@gjacobse said in What Are You Doing Right Now:
@scottalanmiller said in What Are You Doing Right Now:
For the second time in a week, a light fixture fell off of the wall in a room that no one was in and shattered all over the place. Not the bulb, a glass fixture.
uh - weird..
@thwr said in What Are You Doing Right Now:
@Grey said in What Are You Doing Right Now:
@thwr said in What Are You Doing Right Now:
One of my DCs just died. Noticed that the hard drive was nearly full (probably about time to replace SCOM with Icinga). Told the VM to shut down, took it nearly an hour. Added another 40GB to the VMs VHD, started it and bang: Bluescreen, disk full. The VM went into a reboot loop afterwards, ending up either in the recovery console or another blue screen.
Well, couldn't expand the filesystem this way, so I grapped a gparted ISO and the DC was online again just 5 minutes later.
Are you running a 2003 DC? You can expand disks on 2008 and 2012 without a shutdown.
2008 R2 at the moment (2003 is EOL, you shouldn't even think about running it in 2017).
Yes, you can expand filesystems during runtime (that's what I am doing in most cases), but you can't expand an underlying Hyper-V Gen 1 VHD while the VM is powered on.
<.<
Upgrade.
@thwr said in What Are You Doing Right Now:
One of my DCs just died. Noticed that the hard drive was nearly full (probably about time to replace SCOM with Icinga). Told the VM to shut down, took it nearly an hour. Added another 40GB to the VMs VHD, started it and bang: Bluescreen, disk full. The VM went into a reboot loop afterwards, ending up either in the recovery console or another blue screen.
Well, couldn't expand the filesystem this way, so I grapped a gparted ISO and the DC was online again just 5 minutes later.
Are you running a 2003 DC? You can expand disks on 2008 and 2012 without a shutdown.
@DustinB3403 said in What Are You Doing Right Now:
But come on $10 /month in savings is $120 a year!
Tripping over dollars to pick up dimes.
@scottalanmiller said in What Are You Doing Right Now:
Took the girls out for a walk to find pizza.
I see you posting about pizza an awful lot. Does Italy not have BBQ?
Is there an article for that on technet? I don't want to screw it up.
@dafyre said in Random Thread - Anything Goes:
@JaredBusch said in Random Thread - Anything Goes:
@DustinB3403 said in Random Thread - Anything Goes:
This is another pretty cool piece of tech.
They finally have some kind of working prototype? Nice. Been seeing it posted by gullible people that forward shit they know nothing about on Facebook for a couple years.
I've been hearing about it for a couple of years. It seems... interesting. I've been keeping my eye on it.
The trick is to actually keep producing it. Skully helmets is a great example of why you shouldn't pre-order and/or support indiegogo/kickstarters.
I use Waze all the time; every day, really. I've seen what you describe, though my experience is a little different. It seems that it sends the arrival notifications based on anticipated arrival, so +/- 5 minutes of your actual arrival. It's worse on long trips since it will drop the network concoction. and then no notification will be sent despite how it is still running and everything looks OK.
I recommend that you post on their forums and/or research what they have to say there about this. It's probably way more informative than posting here.
@Tim_G said in Certificate Authority Quagmire:
@Grey said in Certificate Authority Quagmire:
@Tim_G said in Certificate Authority Quagmire:
On the DC, can't you request another one from your CA via certlm.msc?
The DC is the CA.
Not good... But I guess it is what it is. So let's just focus on fixing it.
Is starting over an option?
If not...
How is your pki set up? How many tiers? From where did you import the wrongly named cert?
No. Unsure; I inherited this and I'm hazy on CAs. A previous DC was in use and is decommissioned, but the old cert was imported to keep some cisco products from complaining.
@Tim_G said in Certificate Authority Quagmire:
On the DC, can't you request another one from your CA via certlm.msc?
The DC is the CA.
@scottalanmiller said in What did you have for lunch or dinner today?:
Fish sticks for dinner. Very fancy.
@Tim_G said in Certificate Authority Quagmire:
Have you had a chance to replace the certificate yet?
I have a new wildcard cert. I'm not sure I want to use that on the DC. Has anyone done that? I'm unsure if it's a best practice or not.
@Dashrender said in Certificate Authority Quagmire:
That seems weird why would you import a certificate from another active directory server instead of making a new one or requesting a new one
I can advise, suggest and document, but at the end of the day I still have to work with what I have and follow the business directive. Unfortunately, this is one of those times.
@Tim_G said in Certificate Authority Quagmire:
@Grey said in Certificate Authority Quagmire:
@Tim_G said in Certificate Authority Quagmire:
I used a procedure similar to the one in the URL you linked, in a production environment. The case I used it in was to completely remove a PKI and create a new one. I know a little different than in your case, but as long as you do not delete anything you need you will be fine.
I have two questions to ask that will determine whether or not I can help you:
What command did you use to get that output in PS?
For what purposes are you using your PKI?
... and because I can't count
3. Is it the subject name of the certificate that is not correct? Not sure I understand what you are referring to.
- Certutil. Use it on any windows system that's connected to your domain.
- Internal validation, especially on VDI and internal web servers.
- Yes.
You can't change the name on the certificate. You will need to request a new one from your DC which you can do via certlm.msc.
How did the DC get a certificate with an incorrect name in the first place?
Imported from an old DC.
About to log in to ARK. Y'all can join me.
@nadnerB said in Random Thread - Anything Goes:
So eastern Australia is baking in 40C + weather and has been for a week and a bit... meanwhile on the west side, I'm in long pants and a jumper, we've had our years worth of rain in a week and I haven't seen the sun for several days due to cloud cover.
Bit different.
Also, Ali G was right. "West side is the best"
It was 80f yesterday, and snow is expected tonight.
@Tim_G said in Certificate Authority Quagmire:
I used a procedure similar to the one in the URL you linked, in a production environment. The case I used it in was to completely remove a PKI and create a new one. I know a little different than in your case, but as long as you do not delete anything you need you will be fine.
I have two questions to ask that will determine whether or not I can help you:
What command did you use to get that output in PS?
For what purposes are you using your PKI?
... and because I can't count
3. Is it the subject name of the certificate that is not correct? Not sure I understand what you are referring to.
