When I look through the C:\windows\windowsupdate.log I see events like this :
Added update {19a3a735-8458-4b6c-baa8-eef88e4058cf}.201 to search result
How can I map a guid given in this way to an update? What is the significance of the .201? (or 200 or whatever, it varies)
I am working on a scheme to clone a production, domain-joined virtual machine, bring that machine up off the network in order to prepare it to be converted to a template.
One issue that comes to my mind is that I will have an issue removing it from the network as it won't be able to reach any domain controllers. Is there any way around this?
When implementing PXE booting, is it necessary to specify a specific boot file in the DHCP options, or can you have a default boot file and so not specify that option?
I operate almost entirely in one time zone. Supposing a Data Center in another time zone, it would make sense to configure the machines in that data center to use my time zone, and not local.
Are there any drawbacks to this approach?
EDIT: My assumption is that all the devices use UTC and then the time zone configuration comes into play at some points when applications are presenting time information to humans, i.e. logging.
I am interested in using nmap for discovery, and to figure out the OS of each host. I understand that nmap does this, and can be enabled and controlled as described in the man page:
OS detection is enabled and controlled with the following options:
-O (Enable OS detection) .
Enables OS detection, as discussed above. Alternatively, you can use -A to enable OS detection along with other things. --osscan-limit (Limit OS detection to promising targets) . OS detection is far more effective if at least one open and one closed TCP port are found. Set this option and Nmap will not even try OS detection against hosts that do not meet this criteria. This can save substantial time, particularly on -Pn scans against many hosts. It only matters when OS detection is requested with -O or -A. --osscan-guess; --fuzzy (Guess OS detection results) . When Nmap is unable to detect a perfect OS match, it sometimes offers up near-matches as possibilities. The match has to be very close for Nmap to do this by default. Either of these (equivalent) options make Nmap guess more aggressively. Nmap will still tell you when an imperfect match is printed and display its confidence level (percentage) for each guess. --max-os-tries (Set the maximum number of OS detection tries against a target) . When Nmap performs OS detection against a target and fails to find a perfect match, it usually repeats the attempt. By default, Nmap tries five times if conditions are favorable for OS fingerprint submission, and twice when conditions aren't so good. Specifying a lower --max-os-tries value (such as 1) speeds Nmap up, though you miss out on retries which could potentially identify the OS. Alternatively, a high value may be set to allow even more retries when conditions are favorable. This is rarely done, except to generate better fingerprints for submission and integration into the Nmap OS database.
My question is if it is possible to disable the port scanning portion of the OS detection process. It doesn't seem to be possible considering the man page, but doesn't seem unreasonable in principle.
As far as I understand it, each client runs NRDS off of a single configuration file. That is, a list of commands it runs whose results the client then sends to the Nagios Server.
Is it possible to have the client run multiple config files? For instance, we would have an NRDS cfg for base Windows systems, but then an additional one for any specialized applications that might exist on that server.
I would like to use the Active Directory Module for Powershell, but it seems that I first have to install RSAT, which is a rather large package. Is it possible to just install this one feature?
I am able to use the native add-computer cmdlet to join a computer to a domain, but it seems that this cmdlet fails if the systems already exists in AD, and you are trying to add it to a different domain.
I would like to delete the existing object with powershell. Is this possible without loading the Active Directory Module? I am doing all this as part of system deployment, and don't want to have to load any additional windows features.
EDIT: This will need run in a way where I can pass credentials to the command. It will be run in the context of a local user.
I have some systems that I am unable to enable Bitlocker on. The TPM wizard reports that the version of the TPM is inadequate to function with bitlocker.
Is it possible to upgrade a TPM to 1.2?
Is it possible to configure the wireless settings at deployment by customizing the Unattend.xml file?
I have created a GPO and linked it to a test OU. This GPO has Windows 7 Wireless Policy that directs the machines to auth on the network with PEAP in computer auth mode.
This auth is being done with certificates. When connecting it should Validate the server certificate, via our NPS server, trusting some third party CA.
Now, the problem lies when these settings actually get applied to a machine, everything carries over except for "Trusted Root Certification Authorities" configuration. While in the GPO we have a specific CA trusted, on the client there are no CAs Trusted.
If I configure the machine manually, by configuring the trust root CAs myself, I am able to connect perfectly.
What could be preventing the GP from being applied in this situation?
So I am trying to use Group Policy to configure the wireless settings on a bunch of laptops. We are using a third party cert that isn't showing up as an option in the list of Trusted Root Certification Authorities. This is stopping us from configuring our machines to use certificates to authenticate.
Does anybody know how to add more trusted roots to this list in the Group Policy editor? How does the Protected EAP Properties panel generate this list?
If you always intend to deploy within your organization, and license windows with KMS, is there ever a reason not to include skiprearm=1 in your various unattend files?
Seems to let me get more use out of my images.
I am monitoring the memory object in Windows 2k8, and am tracking the Page Faults/sec counter. Is there any threshold to determining what is an excessive amount of page faults? Or should I be more concerned with a sustained, high, amount of page faults?
Is there a better way to look at page faults?
Suppose that I have a nix system whose filesystems are entirely supported by two drives in a RAID 1. If I were to breakdown that RAID, could I then use one of the disks to recreate the system on separate hardware? Does anybody use such a scheme as a way of building systems?
I have a Cisco 4500 that I would like to perform network throughput monitoring on. Which OID should I be looking at to get this information? What options to I have at otherwise getting this information? Where should I look at for browsing the MIBs available on this switch?
I see that a file has a lock on it. How could I find out the cause and root of this?
I am working on a batch script to remap a network drive in windows xp. I have found it to work out well for the most part with:
net use G: /delete
net use G: \\file\share
However, if there are any connections to the drive, it will prompt:
There are open files and/or incomplete directory searches pending on the connection to G:.
Is it Ok to continue disconnecting and force them closed? (Y/N) [N]:
What would be the most graceful way of allowing for this dialog? Is there ever a case where forcing a disconnect would lead to trauma? Is there an alternative method of closing the connections, outside of deleting outright? Kick everything off the drive?
I deleted a large file (many gigs) from a Solaris system and it didn't seem to recover the amount of space on the zpool equal to the size of the file. Is there any reason that I wouldn't see this space immediately? What steps are involved in the deletion of files in a ZFS?
I am looking to set up switch redundancy in a new datacenter environment. IEEE 802.3ad seems to be the go-to concept on this, at least when paired with a technology that gets around the "single switch" limitation for the link aggregation. Looking through the brochure for a procurve switch I see:
Server-to-Switch Distributed Trunking, which allows a server to connect to two switches with one logical trunk; increases resiliency and enables load sharing in virtualized data centers
http://www.procurve.com/docs/products/brochures/5400_3500%20Product%20Brochure4AA0-4236ENW.pdf
I am trying to figure out how this relates to the 802.3a standard, as it seems that it would give me what I want (one server has 2 nics, each of which is connected to separate switches, together forming a single logical nic which would provide the happy redundancy we want), but I guess I am looking for someone familiar with this concept and could add to it.