Hot answers tagged

19

Sounds like UAC Virtualization. Any writes to a system folder (or Registry) as a standard user were redirected to a location in the AppData folder so those apps that incorrectly assumed that all users run with full admin privileges would continue to work when migrating from Windows XP to Vista.


12

Yes, you can. There are some prerequisites either WinRM service should run on desktops or AD should be implemented. For AD via GPO: 1) enable the policy “Allow users to connect remotely by using Remote Desktop Services” in “Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\...


10

Raoul's answer to his own question is correct. I ran into the same issue and adding the correct algorithm name after the -m option works (in my case the option was -m hmac-sha2-512 to connect from PowerShell to a machine running Ubuntu 18.04). I wasn't sure which algorithm to use, but you can list all the available ones by running: ssh -Q mac I selected ...


8

Windows' tracert is using ICMP while incrementing TTL to do probes: How to Use the TRACERT Utility The TRACERT diagnostic utility determines the route to a destination by sending Internet Control Message Protocol (ICMP) echo packets to the destination. Fedora's traceroute, by default, sends UDP probes, as have been previous Unix traceroute ...


8

Don't mix AD, Hyper-V and File Server in one Windows Server instance. Just install Hyper-V on baremetal and deploy sepearte Windows VMs for AD and FileServer role. Virtual Switches allow you to segregate network interfaces for each role. Here is explanation regarding combining Hyper-V and AD role on the same server: https://www.hyper-v.io/combining-hyper-v-...


8

Unfortunately, some diskpart functionality is not implemented in PowerShell. You can make disk online, initialize it, create basic volumes (GPT and MBR). Dynamic disks can’t be created using PowerShell. Therefore spanned, striped, mirrored or parity volumes can’t be created without using DISKPART. Microsoft advertises Storage Spaces instead of “Dynamic ...


7

Short answer: Press Ctrl+R and then start typing, to search backward in history interactively. This matches the text from anywhere in the command line. Press Ctrl+R again to find next match. Ctrl+S works like above, but searches forward in history. You can use Ctrl+R/Ctrl+S to go back and forth in search results. Type a text and then press F8. This searches ...


7

You are probably referring to the sandboxing done on processes with "low/medium integrity" flag. From Wikipedia: Windows Vista and later editions include a "low" mode process running, known as "User Account Control" (UAC), which only allows writing in a specific directory and registry keys Again, from another Wikipedia page: Windows Vista defines ...


7

These days Windows server comes not only in different editions but also in different types: Long-Term Servicing Channel - This is usually the initial release of a server, and it gets monthly security updates, but no new features. It also can not be freely upgraded to a newer version of the server as is the case for Windows 10 clients. The current version ...


7

I know this is not the answer you want, but I strongly recommend switching to SFTP. First of all, SFTP is a different protocol, it's not just FTP over an SSH tunnel. So proxying ftp.exe over ssh.exe won't work, unless you want to access an FTP server behind an SSH tunnel. Personally, I'd recommend switching to WinSCP, it's free, it has a very good ...


7

You can do that NP. Here’s one of the millions of these step-by-step guides on how to do that. http://woshub.com/how-to-upgrade-windows-server-2016-evaluation-to-full-version/


6

It won't work in general as SoFS shares have memory cache disabled (except read-only CSV cache) to allow atomic writes for SQL Server and transparent SMB failover for VM live migration. So rather than focusing on permissions which are copied easily with any data migration service like Storage Migration (WS2016+) and Robocopy (WS2003+) (see links below) you ...


6

This is normal. Knowing that a resource in a corporate environment exists is generally not a security problem. Don't try and "fix" this.


6

Power off your host, mount disk with VMs with some other Windows Server box and delete VM files manually from there. P.S. Don't use Windows Admin Center (WAC), use PowerShell to manage and monitor your Hyper-V cluster. WAC is just one big can of worms (and bugs).


6

it needs to change his DNS settings to that of the Domain Controller IP address This isn't actually correct. You need to have your client (the machine you want to join the domain) be using a DNS server (or servers) that knows all the records for the AD domain; that doesn't have to be a DC. In many environments, its really easy to simply make the Venn ...


