Why does Windows process all NTFS child objects when changing a parent’s ACL?
I would expect this behavior if I had checked the “Replace all child object permissions...” box, but even when that box is left unchecked, Windows will process all the children.
Is having an IPv6 reverse lookup zone necessary for an Active Directory network?
Normally I would just create it and move on, however, in this case the prefix is delegated and changes occasionally. So I have to create a new one every time the prefix changes.
I keep getting the following warning whenever I try to open a share from my DFS.
How can I configure Windows (10 in this case) to trust anything under the root of my DFS via GP?
It seems odd that it wouldn't do so automatically.
Can Windows Update be configured to also update other Microsoft products via Group Policy?
In other words, how can I check the "Give me updates for other Microsoft products when I update Windows." box via a GPO?
For years I've been using folder redirection for all my desktop clients (Win7). I am looking to migrate all data to a new server/share. I have already created a new share with the same ACL and used robocopy to transfer the data along with file security information.(I'm not interested in DFS at this time.)
Can I just change the server in the GPO?
How does the "Move the contents of [FolderName] to the new location." setting effect this situation?
Without previously configuring collector sets, is there any record of performance metrics kept on a default installation of Windows Server?
I have been tasked to evaluate the load on a particular server. I can setup collector sets and comeback after some time has passed, but I was wondering if there might be something I could look at now.
Can Robocopy be configured to only log the “errors”?
On a large copy job, I’m really only interested in knowing what files were NOT copied.
What is the difference between “Main” mode and “Quick” mode when using IPsec in Windows Server?
When does each one come into play?
For example, I have a GPO that redirects the documents folder to \\oldserver\username\My Documents and the “Move the contents of Documents to the new location.” item is selected.
The user logs in and creates several files.
Then I change the GPO to point to \\newserver\username\My Documents
The next time the user logs in, the contents of his documents folder are moved from \\oldserver\username\My Documents to \\newserver\username\My Documents.
I’ve looked at the GPO object in SYSVOL, and it only contains the currently set location.
How did the computer remember the old location to move the files from?
Is there a simpler method for "creating mandatory profiles for Windows 7 users in an Active Directory environment" than the officially Microsoft supported method of using sysprep and AIK? If so, how?
How do I configure ufw or iptables to allow only outbound traffic from an IPv6 network to the Internet?
I have an office network with a traditional NAT setup for IPv4. I would like to add a PC running Ubuntu to act as an IPv6 router utilizing a tunnel from Hurricane Electric.
I have everything setup and functioning properly. My internal computers are receiving global addresses from the Ubuntu box and are able to ping ipv6.google.com and browse ipv6test.google.com without any problems.
What I am not sure about, is how to configure a firewall to block incoming unsolicited traffic from the Internet to my internal network but allow outbound traffic to the Internet (and related return traffic).
Actual examples of ufw commands or iptables rules would be greatly appreciated.
root@ipv6router:/home/corey# ifconfig
eth0 Link encap:Ethernet HWaddr 00:08:a1:10:62:c0
inet addr:146.x.y.12 Bcast:146.x.y.15 Mask:255.255.255.240
inet6 addr: fe80::208:a1ff:fe10:62c0/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:190487 errors:1 dropped:0 overruns:1 frame:1
TX packets:40982 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:80088076 (80.0 MB) TX bytes:6825762 (6.8 MB)
eth1 Link encap:Ethernet HWaddr 00:1b:21:5b:f0:5b
inet addr:192.168.76.3 Bcast:192.168.76.255 Mask:255.255.255.0
inet6 addr: fe80::21b:21ff:fe5b:f05b/64 Scope:Link
inet6 addr: 2001:x:1f07:z::1/64 Scope:Global
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:90200 errors:0 dropped:0 overruns:0 frame:0
TX packets:59894 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:12839775 (12.8 MB) TX bytes:70668474 (70.6 MB)
he-ipv6 Link encap:IPv6-in-IPv4
inet6 addr: fe80::9273:130c/128 Scope:Link
inet6 addr: 2001:x:1f06:z::2/64 Scope:Global
UP POINTOPOINT RUNNING NOARP MTU:1480 Metric:1
RX packets:56991 errors:0 dropped:0 overruns:0 frame:0
TX packets:34362 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:69388394 (69.3 MB) TX bytes:4537403 (4.5 MB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:13137 errors:0 dropped:0 overruns:0 frame:0
TX packets:13137 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:998616 (998.6 KB) TX bytes:998616 (998.6 KB)
root@ipv6router:/home/corey# route -A inet6
Kernel IPv6 routing table
Destination Next Hop Flag Met Ref Use If
2001:x:1f06:z::1/128 :: U 1024 0 1 he-ipv6
2001:x:1f06:z::/64 :: Un 256 0 0 he-ipv6
2001:x:1f07:z::/64 :: U 256 0 0 eth1
fe80::/64 :: U 256 0 0 eth1
fe80::/64 :: Un 256 0 0 he-ipv6
fe80::/64 :: U 256 0 0 eth0
::/0 2001:x:1f06:z::1 UG 1024 0 0 he-ipv6
::/0 :: !n -1 1 92337 lo
::1/128 :: Un 0 1 412 lo
2001:x:1f06:z::/128 :: Un 0 1 0 lo
2001:x:1f06:z::2/128 :: Un 0 1 736 lo
2001:x:1f07:z::/128 :: Un 0 1 0 lo
2001:x:1f07:z::1/128 :: Un 0 1 0 lo
fe80::/128 :: Un 0 1 0 lo
fe80::/128 :: Un 0 1 0 lo
fe80::9273:130c/128 :: Un 0 1 0 lo
fe80::208:a1ff:fe10:62c0/128 :: Un 0 1 0 lo
fe80::21b:21ff:fe5b:f05b/128 :: Un 0 1 4611 lo
ff00::/8 :: U 256 0 0 eth1
ff00::/8 :: U 256 0 0 he-ipv6
ff00::/8 :: U 256 0 0 eth0
::/0 :: !n -1 1 92337 lo
More specifically…
I would like to create a policy that runs a login script to copy a file from a share to a local folder.
