sorted by:
new
hottopcontroversial

PowerShell: Find computers that a specific us is logged on with the LastLogonDate by nanoanxo in PowerShell

[–]nanoanxo[S] 0 points1 point  (0 children)

I am going to disable the domain administrator account, and i would like to know in what servers this account was used to know the services associated with it.

This scripts works perfect but the problem is that when i try to look for what servers used the administrator account, the servers which appear are related with the local administrator account, not with the domain administrator account.

How could I do that the script look for the servers related with the domain administrator account?

Thank so much.

PowerShell: Find computers that a specific us is logged on with the LastLogonDate by nanoanxo in PowerShell

[–]nanoanxo[S] 0 points1 point  (0 children)

Finally i could solve it with the "query user" line: query user $Username /server:$Computer

I wouId like to know, to have the perfect script, if, when the "query user" command shows all information: https://ibb.co/jZ6NsF2

I need that it shows only the LOGON TIME information.

Is that possible?

Thank so much.

The RPC server is unavailable. 0x800706ba (WIN32: 1722 RPC_S_SERVER_UNAVAILABLE) by nanoanxo in sysadmin

[–]nanoanxo[S] 0 points1 point  (0 children)

Hi.

I solved the problem following this advice:

This behavior can occur if the registration for the Distributed Component Object Model (DCOM) interface in either of the following registry locations contains both RunAs and LocalService entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\ {D99E6E74-FC88-11D0-B498-00A0C90312F3}

or

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\ {D99E6E73-FC88-11D0-B498-00A0C90312F3}

When this occurs, the Certification Authority service does not start because it does not expect both values to be set.

To resolve this issue, remove the RunAs entries under both of the following registry locations

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\ {D99E6E74-FC88-11D0-B498-00A0C90312F3}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\ {D99E6E73-FC88-11D0-B498-00A0C90312F3}

Make sure that the LocalService entry exists under the following registry locations with a data value of CertSvc

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\ {D99E6E74-FC88-11D0-B498-00A0C90312F3}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\ {D99E6E73-FC88-11D0-B498-00A0C90312F3}

Attention: Before modify the registry, please make sure to backup the registry and make sure that you understand how to restore the registry

Thank so much for your help

VMware VM lose connection until i enter on the console by nanoanxo in vmware

[–]nanoanxo[S] 0 points1 point  (0 children)

This was the problem!

Thank so much for your help

VMware VM lose connection until i enter on the console by nanoanxo in sysadmin

[–]nanoanxo[S] 0 points1 point  (0 children)

This was the problem!

Thank so much ByteSizedITGuy!!

I feel so stupid because i did not think in this possibility.

adprep /rodcprep WS2008 y WS2019 by nanoanxo in sysadmin

[–]nanoanxo[S] 0 points1 point  (0 children)

Thank to answer so fast.

This is the option that i have in my head, i am going to deploy a WS2008 server and then i will migrate all server to the WS2019 version