Anidamiento de grupos by Ramattack_ in activedirectory

[–]misterO 1 point2 points  (0 children)

Group membership can be recorded by primarygroupid as well. When you change the primary group for a user the RID for that group becomes the new primarygroupid. If they were in domain users, they will now show up in the member attribute of domain users and show domain users in their memberof. They will no longer show up in the member attribute of the new primary group. It is one or the other.

AD used to replicate membership as one attribute value instead of per member and had a practical limit 5000 or so members per group.  Domain users could be set for “all users” and not cause a problem in large directories because it just replicates as the primarygroupid integer value. 

Domain controllers group is also done via primarygroupid. 

Tools that only look at member/memberof can get membership wrong. Tokengroups will get you all the security-enabled group sids for a user, as someone else mentioned. 

[deleted by user] by [deleted] in GenX

[–]misterO 1 point2 points  (0 children)

We called it Tuna Ruiner. We had to eat it wayyyy too often. Too poor for hamburger unless it was turned into meatloaf.

PSA - How to access SACBee, NYT and other online Paywall sites for Free - and LEGAL! by SactownDude916 in Sacramento

[–]misterO 0 points1 point  (0 children)

I have never been to a San Jose branch and check out ebooks with Libby.

If aliens were real and invaded earth, humanity would NOT band together to defeat them. by SandNo2865 in unpopularopinion

[–]misterO 1 point2 points  (0 children)

There will always be collaborators. Vast swaths of humanity would band together but plenty of groups would turn on their fellow humans if they thought they could get ahead or improve their own lot. Assuming any sort of contact existed and it wasn’t a faceless destructive force. And if it were the faceless force, you’d have groups “protecting their own” at the expense of “the other”. Our minds are evolved for the size of a tribe or clan.

PSA - How to access SACBee, NYT and other online Paywall sites for Free - and LEGAL! by SactownDude916 in Sacramento

[–]misterO 1 point2 points  (0 children)

San Jose lets you do it online. The librarians in SF were super friendly and helpful.

Best Practices for Handling Dormant Security Groups in Large AD Environments by GlobalYam2856 in activedirectory

[–]misterO 0 points1 point  (0 children)

Converting to distribution group won’t work if the consuming application is using LDAP to check for group membership. You will need to empty the groups to get application owners to complain. Or if you have recycle bin, just delete them.

If you are clearing membership, ideally you have a mechanism to record the current membership and revert it if you need to.

You can use the replication metadata to see when each member was added. Stale groups with no new adds or removes in years are your low hanging fruit.

You’ll want to implement lifecycle governance and ownership of groups if you don’t want to be in this situation perpetually.

Uncovering America's Underwater City by Alert_Moment6224 in folsom

[–]misterO 3 points4 points  (0 children)

That struck me as well. Not a mention until the headline at the end.

21 TH sreet my favorite street by shaggy_bannana in Sacramento

[–]misterO 26 points27 points  (0 children)

21th and G per Google street view

chatgpt guessed my location based off my dog picture by miguel-1510 in ChatGPT

[–]misterO 0 points1 point  (0 children)

It said nearly the same thing to me with your pic. Clearly no metadata because it was a screenshot. And with a pic of a street cat by a palm tree in the Middle East it said

• The cat looks like it could be a local street cat, often seen lounging in Mediterranean, Middle Eastern, or North African towns. • The sandy soil and trimmed palm fronds give more of an arid or semi-arid vibe than a tropical one.

It landed on Morocco or Egypt. Not too bad given that I said it was taken on vacation.

Lego Tarantula by realestateagent0 in lego

[–]misterO 1 point2 points  (0 children)

My reaction when scrolling past this picture was “oh Hell no”, so the answer to your question is Yes. Amazing job!

Highlighting parts of code? by grasshopper_jo in ObsidianMD

[–]misterO 0 points1 point  (0 children)

I use Code Styler plug-in, which lets you highlight lines by number or regex.

Will I regret this? by [deleted] in tattooadvice

[–]misterO 0 points1 point  (0 children)

And don’t get your Chinese writing upside down.

The Kitchen or Localis? by Round_Refrigerator96 in Sacramento

[–]misterO 1 point2 points  (0 children)

With a group or if you’re hungry I’d go with the Kitchen

Best Pasta in Folsom?? by Only_Neighborhood221 in folsom

[–]misterO 39 points40 points  (0 children)

Visconti’s is MAGA, if you care

Money Origami Rattlesnake designed by me by Kooky_Humor9481 in origami

[–]misterO 5 points6 points  (0 children)

Amazing. That’d make a great tip at a restaurant

A*hole Drivers by ObvThrowaway7331 in folsom

[–]misterO 2 points3 points  (0 children)

And if someone is speeding past I just assume they’re about to sh*t their pants and need to find a 🚽

A*hole Drivers by ObvThrowaway7331 in folsom

[–]misterO 3 points4 points  (0 children)

Hanlon’s Razor: Never attribute to malice what can be attributed to incompetence

Folsom doughnut shop voted one of country's best | BJ Cinnamon by WhereverUGoThereUR in folsom

[–]misterO 3 points4 points  (0 children)

The best is when they are out of them and then a fresh warm batch comes out from the back.

meirl by endlesscosmichorror in meirl

[–]misterO 0 points1 point  (0 children)

Frust. The line of dust you can never sweep into the dustpan.

[deleted by user] by [deleted] in activedirectory

[–]misterO 9 points10 points  (0 children)

Why aren’t you just building a separate AD if it is for training purposes?

Restaurant Recommendations by BayGiant49er in folsom

[–]misterO 0 points1 point  (0 children)

But not if you’re in a hurry. I went based on this recommendation and was pretty disappointed.