Posts

Replace sha1 cert with sha2

hello all, i looking clarification on setup. have had rds system setup few years , have had no issues in regards certificates. have updated our certs sha2 sha1 , getting kinds of errors. in rds console under certificates states trusted , ok. have 2 connection brokers in ha configuration , when connect desktop certificate warning connection broker connection not trusted. of result of sha2 cert? know cannot raise connection security tls1.1 or higher have not done that. assumed gpo "specify sha1 thumbprints" not work sha2 cert.  if go sha1 cert have feeling fine. thanks, scott Windows Server  >  Remote Desktop Services (Terminal Services)

get-aduser wildcards for finding extension attribute

hello, the end users in our organization have 100+ property names include; distinguished name, extension , custom attributes, boatload of custom attributes, on , forth. if perform "get-aduser -properties | more" there many scan through find 1 need begins word "script".  i tried operator in manner below: get-aduser user12345 | where-object {$_.name -like "*script*"}  and  get-aduser user12345 -propertites * | where-object {$_.name -like "*script*"}  i don't' errors don't have results either. made sure attribute naming convention existed , there several entries start word "script". still no results returned.  would input.  thank you, admin ok have 25 views on , still no-one has suggestions? think may overlooking minor detail. surely has suggestion right?  hello, you should ask in windows powershell forum. however, generally, you'd pipe cmdlet select-object cmdlet get-adu...

Question on AD replication

hi i had questions on ad replication hoping me with. i have multi-domain forest, company.com, child domains eu.company.com, us.company.com , jp.company.com in eu.company.com, have ad sites set in germany, uk, france, holland , switzerland. each site has 2 dc's apart swizterland has one. if check ad sites , services, can see ip site link between uk , switzerland. there no preferred bridgehead servers. in ntds settings of swiss-dc1, can see entry replicate uk-dc1 (and likewise uk-dc1). question 1: mean swiss-dc1 *only* replicate to/from uk-dc1? or replicate other uk dc's too? question 2: recently, france had 3 domain controllers, 1 decommisionned , dcpromo'd down. can't see ip site link between france , switzerland. possible france-dc3 set replicate swiss-dc1, , when france-dc3 removed ad, site link automatically removed too? question 3: if go inter-site transports > ip > properties, can see 'bridge site links' has been ticked. mean dc's can replicate ot...

Is it possible to convert ADAM/LDS users from user to userproxy?

i have adam instance half users in ad domain, , other half isn't. i'd convert users have corresponding ad accounts user objects userproxy objects can proxy authentication.  is possible? if there documentation on how this? thanks! i don't think can done. can create new 1 or export it, don't think possible convert existing users userproxy. might wrong, per understanding, can't. http://blogs.msdn.com/b/dsadsi/archive/2012/05/18/10007227.aspx awinish vishwakarma - mvp my blog: awinish.wordpress.com disclaimer posting provided as-is no warranties/guarantees , confers no rights. Windows Server  >  Directory Services

How do I push files to remote machine in a network?

hi, i'm in corporate network using machine running windows xp pro. i have administrator privilege on machine , machines in network connected windows server (dc). possible push or transfer documents/files machine remote machine b? if so, ways available beside share drives? pls advice.thanks. hi , a best way set file server acts central location store , retrieve files , easy backing data. get advantage of enabling file server on windows 2003 such disk quotas , indexing services etc... follow link below http://support.microsoft.com/kb/325860 it not practicle make xp client file server , in organization administrators / engineers wont perform task. once have configured file server, client connect file server either through a) map drive b) \\servername ( either netbios , fqdn , or ipaddress ) Windows Server  >  ...

Write only a single line of Output

Image
hello, i'm not sure if possible, i'm trying run nslookup , have powershell return line "name" shows fqdn. want remove dns server , ip of server. can this? thanks, scott hi scott, use instead: https://msdn.microsoft.com/en-us/library/system.net.dns.gethostentry%28v=vs.110%29.aspx edit: slow on submit, see above. Windows Server  >  Windows PowerShell

Chrome v58 - Certificate Services and SAN (Subject Alternative Name)

ever since chrome v58 getting the  net::err_cert_common_name_invalid on our ms ca issued certificates. i've read can fix reissuing certificate after make change on certificate template - "subject name" tab checking "build ad information" , checking dns name under "include information in alternate subject name".   fix fine except fix prevents template show in web enrollment site, "supply in request" makes available in web enrollment site. so how both work - template listed in web enrollment site have populate alternate subject name ?   of these options change in later versions of ms ca 2012 r2 or 2016 ? current: ms ca 2008r2  hi, 》》 so how both work - template listed in web enrollment site have populate alternate subject name ?   of these options change in later versions of ms ca 2012 r2 or 2016 ? please try select  "supply in request",and manually add dns name in san when request c...