Another strange one today. After upgrading a PC to Windows 10 1709 build 16299 we found that our lockscreen image that had been set via GPO for over 2 years, was no longer showing. It was simply showing a blank assent colour.
After some aggressive Googling i came across someone who had sussed it was to do with a registry key that many of us set many moons ago, when the first versions of Windows 10 were released.
Showing posts with label Active Directory. Show all posts
Showing posts with label Active Directory. Show all posts
Wednesday, 17 January 2018
Remove Show People button Windows 10 1709
During testing of the latest Windows 10 Update (its definitely more of an upgrade ...thanks MS) version 1709 build 16299. I found that a little icon had appeared on the bottom tight of the taskbar. Things like this really annoy me so basically its going.
You can remove it by Right Clicking the Taskbar and clicking the button Show People Button. However in a corporate network, getting users to complete to click just isn't going to happen... the lazy gits!
You can remove it by Right Clicking the Taskbar and clicking the button Show People Button. However in a corporate network, getting users to complete to click just isn't going to happen... the lazy gits!
Thursday, 13 February 2014
Cisco ASA 5520 VPN - Locked down to Active Directory group
We recently had a requirement to secure our VPN used by staff, to only allow those who are a member of an Active Directory group to connect. This sounds like a pretty straightforward thing to accomplish, but i struggled with this for a few hours.
I found that there are several ways of doing this. I found out the easiest and best way, only after attempting the more complex method.
I found that there are several ways of doing this. I found out the easiest and best way, only after attempting the more complex method.
Wednesday, 8 January 2014
Using DSACL to reset permissions on Active Directory objects
Today an engineer brought something to my attention that was slightly strange. He told me that for some reason he could not reset passwords on some user accounts as all the fields were grayed out.
I had already used the Delegation of Control wizard to assign an front line engineers group permissions on the users OU, so this was very strange. After investigating further i found that he didn't have permissions to on some users.
I found that for some reason some objects in the OU had lost the Include Inheritable Permissions from this objects parent checkbox was not checked. So me delegating control to the OU was having no effect because the object was not inheriting.
If this was on just one account it would be an easy fix, simply check the box and it will inherit permissions. However i identified the issue on older user accounts only. There were hundreds of them and this could potentially take hours to resolve. After some research i found that Windows Server has a built in tool called DSACL, which is installed when ADDS is installed.
I had already used the Delegation of Control wizard to assign an front line engineers group permissions on the users OU, so this was very strange. After investigating further i found that he didn't have permissions to on some users.
I found that for some reason some objects in the OU had lost the Include Inheritable Permissions from this objects parent checkbox was not checked. So me delegating control to the OU was having no effect because the object was not inheriting.
If this was on just one account it would be an easy fix, simply check the box and it will inherit permissions. However i identified the issue on older user accounts only. There were hundreds of them and this could potentially take hours to resolve. After some research i found that Windows Server has a built in tool called DSACL, which is installed when ADDS is installed.
Subscribe to:
Posts (Atom)