Iam planning on replacing a server in the next few weeks, and I was checking through our Active Directory Sites and Services and I noticed the server I am replacing is listed as the "Inter-Site Topology Generator". If I replace the server without changing this, what will happen?
At 30-minute intervals, the current intersite topology generator notifies every other domain controller in the site of its existence by writing the attribute interSiteTopologyGenerator on the NTDS Settings object under its domain controller object in the configuration directory partition.
As the interSiteTopologyGenerator attribute gets propagated to other domain controllers by Active Directory replication, the KCC on each of these computers monitors this attribute to verify that it has been written. If a period of 60 minutes elapses without a modification, a new intersite topology generator takes over.
We then look at each event and make a tally of the number of failures for each user account the event relates to. Even though have 190 users, it is still a very manual process and I was wondering if there are any tools which will apply a filter to the security events, and then compile a report with the number of these events for each user? We will then raise incidents as appropriate.
However, to get this windows server event reports automatically at granular level, You can have a look at Lepide active directory auditor ( Active Directory Auditing Tool - Audit & Report AD Changes ) that could be an appropriate solution in your circumstance. It provides complete report of windows server event in real time by covering all the required aspects.
Yeah generator and an automatic transfer switch would be key. How big of UPS would dictate how big of gen you would need. You would also need to figure out if you wanted to put any other circuits on the gen.
The key is not so much how long, but how good the VRM is in the APC. With frequent power outages I would change out UPS/APC ever 3 to 4 years at minimum. UPS have limited life and their ability to suppress surges goes down the more it has to deal with them. In case of power outage you get two voltage spikes. When power goes out, and when it comes back on.
What battery backups do you have for the computers? Also what is the battery backup of the servers? that will determine which programs are shutting down the systems and how the my perform the power up of the servers.
It seems that your servers need more time for shutdown when the battery reaches 50%, or you have racing condition with at least two power outages in a short period and the batteries have not enough time charge to level needed for both boot and immediate shutdown.
Change the power plan to shut down the server at lowest battery condition that gives you enough time to shut all your VMs and base Windows 2016 server, and program the UPS software to program the UPS to wait for battery charge high enough for system to fully boot + time for shutdown.
The UPS is a Tripp Lite SU2200RTXL2UA. It was installed on October 2016, so it might still have a good couple of year to live. It is an online UPS, from what I understand it completely isolates the load from the utility lines. But if I get your point correctly, I will still have problems when power flickers on and off as you state.
Not sure what regulations you are dealing with but could you present a case to use the generators on a more regular basis? Show that not using them would but the company at risk of having data failure due to missed backups and maintenance.
I would get an inverter and a car battery connected to the UPS as well. The inverter will help you clean the power coming in from the generator. I live in an area where sometimes the only power you have is in your car
You might also want to consider a larger UPS unit that would run the servers longer and cover that entire time frame. That would eliminate the issue your are experiencing. Another option would be to install a generator that would also carry the load during the power loss situations. Good Luck!
If you have redundant PSUs on the server and both are conncted to the UPS, flip one onto the mains supply. It may help eek a little more power out of the UPS if a single PSU is drawing power. Otherwise a genny or bigger UPS is needed.Maybe if space allows some truck batteries and a 24V invertor as a suppliment.
PuTTYgen is a key generator tool for creating pairs of public and private SSH keys. It is one of the components of the open-source networking client PuTTY. Although originally written for Microsoft Windows operating system, it is now officially available for multiple operating systems including macOS, Linux. PuTTYgen.exe is the graphical tool on Windows OS. While on the other side, Linux OS has the only command-line version could be accessible using SSH commands.
(adsbygoogle = window.adsbygoogle []).push();
Although PuTTYgen collects keys in its native file format i.e. .ppk files, the keys can easily be converted to any file format. For Windows, the software interface is PuTTYgen.exe, whereas, for Linux OS the command-line adaptation is available using SSH commands.
To download PuTTYgen the primary requisite is to acquire the copy of PuTTY installation package. For the 64-bit operating system, one must install the 64-bit version of PuTTY, i.e. putty-64bit--installer.msi.Similarly, for the 32-bit operating system, the respective 32-bit version of PuTTY, i.e. putty--installer.msi needs to be installed.
To get PuTTY, go to PuTTY Installation Download page, whereby the complete installation package will be available with setup instructions, installation guide, and download links to all other components of PuTTY such as putty.exe, pscp.exe, psftp.exe, puttytel.exe, plink.exe, pageant.exe and putty.zip.
Following the successful download of the PuTTY installation package. It is time to install the program. Go to How to install PuTTY on Windows, whereby you will find the step by step guidance for PuTTY installation for Windows operating system.
Below is the detailed guide to download PuTTYgen on Mac operating system. Mac OS has a built-in command-line SSH client known as Terminal. To utilize it, go to Finder and then opt for Go -> utilities from the top menu. After that find the terminal which supports SSH connections to remote servers.
However, to run PuTTYgen for mac, the first one must have to install PuTTY. There are multiple ways to install PuTTY, which are Homebrew or MacPorts. Both alternatives will also install the command-line of adaptations of PuTTYgen.
However, there is an alternative way to install PuTTY on Mac OS. Cyberduck is a widely used Mac OS SSH Client. Once PuTTY installed on the Mac OS, a user can convert PuTTY derived private key format to OpenSSH.
Thus, above are the prominent commands of PuTTYgen in Linux operating system. Besides that, there are many other commands available to perform various tasks from the command prompt in Linux at flank speed.
In our case, our domain and public DNS are hosted on OVH, which as far as I can tell has an API to manage the DNS zone programmatically. Many other DNS providers offer APIs to make such changes. Can you confirm that this would allow me to pass the DNS challenge, if properly configured?
In terms of using Let's Encrypt certificate in Windows Remote Desktop, we've had a handful of questions about that and it doesn't look like anyone ever reported back afterward about how well it worked (or didn't work).
For removing the spaces from the fingerprint, do you have an equivalent of tr in the Windows command line, maybe with Powershell? In Unix you could use tr -d ' ' to remove spaces from a string, without having to do it by hand in a text editor.
As far I understand it, this should be completely automatable through PowerShell and Python, right?
For example, at renewal you would run certbot, with a hook for DNS validation, and once we have the certificate then obtain the thumbprint and store it in a PowerShell variable (with space removal), convert the certificate to PFX and import it. This last step is still not clear to me: in your screenshot you used the key store GUI, can you use PowerShell to import the certificate, or update it on renewal? On Windows does it work and makes sense to use something such as symlinks like on Unix OSes?
I am working my way through the powershell side also going to log a request with the boulder team to make PFX an option as being able to download a PFX file from letsencrypt will simplify things for windows users
I bet a PowerShell expert can automate most of this process. I understand that Microsoft has exposed a significant amount of Windows configuration to PowerShell in one way or another. So I expect there could be a script made that takes care of most of these steps for you.
And IF a single signed RDP client will work when copied to other client workstations - you can also use Active Directory to deploy that signed RDP client file to the other workstations:
Using Group Policy Preferences for copying files:
experts-exchange.com Using Group Policy Preferences for copying filesI know all systems administrator at some time or another has had to create a script to copy file from a server share to a desktop. Well now there is an easy way to do this in Group Policy. Using...
3a8082e126