|
Regarding to Windows Server 2008 Active Directory Domain Services, I want to ask, when compared with other DNS, how the security level improves, besides for better administration (the number of administrator can be reduced)???
modified on Sunday, May 25, 2008 12:49 PM
|
|
|
|
|
Windows Server 2008 Active Directory Domain Services includes a new feature called Read-only Domain Controller (RDC). It enables better administrative management and enhanced security.
For example, on better administrative and security level, it requires no password in the default platform which can lower the risk of passwords being tracked by others in RDC forum.
You can watch the video (Active Directory Domain Services (AD DS) in Windows Server 2008 Technical Overview)http://www.microsoft.com/hk/webcast/default.aspx?sid=311
for a more detailed explanation.
|
|
|
|
|
Hi all,
I would like to know is there have any installer other than MSI can use in win2000 or XP?My purpose to know it is because currently i am developing a small application that can block installation software in win2000 and winXP (using registry setting).I found out that there have one registry value can set to block the MSI installer. So, i need to know isn't only MSI can do the software installation in win2000 and winXP.
If there have other installer, can you guy please suggest me how to prevent software installation?
Note: if it can be done by registry setting would be great 
thanks in advance
regards
cocoonwls
|
|
|
|
|
cocoonwls wrote: So, i need to know isn't only MSI can do the software installation in win2000 and winXP
No, it's not the only game in town.
You also cannot stop every installation app out there. InstallShield can build a non-MSI installation, as well as a host of other apps. There is always the possibility of an .EXE type installation that just copies files to locations and setups unregistry values. There is also the plain old XCOPY method, but that usually only works for simpler apps.
There's just no way to stop every kind of installation out there.
|
|
|
|
|
Hi Dave Kreskowiak,
Thanks for your advice...OK, so the only way to do is block the removeable device in user's pc to prevent any software installation. 
|
|
|
|
|
cocoonwls wrote: OK, so the only way to do is block the removeable device in user's pc to prevent any software installation
Good luck with that. That's something else you can't stop entirely from your code.
Look, this is all possible to do with the appropriate use of Group Policy, not code. Pickup the Resource Kit for the O/S in question for more detailed information on how this works and how it would work in your networking environment.
|
|
|
|
|
Hi Dave Kreskowiak,
Currently i am using registry editor to restrict the removeable device instead of using group policy. It(registry setting) work for me if the device is already install on the pc. So i am found out that may be i can deny the permmision to the USB port(HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR). But i am sturd on it, i cant determind which group/user's permission should i deny and also for the special permission(I am not sure what the user's permission refer to).Any suggestion?Or is there have any document about permission in registry?
note:I am using vb to create the application
regards
cocoonwls
|
|
|
|
|
The only books I know of are the Resource Kit's for XP, Vista, Server 2003, 2008, ...
The other method would be to search for the Group policy ADM files (*.adm) and look through them to find out what they are changing. They're simple, but very long text files that describe what you see in the Group Policy Editor. You'll have to read through them a bit to figure out what everything means, but it's not difficult to understand.
|
|
|
|
|
hi, thanks!yes, i was found some useful information.Thanks alot
regards
cocoonwls
|
|
|
|
|
Hi guys,
I am in trouble...somehow I ended up disabling the local admin account on a Windows XP machine, and the rest of the users are only Power Users.
Is there any way to recover from that?
Any pointers are appreciated.
Thanks,
...neualex
|
|
|
|
|
neualex wrote: somehow I ended up disabling the local admin account on a Windows XP machine
Not possible. Even if the built-in Admin account shows it's disabled, the value is ignored. The local Admin account is NEVER treated as disabled.
This does NOT hold true for accounts that are members of the local Administrators group.
You can, however, reset the password to whatever you want (inside the password restriction policies) using any of a number of recovery disks. You can find a bunch of them here[^]. I, myself, have used ERD Commander and this[^] little gem.
|
|
|
|
|
Hi there,
I need help in getting the below code to work. I'm trying to programmatically reposition
the taskbar to the top of the screen, and the below program does so. However, the problem is that, once taskbar has been repositioned
and I click any icon/application there, it returns back to the bottom.
Can somebody please help as I want it to be permanently repositioned?
Below is my full code:
#include <stdio.h>
#include <windows.h>
#include <shellapi.h>
int WINAPI WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nShowCmd)
{
RECT rect;
RECT deskTopRect;
HWND hDesktopWindow;
char* strMessage = "Your Taskbar is now repositioned.";
HWND hWnd = FindWindow("Shell_TrayWnd", NULL);
APPBARDATA abd;
ZeroMemory(&abd, sizeof(APPBARDATA));
abd.cbSize = sizeof(APPBARDATA);
SHAppBarMessage(ABM_GETTASKBARPOS, &abd);
GetWindowRect(hWnd, &rect);
SetWindowPos(hWnd, NULL, rect.left, 0, rect.right, rect.bottom-rect.top, SWP_NOSENDCHANGING);
UpdateWindow(hWnd);
hDesktopWindow = GetDesktopWindow();
GetWindowRect(hDesktopWindow, &deskTopRect);
RedrawWindow(hDesktopWindow, NULL, NULL, RDW_FRAME|RDW_INVALIDATE|RDW_UPDATENOW|RDW_ALLCHILDREN);
SystemParametersInfo(SPI_SETWORKAREA, 0, NULL, SPIF_SENDCHANGE);
UpdateWindow(hDesktopWindow);
MessageBox(NULL, strMessage, "Taskbar Message", MB_OK);
return 0;
}
</shellapi.h></windows.h></stdio.h>
|
|
|
|
|
I have a question like how to exit a batch file after launching a Windows application from it.
