Ran into a situation at a client location where in Active Directory, the security permissions applied to an OU were not getting inherited permissions on to the objects. Basically, security inheritance was broken.This causes a problem when the administrative accounts or groups needing to modify an attribute on the AD object throw errors, or are…
Tag: 2012
All of Windows Cipher Suites
Working on a security project and I needed a reference guide as to what cipher suites are supported on what OS. So I have documented a list of the default cipher suites and their preferred order for every Windows Server version. These were gathered from fully patched operating systems.
Deploying the SCCM Client with VMware Client Windows Guest Customization
Since SCCM is our configuration management tool of choice, the SCCM client needs to get installed on all of our newly provisioned VMs. I created a service account that only has read permission to the \\sccmserver\sms_sitecode\client share on the SCCM server. The client is installed from this location to ensure that we are always using the latest…
ConfigMgr 2012 R2 – WSUS sync fails with HTTP 503 errors
Ran into this issue with ConfigMgr 2012 R2 where it was unable to synchronize Software Update Point with the WSUS server. A review of the component status messages for the SMS_WSUS_SYNC_MANAGER component on the primary site server reveals errors related to WSUS synchronization which are similar to the following: Got the following error when trying…
Guide to migrate FRS to DFSR
For most users this article only applies if you have Window 2003/ 2003 R2 Domain Controller in your enviornment that you are planning to get rid off. Pretty soon I hope! 😉 SYSVOL is a folder shared by domain controller to hold its logon scripts, group policies and other items related to AD. All the…
Reset Windows Server 2012 R2 RDS 120 Day Grace Period
The RD Licensing grace period has expired and the service has not registered with a license server with installed licenses. A RD Licensing server is required for continuous operation. A Remote Desktop Session Host server can operate without a license server for 120 days after initial start up. The official solution is to Activate the…
No remote Desktop License Server available on RD Session Host server 2012 R2
A fully functional and activated 2012 R2 Remote Desktop Session Host server displayed the following message: This was a simple setup on one server with the: connection broker, Session Host and Licensing server with 2012 R2 CAL’s installed. Even though the licensing seems to be configured correctly, in server manager: and PowerShell: Licensing diagnostics: everywhere…
Windows: Hide Internet Explorer 11 address bar & navigation bar
Applies to: Windows Server 2008R2, Windows Server 2012R2, Windows 10 There are two ways this can be accomplished depending on your needs for the controlled environment. GPO: I would like to first clarify that there is not a single GPO to just hide TABS in IE11. There is however a way you can enforce IE in Full…
Check Proxy settings from Powershell
To check the proxy settings like ProxyOveride or if it is enabled or not:
1 |
Get-ItemProperty -Path "Registry::HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" |
To disable proxy from PowerShell:
1 |
Set-ItemProperty -Path "Registry::HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" ProxyEnable -value 0 |
To enable proxy from PowerShell:
1 |
Set-ItemProperty -Path "Registry::HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" ProxyEnable -value 1 |
Disable IPv6 on Windows Core Server 2008 R2 – 2012 R2
GUI Version: Open Control Panel > Network & Internet > Network & Sharing Center > Change Adapter Settings > Choose the Adapter Right Click – Select Properties Networking Tab DeSelect IPv6 Close No GUI… No problem (Core): After doing the above procedure you might have to use the registry editor aswell to completely disable the…