6
You can build Failover Cluster without AD. It is supported to work with SQL Server role. For VMs Live Migration won't work. Should help:
https://techcommunity.microsoft.com/t5/failover-clustering/workgroup-and-multi-domain-clusters-in-windows-server-2016/ba-p/372059
You will need shared storage for the cluster. I am not sure if S2D works in such scenario. ...
5
PowerShell is your friend.
https://docs.microsoft.com/en-us/powershell/module/pki/import-pfxcertificate
https://docs.microsoft.com/en-us/powershell/module/iisadministration/remove-iissitebinding
https://docs.microsoft.com/en-us/powershell/module/iisadministration/new-iissitebinding
You can directly pull the PFX file from a network path (\\server\share\...
4
I have similar issues with converting from ESXi to Hyper-V in Starwind V2V. In my case it was solved by marking “Activate Windows Repair Mode” in stage “Select option for VHD/VHDX image format”.
If it will not help, try to convert VM directly from ESXi to Hyper-V without ovf export. Starwind supports such conversion.
4
You can deploy the following policies on the server to enforce this:
Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection\
=> Do not allow Clipboard redirection
and
=> Do not allow drive redirection
4
You can build nested failover cluster using shared iSCSI or FC storage as a shared storage. The following KB covers requirements.
https://kb.vmware.com/s/article/2147661
If you do not have separate shared storage, you can use something like StarWind VSAN as a shared storage. It can create replicated shared storage, which can be used by the cluster via iSCSI. ...
3
This works for me:
$selfSignedRootCA = New-SelfSignedCertificate -DnsName SelfSignedRootCA -notafter (Get-Date).AddMonths(6) -CertStoreLocation Cert:\LocalMachine\My\ -KeyExportPolicy Exportable -KeyUsage CertSign,CRLSign,DigitalSignature -KeySpec KeyExchange -KeyLength 2048 -KeyUsageProperty All -KeyAlgorithm 'RSA' -HashAlgorithm 'SHA256' -Provider '...
3
Yes, with Access-Based Enumeration.
You will need to configure NTFS permissions appropriately, which can be tricky: the users will need to be able to create files (and/or folders), but they will also need to not be able access files they don't own; you'll also need an ACE which grants full control on new files to their creator, which is represented by the ...
2
This also happens if you finish the DC promo using the command line instead of the Wizard. Just hit Promote the Server to a Domain Controller and then cancel the rest. The warning will disappear once it knows the promotion has finished.
2
No benefit.
Put your hypervisor OS on slow but redundant disks and your VMs on fast redundant disks.
Or since you're doing raid, carve out your raid1 spinning disks so you can install the hypervisor on one lun and slow_tier storage for VMs that don't need IO. (file share on slow disk, database and apps on ssd)
2
Is there a way to make sure that all machines on your network
automatically trust the certificate regardless of them being a domain
user?
No. You'll need to import the certificate into the non-domain computers.
2
Yes, demoting your sole DC is allowable, and it will make your domain disappear and you'll need to make new users and groups in a new domain, and join your workstations to the new domain, if that's what you choose to do.
Anything that had a security principal assigned to it will also need to be assigned to the new security principals - eg if you have a ...
2
This is a user setting, not a computer setting. You can't exclude it by moving the computer account to another OU as this setting isn't applied to the computer, it's applied to the user.
Create an OU for the user account and move the user account there. Create a GPO that sets the "Lock all taskbar settings" setting to disabled or not configured. ...
2
If possible try to virtualise these systems, that way you can snapshot the whole VMs, make your changes, run your tests and then revert back to the snapshot - I see this kind of thing happening all the time, it works great but doesn't take into account some situations such as physical hardware requirements - but if this isn't an issue then give it a try.
2
If by "settings" you mean AD and DNS then no, there isn't any "import" method. You'll need to install the AD DS and DNS roles on the new server and promote it to a Domain Controller.
2
This update has been superseded by KB5004238 then by KB5005393 then by KB5005043. So, as of today, you should check if KB5005043 is installed.
