Reputation
Next tag badge:
997/1000 score
280/200 answers
Badges
10 129 267
Newest
 Enlightened
Impact
~8.9m people reached

Jul
27
awarded  Nice Answer
Jul
27
answered Can I give Domain Local groups access permissions to a profile (Windows 2003 R2 SP2/XP)?
Jul
27
comment How can I prevent that a server admin can see data?
@Ernie: Unless you're going to check all the binaries on the system against known-uncorrupted sources I'd argue that even that method has problems.
Jul
27
comment How can I prevent that a server admin can see data?
@Jim: The "big deal" with the RID 500 "Administrator" or any account that has "SeTcbPrivilege" granted to it is the ability to subvert any operating system controls. Auditing is fine assuing that (a) you can winnow the amount of audit data gathered down to a manageable level, and (b) someone actually monitors the auditing data. In terms of breaches of confidentiality auditing that the breach occurred doesn't mitigate the breach. Any account with the "SeTcbPrivilege" granted can do anything it wants to the OS and there's nothing you can do to prevent it-- only to detect it after the fact.
Jul
27
answered Need some input for ideal server setup
Jul
27
comment How can I prevent that a server admin can see data?
@Ernie: It's really, really easy to get around just about every "protection" that Windows throws in front of you. The GUI "protects" you, but if you're using command-line tools or scripts you really can "do anything" as "Administrator". (Once you've used "Administrator"-level access to get a SYSTEM-level command prompt all bets are off. Wanna go delete the contents of the "Local Users and Groups" portion of the registry? Have at! It's wide open once you get to that point...)
Jul
27
comment How do you force printer drivers on a server to replace drivers on the client?
There's no indication of what file is "in use"? Grab a copy of "handle.exe" from Microsoft (technet.microsoft.com/en-us/sysinternals/bb896655.aspx), run it with the "-a" argument dumping the results out of a file ("handle -a > foo.txt") and look thru that text file for references to "C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\..." files. It sounds like some piece of the driver runs as a user-land process. Worst-case scenario, stop the spooler service, delete the reference to the driver from its subkey in HKLM\System\CurrentControlSet\Control\Print\Environments, then restart the spooler.
Jul
27
answered PHP installation on IIS: ISAPI or CGI?
Jul
27
answered How do you force printer drivers on a server to replace drivers on the client?
Jul
27
comment Add MX Record in Windows 2003
The Windows DNS Management GUI works fine. You create records there and they appear in query results. What more do you want? The poster has described the classic case of naming an AD domain the same as an Internet domain name. The AD domain member computers are getting name resolution out of their AD-backed DNS servers and none of the records in the Internet DNS will be available there unless they're manually created. "Shadow subdomain"? "Enterprise root NS"? Where are you getting this stuff?
Jul
27
comment Add MX Record in Windows 2003
So, it sounds like he just didn't add the record you wanted, eh? Yep... things don't "work better" when you have two DNS infrastructues (your AD DNS and the Internet DNS) that think they're authoritative for the same names. It just creates an ugly manual maintenance situation.
Jul
27
answered How can I prevent that a server admin can see data?
Jul
27
revised Best practices Roaming User Profiles for users who connect via VPN frequently
edited title
Jul
27
answered Best practices Roaming User Profiles for users who connect via VPN frequently
Jul
27
answered Windows Server 2003 Terminal server Printing issues
Jul
27
answered Add MX Record in Windows 2003
Jul
27
comment Cisco Switch to Switch Communication
Here's the big question: What kind of port does your point-to-point link to the datacenter plug into? Is it an "access" port into a single VLAN, or is it a "trunk" port carrying multiple VLANs?
Jul
27
answered Screen Recording
Jul
27
answered Connecting two Cisco 2960 switches
Jul
27
answered Cisco Switch to Switch Communication