@scottalanmiller said in Gaming - What's everyone playing / hosting / looking to play:
@G-I-Jones said in Gaming - What's everyone playing / hosting / looking to play:
Just finished up Shadow of the Tomb Raider.
How did you like it?
I got sucked in honestly. Initially downloaded it and put it aside because I was playing something else. This is typical of me. Eventually started playing it and couldn't put it down. Seriously considering going back to play the other Tomb Raider PS4 releases.
Just finished up Shadow of the Tomb Raider.
And?
His budget is $1000.
@wirestyle22 said in Good Specs to Build a Gaming PC (asking for a friend):
This really is the best advice. It's sucks though because a few clicks on that site and you have yourself a $2000 build.
@Supreme_Overlord said in Good Specs to Build a Gaming PC (asking for a friend):
@scottalanmiller okay, didn't know if that would help with being able to perform faster. What size SSD would be good then?
Modern games are starting to get big. Anyone who is a serious gamer needs to have at LEAST 2TB, especially going into the next gen consoles, you'll be deleting games just to make room for more as they come out. It's something I hear about with all my friends on PS4 who still have the 1TB factory HDD. The SAMSUNG 1TB 860 EVO is a pretty decent SSD, with a price point around $160 you could double up eventually, or save a few bucks to get the 2TB right off the bat. If the benefits of SSD don't sway you, then a 4TB HDD can be found for like $100.
I went to lunch and came back and boy did this thread get juicy. @scottalanmiller , as always your input is both appreciated and needed. I'm really trying to learn all I can about everything, and you all (to include @Dashrender , @DustinB3403 regularly) come through time and time again to school me. For that I'm eternally grateful.
The grand silver lining to any of this is that I've not only got more experience now with things I've previously never touched (i.e. multi-domain Exchange deployments and AD trusts), but I'm learning too that some things I'm questioning like "why do we need another domain for this?" are apparently more rooted in my own understanding of things than inexperience on my part, which means despite all the failures on his or my own part, I am learning.
I've talked to the boss and he agreed that we adjust the trust and make them the same forest. I'm not going to push the issue any further but am going to try to get as much out of the situation as possible for me.
@Dashrender All of this could have been avoided if I would have just double checked the boss’s work in the first place. Lesson learned.
I think his thoughts were that having students on a separate domain (.net) provided some sort of security measure with accessing staff domain shares and the like (.org), because they would be .net users.
@dbeato said in Exchange - Different Domain, Same Forest Users:
@G-I-Jones said in Exchange - Different Domain, Same Forest Users:
Okay, so @dbeato got me thinking about forests, so I ran
Get-ADForestfrom each DC and they show nothing but themselves. I'm thinking this is a DNS issue or the Trust might have not been configured properly. Going to start poking around there and see what I can find.
No, you have two different Forest plain and simple. Each Exchange is separate in each domain.
Yup, just checked it out and they are two separate Forests. Forest Trust, rather than Tree-Root Trust. Now I have to get permissions to change this or researching if hopping domains with Exchange is supported.
Okay, so @dbeato got me thinking about forests, so I ran
Get-ADForest
from each DC and they show nothing but themselves. I'm thinking this is a DNS issue or the Trust might have not been configured properly. Going to start poking around there and see what I can find.
yeah - but us techies rarely (I've never seen anyone talk about it) call it that - we know that a trust exists between all domains in a Forest, that's a primary component to what makes them a forest.
Ah, so what trust that's different than the automatic Tree-Root of inter-forest domains are we talking about?
@dbeato said in Exchange - Different Domain, Same Forest Users:
@dbeato said in Exchange - Different Domain, Same Forest Users:
@G-I-Jones said in Exchange - Different Domain, Same Forest Users:
Are this disjointed domains with a domain trust or domains in the same forest? The NIC should just point to the DCs doesn't matter which one has the preference as they should have both domain zones. Most Domain Controller are Global Catalog as well without any extra configuration so I do not recommend disabling it.
Domains are in the same forest and have a trust.
Users are able to authenticate to .org with only .org credentials from .net, .org users can access anything on .net <- This is my boss, who set it up, explaining it to me.
