How to Prevent User Validation on a Specific Domain Controller

To prevent users from login to a specific domain controller follow the instruction below:

To prevent users from login to a specific domain controller follow the instruction below:

In the domain controller that you need to prevent users from login in to or validate their user name and password push or disable the Net Logon.

To do so:
Go to Control panel -> Administrative Tools -> services and locate the Net Logon service, right click and click push.

For more info see
http://support.microsoft.com/kb/240142

Scripting and automating backup jobs using NTbackup

This KB will show you how to automate the Microsoft build in Backup software NTbackup using a script.

 

Script 1:
This script use an existing pre configured job to backup to a tape drive:

ntbackup backup [systemstate]”@C:path to jobjobname.bks” /g /p “LTO ultrium”

 

/ p – “Tape drive name”
/G – Override tape

Script 2:
Backup specific folders to tap drive:

ntbackup backup systemstate “E:folder” “F:folder” /p “LTO ultrium” /d “Complete Backup” /um /hc:on

 

/hc – Uses hardware compression
/um -Use the first available media
/p – tape drive name

 

Microsoft NTbackup on the web
https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ntbackup_command.mspx?mfr=true

Lock Desktops using group policy

To automatically lock users desktops using the password protected screen saver:

To lock desktops
Open the group policy editor and create or edit and existing Group Policy.

In the Group Policy editor go to:

User Configuration, Administrative Templates, Control Panel, Display
Enable – Password protect the screen sever
Enable – Screen saver timeout
Number of seconds to wait to enable the Screen Saver, (1500 Seconds = 25 minutes)

Applying Wallpaper to users using Group policy

To implement the same wallpaper to all users computer using group Policy follow the steps.

  1. Create a share network folder on one of the servers.
  2. Create or edit existing group policy
  3. In group policy editor under -> User configuration ->administrative templates ->Desktop ->Active Desktop
  4. Enable Active desktop policy
  5. Enable Active Desktop Wallpaper and Type the path to the Wallpaper next to the Wallpaper Name:
  6. Give users Read and Write permission to the Shared folder where the Wallpaper located.

“operation master ERROR” In operation master TAB

When getting the “the target principal name is incorrect” error message while trying to access a DC from the LAN (e.g Start->run) and “operation master ERROR” In operation master TAB in active directory.

This issue cased by a DC that has lost its secure channel.

When getting the “the target principal name is incorrect” error message while trying to access a DC from the LAN (e.g Start->run) and “operation master ERROR” In operation master TAB in active directory.

This issue cased by a DC that has lost its secure channel.
To resolve the issue, do the follow from the DC that is not the PDC
emulator.

1. Stop the Kerberos Key Distribution Service and set it to disabled.

2. Open a command prompt and run the following command:
“netdom resetpwd /server:
/userd:administrator /passwordd:”
(without the quotation marks)

Where is the name of the server that is the PDC Emulator
operations master role holder.

After you reset the secure channel, restart the domain controller.

For more info use MS KB.
http://support.microsoft.com/kb/q288167/

CTRL-ALT keys in RDP session

When in the Terminal Server client window, the equivalent of CTRL-ALT-DEL for the MS client is CTRL-ALT-END.

The MS client also allows CTRL-ALT-BREAK to switch between viewing the session in a window and on the full screen.

Backup Cisco configuration file to TFTP server

How to install a TFTP server and backup the config file to the TFTP server.

In order to backup your Cisco router running configuration to a TFTP server you will need a TFTP server in place which I’ll tell you how to install and configure it.

1. Download and install a TFTP server, I used a free TFTP server called SolarWinds Free TFTP Server which you can download from here.
http://www.solarwinds.com/products/freetools/free_tftp_server.aspx

2. Install the software on a server that the routers can ping
3. On the TFTP software installed Click File -> Configure and start the TFTP server.
4. On the router type:
RT01#copy run tftp
Address or name of remote host []? 10.0.1.6 (Type the TFTP server Address)
Destination filename [ch-col-e1-confg]? Filename (name the backup file)
!!
3143 bytes copied in 0.572 secs (5495 bytes/sec)
RT01#
<p>