Reputation
8,191
Next privilege 10,000 Rep.
Access moderator tools
Badges
2 19 33
Newest
 Nice Answer
Impact
~1.1m people reached

  • 0 posts edited
  • 0 helpful flags
  • 263 votes cast
May
19
comment How do I find out if a file or folder breaks inheritance inside another folder in NTFS without looking at all the files and folders?
I believe it is intended to be run locally. It's been a while since I've used it and it hasn't been updated in a while either.
May
7
comment Unable to change domain password even if the password is complex
Complexity requirements also include the following limitations. Password can't contain the username or any portion of the user's full name. So if it's a test user with a username like 'a' and there's an 'a' in the password, that could be the problem as well.
May
2
comment Active Directory Users Delegated Permissions
The Active Directory Users & Computers snap-in shouldn't require admin privileges to simply launch. If it is, something is misconfigured. Do they simply not see the shortcut? Or are you actually getting an Access Denied or UAC elevation prompt?
Apr
28
comment Group Managed Service Account (gMSA): get authorized hosts / install-adserviceaccount unknown error
#4 is what tripped me up the first time I was messing around with gMSAs, mostly because I was tab-completing the argument and "Delegate" comes before "Retrieve" and didn't notice the difference.
Apr
28
comment Common wisdom about Active Directory authentication for Linux Servers?
+Infinity to this. Centrify even has their Express version that's free if all you need is basic authentication support.
Apr
28
comment How does one create a certificate request for a managed service account in Windows?
I don't have the answer, but just for clarification. Is this a standalone managed service account or a group managed service account?
Apr
22
comment Configure custom SSL certificate for RDP on Windows Server 2012 in Remote Administration mode?
I don't think it will automatically update the hash reference, but I've never tested so I can't be sure. You can delete the self-signed cert, but in my experience Windows just re-creates a new one later.
Mar
16
comment Allow access to a share on a workgroup using a user which is a part of a domain
More or less, yes because Computer2 has no knowledge of the users or passwords in Network A's domain. When not in a domain, it can only validate its own local users/passwords.
Mar
3
comment Solutions for bridging Solaris/AIX to Active Directory?
Centrify is a major player in this space. Solaris and AIX are both on their supported platforms list. I realize this is a product recommendation which is why I'm posting as a comment instead of an answer.
Feb
27
comment How to Configure Windows Certificate Services not to use AIA and CRL when issuing Certificates
What have you already tried?
Feb
15
comment What's the difference between managing certificates for a user account and for a computer account?
You can just add a second (or more) instance of the Certificates snap-in in the same MMC console. One for Computer, one for user.
Jan
24
comment Managing disk space with > 500 virtual windows servers (strategy ?)
I was actually referring to de-dupe at the VM storage layer; whatever your vmdk files live on (SAN, NAS, etc). Lots of Windows VMs means lots of identical OS files on blocks that can be de-duped.
Dec
10
comment Is it possible to set up a multi-boot system with SCCM?
As this isn't directly answering your question, I'll post as a comment. But this seems like a problem that virtual machines are a perfect solution for. Don't hassle with getting your images to all multi-boot on the same physical machine. Just get your images running as VMs on your host computer and start the one you need to troubleshoot when you need it.
Dec
10
comment What's the difference between Remove-WindowsFeature and Uninstall-WindowsFeature?
Interesting. I had no idea.
Dec
10
comment What are pros and cons of keeping a local administrator account in Windows 7 workstations in a domain?
The actual local administrator account (regardless of its name) bypasses UAC policies which makes it slightly more of a security risk than other accounts in the Administrators group. Also, renaming the administrator account doesn't really do much any more because most of the malware and pen testing tools have moved to using the SID instead of the username.
Oct
22
comment Parkingcrew.net hijacking our domain
You would need a client that has a working IPv6 WAN connection. Then you could issue a DNS lookup for the AAAA record (the IPv6 equivalent of a DNS A record) on your site.
Oct
22
comment Parkingcrew.net hijacking our domain
Might it be an IPv4 vs IPv6 name resolution difference?
Oct
22
comment SSL Certificate management with Powershell DSC
It doesn't sound like this is a CA certificate that he needs his systems to trust which is what the solution you describe would be for. It sounds more like he has an actual certificate and private key that the target servers will be using to host SSL based services. I don't believe you can use the Public Key Policies GPO settings to deploy something like that.
Oct
22
comment Missing DomainControllers in Active Directory Object
Good old port 5722?
Aug
14
comment Does Active Directory's Kerberos implementation support per-user ticket lifetime settings?
That's basically what I figured. It's unfortunate, but not the end of the world. One can hope that Microsoft adds it as a feature using the existing Fine-grained password policy system in future versions of the OS.