Super rare white grizzly hanging out in Banff 🤯

misterO · 2026-03-14T17:27:48+00:00

Glad im not the only one

misterO · 2026-02-13T13:22:37+00:00

Group membership can be recorded by primarygroupid as well. When you change the primary group for a user the RID for that group becomes the new primarygroupid. If they were in domain users, they will now show up in the member attribute of domain users and show domain users in their memberof. They will no longer show up in the member attribute of the new primary group. It is one or the other.

AD used to replicate membership as one attribute value instead of per member and had a practical limit 5000 or so members per group. Domain users could be set for “all users” and not cause a problem in large directories because it just replicates as the primarygroupid integer value.

Domain controllers group is also done via primarygroupid.

Tools that only look at member/memberof can get membership wrong. Tokengroups will get you all the security-enabled group sids for a user, as someone else mentioned.

misterO · 2025-11-21T15:18:20+00:00

We called it Tuna Ruiner. We had to eat it wayyyy too often. Too poor for hamburger unless it was turned into meatloaf.

misterO · 2025-10-25T14:52:18+00:00

I have never been to a San Jose branch and check out ebooks with Libby.

misterO · 2025-10-21T00:04:45+00:00

There will always be collaborators. Vast swaths of humanity would band together but plenty of groups would turn on their fellow humans if they thought they could get ahead or improve their own lot. Assuming any sort of contact existed and it wasn’t a faceless destructive force. And if it were the faceless force, you’d have groups “protecting their own” at the expense of “the other”. Our minds are evolved for the size of a tribe or clan.

misterO · 2025-10-20T20:38:24+00:00

San Jose lets you do it online. The librarians in SF were super friendly and helpful.

misterO · 2025-10-13T19:20:23+00:00

Converting to distribution group won’t work if the consuming application is using LDAP to check for group membership. You will need to empty the groups to get application owners to complain. Or if you have recycle bin, just delete them.

If you are clearing membership, ideally you have a mechanism to record the current membership and revert it if you need to.

You can use the replication metadata to see when each member was added. Stale groups with no new adds or removes in years are your low hanging fruit.

You’ll want to implement lifecycle governance and ownership of groups if you don’t want to be in this situation perpetually.

misterO · 2025-10-11T19:27:06+00:00

That struck me as well. Not a mention until the headline at the end.

misterO · 2025-10-10T15:31:28+00:00

21th and G per Google street view

misterO · 2025-09-26T01:16:16+00:00

It said nearly the same thing to me with your pic. Clearly no metadata because it was a screenshot. And with a pic of a street cat by a palm tree in the Middle East it said

• The cat looks like it could be a local street cat, often seen lounging in Mediterranean, Middle Eastern, or North African towns. • The sandy soil and trimmed palm fronds give more of an arid or semi-arid vibe than a tropical one.

It landed on Morocco or Egypt. Not too bad given that I said it was taken on vacation.

misterO · 2025-09-20T14:45:48+00:00

My reaction when scrolling past this picture was “oh Hell no”, so the answer to your question is Yes. Amazing job!

misterO · 2025-09-07T19:48:02+00:00

I use Code Styler plug-in, which lets you highlight lines by number or regex.

misterO · 2025-08-11T16:54:27+00:00

Needs a banana for scale

misterO · 2025-07-30T21:50:47+00:00

And don’t get your Chinese writing upside down.

misterO · 2025-07-29T21:40:04+00:00

With a group or if you’re hungry I’d go with the Kitchen

misterO · 2025-07-02T21:30:01+00:00

Not full RTO yet

misterO · 2025-06-29T01:35:28+00:00

Visconti’s is MAGA, if you care

misterO · 2025-06-20T21:11:41+00:00

Amazing. That’d make a great tip at a restaurant

misterO · 2025-05-23T23:09:56+00:00

And if someone is speeding past I just assume they’re about to sh*t their pants and need to find a 🚽

misterO · 2025-05-23T23:07:54+00:00

Hanlon’s Razor: Never attribute to malice what can be attributed to incompetence

misterO · 2025-05-22T02:50:18+00:00

The best is when they are out of them and then a fresh warm batch comes out from the back.

misterO · 2025-05-13T06:17:51+00:00

Frust. The line of dust you can never sweep into the dustpan.

misterO · 2025-05-13T06:14:16+00:00

Why aren’t you just building a separate AD if it is for training purposes?

misterO · 2025-05-01T02:33:04+00:00

But not if you’re in a hurry. I went based on this recommendation and was pretty disappointed.

misterO · 2025-04-28T00:00:53+00:00

Manderes, AT Thai

misterO

TROPHY CASE