[NTSysADM] Free MS Press 2016 server intro book.

2016-10-13 Thread Kennedy, Jim
https://blogs.msdn.microsoft.com/microsoft_press/2016/09/26/free-ebook-introducing-windows-server-2016/

[NTSysADM] RE: CMAK profiles without admin rights

2016-10-13 Thread James Rankin
Ah right :) Don't know whether you'd be able to do a spot of Process Monitoring and see if there is a parent process (shot in dark!)? From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Melvin Backus Sent: 13 October 2016 15:30 To:

[NTSysADM] RE: Modified date on distribution group AD object

2016-10-13 Thread Brian Desmond
If you do a repadmin /showobjmeta on the object, it will give you timestamps per attribute which would be a good starting point. Thanks, Brian Desmond (w) 312.625.1438 | (c) 312.731.3132 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton,

[NTSysADM] RE: CMAK profiles without admin rights

2016-10-13 Thread Melvin Backus
Thanks for reminding me about that. I've used it in the past and forgot all about it. :( I need a vacation. :) -- There are 10 kinds of people in the world... those who understand binary and those who don't. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]

[NTSysADM] RE: CMAK profiles without admin rights

2016-10-13 Thread Stephen Gestwicki
You should be able to use Processes Explorer to find that while running the VPN. [cid:image002.png@01D22546.20F9DCB0] https://technet.microsoft.com/en-us/sysinternals/processexplorer.aspx?f=255=-2147217396 - Stephen From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]

[NTSysADM] Modified date on distribution group AD object

2016-10-13 Thread Heaton, Joseph@Wildlife
We have 16 distribution groups that are showing the exact same Modified timestamp. A couple of these are used for automated message delivery for different applications. Since this change date, those messages are no longer being delivered. I use Netwrix to audit things, and it doesn't have

RE: [NTSysADM] RE: CMAK profiles without admin rights

2016-10-13 Thread Melvin Backus
We tried adding them to Network Configuration Operators and it didn't help. I'm not sure if UAC was off or not but that is our normal configuration. I'll go through it again just to be sure. -- There are 10 kinds of people in the world... those who understand binary and those who

[NTSysADM] RE: CMAK profiles without admin rights

2016-10-13 Thread Melvin Backus
I've see that, but as was pointed out it one of the articles I read, what executable do you assign that to? The offending process is a DLL. -- There are 10 kinds of people in the world... those who understand binary and those who don't. From: listsad...@lists.myitforum.com

Re: [NTSysADM] RE: CMAK profiles without admin rights

2016-10-13 Thread James M. Pulver
If the problem is the routes don't get published, you can put Users in Network Configurator Operators group, and turn off UAC, and then normal users can update their route maps. James Pulver CLASSE Computer Group Cornell University On 10/13/2016 07:46 AM, Melvin Backus wrote: Budget for this

[NTSysADM] RE: CMAK profiles without admin rights

2016-10-13 Thread James Rankin
I assume you probably read this already but just in case you haven't (pulled from http://www.winvistatips.com/threads/cmak-elevated-privs-for-vista.725462/ ) The route table updating via Cmroute in the CMAK package requires admin privileges. Because of the introduction of UCA (user account

[NTSysADM] RE: CMAK profiles without admin rights

2016-10-13 Thread Melvin Backus
Budget for this is nil but I'll have a look and see. The installation of the connectoid isn't the issue, it's all runtime when the user tries to connect to the VPN. -- There are 10 kinds of people in the world... those who understand binary and those who don't. From:

[NTSysADM] RE: CMAK profiles without admin rights

2016-10-13 Thread James Rankin
You can use privilege management tools like AppSense Application Manager, RES, Scense and the like to configure specific files that can run with elevated rights. There's also tools like CPAU from JoeWare which can run scripts with elevated privileges so that you can get the profile build to

[NTSysADM] CMAK profiles without admin rights

2016-10-13 Thread Melvin Backus
Hello folks, We've been working on removing admin rights for users in our environment. One snag we've run into is related to our RAS VPN connections and CMAK profiles. In order to make everything work we're using CMAK to build the profile which includes routing, etc. We can't seem to find a