7 reputation
4
bio website
location Sri Lanka
age
visits member for 1 year, 10 months
seen Apr 9 '13 at 8:49

Sr. Systems Engineer / Consultant. Computer systems and networking. Security enthusiast.


Sep
24
awarded  Autobiographer
Apr
9
comment Failure to install NetFX3 on Windows Server 2012: Error 3017 — Am I missing something here?
Please read this carefully: technet.microsoft.com/en-us/library/hh831809.aspx#BKMK_FoD
Apr
9
answered Failure to install NetFX3 on Windows Server 2012: Error 3017 — Am I missing something here?
Feb
5
comment How exactly does the home folder mapping in 2003 AD work?
Have you tried to clear the saved credentials? As an example, by clearing the local credential cache by checking with Control keymgr.dll (this has to be run with a command prompt). After that, you should try to clear credentials of the user from AD DS user management console. This will force to re initiate the targeting. Also check, AppData\Roaming area and HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders. For the specific users, also check wininit under winlogon. Network shortcuts: %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Network Shortcuts.
Jan
30
comment How exactly does the home folder mapping in 2003 AD work?
That is true, but he is also mentioning about a roaming profile so there could be a mixed configuration. So the profile properties has to be evaluated. By just setting the home folder does not create any redirection. It maps the shared drive when user profile is loaded and when it is loaded, user profile settings automatically do the job. I am curious about his configuration. Its good to use HDs for reliability. Using just the home folder property does not do other things such as my documents redirection unless configured.
Jan
30
answered How exactly does the home folder mapping in 2003 AD work?
Jan
30
comment Install Trusted root certificate authority certificate via GPO
Finally, make sure that you understand the containers. 1. All CA certificates will be published into CN=AIA,CN=Public Key Services,CN=Services,CN=Configuration,ForestRootDomain (LDAP Distinguished Name). Root CA Certificates are also published into the CN=Certification Authorities,CN=Public Key Services,CN=Services,CN=Configuration,ForestRootDomain. Finally, Enterprise CA certificates are published into the CN=NTAuthCertificates,CN=Public Key Services,CN=Services,CN=Configuration,ForestRootDomain object (instead container).
Jan
30
awarded  Commentator
Jan
30
comment Install Trusted root certificate authority certificate via GPO
In order to publish the CRLs, use certutil -dspublish -f crlfile.crl. If LDAP and other information related to CRLs are not sufficient or cannot be validated, the request may fail. But still you can force the publishing by adding the netBios name at the end of the command. Now the important part. Force the publication if it is not occurring. 1. Run gpupdate /force. 2. Next to that, certutil -pulse. This will initiate the auto enrollment requests.
Jan
30
comment Install Trusted root certificate authority certificate via GPO
To add a subordinate certificate to the intermediate store: certutil -addstore -f CA <subcertfile.crt>. CRL: certutil -addstore -f CA <subcertfile.crl>. In order to publish certificates to AD DS from an offline CA (make sure auto enrollment is possible). certutil -dspublish -f "rootca.crt" RootCA. Use double quotes if the name includes spaces. certutil -dspublish -f subcert.crt SubCA can be used to deploy subordinate CAs to AD DS. Note that if the root ca is used, certificates will be published to both AIA and Certificate Authority containers while subordinate CA published only into AIA.
Jan
30
comment Install Trusted root certificate authority certificate via GPO
That is installed when Intermediate or subordinate CA is deployed. It cannot be deployed without the root ca. The process is manual. You can make it an ENt. Subordinate. But there are some other things to clarify. First, to install computer certificates, domain admins have to have local administrator permissions in order to access the local computer store. This is a default but needs to be tested. But if the root certificate and CRLs have not been deployed properly to AD DS, you will run in to problems. With certutil: certutil -addstore -f root <root.crt>, certutil -addstore -f root <crl.crl>
Jan
30
awarded  Editor
Jan
30
revised Install Trusted root certificate authority certificate via GPO
added 2 characters in body
Jan
29
answered Install Trusted root certificate authority certificate via GPO
Jan
29
comment User has excessive rights to W2k8r2 server even when she is a normal user
Run the command after login as that specific user on Windows 7. When running the gpresult, you should also use /r option. Or else, if you wish to perform remotely, please use /user [<TARGETDOMAIN>]<TARGETUSER> parameters. That should reveal any hidden configuration. You could also use auditing to understand the access behavior. Enable auditing for the specific share.
Jan
25
comment Windows Server 2003 R2 as Fileserver is not available in network
If you encounter other issues such as replication problems, you have to first identify the errors and let us know. Other considerations (non-relevant): support.microsoft.com/kb/977381/en-us
Jan
25
answered Windows Server 2003 R2 as Fileserver is not available in network
Jan
23
comment LAN users not listed over wifi
I do not think you are taking it to account. WPA2-PSK what you are mentioning while I am not. It is not recommended to use PSK in an enterprise. I m completely aware of that WPA2-Px has vulnerabilities and also the SSID probing. With a pass phrase less than 21 keys can be vital. There are issues with ssid broadcast and mac filtering (can be spoofed easily). In a properly configured ent. it is quite difficult to hijack as an outsider. Even for insiders. Just wpa won't do, of course. Its advisory to follow security in depth with layered approach. Good conv. though it won't help Dimal anyway.
Jan
23
comment User has excessive rights to W2k8r2 server even when she is a normal user
Additionally, reset the computer account and check. This is not necessary but I am suspecting a different possibility. Thank you!
Jan
23
comment User has excessive rights to W2k8r2 server even when she is a normal user
Simply disable, reset the password and re enable the profile. If the user is using a roaming profile, please check the settings as well. Re map all the mapped folders and printers. Apply a deny permission for the other shares which the user has exclusive access and check whether it propagates to this specific share (overlapping).