Reputation
309
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 11
Impact
~8k people reached

  • 0 posts edited
  • 1 helpful flag
  • 30 votes cast
Oct
25
awarded  Popular Question
Sep
25
comment Is there a Windows command line utility to verify user credentials?
And this one will give you a report of all the users in your domain, and whether or not they're required to change their password. Pass this through a grep, find or findstr filter and you'll have a list of just the accounts that have not changed their password: dsquery user | dsget user -samid -mustchpwd
Sep
25
comment Is there a Windows command line utility to verify user credentials?
In fact, this query will show you whether the account is set to "must change password." If no, then they have logged in and changed their password. If yes, then they have NOT logged in and changed their password: dsquery user -samid johndoe | dsget user -mustchpwd
Sep
25
comment Is there a Windows command line utility to verify user credentials?
@MarkBerry that changes the picture a little bit. IMHO, "softer touch" probably equates to "weaker security," just for the record. ;-) But you could tick the checkbox, then run queries using dsquery or net user /domain to see when they last logged in. If they have logged in, you know their password changed. If they have NOT logged in, then you know their password has NOT changed. And you can do that without having to retain any knowledge of anybody's password.
Sep
25
comment Is there a Windows command line utility to verify user credentials?
@MarkBerry you should just tick the checkbox in the user profile forcing them to change their password on the next logon.
Sep
25
comment How to replace permissions and everything inside with icacls on Windows Server 2012?
@joeqwerty cacls.exe can set the ACL's in the wrong order, potentially causing problems (I'll leave this as an exercise for the reader).
Aug
24
awarded  Caucus
Jul
22
revised Is it bad to redirect http to https?
added 239 characters in body
Jun
29
comment Is it really secure to connect to a server by SSH from hotels during a journey?
@chicks I guess that's what I was trying to convey. Lots of security problems in all OS's, and Microsoft has made enormous strides since starting their "trustworthy computing* initiative several years ago. I just think the "you're more secure because Linux" thing diverts the conversation from the actual issue at hand (respectfully). ;-)
Jun
29
comment Lightning/surge risk of Ethernet cable run inside an exterior wall
I see Ethernet installed in commercial buildings without conduit all the time. It is not uncommon to run plenum-rated Ethernet cable exposed through drop ceiling areas, with conduits poking out the tops of the walls to facilitate getting the cable into the wall boxes.
Jun
28
comment Lightning/surge risk of Ethernet cable run inside an exterior wall
What standard are you referring to?
Jun
28
comment Is it really secure to connect to a server by SSH from hotels during a journey?
@chicks "more secure than most folks because you are running Linux" is a silly thing to say. SSH is SSH, regardless of whether it is running on Linux, Unix (the Mac) or Windows. And we could point to plenty of extremely serious security flaws in Linux in recent history (Heartbleed, anyone?). Just saying, let's leave the silly OS flame wars on the sidelines where they belong because it distracts from the actual questions and issues. Thanks! ;-)
May
22
comment Restrict Apache to only allow access using SSL for some directories
Redirecting HTTP to HTTPS opens you up to certain types of MiTM attacks. Just a caution.
May
22
comment Restrict Apache to only allow access using SSL for some directories
To be fair, 5 years old or not, the reasoning is that the link you point to might disappear, making your answer mostly or completely useless to somebody coming along looking for the information later. So I actually voted your snarky comment up (honest), but I also totally agree that the answer should have some context so that it remains useful. Especially since it's marked as the correct answer.
Apr
30
comment How do I remove (un-apply) a named filter from a Procurve switch port using the CLI?
Of course you might be able to use the web interface, too, depending on your network security settings. The more recent updates to Java aren't super happy with self-signed SSL/TLS certificates on the switches. Etc.
Apr
30
awarded  Scholar
Apr
30
accepted How do I remove (un-apply) a named filter from a Procurve switch port using the CLI?
Apr
30
answered How do I remove (un-apply) a named filter from a Procurve switch port using the CLI?
Dec
19
comment Are redirected GET request to HTTPS secure?
Watch out for the SSLSTRIP attack.
Dec
15
revised Can I plug a 15A UPS into a 30A receptacle?
Just re-read my old post and felt like cleaning up a couple of things.