Reputation
1,625
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
3 13
Newest
 Critic
Impact
~108k people reached

  • 0 posts edited
  • 0 helpful flags
  • 86 votes cast
Jun
17
comment Active Directory: Permissions to get Kerberos Service Ticket
Keep in mind the difference between Authentication and Authorization. The Authentication process validates a user is who they claim to be. If you're developing something, you also need an separate Authorization process to determine if that user is authorized to perform a specific task or function.
Jun
13
comment AD Best Practice for the connection specific DNS suffix network setting
Generally you do not need to use the Connection Specific Suffix. The only time I do use the CSS is when our network team creates a DHCP scope with the wrong suffix. It's hard to get them to fix things... Only other reason, and this is reaching, may be if you have a split DNS and you wanted the same hostname to dynamically register in two different zones?
May
27
comment DHCP Server Not Registering PTR Records
You can do it that way (which is more secure) or by adding the computer account of the DHCP server to the "DnsUpdateProxy" group. More details at support.microsoft.com/en-us/kb/816592
May
19
revised Run a script when joining a domain
added 432 characters in body
May
19
revised Run a script when joining a domain
imrpoved answer
May
19
answered Run a script when joining a domain
May
13
comment Mass updating Group Policy, may be with scripts
Thats why I mentioned site based GPO's. If your company was structured better and you could do that, then you would not need to go through the tedium of GPPrefs. Linking printer GPOs to the sites would eliminate the need to do any of that.
May
12
comment Mass updating Group Policy, may be with scripts
\\srv1\prn1 and \\srv2\prn1 are different connections even though they are the same printer. You can define as many different printer connections as you like. Each connection has its own GPPrefs filter, although you will probably use the a few of the same GPPrefs over and over again. Printer connections where the GPPref evaluates True will be connected, those that are not true, will not be connected.
May
9
comment Powershell v1 Search String from Variable
Just change the first element of the pipeline. Instead of "gci | where..." do "$targetfles | where..."
May
8
revised Powershell v1 Search String from Variable
new patrn
May
8
revised Powershell v1 Search String from Variable
added 83 characters in body
May
8
answered Powershell v1 Search String from Variable
May
8
comment Mass updating Group Policy, may be with scripts
You can accomplish that kind of site mapping with GPPrefs and and IP Ranges filter on the printer connection in one of your existing GPO's. See pics I added to answer. It's customary here to mark answers as "accepted" if they've helped you. You click the check mark in the upper left of the answer.
May
8
revised Mass updating Group Policy, may be with scripts
Adding pics
May
7
answered Unable to change domain password even if the password is complex
May
7
revised Mass updating Group Policy, may be with scripts
added 121 characters in body
May
7
answered Mass updating Group Policy, may be with scripts
May
6
comment Windows 2008 R2 Not Printing From Scheduled Task
What exactly the scheduled task invoking? access.exe? script.vbs? A full set of screens for all the task options would be helpful. You wrote "we get the empty report" does that mean the job runs and prints, but produces a blank page?
Apr
24
comment Replication not working on DC
Use your google fu "1753 no more endpoints". There are several hits with very lengthy articles for troubleshooting this kind of error on microsoft.com
Apr
22
answered Group Managed Service Account (gMSA): get authorized hosts / install-adserviceaccount unknown error