:\ use: deltree \folder (it will ask for confirmation) deltree \y c:\folder (it will do it right away)


1

You have the option of System Center Virtual Machine Manager, which gives you the ability to manage your "fabric", view some basic metrics, provision new virtual machines, etc. We use it in our environment and it fills a gap, but it's not perfect and definitely not cheap. The only OOB way I know of to get the information you're looking for is to use ...


0

In my case the redunant default gateway 0.0.0.0 was due to the Bonjour Service that was installed along with Adobe CS Suite. The service was incorrectly installed and was named someting like ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##. To correct the problem disable the service. Make sure you disable the correct service, the service's executable is ...


1

I had an issue with Debian's aptitude program even though I had UTF-8 as my characters set. What worked for me was to set the 'Connection > Data > 'Terminal-type string' to 'putty' instead of 'xterm' - apparently Putty ignores the character sequence to switch into drawing mode: http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/utf8-plus-vt100.html ...


0

Obviously @Tamerz problem has been resolved but the solution doesn't help other people since it just started working. I see many people struggling with this same problem and I found several things that may be helpful for others. If you look in Application Log of the Event View you will find entries with the backup failures. This will mention an error ...


0

Anyone can attempt to authenticate from any workstation. By way of analagy, you are trying to prevent the janitor from putting the wrong key in any door. The only way stop that is to prevent the janitor from doing so is to simply tell him which key in what door, but you can't stop him from trying without physically stopping him. I'm not sure why you ...


2

You cannot do this, unless you start blocking ports, which won't be limited to a specific user. Sorry. Think of it this way - a Windows system doesn't know who a connecting user is, until they authenticate.


0

I solved this issue by disabling Persistent image caching in mstsc options for my VM: After doing this, I haven't been experiencing any issues for several month.


1

You can bypass any country-specific redirections by using http://www.google.com/ncr instead of http://www.google.com. ("NCR" stands for "no country redirect.") Hopefully, that will solve your problem.


0

Best guess: it's the search app image search function. Search - enter term - select images. It opens up a preview of the image


0

Being someone that has been known to work in environments with stupid requirements I have sympathy and one suggestion. Can you add a login script that looks for the redirected folder and creates it if it doesn't exist? That way, by the time the user is fully logged in the folders are guaranteed to exist and hopefully you won't have the local creation ...


0

While ideally Sysprep (and Generalize) would only be run once on an image before it hits production, it is not unheard of to run it more than once. There are some limitations of re-preparing an image, such as the rearm limit. See the Sysprep, SkipRearm, and Image Build Best Practices post on the Ask the Core Team Blog. You can inject the answer file in a ...


0

The -TargetPath parameter on the Move-ADObject Cmdlet is the LDAP path to a container or organizational unit (OU) that you want to put the object in. CN= is the common name of the actual object not the OU, so this part of the LDAP path needs to be removed. This can be seen by Get-Help Move-ADObject -Detailed. In your example the script with use: ...


1

Your problem is not Windows Server 2012, it's the VPS itself. You will need a dedicated server as the VPS can't use the host's GPU, which is required by OpenGL.


0

This is not a direct answer in that it is going to give history of shutdown dates. Refer How to get the list of shutdown event with date? Filtering the System events with the event id 1074 helped me



Top 50 recent answers are included