I have a small batch file to launch an application with a specific commandline parameter. For that matter, I am actually using Todolist application from here http://www.codeproject.com/KB/applications/todolist2.aspx?msg=2566112#xx2566112xx[^]. The only contents of the batch file are below:
todolist -x
I need this parameter so that the encrypted todolist files are demanded with the password only once instead of everytime I toggle tabs within the application. Now the problem is after launching the todolist, the batch file still remains open and running. How to exit the batch file after starting this application?
Vasudevan Deepak Kumar
Personal Homepage
Tech Gossips
A pessimist sees only the dark side of the clouds, and mopes; a philosopher sees both sides, and shrugs; an optimist doesn't see the clouds at all - he's walking on them. --Leonard Louis Levinson
|
|
|
|
|
When just calling a exe like todolist -x cmd will sit and wait for the program to exit. To start the program without waiting for it to finish use the start command. If I remember corrrectly, to send params you need to use it like this start todolist "" -x . If that doesnt work just type start /? to see the syntax.
//Johannes
|
|
|
|
|
Thank you.
start todolist -x worked.
Vasudevan Deepak Kumar
Personal Homepage
Tech Gossips
A pessimist sees only the dark side of the clouds, and mopes; a philosopher sees both sides, and shrugs; an optimist doesn't see the clouds at all - he's walking on them. --Leonard Louis Levinson
|
|
|
|
|
Use the start command, to execute the application in a new session.
Otherwise the script waits for the application to exit
Like this:
Start "todolist -x"
|
|
|
|
|
Thank you. It worked cool.
I had to make a little change but. I typed the command without single quotes. With single quotes, for some reason, it closed the current command window and started a new blank command window.
Vasudevan Deepak Kumar
Personal Homepage
Tech Gossips
A pessimist sees only the dark side of the clouds, and mopes; a philosopher sees both sides, and shrugs; an optimist doesn't see the clouds at all - he's walking on them. --Leonard Louis Levinson
|
|
|
|
|
I'll check what I write next time
The text within the first quotes becomes the title of the commandwindow if you open a new one.
The reason for the quotes around the path is if you have a space in it.
This works for example: start "" "c:\Program Files\Adobe\Acrobat 7.0\Reader\acrord32.exe"
This works too: start c:\autoexec.bat
modified on Friday, May 23, 2008 3:47 PM
|
|
|
|
|
I am new to this site, I don't know the best forum to post this in but I will try here. I would like to setup my Windows XP Pro computer so it can accept incoming VPN connections through the internet. I have setup Windows to do that, but no one can connect. Error 800. I have tried everything from disabling the firewall to going through every setting I could find that related to it and tried every combination.
modified on Thursday, May 22, 2008 6:08 PM
|
|
|
|
|
Sounds like it's not being routed. Check that port 1723 for your public ip address is routed to your private address.
For a quick check, try "telnet <your public="" ip="" address=""> 1723" and see what comes up.
edit: telnet your.internet.ip.address 1723
CP doesn't like the brackets I used before...
|
|
|
|
|
Hello and welcome, John C. Smith. If that is your real name. 
Sorry I can't help you with that one. But if you don't get a suitable answer here, you might also try in the Operating Systems / SysAdmin forum.
Best of luck!
BDF
A learned fool is more a fool than an ignorant fool.
-- Moliere
|
|
|
|
|
You haven't mentioned whether you checked your anti-virus product settings. (And if you don't have one you might as well go sit in the corner)
Can these connectors ping your pc ?
Do a search (Google or even Yahoo) like "error 800 with windows XP vpn" you'll find LOTS of advice/suggestions.
DB
|
|
|
|
|
Two words: Port Forwarding.
If you're behind a router you need to tell it where to send VPN requests to.
|
|
|
|
|
You're very lucky that you have an English name, have good command of the language (even if it's not your native language) and are well spoken.
If you'd failed any of these requirements you would have been ridiculed, chastised, reprimanded and generally made to feel rather unwelcome.
Now I'll sit back and wait for the '1' votes from all the people with a guilty conscience...
Oh, and like someone else said, you'll need to open up a port on your router. Google around for keywords like "port forwarding" and you should find more information than you can shake a stick at.
|
|
|
|
|
Hi Miszou,
I gave you a preemptive 5 and my conscience is totally clear.
Miszou wrote: more information than you can shake a stick at
What kind of stick do you recommend?
BDF
A learned fool is more a fool than an ignorant fool.
-- Moliere
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
