1,374 reputation
156
bio website
location
age
visits member for 3 years, 10 months
seen Jan 25 at 16:26

Jan
25
comment Windows Server 2008 - File Permissions and Administrator
@Bibi195 I guess my question would be: what are you trying to accomplish by removing Full Control? Are you trying to prevent casual privacy violations? Do you have non-sysadmins with Administrator permissions? Or are you just trying to administer Windows like it was Linux? Because there's a lot of philosophical differences that resulted in design differences between the platforms, so not every practice is portable. It's perfectly possible to secure Windows, but you don't necessarily do it by copying what you do on Linux.
Jan
25
comment Windows Server 2008 - File Permissions and Administrator
@Bibi195 The latter. Much of an Administrator's authority comes from the fact that they have full control of the file system, particularly %windir% and %programfiles%. The best practice option is to have sysadmins have two accounts: one in Users that they log in with and use normally, and one in Administrators that they elevate to as needed. However, that's a lot of overhead, and not everything works with RunAs or UAC elevation. It's putting hoops up that are harder to jump through than sudo or su, so many locations have sysadmins log in as Admins and rely on UAC as much as possible.
Jan
25
answered Windows Server 2008 - File Permissions and Administrator
Sep
4
awarded  Citizen Patrol
May
7
comment is it possible to check how many DIMM slots are filled in a pc motherboard, remotely?
For those looking for a PowerShell answer, you can use Get-WMIObject Win32_PhysicalMemory to access the same data as wmic memorychip.
Apr
8
awarded  Yearling
Oct
26
awarded  Great Answer
Apr
8
awarded  Yearling
Feb
8
comment How do I get SQL Server to release its memory?
If your sysadmin doesn't understand what Page Faults represent and why having memory consumed but no real Page Faults taking place is not a problem, I don't know how to help you. You can't fix stupid. One thing you can do, however, is to use sp_configure to configure the max memory down when you're not using the system, and the configure it back up when you need it. This seems pretty silly, however. sp_configure is generally something you should set once and leave alone.
Dec
28
answered How to get a different network's segment IP and MAC in Windows
Apr
8
awarded  Yearling
Jul
31
answered Does this SMART selftest indicate a failing drive?
Jul
23
comment Our security auditor is an idiot. How do I give him the information he wants?
I find it incredibly suspicious that everything he asked for is either designed to be impossible or somewhere on the security scale between telnet and a Post-It with a password stuck to the monitor.
Jul
16
answered Ubuntu 10.04: Two interfaces on a same subnet with a same gateway
Jul
4
comment Is a 64 or 32-bit VirtualBox guest better on a 64-bit host?
I wouldn't agree with that, @sascha. The AMD64 (EM64T, x86-64) extensions double the number of general purpose registers from 8 to 16, and any program complied for AMD64 will take advantage of this additional workspace because it must be present. It depends on what the system is doing if these registers will help or not.
Jul
4
comment PureFTP: Denying upload of certain file extensions
Note that these type of blocking scripts generally do not examine the files themselves; they only look at the extension. Thus, they can be circumvented by renaming the source file.
Jul
4
comment Intermittent high ping/latency problem
@joeqwerty Ah, I tried two different sites and got 325s for both. My bad luck they were both 15 hops! It looked like a strange default value. I wonder why they didn't do 30 seconds per hop.
Jul
3
answered Intermittent high ping/latency problem
Jun
26
answered How to install Active Directory Users and Computers for Windows 2008
Jun
25
awarded  Guru