Tidbits of Information from Virot
Get-ChildItem -Force
Whoh.. What happened.. I was about to install a new software in my home domain that required a service account so I tried to run New-ADServiceAccount.. But I got:
|
1 |
New-ADServiceAccount : The directory service was unable to allocate a relative identifier |
So why does my domain leak like a sieve?
So I needed to enable scavenging on all reverse zones for a customer. All forward and most reverse zones were done but not all. Since this was a Windows Server 2012R2 server I knew, that every cmdlet I might need was available.
|
1 2 3 4 |
$IPofDNS = '192.168.66.21' $Zones = Get-DnsServerZone | Where-Object {$_.IsAutoCreated -eq $False -and $_.ZoneName -ne 'TrustAnchors'} $MissingZones = $Zones | Get-DnsServerZoneAging | Where-Object {$_.AgingEnabled -eq $False} $MissingZones |Set-DnsServerZoneAging -Aging $True -ScavengeServers $IPofDNS |
But what if I have enabled scavaging but want to update which servers will scavenge?
|
1 2 3 4 |
$IPofDNS = '192.168.66.21' $Zones = Get-DnsServerZone | Where-Object {$_.IsAutoCreated -eq $False -and $_.ZoneName -ne 'TrustAnchors'} $WrongZones = $Zones | Get-DnsServerZoneAging | Where-Object {$_.ScavengeServers -eq $IPofDNS} $WrongZones |Set-DnsServerZoneAging -Aging $True -ScavengeServers $IPofDNS |
And now all my zones have scavenge enabled and the correct DNS server specified.
Earlier I needed to find the netboot GUID of machines in Hyper-V. So I wrote a small powershell snipit for that.. And since I continued to need that and I didn’t to continue running all those lines each time I did a small function. So this time I went through the code and wrote a small function that does what I need. I have published it on Script Center Galleries.
Some examples:
|
1 2 3 4 5 |
PS C:\> Get-VirotVMBootGUID -VMName local.file.client01|FT -AutoSize Name netbootGUID ---- ----------- local.file.client01 {2221ED02-A528-4F96-89DE-A928B6196440} |
and
|
1 2 3 4 5 6 7 8 9 10 11 12 |
PS C:\> Get-VirotVMBootGUID |Format-Table -AutoSize Name netbootGUID ---- ----------- local.file.file01 {1FB64C6F-8B3E-43E0-9BAA-5DC453D14AC3} local.file.file07 {4103D9E5-1AA8-4777-9CA1-9E50CADC403F} local.file.file05 {0312C3A1-EA42-4B87-A106-2D5E97218544} local.file.file02 {52AC9616-E0D4-4E93-8AB7-FC30A1A2C861} local.file.dc01 {D497F992-0F77-44D4-870B-7475342BEBDD} local.file.file06 {60B495D0-8A47-460C-A77C-BCC882353C5F} local.file.file03 {DE11FB99-5E04-4C74-91EE-FCE26D9D27C9} local.file.client01 {2221ED02-A528-4F96-89DE-A928B6196440} |
So tonight I was playing around with deployment at home. Having tried both System Center Essentials and System Center Configuration Manager, it was time for another deployment solution. Since my company has a sister company specializing in system management software, I decided to give them a try. After installing I needed to find the netboot GUID since I didn’t really like using the mac address. So how do I get the netboot GUID of my Hyper-V virtual machines? Well powershell of course.
The powershell snippet: [Read more…]
It doesn’t matter if your domain is new or old. If the servers are Windows 2008 or later you could and should use the central store. I have seen both new and upgraded domains that don’t use the concept of the central store.
In older versions of windows you copied the administrative templates to each GPO. With Windows 2008 and later you don’t need nor should do so. The Central Store is a directory on the sysvol where all servers can look and multiple policies share the same new admx format files.
Well yes all same level windows have a copy of the same policies in the C:\Windows\PolicyDefinitions directory. But that gives different information based on the client that you used edit the policy. By creating the central GPO store we make sure that all client use the same amdx files.
Just copy the C:\Windows\PolicyDefinitions directory with subfolders to \\domain.fqdn\sysvol\domain.fqdn\policies\. Its as simple as that.
For more information see How to Implement the Central Store for Group Policy Admin Templates, Completely (Hint: Remove Those .ADM files!)
I needed to help diagnose a client computer and I needed the dfsutil tool, this tool is only available in the RSAT package. Usually no problems, just install it. But this time I needed to run dfsutil without installing it on the client. So I copied the executable file and tried to run it.. Well.. This is what happened:
|
1 2 3 4 5 6 |
C:\Users\Administrator>Desktop\dfsutil.exe Root Link Target Property Client Server Diag Domain Cache C:\Users\Administrator> |
That doesn’t look like it should. There is something missing, and no error message either. So I checked the binary from another language server, they were the same.. So the language is not in the file? Wait Windows has support for multiple languages. I’m missing the language and strings part. So where to find that part. Under the %Windir%\system32 directory there exists a en-us directory, and if I look in there I find a dfsutil.exe.mui file. When I copy that file to a directory named en-us at the same level as the .exe binary it works.
So I had a customer that requested that I changed the background color for all users of a RDS solution. Well that seems easy, lets start by right clicking the desktop and selecting personialize, woho. It isn’t there, by default Windows Server does not include Desktop Experience. So lets install it, just for fun. Its not needed really.
|
1 |
Add-WindowsFeature Desktop-Experience |
This wants to reboot so lets do that and take a coffee [Read more…]
Copyright © 2020 · Nomadic Child Theme on Genesis Framework · WordPress · Log in