Granting Remote Access on SCManager to Non-admin Users

Posted on October 21, 2016 · Posted in Windows Server 2012 R2
sc query on remote computer

Let’s consider the peculiarities of granting remote access permission to enumerate the list of services running on a remote server to domain users without rights of local administrators. In fact, the task comes down to providing remote connection to the Service Control Manager (SCManager).

How to Downgrade Windows 10 and Rollback to Windows 7 or 8.1

Posted on October 19, 2016 · Posted in Windows 10
hidden folders Windows.old and $WINDOWS.~BT

After the installation of Windows 10 over the installed system (in case of upgrade from Windows 7 or Windows 8.1), a user can rollback to the previous OS version if the new OS is unstable or simply don’t like. In this article we’ll show how to roll back the installation.. read more

Enable Remote Access to Admin Shares in WorkGroup

Posted on October 17, 2016 · Posted in Windows 10
Windows 10: Admin Shares Don't Work in WorkGroup

I have come across a problem that I wasn’t able to connect to default $Admin  shares on a computer running Windows 10 remotely from the account being a member of the Local Administrators group. At the same time, I could access them without any troubles using  built-in local Administrator account.. read more

How to Convert SID to Username and Vice Versa

Posted on October 14, 2016 · Posted in Active Directory
whoami /user

In Windows environment, each domain and local user, a group or other security objects are assigned a unique identifier — Security Identifier or SID. It is an SID, but not the user name, that is used to control access to different resources: network shares, registry keys, file system objects, etc… read more

How to Change Default Permissions for New GPOs

Posted on October 12, 2016 · Posted in Active Directory, Group Policies
new gpo permission

Getting back to the problems related to the break of GPO processing after the installation of the updates from MS16-072 (KB3163622) security bulletin, I’d like to tell about another important thing. As you remember, in order to make GPO Security Filtering work correctly after you install this update on clients,.. read more

How to Rebuild Corrupted Icon Cache in Windows 10

Posted on October 10, 2016 · Posted in Windows 10
broken icon cache in Windows 10

When icons of different applications and file types are displayed in Windows Explorer, instead of addressing the original files with icons, the system gets copies of the icon images from special files containing icon cache. Due to the fact that the system doesn’t need to load original icon files, the.. read more

Unable to Install Print Driver after KB3170455

Posted on October 7, 2016 · Posted in Windows 10, Windows 7, Windows Server 2008 R2
A policy is in effect on your computer which prevents you from connecting to this print queue.

We have found an unpleasant problem with one of Microsoft security updates released in July. We mean KB3170455 released on July, 12, 2016. After the installation of this update, the problem of network printer connection may appear in the domain.

Auditing Users Password Strength in AD

Posted on October 5, 2016 · Posted in Active Directory, Powershell
Active Directory Password Quality Report

The complexity of a user password in Active Directory domain is one of the key security elements both for user data, and the entire domain. As a rule, users prefer to use weak, easy-to-remember passwords. Thus, they significantly reduce the level of protection against hackers for their accounts. In this.. read more

Windows 10: Unable to Download WSUS (0×80244019) Upgrade Packages

Posted on October 3, 2016 · Posted in Windows 10, Windows Server 2012 R2
WSUS 2012 Upgrade class

WSUS for Windows Server 2012 or higher supports the installation of both common security patches and large upgrade packages (upgrades in Microsoft terminology) on Windows 10. However, this feature doesn’t work out-of-the-box: these upgrades (they are called Redstone in Windows 10 concept) simply cannot be downloaded on clients. Let’s consider.. read more

KB3161949 Breaks SMB over NETBIOS Access Outside the Local Subnet

Posted on September 30, 2016 · Posted in Windows Server 2012
AllowNBToInternet

We have just learned what to do with MS16-072 update breaking the familiar GPO mechanism, and there appeared new problems with another security bulletin released in June — MS16-077 and KB3161949 update. After this update is installed on server systems, clients from other subnets are not able to connect to.. read more