5,910 reputation
21524
bio website trace3.com
location Los Angeles, CA
age 35
visits member for 5 years, 6 months
seen 9 mins ago

By day, I'm a Trace3 Professional Services Engineer specializing in Identity Management and Microsoft technologies. But at the end of the day, I'm just a guy who likes to play with technology and solve problems.


Oct
22
comment Parkingcrew.net hijacking our domain
You would need a client that has a working IPv6 WAN connection. Then you could issue a DNS lookup for the AAAA record (the IPv6 equivalent of a DNS A record) on your site.
Oct
22
comment Parkingcrew.net hijacking our domain
Might it be an IPv4 vs IPv6 name resolution difference?
Oct
22
comment SSL Certificate management with Powershell DSC
It doesn't sound like this is a CA certificate that he needs his systems to trust which is what the solution you describe would be for. It sounds more like he has an actual certificate and private key that the target servers will be using to host SSL based services. I don't believe you can use the Public Key Policies GPO settings to deploy something like that.
Oct
22
comment Missing DomainControllers in Active Directory Object
Good old port 5722?
Oct
20
answered Updating SSL Certificates in vCenter 5.1
Oct
16
awarded  Revival
Oct
10
answered Will a Windows server 2003 operate on a domain functional level 2012 domain?
Oct
7
answered Force Windows or IE8 to open certain URLs in Chrome
Sep
16
answered Permissions for SCCM Service Account
Sep
11
answered How to set the network interface for RDP in Windows Server 2012?
Aug
27
awarded  Nice Question
Aug
14
comment Does Active Directory's Kerberos implementation support per-user ticket lifetime settings?
That's basically what I figured. It's unfortunate, but not the end of the world. One can hope that Microsoft adds it as a feature using the existing Fine-grained password policy system in future versions of the OS.
Aug
14
asked Does Active Directory's Kerberos implementation support per-user ticket lifetime settings?
Aug
13
answered Remotely remove user from administrator group, and make it effective immediately
Jul
19
revised LDAP/ActiveDirectory BindDN syntax
added example for NetBIOS form
Jul
17
awarded  Famous Question
Jul
16
awarded  Revival
Jul
3
comment Configuring Service Login Credentials with Group Policy following MS14-025
That was pretty much going to be what I fell back on if nothing else looked more...elegant. Powershell DSC looks fun though. I'll definitely look into that. I'm also now looking at the gMSAs introduced with 2012. Though I'm finding conflicting information as to whether pre-2012 OSes support using them.
Jul
3
comment Configuring Service Login Credentials with Group Policy following MS14-025
So they have to be domain accounts because the services are accessing external resources that require domain authentication/authorization. A script that configures the services is certainly not out of the question, but would ideally be deployable via group policy. The idea is that new hosts are added somewhat regularly and we'd like group policy to automatically configure the services on the hosts once they exist rather than needing to kick off a manual process.
Jul
2
asked Configuring Service Login Credentials with Group Policy following MS14-025