New answers tagged

1

The Web Management Service will fail to start with a "Code 5" error in the console and an "Access Denied" event in the Windows security logs if you have the Block untrusted fonts policy enabled. This is a known issue that has been fixed as of build 1903. Here's the Microsoft Tech Community post from a Microsoft support escalation engineer ...


0

Here is a Python 3 program that inserts username/password into RDP file and also creates LNK file for it (to drag to quick launch, for example). It is based on several existing solutions, credits for those goes to their authors. import sys, os, getpass, subprocess if (len(sys.argv) != 2): print("\nRDPPassword is a Python 3 program that inserts ...


5

No, but you can allow users to log on only during certain hours; the setting is in the user account properties in Active Directory: You can also use a GPO to force users to disconnect if they are logged in when their logon window expires. Update about granularity: According to this discussion, the Active Directory attribute which stores this settings doesn'...


1

You're looking at the local group policy settings. You are not looking at the resultant set of policies applied from both AD and from the local security policy. Run rsop.msc (resultant set of policies) on the computer and look under Computer Configuration>Administrative Templates>Extra Registry Settings for your QOS settings.


0

Pushd Works, but ... I have been using pushd "%~dp0\" at the start of cmd files for longer than I can remember, always with a complementary popd at the end of the file. Until recently this was working, when: My script was pausing and I was using ^C to exit. I did this about 24 times over several days of testing on a remote desktop. Then I got ...


0

AD Connector is a proxy for redirecting directory requests to your existing MSAD without caching any information on AWS. I've only ever used it for user authentication and I'd be curious to know if it'll work to join new instances to the directory. Next step would be to follow the steps as outlined on https://docs.aws.amazon.com/directoryservice/latest/admin-...


0

Sorry if this is an dumb answer, but you have restarted the windows machine? I have tried creating an Parent disk with a child differencing disk like you have, and i can see them with list vdisk, but the list is empty after reboot. For your second question, i would use either disk management or powershell to manage VHDs. Dismount-Vhd will 'detach' the vhd ...


0

Looks like there are a couple of ways to select the certificate: Set-VpnConnection -MachineCertificateIssuerFilter Set-VpnConnection -MachineCertificateEKUFilter https://docs.microsoft.com/en-us/powershell/module/vpnclient/set-vpnconnection?view=win10-ps


0

It's simply the remote machines trying to connect and gain access to one of your ports. The reason may be genuine and acceptable if you're part of peer network (like Torrent or Tor, etc), otherwise it's just some malicious machines trying to get a backdoor. They'll always pinging the internet for gaining access. Don't panic! There's a timeout for such ...


0

It's simply the remote machines trying to connect and gain access to one of your ports. The reason may be genuine and acceptable if you're part of peer network (like Torrent or Tor, etc), otherwise it's just some malicious machines trying to get a backdoor. They'll always pinging the internet for gaining access. Don't panic! There's a timeout for such ...


0

In CMD you can use standard Windows Management Instrumentation Command-line (WMIC) utility to get the process start time: wmic process where Name="<process name>" get CreationDate or wmic process where ProcessID="<PID>" get CreationDate You'll get a datetime like this: 20201021010512.852810+180. Format: YYYYMMDDHHMMSS.ssssss+...


0

In CMD you can use standard Windows Management Instrumentation Command-line (WMIC) utility to get the process start time: wmic process where Name="<process name>" get CreationDate or wmic process where ProcessID="<PID>" get CreationDate You'll get a datetime like this: 20201021010512.852810+180. Format: YYYYMMDDHHMMSS.ssssss+...


0

You first need to choose one of the network shares, or some other drive. You can't save anything directly to \\fileserver as that refers to the server itself and not any particular share.


0

I found connections I forgot about in the Windows 10 Credential Manager under "Windows Credentials"


1

Security groups are a group of objects in Active Directory, be it computer objects or users or other security groups. They don't do anything but aggregate objects into a single object, as you would expect anything named "Group" to do. You can then use a Security Group to set file permissions for example, which saves you having to define every ...


0

Ah, and always the same... (it has enough free memory/disk space, high performance of CPU) Yes, but you know what you do not talk of? DISK PERFORMANE. bytes succeeded, but took an abnormally long time (36 seconds) An operation on the dis did not take milliseconds, as it should, but 36 SECONDS. You basically got a 40 ton truck and complain it is not as ...


0

Found out, that DFSR hides the preexisting files in System volume information, and the maps to them in some XML in DFSR private. They can be recovered with Get-DfsrPreservedFiles and Restore-DfsrPreservedFiles.


