It's interesting that what 20 years ago was only taught in graduate-level physics classes is now a commodity. Watered-down for sure, but the fact that it's a valuable commodity for the general public is interesting.
Sorry if this question is kind of vague, but I don't know where to ask.
You see, I use a computer with Windows (8) and have a few ''slaves'' with Linux (Debian/Ubuntu). Normally I would use a VNC to access and work with the slaves, but my main issue is that using SVN to acess those slaves is wa...
I wish I had more intelligent observations to offer at this point but I have a headache and can't brain too good. You have my sympathy for whatever that's worth. I can't believe they just cloned a DC right after being told not to :-(
If its a recent version of Exchange then unless they've customised it to only look at one DC (why would you do that, but then why would you not assign both DNS servers on your clients, as you say) then it should be able to hop onto any working DC.
there's a lot of misleading info in mainstream media. I was reading an article on the BBC website yesterday that was so wrong it would be funny, if it wasn't such a serious subject.
Still, I suppose we should be glad that the mainstream media are reporting it at all, so people like your clients are at least aware that something is happening.
They've amended this article since I tweeted them complaining about it (not saying the two things are related!). Where it says "If an organisation employs OpenSSL, users see a padlock icon in their web browser - although this can also be triggered by rival products." they didn't originally mention 'rival products'.
nor did they say "users should check which services have fixed the flaw before changing passwords..."
Yeah, AD Certificate Services is great at auto-enrollment
You create the certificate template you want the users to have, give the users permissions to auto-enroll in it, then configure the enrollment policy via GPO, and done
If $personA joins the army, but is a) gay and b) not in the closet, and the army wants to mobilise them overseas, into a country where homosexuality is illegal, are they in a position to say "I don't wanna go, i'll get arrested/murdered/etc"?
I think your options are #1 - get the user accounts in some sort of format (like a CSV for instance,) and import them in bulk with Powershell or CSVDE, or if you want self-service provisioning you really probably need an identity management product like Forefront Identity Manager.
@TomO'Connor It is, but it's very scenario dependant. Take Afghanistan as an example - any normal soldier over there is working outside of Afghan law (For all intents and purposes), they don't answer to Afghans and wouldn't ever find themselves wandering around outside of their armed remit
@Dan At the same time, at least for the US army, you're forbidden from having porn, alcohol, pork, or anything else that would violate the local laws. Kinda interesting to consider... "I can't go; I'm illegal in $country!"
I recall in the earlier gulf war the western forces made a lot out of banning things like public consumption of alcohol and things like that to avoid offending saudis, but this was out of courtesy rather than legal need.
@HopelessN00b To be honest, in a military occupation context - I think it's generally accepted to follow local laws "to a point". Afghanistan has a lot of fucked up laws and I doubt anybody in the British army gives a crap ;)
@RobM US forces, at least, respect the local laws where they're deployed (or are supposed to). Sometimes that means you get stationed in Italy, can walk around in public with a drink, drink at 18 and what not... and sometimes it means you're stationed in a shithole where you can't get a beer.
To my knowledge, the UK doesn't have any peacetime bases in any country with a legal system vastly different to our own. Something like camp Bastion will be governed under the rules of conflict with the UN etc etc, whereas a base in Germany isn't.
I think the British army does too @HopelessN00b and in both cases I think they are right to do so. To a point... the example that @TomO'Connor mentioned being one where a local bout of homophobia shouldn't dictate how the troops should have to live being a case in point.
Especially on an active service deployment, not merely being garrisoned in a country.
checkingthrillinitis (n.) - the feeling you get when you check your bank account online and see that the bonus discussed earlier this week in the Comms Room is in your account.
@NathanC you cant just clone a DC in 2012 R2, you have to create a config file to define the clone provisioning rules and stick it somewhere in c:\windows\system32