Home / user-530474

Hawke's questions

Martin Hope
Hawke
Asked: 2020-06-02 10:34:43 +0800 CST
  • 1

I tired to mount a Windows SMB share in Linux using autofs, but I kept getting 'access denied'

I decided to test it using smbclient, but I am just getting 'session setup failed: NT_STATUS_CONNECTION_RESET'.

sudo smbclient //myfileserver/myshare$ -U windows_service_account -W MYDOMAIN

There shouldn't be a firewall and the errors aren't very helpful.

Any idea what to check next?

smbclient
Martin Hope
Hawke
Asked: 2020-05-05 03:54:48 +0800 CST
  • 1

Most of my users' desktop shortcuts are managed by user GPO and they work fine, but I want to use a computer policy to create a shortcut for 'all users' on one machine.

I tried making a computer GPO using both 'Desktop' and 'All Users Desktop' but it doesn't work.

I assume the path to the All Users desktop is C:\Users\Public\Desktop, which the GPO editor says can be accessed using the variable %CommonDesktopDir%. I tried browsing to %CommonDesktopDir%, but the variable doesn't exist on the endpoint.

I am using Windows Server 2016 with Windows 10 endpoints.

Any ideas?

windows group-policy windows-10 windows-server-2016
Martin Hope
Hawke
Asked: 2020-04-21 06:06:53 +0800 CST
  • 0

I have an application that is installed only on computers in one OU. The program requires some special config/permissions added to the user profile, so I wrote a Powershell script to setup the currently logged in user.

I assume a 'startup' script wont work because it needs to run as the currently logged on user, so I was going to use a User GPO. What is the easiest way to limit the User Logon Script GPO to run only on the machines in that OU?

group-policy
Martin Hope
Hawke
Asked: 2019-11-21 03:59:06 +0800 CST
  • 0

I had my live site working with the name:

mysite.domain.com

and I created a brand new server hosting my test site:

mysite-test.domain.com

My new site is finally ready so I changed the DNS entry of mysite.domain.com to point at the new test site.

I added a second binding in the new IIS

https 192.168.10.10 mysite-test.domain.com
https 192.168.10.10 mysite.domain.com

Unfortunately this bind doesn't work - the page just loads for ages and gives me a 'site not found' error. I tired nslookup and it is resolving to the correct IP. The SSL cert is valid for both hostnames.

Am I missing anything?

iis
Martin Hope
Hawke
Asked: 2019-07-06 05:12:39 +0800 CST
  • 0

I am trying to follow the CIS guidelines and need a group policy under

Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Defender Antivirus\Windows Defender Exploit Guard\Attack Surface Reduction\Configure Attack Surface Reduction Rules.

I don't even have a folder called 'Windows Defender Antivirus' just 'Windows Defender'.

Apparently this is included in the 1803 Release Admin Templates called WindowsDefender.adml.

I have added a few adml/admx files with no issues, but I assume I need to replace the old WindowsDefender.adml. Unfortunately I keep getting a 'permission denied error'. I tried to change the permissions, but I get the error 'cannot enumerate permissions'.

My central store is 

C:\Windows\SYSVOL\sysvol\domain.local\Policies\PolicyDefinitions

I have tired to do this both from the DC and on my endpoint. I can add new templates, just not replace any old ones.

group-policy