963 reputation
615
bio website harryjohnston.wordpress.com
location New Zealand
age 46
visits member for 3 years, 1 month
seen yesterday

I work in the technical support group of the School of Computing and Mathematical Sciences, The University of Waikato, New Zealand. My primary responsibility in this role is maintenance and support for several computer labs, comprising over 200 Windows PCs used for teaching.

I am married with two sons, aged 11 and 8.

I can be contacted at harry.maurice.johnston@gmail.com.


1d
comment Approvals Inheritance for WSUS on windows server 2012 R2
If "Keep existing approvals" is selected for a child group, then if the existing approval setting for the child group is inherited, the new approval setting will be inherited. If the existing approval setting for the child group is not inherited, it will not be changed.
1d
answered Approvals Inheritance for WSUS on windows server 2012 R2
Oct
24
comment What would cause Wyse C10LE Thin Clients to suddenly be unable to use dual displays after Windows Updates?
If you or anyone else affected by this issue would like a support case set up with Microsoft, please contact Susan Bradley - see blogs.msmvps.com/bradley/2014/10/24/…
Oct
19
comment Windows LocalSystem vs. System
Actually, Network Service is a low-privilege account. It does not have the same privileges as Local System. Also, in a domain, Local System has the same access to domain resources as Network Service, i.e., it can log in using the computer account.
Sep
8
awarded  Yearling
Sep
1
asked What exactly do the two “Do not process the legacy run list” group policy settings do?
Sep
1
answered What exactly do the two “Do not process the legacy run list” group policy settings do?
Aug
20
asked Why does wusa fail with “The System cannot find the file specified”?
Aug
20
answered Why does wusa fail with “The System cannot find the file specified”?
Aug
15
comment openVAS - Microsoft RDP Server Private Key Information Disclosure Vulnerability - false Alarm?
Sorry, make that "potentially vulnerable" - if you are using up-to-date clients then you'll see a warning if a MitM attempts to downgrade the connection to an unauthenticated one. Reconfiguring the server just ensures that nobody is using an out-of-date client.
Aug
15
revised openVAS - Microsoft RDP Server Private Key Information Disclosure Vulnerability - false Alarm?
added 14 characters in body
Aug
15
answered openVAS - Microsoft RDP Server Private Key Information Disclosure Vulnerability - false Alarm?
Aug
15
comment openVAS - Microsoft RDP Server Private Key Information Disclosure Vulnerability - false Alarm?
You are still vulnerable unless you have configured the server to only use the newer protocol. Once you've changed the configuration, OpenVAS will no longer report the vulnerability.
Jul
29
awarded  Notable Question
Mar
14
awarded  Nice Answer
Oct
17
comment Why does chkdsk take a long time on one particular index?
I don't believe that the Index Service uses an NTFS index (and I already tried turning it off IIRC). It can't be a HDD issue because the data was moved to a new HDD without changing the results. I now suspect that this is simply an artifact of the way chkdsk handles rigorous index checking; for example, it may be loading as much metadata as it can into memory and then processing it. The issue goes away if you use the /I switch.
Oct
7
asked Why does chkdsk take a long time on one particular index?
Sep
8
awarded  Yearling
Jul
15
comment Any difference between DOMAIN\username and username@domain.local?
Also, "it won't use the username to verify if it is allowed in the ACL but it will use the SID" is the expected behaviour - it should always do that, regardless of whether you use domain\username or username@domain. Are you talking about a case where there are two domains with the same name, or something similarly pathological?
Jul
15
comment Any difference between DOMAIN\username and username@domain.local?
-1. I really can't follow what you're saying here. Where you say "When the users will connect to the server" which server do you mean, the old DC01, or the new DC01? What happened to the old DC01 anyway, was it decommissioned, renamed, removed from the domain, or what? Was it properly demoted first? What do you mean by "new domain", since you didn't describe the creation of a new domain at any point? If you use "domain\username" it should always search the domain you explicitly specified, are you describing a case where it doesn't?