disable cmd for all users but administrators
Morning, in a bit to increase security we are going to disable the cmd prompt for the average user. Now part of the issue is that on all the machines they are local administrators (due to some...
View Article2012R2 DC disconnecting with KRB_AP_ERR_MODIFIED
Hi, I'm hoping someone could maybe shed some light on this issue. We have recently installed some new servers running 2012 R2 Hyper-V. There are 2 identical physical servers (HP DL360p) both running...
View ArticlePull list of AD computer accounts, when they were last logged into and the user
I need to pull a list of all computer accounts in AD with the last user that logged in and when that was. I can't use Spiceworks, because my inventory is not fully accurate yet. Anyone have a script...
View ArticleEvent 2887 :LDAP Interface logged
we have mixed mode domain configuration (Windows 2003 R2 and Win2008 R2). Everyday it logs on each domain controller @ 12:27pm for Event ID: 2887, Source: ActiveDirectory_DomainService, Task Category:...
View ArticleBitlocker keys in Active Directory
My firm’s computers upload Bitlocker keys to Active Directory but when I launch the AD Users and Computers MMC how can I view them?
View ArticleMicrosoft Office GPO settings Denied Security
We have a root level group policy that sets all our Microsoft Office settings and it works fine for our NY office. Now we are opening an office in SF and none of the computers we have added to the...
View ArticleGroup Policy
Hi, I am trying to customize Windows 8.1 start screen and then deploy it through group policy. I am running Windows Server 2008 R2 Service Pack 1. When I go to the group policy editor none of the...
View ArticleReset Internet Explorer (RIES) and Group Policy
Quick Question that I believe I already know the answer to, but I'm looking for confirmation. If in our environment we use GPO on IE and I reset IE using the RIES function (IE settings -> Advanced...
View ArticleRemoteApp MSI not installing through GPO
Hi All, Weird one... Have an existing server that's doing Fileserver and RDS roles currently, and wanted to split the roles out. Existing server hosts a RemoteApp, which, up until I removed the GPO,...
View ArticleDomain Controller demote/then repromote,now no group policy....
Server 2008 R2 Standard So I had an issue a bit back where some software that doesn't co-exist well on a DC... was installed on a DC. It made a mess of the DC to the point that I demoted it, then...
View ArticleChange domain in AD? What are the implication?
The AD server that was built before my arrival has the following domain name: seffa.local Needless to say I want to change for a 3 char like .lcl What are thing to consider when planing to do this?
View ArticleDirect Access
How can I restrict my Windows Direct Access clients from accessing network resources other than their Exchange mailboxes?
View ArticleGroup Policy Infrastructure Failed.... domain does not exist
AD1: Server 2008 R2 (192.168.10.25) AD2: Server 2008 R2 (192.168.10.26) Client: Windows 7 Pro 64 Bit Trying to get a MSI software installation package to run, however, whenever I link the GPO with the...
View ArticleDomain Admin password Protection
hey guys, we have 5 domain admins in one forest & domain structure 2008R2 , with more than 300 local users and 80 remote users. since the IT director have similar access right ( domain admin ) , I...
View ArticleLooking for self-registration for Active Directory - any suggestions?
Hey guys, I'm curious to know if anyone knows of a tool that would allow users to automatically register accounts within Active Directory? Ideally, accounts would be given a default security level and...
View ArticleScript for tracking logins
I have a script which says: echo%date%,%time%,%computername%,%username%,%sessionname%,%logonserver% >>\\SERVER\SHARENAME$\LOGON.LOG And that's cool but each time a domain user log on like this,...
View ArticleRight to use software & installation controlled by group policy
I have to give some users administrator rights because they cannot run engineering design software when they are standard user level after pc joined domain. Unless they login in as local account. It...
View ArticleAD, Change home directory. Client wont update.
Hello,Ive changed the homedirectory for a user in the Active Directory. The folder is on a new Windows 2008 R2 server. But the client wont update, it still connect to old folder. This change was made...
View ArticleRemoving Decommissioned Computers From AD
When we decommission an old PC and remove it from production we make sure the system has been removed from everything, like the antivirus console, DNS etc. Active Directory does not delete the entity...
View ArticleRoaming Profiles/Folder Redirection
Hi All A quick folder redirection question if I may. I Am setting up an RDS environment and will use this in conjunction with roaming profiles/redirection. I have setup roaming profiles and folder...
View Article