330 reputation
113
bio website
location
age
visits member for 2 years, 5 months
seen 11 hours ago

Aug
26
comment Do I need to run a verfication on LTO tape backups even though the drives themselves perform verification as they write?
@ChrisMagnuson Did you ever find out what happens if the drive detects an error using its own verify-after-write scheme?
Aug
19
revised Can PXE boot of Hyper-V VMs be disabled?
added warning
Aug
19
accepted Can PXE boot of Hyper-V VMs be disabled?
Aug
14
answered Can PXE boot of Hyper-V VMs be disabled?
Aug
14
comment Can PXE boot of Hyper-V VMs be disabled?
The article basically says to configure your network so that you are sure that you are only communicating with a legitimate PXE server. I don't need PXE boot at all. So relying on network configuration to protect against PXE boot exploits violates both the "defense in depth" and the "reduced attack surface" principles. PXE boot should simply be disabled on VMs that don't need that ability.
Aug
13
comment Active Directory disaster recovery with DPM
To your concern about whether "Restore the DPM database" works in another domain: "Reading tapes from different dpm servers regardless of domain or dpm version is fully supported." (source) You just need to have the certificates used to encrypt the tapes handy.
Aug
13
comment Active Directory disaster recovery with DPM
It seems like the first 5-1/2 bullets could be implemented in advance as VMs on a netbook that is kept in the same vault as the tapes -- a sort of bootstrap recovery workstation if you will. You could also have a prepared VM for the DC on the netbook ready to accept the system state and another ready to join the domain and become the new DPM server. You might as well have a fileshare on that netbook with all the install media that you'll need as well.
Aug
12
comment Active Directory disaster recovery with DPM
"We backup the DPM server separately..." -- For this to work in the case where the whole site is wiped out, some of these separate backups must be offsite. I'm curious how you achieved that.
Aug
12
comment Can PXE boot of Hyper-V VMs be disabled?
The link you provided does not work. 410 Gone
Aug
9
asked Can PXE boot of Hyper-V VMs be disabled?
Jul
14
comment Signing a Java Deployment Rule Set JAR using AD Certificate Services
I documented my problem and solution pretty thoroughly at that SO Q&A I mentioned.
Jul
13
comment Signing a Java Deployment Rule Set JAR using AD Certificate Services
Also, using the -noprompt switch in steps 15 and 16 hides whether the import succeeded.
Jul
13
comment Signing a Java Deployment Rule Set JAR using AD Certificate Services
FWIW I've found that keytool.exe is not capable of importing a chain of trusted ADCS certs into a keystore. See this SO question. I ended up using Keystore Explorer instead.
Jul
2
awarded  Curious
Mar
19
comment Does Windows 7 VPN work with a Cisco ASA 5510
There's this one.
Mar
13
revised How does Windows decides which DNS Server to use when resolving names?
hyperlinked a reference
Mar
13
suggested suggested edit on How does Windows decides which DNS Server to use when resolving names?
Mar
12
revised How should DNS be configured for remote VPN access to a Windows Domain?
added 8 characters in body
Mar
12
revised How should DNS be configured for remote VPN access to a Windows Domain?
added reference to problem
Mar
12
revised How should DNS be configured for remote VPN access to a Windows Domain?
added info asked for in comment