What account do I need to grant access to on the share in order for the logon script to get the file?
So for example, it will only let a particular MAC address on side A use 100kbps in ether direction.
What is the WinHttpAutoProxySvc ?
Is it involved in the Windows Updating system?
Is it ever used in any way if there is no proxy server?
I have recently setup a Squid proxy server for caching purposes and would like to start pointing my desktops and laptops to it.
My computers are running Windows XP with IE8 and Windows 7 with IE9.
I am using the following command to add a route, but the metric isn't working the way I want it to. I want the route I am adding to have a lower cost.
C:\Users\cboyle>route ADD 0.0.0.0 MASK 0.0.0.0 192.168.76.2 METRIC 3 IF 11
OK!
C:\Users\cboyle>
Here is my routing table before the above command.
Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\cboyle>route print
===========================================================================
Interface List
11...00 1a 4d 84 48 22 ......Marvell Yukon 88E8056 PCI-E Gigabit Ethernet Controller
15...08 00 27 00 40 a3 ......VirtualBox Host-Only Ethernet Adapter
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.76.1 192.168.76.40 20
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.56.0 255.255.255.0 On-link 192.168.56.1 276
192.168.56.1 255.255.255.255 On-link 192.168.56.1 276
192.168.56.255 255.255.255.255 On-link 192.168.56.1 276
192.168.76.0 255.255.255.0 On-link 192.168.76.40 276
192.168.76.40 255.255.255.255 On-link 192.168.76.40 276
192.168.76.255 255.255.255.255 On-link 192.168.76.40 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 192.168.76.40 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.56.1 276
255.255.255.255 255.255.255.255 On-link 192.168.76.40 276
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
15 276 fe80::/64 On-link
15 276 fe80::49e3:31a5:5cc7:97ea/128
On-link
1 306 ff00::/8 On-link
15 276 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
C:\Users\cboyle>
Here it is after.
C:\Users\cboyle>route print
===========================================================================
Interface List
11...00 1a 4d 84 48 22 ......Marvell Yukon 88E8056 PCI-E Gigabit Ethernet Controller
15...08 00 27 00 40 a3 ......VirtualBox Host-Only Ethernet Adapter
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.76.1 192.168.76.40 20
0.0.0.0 0.0.0.0 192.168.76.2 192.168.76.40 23
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.56.0 255.255.255.0 On-link 192.168.56.1 276
192.168.56.1 255.255.255.255 On-link 192.168.56.1 276
192.168.56.255 255.255.255.255 On-link 192.168.56.1 276
192.168.76.0 255.255.255.0 On-link 192.168.76.40 276
192.168.76.40 255.255.255.255 On-link 192.168.76.40 276
192.168.76.255 255.255.255.255 On-link 192.168.76.40 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 192.168.76.40 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.56.1 276
255.255.255.255 255.255.255.255 On-link 192.168.76.40 276
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
15 276 fe80::/64 On-link
15 276 fe80::49e3:31a5:5cc7:97ea/128
On-link
1 306 ff00::/8 On-link
15 276 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
C:\Users\cboyle>
I want the route that I am adding to have priority over the default one.
Can a DFS share be used for Folder Redirection?
How would I build an LDAP query for AD that returns all users in a particular security group whose accounts are not disabled?
I tried
(&(objectClass=person)(!(userAccountControl=ACCOUNTDISABLE)))
but that doesn’t seem to work.
I’m attempting to setup Google Apps Directory Sync and would like it to sync all users that are part of the “Google Apps Users” security group whose accounts are not disabled (or optionally, just suspend accounts in GA if they are disabled in AD).
Scenario...
I have a wireless network that students use for Internet access. Each student has an Active Directory account. Is it possible to configure my APs to require them to use there AD credentials to connect to the network? If so, does that require any certificates on the server or there computers? I would like to avoid that if possible as I do not wish to manage their computers.
I have a Win2k3 server with the IAS service installed, and 3Com APs (3CRWE454G72).
Are there any software products to automate this or make it easier?
I know that Microsoft suggests that you leave 1GB of memory for the parent partition on a Hyper-V server. Does VMware have a similar suggestion?