Reputation
6,488
Next privilege 10,000 Rep.
Access moderator tools
Badges
2 17 27
Newest
 Yearling
Impact
~736k people reached

  • 0 posts edited
  • 0 helpful flags
  • 219 votes cast
2d
comment Active Directory Users Delegated Permissions
The Active Directory Users & Computers snap-in shouldn't require admin privileges to simply launch. If it is, something is misconfigured. Do they simply not see the shortcut? Or are you actually getting an Access Denied or UAC elevation prompt?
May
2
awarded  Yearling
Apr
28
comment Group Managed Service Account (gMSA): get authorized hosts / install-adserviceaccount unknown error
#4 is what tripped me up the first time I was messing around with gMSAs, mostly because I was tab-completing the argument and "Delegate" comes before "Retrieve" and didn't notice the difference.
Apr
28
comment Common wisdom about Active Directory authentication for Linux Servers?
+Infinity to this. Centrify even has their Express version that's free if all you need is basic authentication support.
Apr
28
answered OpenSSH in Windows Server 2012 R2
Apr
28
comment How does one create a certificate request for a managed service account in Windows?
I don't have the answer, but just for clarification. Is this a standalone managed service account or a group managed service account?
Apr
22
answered LDP SSL Port 636 Works - ldaps:// does not
Apr
22
comment Configure custom SSL certificate for RDP on Windows Server 2012 in Remote Administration mode?
I don't think it will automatically update the hash reference, but I've never tested so I can't be sure. You can delete the self-signed cert, but in my experience Windows just re-creates a new one later.
Apr
14
awarded  Good Answer
Mar
16
comment Allow access to a share on a workgroup using a user which is a part of a domain
More or less, yes because Computer2 has no knowledge of the users or passwords in Network A's domain. When not in a domain, it can only validate its own local users/passwords.
Mar
12
revised Execute Powershell Add-Computer remotely via Invoke-Command
added documentation link
Mar
12
answered Execute Powershell Add-Computer remotely via Invoke-Command
Mar
12
answered Show logon process on windows 8
Mar
4
awarded  Nice Answer
Mar
4
answered Where did this wildcard SSL certificate come from?
Mar
3
comment Solutions for bridging Solaris/AIX to Active Directory?
Centrify is a major player in this space. Solaris and AIX are both on their supported platforms list. I realize this is a product recommendation which is why I'm posting as a comment instead of an answer.
Feb
27
comment How to Configure Windows Certificate Services not to use AIA and CRL when issuing Certificates
What have you already tried?
Feb
18
answered Generating SAN SSL Certificate that works for firefox and chrome
Feb
15
comment What's the difference between managing certificates for a user account and for a computer account?
You can just add a second (or more) instance of the Certificates snap-in in the same MMC console. One for Computer, one for user.
Feb
5
comment Password policy GPO not working as intended
@joeqwerty It would only be applied to local accounts on the computers in that OU, not domain accounts for users that might also live in that OU. The only thing that matters for domain users is the policy with the highest precendence that applies to domain controllers (unless fine-grained password policies are in use).