For playing around. I guess you could call that lab

No longer doing IT, but I still think it is fun and I do need a proper backup at home

Old idea was to use old Dell R300 (I1 servers) with RAID and mirrrored 2TB SATA drives. Power up via DRAC, make backup. Shut down

I got a pair of mellanox X2 NICs for that, along with a direclty attached copper cable

So nothing fancy like modern 2.5/5/10Gbit, or 10Gbit switches

Just elcheapo connection

Playing with a small NAS, 3 bays, 1 filled with an ironwold 10TB. Worked fine over 1Gbit

10 doubles the speed, but the single spindle is now the limti

Time to play with settings. Samba, vs iSCSI. Time to play with snapshots

well, once it has more then 2GB.

64GB ordered for my laptop. I will remove one ol 8GBit soDMM and put that in the NAS.

And adding a 1TB WD red SSD (M@, but sata only in NAS)

which should arrive today

Whee. collected my caching SSD (WD red M2 SATA)

BING "system boot complete"... oh right, that NAS speaks

Greetings, I have a question I'm not sure if it is a better fit for Serverfault, or Superuser. Figured I'd get a read before posting.

basic scenario: I am an Administrator on a Windows Server 2016 machine. Not a member of any other roles or groups. I run an executable (as Administrator) to apply a patch to a vendor application. The process runs as elevated & any changes it makes directly are successful. The installer kicks off two child processes (separate executables) that each are supposed to update single more complicated files.

The child processes do not run Elevated, and their changes fail with an Access Denied error.

I've done some research, and on a conceptual level I understand that child processes will generally open under the same privs as the parent as long as the user and the file have the same integrity level. It seems either my account, or the executables for the child processes have a lower integrity level.

Is there a way to determine which is the case?

So, not asking for an answer here, but is this sort of question on topic here?

for the record, in the end I used my admin powers to explicitly grant my account full access to the directories being modified, then running the installer was successful. But if I didn't have the ability to do this, I'd like to be able to figure out why things were failing.