514 reputation
1926
bio website devermind.com
location Germany
age 38
visits member for 5 years, 7 months
seen Dec 20 at 10:47
Please visit my development blog at http://devermind.com if you'd like to learn more about me.

Aug
18
comment Can I use an RODC for Active Directory athentication if the writeable DC is not available for several months?
I think I found a solution: I'll just stick to local user accounts and buy a cheap travel router like the TP-Link TL-MR3020 or the Asus WL-330N3G for travelling. Thanks for all your help, I'm not sure why you've been downvoted.
Aug
18
comment Can I use an RODC for Active Directory athentication if the writeable DC is not available for several months?
TheCleaner: I thought of using local accounts as well, but then I'll have to figure out how to offer securely encrypted drive shares between the laptops when using a public WiFi. We'll need that to work on our software while being away. As for cached credentials: Would we be able to share a folder with IPSec encryption when no DC is available?
Aug
18
comment Can I use an RODC for Active Directory athentication if the writeable DC is not available for several months?
Unfortunately I can't vpn into the home office's DC because the home office won't even exist while we are away. All equipment from our office will be in storage during that time.
Aug
18
comment Can I use an RODC for Active Directory athentication if the writeable DC is not available for several months?
@Nathan: Unfortunately I cant do that because the home office won't even exist while we are away. All equipment from our office will be in storage during that time.
Jan
4
comment How can I log the most CPU-Intensive processes in regular intervals?
Great, thanks again! :)
Jan
4
comment How can I log the most CPU-Intensive processes in regular intervals?
Thanks. Just one additional question: The TotalProcessorTime is good for finding general CPU hogs, but for CPU spikes I'd like to see the current CPU usage. Is there any way to get that via Powershell?
Jan
4
comment How can I log the most CPU-Intensive processes in regular intervals?
Thanks a lot! :)
Dec
12
comment Cannot add witness to my mirroring setup
The next line after the one you quoted restarts the mirroring session.
Dec
10
comment Cannot add witness to my mirroring setup
I think you are confusing this with the "alter database <dbname> set partner <hostname>" command. That one has to be executed on the mirror first, then on the principle. "Set witness" is only initiated on the principal - if you try to run it on the mirror, you get the following error: "Msg 1470, Level 16, State 2, Line 1 The alter database for this partner config values may only be initiated on the current principal server for database MYDBNAME"
Dec
10
comment Cannot add witness to my mirroring setup
I think the reason I did not get any monitoring data from the witness is that it raises less events than the principal and the event types are different as well. Please see my edit 3 above.
Dec
9
comment 10 servers to administer and I'm a history major
I'd like to express my sincere sympathy by upvoting this posting.
Dec
9
comment Cannot add witness to my mirroring setup
Thanks for the suggestion. I could not find the "Audit Database Mirroring Login" event (which event section is it? I searched all of "Security Audit", but it wasn't there). I added the results to my post above.
Dec
9
comment Cannot add witness to my mirroring setup
It's a name and I have triple-checked all three names can be resolved properly (via DNS) from all three hosts.
Dec
9
comment Cannot add witness to my mirroring setup
Yes, the witness endpoint is started. I am not using windows domains at all, but certificate-based authentication. Please see my OP for details.
Dec
5
comment Cannot add witness to my mirroring setup
@Ben: I successfully telnetted from the principal into the witness on the port of the mirroring endpoint. There is obviously no firewall problem.
Dec
3
comment Cannot add witness to my mirroring setup
@Ben: I had the same thoughts, but as already mentioned the firewall is currently switched off on the witness. And there are no outgoing port restrictions on the principal server.
Oct
28
comment How to enable encrypted connections to a SQL Server instance?
Actually you can activate the "force encryption" setting on the server without a trusted certificate, and it will always encrypt incoming connections. The only thing you cannot do in this scenario is activate the "encrypt connection" parameter on the client, because then it will complain about a non-trusted certificate. But that's only relevant for safeguarding against man in the middle attacks, not for making sure that people in your LAN cannot eavesdrop your SQL Server password.
Jun
23
comment What's the risk of running a Domain Controller so that it is accessible from the internet?
@Doc: Thanks for the advice. I definitely agree with the hint on ports. It helped me reduce the amount of brute force attacks on ssh on my linux servers a lot.
Jun
23
comment What's the risk of running a Domain Controller so that it is accessible from the internet?
@Daniel: Not in my experience. I could join my DC from another computer via a regular internet connection without any problems.
Jun
23
comment What's the risk of running a Domain Controller so that it is accessible from the internet?
@Daniel: This is not an issue in my scenario (see my OP above). I only have 2 domain clients and I don't expect having to join more than that anytime soon.