5

You should read this piece of Microsoft documentation Certain policies only apply to domain controllers when they are linked at the root of the domain, this includes policies in the following nodes: Computer Configuration/Windows Settings/Security Settings/Account Policies Computer Configuration/Windows Settings/Security Settings/Local Policies/Security ...


5

Great to hear you managed to get the server working again. I really recommend resetting the Directory Services Recovery Mode (DSRM) password now that the server is alive, so you have it if something similar would ever happen again. Then store the password in a secure place or in a password manager you can reach even if the domain is unavailable. To reset ...


5

SFTP isn't quite the same as just tunneling FTP inside SSH, its actually an extension to the SSH protocol. In theory, an FTP connection to a host could be tunneled via a separate SSH tunnel. To do this, you should first establish a tunneled network connection to the server with the ssh.exe and then use the existing commands for ftp.exe to do your file ...


5

You wipe and rebuild - you chose R0, by doing so you made the conscious decision that your data doesn't matter, at all, as you must have a ready-to-go mitigation right to hand. Well do that.


5

Stack trace ends with megasas that means command to your MegaRAID (you probably have some RAID array) may have unexpectedly failed or it's a driver bug. I'd recommend updating MegaRAID firmware together with ESXi driver (and probably ESXi itself while you're at it). ESXi 5.1 is ancient but you can still get updates and async drivers from VMware site. My gut ...


4

A common scenario where this issue pops up is when you have one or more VPNs that provide a DNS server for resources defined for that virtual network. However, the public DNS server assigned by a WiFi router is taking precedent and either claiming that hosts don't exist or are responding with the unexpected IP address. To resolve this, we need to ...


4

Problem: Windows removed SMB v1 protocol on latest Windows OS, Linux try to connect with v1 protocol and Windows/Linux fails to try protocol 2, 3 etc. Solution: edit linux (ubuntu) Samba conf file: sudo nano /etc/samba/smb.conf on the [GLOBAL] section add: client min protocol = SMB2 client max protocol = SMB3 then save file and restart samba in my ...


4

The best way to copy file to Windows core is by using USB, and copy it. But you can use SCP protocol for remote copying, but first, you must enable SSH terminal. It is light, secure and only using port 22. SCP is Secure Copy Protocol, and runs on top of SSH (Secure Shell) First, you need to find the version. Get-WindowsCapability -Online | ?{$_.Name -...


4

Public forder share in not a good idea; it is for this reason that Windows Update regularly "reset" this settings. At the very least, you should create a dedicated user account (with a decent password) for sharing, and use it on the various client as the credentials (user/pass) to access the share. Note that I am not advocating this kind of user/credential ...


4

Short answer: NO, I would not use a single 256 TB NTFS filesystem. Long answer: NTFS is not a pooled filesystem, nor a dataset-based storage system. In other words, the volume encompasses the entire filesystem. This means that specific operations (ie: chkdsk, vssadmin snapshot, etc) applies to the entire filesystem. Just imagine how much time a chkdsk can ...


4

Have tried with enabled “quiescing”? If not, try and test with this option: Install VMware tools on Windows Server VM Change VM_SNAPSHOT_QUIESCE=1 in ghettoVCB.sh or in ghettoVCB configuration file.


4

Q: How to recover not bootable W2016 and W2019? A: You have to manually boot Windows Server into so-called "Recovery Mode" and allow the OS to rebuild drivers stack and re-validate all the settings. Some products like f.e. StarWind V2V Converter do this automatically during V2V or simple cloning process.


4

Do not ask for their password, that encourages bad habits. Users should know to never provide personal passwords to anybody. As an administrator, you have visibility to most of their data, do things as yourself. Becoming them invites the possibility of seeing what you should not (your HR example). And you can do things as them. A professional would have the ...


4

The simpler and more stable approach is to use VNC or RDP to get the guest OS graphical output. If you really needs a physical VGA output, you can use mutiple graphic cards + host passthrough (ie: each video card is passed to the guest OS as-is). However, host passthrough has its own issues and prerequisites, so I suggest against it.


4

I solved this issue on my machine (Windows 10) by deleting the meta.properties file found in the log directory. The issue itself occured after I had stopped both the zookeeper and server and then restarted them.


Only top voted, non community-wiki answers of a minimum length are eligible