How to stop extracting/viewing users details from AD
TweetThere are several tools/script available for extracting all user information from AD. Any domain users can access this information by default.
For an example, using following attached .vbs script, we can dump entire AD users base to a excel file with following fields.
ADExport Script (1.8 KiB, 16 hits)
(1 votes, average: 5.00 out of 5)
Loading ...Domain Tools v1.2 Final – For Delegating Users ID related Calls – Update
TweetPrevious Version:
http://technochat.in/2010/08/domain-tools-v1-0-for-delegating-users-id-related-calls/
Main Window
Configuration Window
(2 votes, average: 5.00 out of 5) Loading ...How to configure Home Folder with extra security
If you are having a domain controller, and decided to give a personal drive for all users, then home folder configuration is the best way to do it.
But if you want to make it secure for every users, then you have to configure something extra with ntfs security and share security.
Our current requirement as follows:
- Deploy home folder for 500+ users
- Make it secure, so that one user can not view others home folder from home share. Browse option should be disabled.
First option was easy and simple, but I have to think a lot on second option.
You can get the overview on how ntfs permission works on network share from following:
|
USERS |
NTFS PERMISSION |
SHARE PERMISSION |
EFFECTIVE PERMISSION |
|
USER A |
R |
R |
R |
|
USER B |
F |
R |
R |
|
USER C |
R |
F |
R |
|
USER D |
F |
F |
F |
|
USER E |
F |
N |
N |
|
USER F |
N |
F |
N |
(2 votes, average: 5.00 out of 5) Loading ...RealVNC MSI Deployment
For giving instant remote support to almost 1500+ desktop, we have to use some remote control tool, so we decided to install RealVNC server only to all the system. But manually it will take huge time to install RealVNC server to all the system. So, I started working on convert it into MSI package, which we can easily deploy via Group Policy.
Also we have to keep following things on mind:
- For security reason, as per company policy, Windows Firewall should be on to all system, So, I we have to make it an exception on firewall exception list.
- RealVNC server password should be same in all the system.
- Package size should be small, so it can be easily deploy.
And finally I have created the MSI Installer. This installer will really small in size, only 533 KB and also iwll will add VNC Port and Application into Windows Firewall exception list at the time of installation. It also set a default password.
1,273 views
(1 votes, average: 5.00 out of 5) Loading ...Remote Desktop Protocol 6.1 MSI Package for desktop deployment
Recently we implement TS 2008 on our site, and our entire client PC having Windows XP Service Pack 2. To access TS Application, we need to have RDP 6.1 installed on every system, but there is not update available for the same on WSUS.
1,976 views (5 votes, average: 5.00 out of 5) Loading ...Disable UNC Path security warning from Group Policy
Whenever you try to run any script, batch file or an executable from UNC path, it's opening a Security Warning. Actually this will prevent you from running any application from network path.
3,111 views
(5 votes, average: 5.00 out of 5) Loading ...Custom Group Policy(GPO) for Changing Desktop Background Colour
As per requirement, we need to change all client windows (XP, and 2003) desktop BG color, but it's impossible to change BG colour manually over 1000 desktop. So, we have to do it with an automatic process.
First we have to find out what happened on registry, while we changing Desktop BG color, and to do so, we need a tools which take a Windows Registry Snap after and before changing desktop BG color,
RegShot is the best free tools for that,
Download:
RegShot (89.2 KiB, 322 hits)
So, finally we able to trace out that registry change,
1 2 | [HKEY_CURRENT_USER\Control Panel\Colors] "Background"="26 26 26" |
Initially we add an extra line on logon script, to change desktop BG color to black,
1 | REG ADD "HKCU\Control Panel\Colors" /v Background /t REG_SZ /d "0 0 0" /f |
It works fine on all Windows XP Machine, but not with few Windows 2000 computer, in that case we are searching for some alternative solution,
Now we decided to create a ADM file for custom group policy, to force BG color change via GPO.
And here we are, with the following adm file we can change BG color to Black, White, Red, Brown, Yellow, Green, Sky, Brown, Blue, Dark Blue, Pink, Grey... 
(6 votes, average: 4.83 out of 5) Loading ...
Quote of the Day
Imagination is the one weapon in the war against reality.
—
Calendar
| M | T | W | T | F | S | S |
|---|---|---|---|---|---|---|
| « Jan | ||||||
| 1 | 2 | 3 | 4 | 5 | ||
| 6 | 7 | 8 | 9 | 10 | 11 | 12 |
| 13 | 14 | 15 | 16 | 17 | 18 | 19 |
| 20 | 21 | 22 | 23 | 24 | 25 | 26 |
| 27 | 28 | 29 | ||||
Polls
Loading ...Categories
Archives
- January 2012
- November 2011
- July 2011
- May 2011
- March 2011
- January 2011
- November 2010
- August 2010
- May 2010
- April 2010
- December 2009
- November 2009
- September 2009
- August 2009
- July 2009
- May 2009
- March 2009
- February 2009
- January 2009
- December 2008
- November 2008
- October 2008
Recent Posts
- USB/CDRom/Floppy/ZIP Drive Blocker (MBlock v1.0)
- Nokia Music & Mix Radio – Working in India–Experimental on Nokia Lumia 800
- Nokia Lumia 800 Review – Amazing Everyday
- How to stop extracting/viewing users details from AD
- WINDOWS 2008 R2 FAILOVER CLUSTER on VMWARE