0

I bet many people have struggled with rejected connections, so welcome to the club! ;-) Just to make sure, I'll quickly define a couple of basic terms, please google them for more complete info: ssh tunnel = use your working ssh connection to forward other protocols as well RDP = Remote Desktop Protocol. Very well working and stable on Windows, ...


1

Well, did you have xrdp installed on your Ubuntu box? Linux OS did NOT install/use RDP by default. Only Windows OS do. If you like to use RDP to a Linux OS, you have to install a RDP-Server first. and of course your Ubuntu needs to have a graphical frontend / GUI at all. sudo apt-get install xrdp does it for you. Then check that port 3389 is open in your ...


0

as JosefZ comment the solution was: set _EVer=Garbage Garbage Garbage This is an example for /F "tokens=3*" %%G in ("%_EVer%") do set "_EVerC=%%H" The set %%H was the fix. More information https://ss64.com/nt/for.html "If the clause results in a multiple values then extra parameters are implicitly defined to hold each. ...


0

This problem often happens in Windows because of smaller Apache’s default stack size. And it usually happens when working with php code that allocates a lot of stacks. To solve this issue, add the following at the end of apache config file, httpd.conf <IfModule mpm_winnt_module> ThreadStackSize 8888888 </IfModule> For more information refer ...


0

cmdkey is the cmd-line interface for adding, removing, listing credentials that are used for things like net use or remote desktop. cmdkey /target <domain> /user:<username> /pass:<pass> will add the credentials for a domain Then using net use <domain UNC> won't require the subsequent credential passage. I believe it is named cmdkey as ...


0

To suppress repeat period - use key "/ri 0"


0

The web access of my home page (Typo3) get always in conflict whit the exchange pages. Instead to get a Typo3 responce the exchange/owa login page will displayed. Did you configure some redirect settings or rewrite rules for your home page? (Use IIS Manager to configure the default website to redirect to the /owa virtual directory) Check if they are ...


0

It sounds like you're trying to use bar as a jump host to connect to jump, and use jump as a jump host to connect to foo. In other words, trying to connect to bar like this: local --> foo --> jump --> bar Your ssh config should look like this: Host foo HostName <ip> User <username> ProxyJump jump Host jump HostName <...


0

I found that the problem had nothing to do with permissions. It may have been a problem with long file names. To solve, I deleted individual files within the folder structure. Once those files had been deleted, I had no problem deleting the folder structure.


1

11 years have passed and Windows Powershell ships with every release of Windows Server and Client. Resolve-DnsName 8.8.8.8 Name Type TTL Section NameHost ---- ---- --- ------- -------- 8.8.8.8.in-addr.arpa PTR 86400 Answer dns.google 8.8.8.in-addr.arpa NS ...


1

You should not run other websites, or any other web content at all, on Exchange servers. Exchange needs to have full control on IIS on the server where it's running, and it will overwrite any configuration change you manually make in IIS. You can change the URLs for Exchange web services (including OWA), but you still really need to run everything that is ...


0

Extract contents of the latest build to C:\Program Files\OpenSSH (Make sure binary location has the Write permissions to just to SYSTEM, Administrator groups. Authenticated users should and only have Read and Execute.) In my case, after assigning "Read and Execute" permission for "Authenticated users", it works. please refer to the ...


1

Did you see this support article: https://docs.winking.be/tn/article/207 Solutions: They suggest two "solutions": Manually creating the missing session ID folder Disable the creation of temporary Session ID folders via group policy Group Policy: Run gpedit.msc to open the Local Group Policy Editor. Changing policies on a server might be a bit ...


0

So it turns out that, at least for the version of strongswan I have installed on Debian Buster, that Strongswan refuses to load the intermediate certificate into it's store without the whole certificate chain being present; that is to say I had to download the root certificate and also add that under the cacerts folder, and now everything works as expected.


1

Just to rule out the obvious when using the Azure Automation I assume it is waiting to confirm that the servers shutdown in a correct order? So ADFS Proxy -> ADFS -> DC, then the reverse when powering back up. Not aware of ADFS having any stability issues when powering up as long as the ADFS can talk to the DC and then the ADFS Proxy to the ADFS.


0

You can run app on Linux (VSCode, Sublime Text 2, etc) or in WSL and output GUI to Windows workstation to X11Server in MobaXterm (run first and start X Server): DISPLAY=192.168.1.10:0 vscode replace you workstation IP. More: https://mobaxterm.mobatek.net/features.html


0

if it reaches out to interet you can proxy with apache or nginx. Also, you may have port forwarding on your router. Just port forward from the router to the computer & it's port. Probably best to lock down who can access those ports but much easier tahn using citrix. However, reading your post you're looking for notepad.... So not really. not withot ...


