Reputation
492
Top tag
Next privilege 500 Rep.
Access review queues
Badges
2 19
Impact
~11k people reached

Jun
22
comment During times when a maintenance window overlaps with business hours does SCCM perform operations?
What are the "special conditions"?
Jun
22
comment During times when a maintenance window overlaps with business hours does SCCM perform operations?
When I ran the tests, the business hours had not been changed from the defaults. Why would that make a difference?
Jun
19
comment During times when a maintenance window overlaps with business hours does SCCM perform operations?
Did you test the "necessary conditions"? I'm pretty sure they're wrong.
Jun
18
comment How do Application revisions propagate from an SCCM site server to a client?
Thanks @blaughw. If you are correct that "Revision" in the console is different from "Revision" in AppDiscovery, then that also explains why their value sometimes differs which answers question (4) .
Jun
18
comment In what context do SCCM Powershell detection scripts run in?
Thanks @BigHomie. I'm filtering for SCCM too...but I miss a bunch because there's no practical way to get that filtered stream on mobile.
May
29
comment Active Directory - Make sure users who are never on premises receive AD policies on a regular basis
I think the remote access VPN part of RRAS is now called DirectAccess. Whatever it's called, it looks to me like the only reasonable way to manage remote systems in a domain is using Server 2012 DirectAccess and Enterprise clients on the remote systems.
Dec
2
comment ConfigMgr - Really really slow PXE boot between Hyper-V machines
Are you using dynamic memory for either of your VMs? I've seen some odd behavior when using dynamic memory on hyper-V OSD targets and ConfigMgr server.
Nov
27
comment Debugging slow Quickbooks in multi-user mode
What ping times are you seeing to the QB server from building 2? Is access to a company file on the QB server from building 2 in single-user mode also slow?
Nov
22
comment Force Cisco ASA to change source port NAT
You might have better luck with this question over on networkengineering.se.com
Sep
8
comment Can Microsoft DPM 2010 Backup Windows Server 2012 R2?
FWIW, Server 2012 is not in the list of officially supported protected operating systems for DPM 2010.
Aug
26
comment Do I need to run a verfication on LTO tape backups even though the drives themselves perform verification as they write?
@ChrisMagnuson Did you ever find out what happens if the drive detects an error using its own verify-after-write scheme?
Aug
14
comment Can PXE boot of Hyper-V VMs be disabled?
The article basically says to configure your network so that you are sure that you are only communicating with a legitimate PXE server. I don't need PXE boot at all. So relying on network configuration to protect against PXE boot exploits violates both the "defense in depth" and the "reduced attack surface" principles. PXE boot should simply be disabled on VMs that don't need that ability.
Aug
13
comment Active Directory disaster recovery with DPM
To your concern about whether "Restore the DPM database" works in another domain: "Reading tapes from different dpm servers regardless of domain or dpm version is fully supported." (source) You just need to have the certificates used to encrypt the tapes handy.
Aug
13
comment Active Directory disaster recovery with DPM
It seems like the first 5-1/2 bullets could be implemented in advance as VMs on a netbook that is kept in the same vault as the tapes -- a sort of bootstrap recovery workstation if you will. You could also have a prepared VM for the DC on the netbook ready to accept the system state and another ready to join the domain and become the new DPM server. You might as well have a fileshare on that netbook with all the install media that you'll need as well.
Aug
12
comment Active Directory disaster recovery with DPM
"We backup the DPM server separately..." -- For this to work in the case where the whole site is wiped out, some of these separate backups must be offsite. I'm curious how you achieved that.
Aug
12
comment Can PXE boot of Hyper-V VMs be disabled?
The link you provided does not work. 410 Gone
Jul
14
comment Signing a Java Deployment Rule Set JAR using AD Certificate Services
I documented my problem and solution pretty thoroughly at that SO Q&A I mentioned.
Jul
13
comment Signing a Java Deployment Rule Set JAR using AD Certificate Services
Also, using the -noprompt switch in steps 15 and 16 hides whether the import succeeded.
Jul
13
comment Signing a Java Deployment Rule Set JAR using AD Certificate Services
FWIW I've found that keytool.exe is not capable of importing a chain of trusted ADCS certs into a keystore. See this SO question. I ended up using Keystore Explorer instead.
Mar
19
comment Does Windows 7 VPN work with a Cisco ASA 5510
There's this one.