Reputation
6,543
Next privilege 10,000 Rep.
Access moderator tools
Badges
2 17 27
Newest
 Yearling
Impact
~752k people reached

  • 0 posts edited
  • 0 helpful flags
  • 220 votes cast
Jul
6
comment Email Administrator on failed login
So you want hundreds of email notifications?
Jul
3
comment Running IIS 7.5 on 64-bit, but which config file to edit?
Just to clarify, System32 is actually where 64-bit related files live. SysWOW64 is where the 32-bit related files live. Yes, it's confusing. Blame Microsoft.
Jun
27
comment What is Active Directory Domain Services and how does it work?
I have to respectfully disagree about suggesting people never use existing DNS infrastructure and run Microsoft DNS. Many companies have well functioning DNS infrastructures and IPAM solutions that support DDNS from AD DCs just fine. Not running Microsoft DNS means one less thing to deal with for a new admin. And it's really easy to screw up DNS when you don't know what you're doing. I've also had plenty of experience in environments using ancient versions of BIND that don't even support DDNS and things work just fine once you import the proper entries from netlogon.dns.
Jun
18
comment Unable to login with a domain account
When you ran sysprep on the VM, did you check the box for "Generalize"?
Jun
18
comment Unable to login with a domain account
Were your domain controllers also built from non-sysprep'd images?
Jun
15
comment Active Directory: Viewing “Attribute Editor” after finding an account via ADUC's “Find” option
You forgot to include ADSI Edit which is also built-in. =)
Jun
15
comment Active Directory: Viewing “Attribute Editor” after finding an account via ADUC's “Find” option
Holy hell, this bugs me to no end as well. I tend to use @Shane Madden's answer, but it's still highly annoying.
Jun
4
comment Keep getting the password complexity error for a OU that should have it disabled
Shadow groups only mirror the members of an OU for as long as the domain admins are diligent about keeping them up to date. Sadly, there's no built-in way to automate this.
May
30
comment Keep getting the password complexity error for a OU that should have it disabled
And just to add some detail to this answer, Fine Grained Password policies can't be applied to an OU. They're only applied to users directly or via groups that users are a member of.
May
9
comment What is a good SSH server to use on Windows?
@Tyson If the user logging in is a real windows local/domain account, it uses that security context. If it's a "virtual" user, it runs in whatever security context that virtual user has been configured against. It's also configurable what type of login is used (i.e. Network or Interactive). More info available in the docs.
Mar
29
comment HKEY_USERS entry for service account
The HKCU hive is created as soon as your task starts running as that user for the first time on the machine. You don't need to pre-create anything. Just include a line in the script right before the pscp calls that writes the value you need.
Mar
12
comment Restrict access to certain USB drives
I'm not positive (having never actually used this feature), but I was under the impression that you can restrict down to the unique instance of a device provided some portion of their PnPID is unique. If the device manufacturer doesn't include something like a serial number in the PnPID, it wouldn't be possible though.
Mar
12
comment Rsync for Windows with support for ACLs
It's possible to enable DFS Replication without enabling DFS Namespaces, but they're generally used together. You still end up with at least one "DFS Root". As for two folders on the same server, I'm not sure. It doesn't seem like it would be a problem on the surface, but it's not what the feature was designed for. So my gut says probably not.
Jun
13
comment How do you trace/debug LDAP connections against Active Directory?
I'm dying for a good answer to this as well. I have a similar need to trace LDAP connections for a problem we're having. Unfortunately, the best thing I've been able to come up with is some sort of Wireshark/Netmon packet capture which is really ugly.
Jun
1
comment Install .NET 4 via command line or PowerShell?
Your question might get more views if you edit it to fix the mistake. You should also probably update your windows-server-2008 tag to windows-server-2008-r2.
May
31
comment Install .NET 4 via command line or PowerShell?
Do you mean 2008 R2? Or do you actually mean RC2 as in a release candidate?
Apr
14
comment Is disabling UAC on a Windows 2008 server a bad idea?
With respect, your 3rd party custom apps have been coded by morons if they can't abide by the permissions UAC/Windows tries to enforce. Vista has been out a long time now. It's time for software vendors to get with the program.
Apr
9
comment How to run a 32-bit app from VBScript on both 32-bit & 64-bit Windows?
You said your problem only exists on 64-bit Windows. Why would a sample demonstrating the problem need to run on 32-bit Windows? The question I asked in my answer still stands. Perhaps if you posted your own script, we can analyze what's wrong.
Apr
8
comment Task Scheduler doesn't have an option for my task
Hah, I knew I was going to miss some cases without explicit testing. I'll update my answer. =)
Apr
8
comment Am I missing something about pushing a PS script via domain GPO
In any case, you might try testing the old-style Scripts tab just to see if it works. Set the Script Name to the path to powershell.exe. Then set the Script Parameters to "-File <path to script>".