How can they be in the same forest in a trust? That is impossible.
They either have a domain trust between two domains or two domains in a forest.
Negative, it's called a Tree-Root Trust. It exists between domains in the same forest.
Are this disjointed domains with a domain trust or domains in the same forest? The NIC should just point to the DCs doesn't matter which one has the preference as they should have both domain zones. Most Domain Controller are Global Catalog as well without any extra configuration so I do not recommend disabling it.
Domains are in the same forest and have a trust.
Users are able to authenticate to .org with only .org credentials from .net, .org users can access anything on .net <- This is my boss, who set it up, explaining it to me.
@dbeato said in Exchange - Different Domain, Same Forest Users:
If they are in the same forest it should not be an issue.
@dbeato , you're an Exchange guy right? Can I pick your brain a bit?
Should the NIC on the one Exchange server residing on the .org domain (the one I want to add the .net domain user mailboxes to) have the DNS set to prioritize .net before .org? What's the best practice here?
Additionally, the Exchange server in question (residing on .org), has the default Accepted Domain set to the .org domain, if I change that to the .net domain, is that going to throw a wrench in things or is that easily reversible? I don't have a full understanding of what could happen if I changed that, and I'm scared to try it at this juncture. Does my other Exchange server for the .org domain share this setting or is it specific to this server?
Some things I've tried so far:
Disable Global Catalogue on .net DC via Administrative Tools>AD Sites & Services>NTDS Setting>Properties. Reboot, re-enable.
Restarted Services>Microsoft Exchange Active Directory Topology on Exchange Server in question.
Get-ExchangeServer -Identity "<SERVERNAME>" -status | fl
shows .org Global Catalogue.
@Dashrender said in Exchange - Different Domain, Same Forest Users:
is your new AD pointing to a Global catalog for the .net domain?
That definitely sounds like what's going on here. I'm looking into that now, thank you.
The boss made an additional domain (.net) in the forest after I made my second Exchange Server on our current domain (.org).
They have a relationship, but don't replicate.
I'm trying to add mailboxes for users on the .net domain's AD.
I've added .net to the Accepted Domains via Exchange Admin Center, and ran /PrepareAD on .net DC. Rebooted.
I can make any user in the .org AD a .net address, but cannot get the "existing users" to populate from the .net AD when creating a mailbox.
What am I missing here?
@Dashrender said in "Access Denied" RENAME.bat:
Manually running the script won't give you the same results you would get running it via GPO - FYI.. there are subtle differences.
In this case it's the same.
Okay so the above option wasn't working for me as I need something I can automate fully. I still haven't figured it out, but I'm getting closer.
I was able to to do a little better with Powershell.
I made a .bat file with this:
@ECHO OFF
PowerShell.exe -NoProfile -Command "& {Start-Process PowerShell.exe -ArgumentList '-ExecutionPolicy Bypass -File ""\\share\path\DisableEdge.ps1""' -Verb RunAs}"
And then the DisableEdge.ps1 file with this:
REN C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe Microsoft.MicrosoftEdge_8wekyb3d8bbwe_remove
This still prompts UAC, but only requires a YES or NO selection. So life is easier but I'd still love to have a version that just works by itself.
@JasGot Is this code still supposed to be prompting me the UAC?
I'm trying to make a batch RENAME file work for a client machine:
taskkill /im MicrosoftEdge.exe
taskkill /im MicrosoftEdgeCP.exe
taskkill /im MicrosoftEdgeSH.exe
RENAME C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe Microsoft.MicrosoftEdge_8wekyb3d8bbwe_remove
pause
Most of the script works, but the RENAME function gets hung up on "Access Denied"
If I log into the target machine with my own credentials, I still get "Access Denied" unless I run via Elevated Powershell.
From what I've read, I can't include anything into the script to make it run elevated, besides making a shortcut that's "run as admin" and points to the .bat, but this will be for use as a GPO, and it doesn't like shortcuts.
I was reading about using psexec instead, but I'm wondering if there isn't an easier way before I have to run a script to install a thing to run a script. Or you do you think I just install psexec anyway because that's a thing I should have included in my image in the first place?