I want to make a tiny linux vmware vm running a single microservice. VM and service requires some options like IP address, TLS certificate with key, configuration file.
It there any standard way to pass those parameters to VM from hypervisor?
I have idea to make a second tiny hdd for vm to hold some configuration files. Maybe there is another way of passing custom options into vm OS like Docker does it?
We are changing password policy in company.
I would like to provide some kind of "company password policy rules" hint to user when user is changing his password using CTRL+ALT+DEL on Windows machine. Default Unable to update the password. The value provided for the new password does not meet the length, complexity, or history requirements of the domain is non-desriptive and I would like to replace it with something like ... must be at least ... characters long and must contain ..., or, maybe add any kind of help button or some text.
Is there any native way of doing this without third-party software and without patching system files?
I have a Windows AD domain : contoso.local
I want to forward all requests to some.contoso.local to another DNS server through forwarding DNS server:
contoso.Local.DNS => Proxy.DNS => some.contoso.local.DNS
I can not allow direct forwarding from contoso.Local.DNS => some.contoso.local.DNS for some reason. Proxy.DNS is required.
The Proxy.DNS is simple Bind9 machine with config (partial)
zone "some.contoso.local" {
type forward;
forward only;
forwarders { 1.2.3.4; }
}
On contoso.Local.DNS there is NS record saying some.contoso.local NS ip.of.Proxy.DNS
Problem:
a.some.contoso.local directly through Proxy.DNS, there is all OK.a.some.contoso.local through contoso.Local.DNS there is query fault.The reason I think is contoso.Local.DNS sends query to Proxy.DNS with flags = 0x0000, and nslookup client sets flags = 0x0100. This bit means Allow recursive request.
Can I somehow override this problem either to
Allow recursive request bit or to
I have internal zone old-internal-domain.local. And we have records like server1.old-internal-domain.local and www.server1.old-internal-domain.local.
I want to make all records in old-internal-domain.local became accessible also in zone new-internal-domain.company.tld like server1.new-internal-domain.company.tld without copying records from old zone to new one.
I want something like dns rewrite rules, so when client queries server about server1.new-internal-domain.company.tld, server internally rewrites it into server1.old-internal-domain.local and resolves this. In response, it responds as server1.new-internal-domain.company.tld A 10.20.30.40
The key moment is to make it without creating copies of records.
It's better if I can use Windows DNS, but other software is OK too. Please advise.
AD DS Setup:
Single forest with single domain contoso.com
There are some DNS Servers inside:
DNS-MAIN-01
DNS-SATELLITE-OFFICE-01
DNS-SATELLITE-OFFICE-02
...
DNS-SATELLITE-OFFICE-NN
Every DNS server has Forwarders that are pointed to local ISP's DNS servers (because local ISP DNS servers provide GeoIP). Internal DNS zones are stored in AD.
I need to create a conditional forwarder for some DNS zone held by foreign DNS server DNS-FOREIGN-01 that is accessible only from DNS-MAIN-01.
There is a way to explicitly set non-AD-stored CF on each DNS-SATELLITE-* server to forward to DNS-MAIN server, and on DNS-MAIN server - create a CF to forward to DNS-FOREIGN-01 server
Is there any way to avoid explicitly creating CF on each DNS-SATELLITE and make CF AD-Stored, but override AD-Stored CF on DNS-MAIN server ?
Can a computer's AD DS site be reassigned on network reconnection?
For example, I connect a computer to network 172.16.1.x, and then boot it up. The computer recognizes the subnet as belonging to 'Default-First-Site' and assigns itself to this site.
I then disconnect the computer from the network and connect again to subnet 172.16.2.x. Will the computer change it's site assignment to 'Second-Site(ex.)'?
[Windows 2008 R2 File System audit]
When I delete the file, two event log audit messages appear: 4663 which means request for file deletion and 4660 which confirms the deletion. Thay can be joined by attribute Handler.
When I rename the file, two event log audit messages appear: 4663 which means request for file deletion and 4663 for creating new file (but there is only folder path, no filename)
When I move the file from one folder to another, there is the same picture as renaming (because moving is actually renaming, OK)
When I create a new file, no events appear.
So, questions: 1. What am I missing to audit file creation? 2. What am I missing to audit file renaming?
My AuditPol.EXE exports (DACL and SACL):
Category/Subcategory Setting
System
Security System Extension Failure
System Integrity Failure
IPsec Driver Failure
Other System Events Failure
Security State Change Failure
Logon/Logoff
Logon Success and Failure
Logoff Success and Failure
Account Lockout Success and Failure
IPsec Main Mode Success and Failure
IPsec Quick Mode Success and Failure
IPsec Extended Mode Success and Failure
Special Logon Success and Failure
Other Logon/Logoff Events Success and Failure
Network Policy Server Success and Failure
Object Access
File System Success
Registry No Auditing
Kernel Object No Auditing
SAM No Auditing
Certification Services No Auditing
Application Generated No Auditing
Handle Manipulation No Auditing
File Share No Auditing
Filtering Platform Packet Drop No Auditing
Filtering Platform Connection No Auditing
Other Object Access Events No Auditing
Detailed File Share No Auditing
Privilege Use
Sensitive Privilege Use Failure
Non Sensitive Privilege Use Failure
Other Privilege Use Events Failure
Detailed Tracking
Process Termination Failure
DPAPI Activity Failure
RPC Events Failure
Process Creation Failure
Policy Change
Audit Policy Change Failure
Authentication Policy Change Failure
Authorization Policy Change Failure
MPSSVC Rule-Level Policy Change Failure
Filtering Platform Policy Change Failure
Other Policy Change Events Failure
Account Management
User Account Management Failure
Computer Account Management Failure
Security Group Management Failure
Distribution Group Management Failure
Application Group Management Failure
Other Account Management Events Failure
DS Access
Directory Service Changes No Auditing
Directory Service Replication No Auditing
Detailed Directory Service Replication No Auditing
Directory Service Access Success
Account Logon
Kerberos Service Ticket Operations Success and Failure
Other Account Logon Events Success and Failure
Kerberos Authentication Service Success and Failure
Credential Validation Success and Failure
Entry: 1
Resource Type: File
User: CONTOSO\Domain Users
Flags: Success
Accesses:
FILE_WRITE_DATA
FILE_APPEND_DATA
FILE_DELETE_CHILD
DELETE
The command was successfully executed.
`
Is it possible to share DFS root (not DFS subfolders individually) through WebDAV via IIS in case of IIS is not on DFS server, using NTLM authentication. Is there any Best-Practices? Should I share it as a website root (in this case I get problems with saving web.config file) or as a virtual directory (In this case I have no access to https://server.example.com/DFS through WebDav)?
New to IIS