The Stack Overflow podcast is back! Listen to an interview with our new CEO.
1d
comment Multiple admin accounts, can only use one?
I don't think there's any way to recover the account, but you should be able to recover the files - unless they were encrypted? When logged in as an administrator you can override the file permissions, easiest solution is robocopy with the /b flag. Ask on Super User if you need help with that.
2d
accepted How can I do an offline update of a new Windows 2012 R2 server?
2d
comment Why querying DNS root servers directly?
DNSSEC is a separate step. If the DNS entry you are looking up has been signed, you can use DNSSEC to validate that signature. To do that you need information about the trusted root servers - that doesn't mean that Unbound is actually querying those servers, it just needs to know about them.
2d
comment If the certificate CN is different from a server's public DNS name, are SANs the way to go?
Yes, you typically want the certificate to reflect your company's name, so that's the CN you should be using. So let me rephrase: why would you generate a certificate containing the AWS name as the CN?
2d
comment If the certificate CN is different from a server's public DNS name, are SANs the way to go?
But why would you create the certificate with the wrong CN? Are you using some sort of automated certificate generation system?
2d
comment If the certificate CN is different from a server's public DNS name, are SANs the way to go?
If I've understood the scenario correctly, you have asked the client to connect to dev.contoso.com. So that's the name that it will be expecting to find in the certificate. Unless I've misread the question, that's also the name that is in the certificate, so what's the problem?
Oct
17
answered Translating HEX ACLs into permissions
Oct
17
comment Domain Admins UAC Permission On Domain Controller
@Zoredache, the default setting is Disabled. It's probably OK unless you have unusually high security needs.
Oct
17
comment If the certificate CN is different from a server's public DNS name, are SANs the way to go?
Huh? If the clients are accessing the service via dev.contoso.com, that's the host name as far as they are concerned. They don't know or care that the server also has another name. (Edit: I suppose a client could do a reverse DNS lookup and complain if the name doesn't match, but I don't think that ever happens? I mean, it would break pretty much everything.)
Oct
17
revised Windows permission - Deny sub-folder creation but allow files editing
added 9 characters in body
Oct
17
answered Windows permission - Deny sub-folder creation but allow files editing
Oct
17
comment Windows permission - Deny sub-folder creation but allow files editing
On my system, it says "Create folders / append data" which, while still potentially confusing, is at least technically accurate. Are you running Windows in a language other than English? Perhaps there was a problem with the translation.
Oct
17
comment Unattended machine join to domain
Change your unattend script to cmd /c C:\_scripts\4_psbypass.bat > c:\rename.log 2>&1 so you have a log of the output when the script runs. You should then be able to see where it is failing.
Oct
16
comment Unattended machine join to domain
I'm confused; you ask about joining the domain, but AFAICT your script doesn't even attempt to join the domain, it just renames the machine. Which are you trying to do? Also, at what point does it go wrong?
Oct
16
comment Windows permission - Deny sub-folder creation but allow files editing
Quick answer: you'll need to explicitly set different permissions for the files in the folder than for the folder itself, which you can do in the GUI using the "applies to" options. If nobody else has posted a full answer I'll try to come back and do so later today.
Oct
16
comment Need a Windows Server version 1709 (build 16299)
Both 2008 and 2012 are still in support, so no surprises there. As far as I know, MSDN subscriptions still include out-of-support versions of Windows, but you should of course confirm that before making a purchase, as well as checking that the licence terms will be suitable for your needs.
Oct
15
comment Restricting RDP users to certain machines on Windows AD
What I believe Semicolon means is that the "Log on to" list must contain the names of both the server and the client, even if the client isn't in the domain or is logged on with a different account. This is surprising but true. Try adding the name of the Mac computer to the list.
Oct
15
comment Need a Windows Server version 1709 (build 16299)
Presumably Azure has dropped it because it is no longer in support.
Oct
14
comment Group Policy Still applies even after deleting the gpo
According to my research, removing the group policy settings re-enables the clock, but doesn't automatically turn it back on. You'll have to go into "Turn system icons on or off" and turn it back on by hand.
Oct
14
comment Group Policy Still applies even after deleting the gpo
The rules vary from setting to setting, but typically you need to explicitly revert the setting, not just remove it. In your case, explicitly set the rule to Disabled.