Archive

Archive for the ‘Security’ Category

Split AD from one forest

May 15th, 2012 2 comments

Today I tried to split two domain created in one AD forest.

Scenario

I had 1st created domain domain.local which was top-forest root domain. It contained two domain controllers (SRVDC01.domain.local (W2008R2) and SRVDC02.domain.local(WS8)). Second domain I’ve created was domain2.local which was in same AD forest, but in different AD tree. I had little problem when creating new domain domain2.local, because SRVDC02.domain.local was powered off for couple days. DCPromo on SRVXX01.domain2.local was complaining about some replication problems. So I needed to power it on and force replication. It was weird, because SRVDC2.domain.local haven’t hold any of FSMO roles. When it was all done, all looked up and running.

Read more…

Categories: Security, Windows Tags: , , ,

Disabled UAC still active

April 17th, 2012 No comments

At one of our bigger customer we started to have weird problem. When you disabled UAC it was still active even after reboots.

Read more…

Categories: Security, Windows Tags: , ,

Damaged WMI database

February 28th, 2012 1 comment

When I was cheking Remote Desktop configuration on couple Windows 2008 R2 servers I’ve noticed that I cannot access Remote Desktop Session Host Configuration and I get following error:

Read more…

Categories: Security, Windows Tags: , , ,

Reset Computer accounts in Active Directory domain

February 21st, 2012 21 comments

One of our customer migrated his whole IT infrastructure into another datacenter. We powered off virtual machines at production site and powered on cloned versions of virtual machines. Domain Controllers were up all the time. Only member servers’ clones moved into another datacenter. They’ve ran for three days in another datacenter. Active Directory domain was up all the time. After tests we deleted clones in another datacenter and powered on virtual server in primary datacenter – their friday’s copies. And now we had problems on couple of servers.

Read more…

How to set Run this program as Administrator via registry

November 2nd, 2011 11 comments

At one of my customer I was implementing SAP GUI into Terminal Services farm. When you run SAP GUI as Administrator, SAP GUI works perfectly.

Read more…

Allow users to logon on to Domain Controller

September 13th, 2011 3 comments

Once upon the time I was at customer which had all infrastructure servers (and also all domain controllers) in VMWare VM. He decided to have one more domain controller on physical server. Only server he could use was management server, which was full of management tools.

Read more…

Windows 2008/7: How to disable firewall correctly

August 19th, 2011 No comments

Most of the time I found at customers’ sites that they disable firewalls completely, because they don’t have time or they are just lazy to define exceptions in firewall settings. But this is not really good idea according to security.

Read more…