0

Those glue records should be manually removed because they no longer point to a valid DNS server. If you have zero glue records left for the zone, then you would want to set a new one. I like this explanation from webdnstools.com: Glue records are needed to prevent circular references. Circular references exist where the name servers for a domain can't be ...


0

I know of some solutions which meets your description, but those are commercial solutions and might be complex/costly. One is citrix. This is name of the software and the company that produces it. Another is microsoft own Remote desktop service portal, where you publish your apps and they are made available to the end user by a browser URL.


0

First, create dedicated domain admin accounts for only those users who should have that privilege. Then, remove the domain administrator privilege from your users. Your environment will be much more secure and less cluttered with extra accounts.


1

Have the user log into the machine locally at least once, and then run the following from an elevated command prompt or PowerShell. (The first logon step may not be required on Windows 10 newer than version 1709.) net localgroup "Remote Desktop Users" /add "AzureAD\the-UPN-of-your-user" eg: net localgroup "Remote Desktop Users" /...


0

This is a pretty simplified example, but for a freestyle job, I think it breaks down into the following steps: install ansible on the jenkins-agent. pip install ansible or apt install ansible Load your ssh key into Jenkins credentials store. I assume here that you use the credential store plugin (but you could also load it into an ssh-agent, or use some ...


0

Group Policy settings will always override registry key values, regardless of whether they are applied via local policies or domain policies. In this case, the Windows 2016 STIG AMI is most likely making use of the supplemental ADMX files from the Windows Server 2016 security baseline (which can be downloaded as a part of the Microsoft Security Compliance ...


0

Browsing the same problem I had, I found the solution. Simply, you have to uncomment few additional lines in file "httpd.conf": ... LoadModule proxy_http_module modules/mod_proxy_http.so ... LoadModule vhost_alias_module modules/mod_vhost_alias.so ... Include conf/extra/httpd-vhosts.conf ... In my case, It worked.


0

First, validate that replication from the old DC to the new one is successful. Use repadmin /replsummary and repadmin /showrepl to see your results. Second, if at all possible, make every effort to move other roles onto their own server instead of sharing a domain controller. Did remove the AD DS role from the 2008 server before attempting the in-place ...


3

Your understanding of promoting a domain controller is not wrong. If the AD DS role is installed on the server, and you can point the AD Users and Computers MMC to this particular server, then the DC promotion process is probably complete. What you are most likely looking at is the checklist within Server Manager that suggests next steps for the server. This ...


0

One way that you could accomplish this is by monitoring NetworkProfile event IDs 10000 and 10001, and running a script after each instance of these events. To set a 5 minute screen saver timeout when a user has disconnected from the network, create a new scheduled task, give it a relevant name, and for the trigger, select "When an event is logged." ...


0

Run a play with the old credentials to change credentials to expected value. Maybe set a local password with an Ansible module directly, maybe install something that will help manage the hosts. Run some other play against the entire inventory to verify, and review any failed hosts. Ansible's fail-fast approach means that incorrect credentials will ...


3

You can try attching the VMDK to other VM (maybe Windows Server 2019 or any Linux VM) and try mounting VMDK inside. Alternatively there are various options to get contents of the VMDK. Might help: https://www.vmwareblog.org/4-ways-extract-content-vmdk-vm-totally-dead/


0

You can still create and apply ADMX files (group policy templates) using the local group policy editor on a machine that is not joined to a domain. See Microsoft's "Understanding ADMX-backed policies" to get started, and then create an ADMX file with your registry settings. As an alternative to creating the ADMX from scratch, you can convert a REG ...


0

If you are running SharePoint Server 2013, 2016, or 2019 on-premises, you can start with the following Microsoft documentation: https://docs.microsoft.com/en-us/sharepoint/security-for-sharepoint-server/authentication-overview It will get you started with using claims-based authentication, which can automatically log in Active Directory users using Kerberos, ...


1

Is there another PowerShell cmdlet to use to get faster transfer time? It's slow because it is using buffered I/O. If you want performance parity use a native Windows command such as XCOPY or RoboCopy and use unbuffered I/O.


0

The first thing that stands out to me is the line "ip add v6 10.1.0.4", which suggests an IPv6 address, but contains an IPv4 address. Double check to make sure your Azure VM's NIC has its IPv4 address configured as 10.1.0.4.


Top 50 recent answers are included