You can see that information in the Microsoft Update Catalog, search for KB5004948, click on the update matching your OS and take a look at "Package Details" to see informations about supersedence:
2
You disabled the policy setting. This means that the group policy setting is not applied.
What you need to do instead is to enable the policy setting and then configure the policy setting to disabled. In other words, instead of this:
you should do that:
You can also see the difference in the summary view. This is wrong:
And this is correct:
Unfortunately,...
2
You need to bring two different VLANs to your VM; there are two ways to do that.
Configure two switch ports in access mode (untagged) on the two different VLANs; connect them to two different physical NICs on the host; create two virtual switches and connect each one to a physical NIC; create a port group on each virtual switch; connect each virtual NIC of ...
2
This is one of the reasons why it's highly recommended that you do not have a CA running on a domain controller. I have one on a DC in a legacy domain right now and it is a maintainability nightmare and it will be removed when another service dependency is sorted out. DCs and CA servers are highly critical, of course, and if you have one function fail while ...
2
Since this is not only a DNS, but actual URLs you need a webserver that does 301 (permanent) redirects. (You can not solve this with DNS only)
if it only was help.company.com that should go to company.atlassian.net AND you could setup Atlassian to listen to that hostname, then you could do it with CNAME, but that is not the case here.
2
Just select the site you want to apply restrictions to from the sites node on the left.
One of the icons in the middle pane is IP Address and Domain Restrictions, anything you change here only applies to this site only.
You can even select a directory under site and only apply restrictions to this specific directory.
This is true for most settings in IIS.
1
Did you try to use this tool: https://cloudbase.it/qemu-img-windows?
I assume you can shut down your VM for some time to copy the vmdk file somewhere to perform the conversion. If not you can do a clone of a VM within the ESXi environment and then do the following steps:
Copy the vmdk file somewhere where you will be able to perform the conversion by using ...
1
I checked and tried everything shodanshok recommended (thanks again!), but it looks like the problem ended up being the VDI file itself. My best guess is that it was somehow corrupted.
I created a new VDI and moved everything to it during a scheduled maintenance window. Before this, the errors mentioned in my question occurred almost every day, but now it's ...
1
check if there is any instance listening on any ports.
dsdbutil “li I”
1
is it possible to configure a docker container to run Windows
Yes, you can Run native Windows Server Containers
connect to it via RDP
Nope.
According to an answer, Windows Containers does not support RDP. To quote an article from 2019:
But notice you still cannot RDP into such Windows containers.
See What's new for Docker on Windows Server 2019?
1
You need to use the Server Manager, the add Roles and Features, then select the .NET Framework you need under the Framework tab. (You may need to click next until you get to the features tab)
1
The Microsoft-Windows-WindowsBackup item you see in the Tack Scheduler's status log is, indeed, the thing you are looking for. That's the name of the task.
I don't use Windows Backup, but I installed the feature on a test server to see where it records its scheduled tasks. They appear in the Task Scheduler, under Task Scheduler Library --> Microsoft -->...
1
Eventually, I figured out the command using dsacls:
dsacls "CN=UserCN,OU=UserOU,OU=UserOU,DC=domain,DC=domain,DC=domain" /I:T /g "\MSOL_code:GA"
1
I think you pretty much sum it up. Processing was stopped due to client side cancelling.
OTOH google analytics tracks - well, that depends where you implemented it, but possibly on the top of the page, so a page that gets stopped halfway through may be tracked as page view.
There is not a lot you can do about it. Just eat a certain percentages as normal loss....
1
https://docs.microsoft.com/en-us/troubleshoot/windows-client/networking/cannot-logon-access-administrative-share
To allow administrative share access in a workgroup for Windows, use the following workaround.
1. Click Start, type regedit in the Start Search box, and then press Enter.
2. Locate and then click the following registry subkey:
...
1
The users must logoff and logon again from their workstations before the group membership is effective, because group membership is retrieved from the Kerberos token which is acquired while logging in.
Only top voted, non community-wiki answers of a minimum length are eligible