Wednesday, November 30, 2016

You don't currently have permission to access this folder!



Basically, if you are an administrator on your Windows 2008 or 2012 server, you have probably run across the problem when you don't seem to have permissions to a folder, although you are the admin.

This has been driving me nuts and I just had to look it up.  I found:You Currently don't have permissions which explained that there are three settings that need to be modified (basically UAC):

Computer Configuration --> Windows Settings --> Security Settings --> Local Policies --> Security Options

  • User Account Control: Admin Approval Mode for the Built-in Administrator account
  • User Account Control: Behaviour of the elevation prompt for administrators in Admin Approval Mode
  • User Account Control: Run all administrators in Admin Approval Mode
Set the policies settings as follows in the following order as per the screenshot below:
  • Disabled
  • Elevate without prompting
  • Disabled 
 Have to wait for reboot, but hopefully it will remove this annoyance!

Monday, October 31, 2016

Could not find this item when deleteing files



Had a file that needed to be deleted, but would not.  It was 0 bytes and Windows Explorer could not delete it.  The CMD prompt could not see it.  Tried the trick below and it worked.  Kudos to Tachy.




1) Open a Command Prompt.
2) Browse to the folder containing the buggy file.
3) Type 'dir /x' to obtain the 8.3 formatted filename.
4) Delete the file using the 8.3 filename, e.g. 'del NEWDOC~1.DOC'

Hope this information may spread and help other users with the same problem


REFERENCE: http://www.sevenforums.com/general-discussion/27924-could-not-find-item-when-deleting-files.html

Powershell" How to get AD group membership of a domain user



The best powershell command to get group membership of an individual is:


Get-ADPrincipalGroupMembership "username of user" | select name   | sort name


This command works well to just get a list of domain groups that the user is a member of.







Tuesday, October 18, 2016

Powershell commands for common network tools in Windows

Had to do a nslookup and ipconfig on a machine and wondered what were the powershell equivalent commands.  Here below are some:


nslookup = Resolve-DnsName
ipconfig  = Get-NetIpConfiguration  (Get-NetIPAddress,  Get-NetAdapter Wi-Fi)
ping        = Test-NetConnection
route       = Get-NetRoute
tracert     = Test-NetConnection -Traceroute
netstat     = Get-NetTCPConnection




for more detail see:
https://blogs.technet.microsoft.com/josebda/2015/04/18/windows-powershell-equivalents-for-common-networking-commands-ipconfig-ping-nslookup/



Monday, October 17, 2016

Diagnosing Active Directory

Here are some tips for checking the health of Active Directory:


Run dcdiag, netdiag and repadmin in verbose mode.
  DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log



  netdiag.exe /v > c:\netdiag.log (On each dc)

  repadmin.exe /showrepl * /verbose /all /intersite > c:\repl.txt



   A quick little dump repadmin /replsum > c:\replsum.txt
   ADReplStatus

   dnslint /ad /s “ip address of your dc”


**Note: Using the /E switch in dcdiag will run diagnostics against ALL dc’s
in the forest. If you have significant numbers of DC’s this test could
generate significant detail and take a long time. You also want to take
into account slow links to dc’s will also add to the testing time.
When complete search for fail, error and warning messages.

 DCDiag explanation
http://blogs.technet.com/b/askds/archive/2011/03/22/what-does-dcdiag-actually-do.aspx


Description and download for dnslint
http://support.microsoft.com/kb/321045


ADReplStatus Download and Description
http://www.microsoft.com/en-us/download/details.aspx?id=30005
http://windowsitpro.com/active-directory/active-directory-replication-status-tool-ad-utility-weve-all-been-waiting-almost


(Reference: Paul Bergson - https://dirteam.com/paul/2009/01/26/troubleshooting-active-directory-issues/)

Wednesday, September 28, 2016

Internet Explorer 11 not supported on RDWeb on Server 2008 R2



I ran into this problem when trying connect to my Remote Desktop Services on Windows Server 2008 R2, where it told me that "browser not support" and I need to have at least Internet Explorer 6.0 or higher!  Crazy, since I was using Windows 10 and IE 11.


I ran across this article: IE11 Browser not supported on RDWeb 2008 R2 by Shannon Fritz, who Dale Hayter for the workaround. 


Essentially, you connect to the web server hosting the RDS Web Access page, go to the RDWeb folder (in IIS) and edit the HTTP Response Headers.  You add a new header with name: X-UA-Compatible and value: IE-9, ok it, and restart the web server.


Shannon's page has great screen shots for those who need to 'see' it done.   It was a great help and worked like a champ!



AD Federation Services setup

I'm doing a lab/tutorial to learn AD Federation Services.  My simple setup is:

Server1 - Running Windows 2012 R2
xxxxxx - Oracle Virtual Box with 2 hosts
xxxxxx   xxxxxx>  Windows Server 2008 R2
Oracle Linux

Server2 - Running Windows Server 2012 R2
HyperV with one client - Windows 7 client


Systems are on the same subnet, but connected with Windows RAS setup with VPN.
Following the   AD FS Step-by-Step Guide



During instructions, had to setup IIS to require SSL certificate.  Decided to do a self-assigned ticket but had to use a couple of tools to get it to work properly.

Followed instructions on How to Create a Self Signed Certificate in IIS 7 to generate a self-assigned certificate.


Tuesday, January 5, 2016

Linux - Accept License!

I just didn't understand this text-base license agreement for free software.  This blog post helped me realize what was being asked.  Worked for Oracle Linux as well.




“License not accepted” when CentOS 7 initiate.

Postby XTitanium » 2014/10/27 08:47:58
Hello ,everyone!
I am a new CentOS 7 user. I installed the minimum CentOS 7 and used command 'yum -y groupinstall "GNOME Desktop" ' to install a gnome desktop environment.
After installation finished, I used command 'startx' to enter the gnome desktop then I shut down the machine.
But today I open the machine, there has a information and I can not log in.
The information is:
====================================================================
Initial setup of CentOS Linux 7 (core)
1) [x] Creat user 2) [!] License information
(no user will be created) (license not accepted)
Please make your choice from above ['q' to quit | 'c' to continue | 'r' to refresh]:

I enter c or r, give me the same information. I enter q, the machine is restarted.
What should I do? What is this license meaning?




ANS: Try selecting 2 to see the license screen.