I have seen that error or something similar from my workstation. It required deleting the cache for the mmc snapin.

It's so funny that you posted this. I just thought about this while on my way to work today. I was also wondering what the consensus would be.

@jaredbusch said in Removed computer form AD need user profile:

Which version of this program? Do I need to buy it?

If you are just keeping the clients as they are and just need to adjust the profiles, this is the one you want - http://www.forensit.com/domain-migration.html

If you are setting up new systems and want to migrate a profile to a new system, you would use this one-
http://www.forensit.com/move-computer.html

Tranzwiz (second option) is free for personal use but only 79.95 for pro, per tech.

@dbeato said in Removed computer form AD need user profile:

@wrx7m said in Removed computer form AD need user profile:

@dafyre said in Removed computer form AD need user profile:

I've done this a time or two...

• Unjoin computer from AD... Reboot
• Log in as admin, create NEW user account with same username as AD username
• Grant new user account full control on the C:\Users\username folder.
• Reboot, and Login as new user. All their stuff should still be there.

What about the SID in the profilelist reg key?

That is what ForensiIT does in the background.

Right, I know that. I was asking about when dafyre said he used to do it manually with the steps he outlined.

They are throttling. I just went through a 100 mailbox migration and a user with a 15 GB mailbox took 3 days. I have a 150/150 Mbps dedicated fiber circuit.

I have had some fairly annoying issues with Webroot after deploying it to ~140 endpoints late last year. One issue was related to having the task manager and firefox (and randomly other applications) open, which caused the system to grind to a halt. It took quite a long time to figure out that Webroot was causing it. I ended up finding the thread after weeks of searching. The problem is that when you disable the AV, it didn't correct it. It is pretty damn difficult to troubleshoot performance issues when the task manager can't be opened. Anyway, I ditched it on my personal Windows 10 machines and have not had the issues since. I opened a case and it was determined to be the identity application portion (DLP) and upon disabling it, would mostly prevent these issues. However, I never really got a real fix and the case might even still be open.

The second issue is one I just found. After trying to deploy some new Windows 10 desktops and using Ninite Pro and PDQ Deploy to push some software and trying to connect using a pass-through authentication via dameware mini remote, I wasn't able to get them to connect to the system; Not able to connect to admin shares and asking to login, but the login wouldn't work. The problem was very intermittent. I tried different drivers and uninstalled updates and it started working. Just when I thought it was nailed down, it would stop working. I found that 1703 had an issue with similar symptoms, but it had been patched in August of 2017. I applied the workaround anyway, but it didn't help. Finally, I found a thread about Webroot and netlogon errors causing issues logging in. According to the thread, this issue has been going on for months, but hadn't affected me until now, as I wasn't using Windows 10 to a large degree in my environment. Supposedly, it will be fixed by an update that is to be released very soon.

All that to say, I am less than impressed by the product and the team that is dealing with these issues, so I am looking for replacements.

What are you guys and gals using and would recommend?

@momurda said in Webroot SecureAnywhere Business Replacement?:

This task Manager behavior is from Webroot?
I see it occasionally; one developer in particular says it is always a problem.

https://community.webroot.com/t5/Webroot-SecureAnywhere-Complete/Task-Manager/td-p/309032

According to the most recent post in that thread (edit - the most recent post is currently 2 weeks old), a beta release fixes this issue. Being that the thread started in December of 2017, it goes to show how long it takes them to fix things.

I have had to do this twice already. It is a PITA. I thought the first time was bad, so I made notes and kept all sorts of records. The next time it was even worse, as they required more proof of ownership of licenses beyond what they required the previous time. In 2014, they accepted a Dell invoice from 2011 for Exchange 2010 and 60 user CALs as proof of purchase. In 2016, they demanded the corresponding Microsoft agreement numbers, which we didn't have, because it was purchased under an account controlled by an MSP. It took weeks to sort that out.

Another thing was that they asked for counts of all OEM devices. How many of each version of Windows; 7 pro 8 pro, 8.1 pro and then have 5 pictures of each of their stickers.

Every request they submitted was responded to by me within a day. Their response to any questions I had took at least a week to respond to and were usually met with more questions by them and me. I ended up having to buy some RDP licenses, as I thought they were for concurrent sessions, not per user.

The 2016 audit started in September and ended in December.

Their unbelievably convoluted licensing schemes are absolutely ridiculous.

The 2 VMware audits I had, were 10 minutes of supplying them with how many hosts, and sockets each had, how many vcenter servers and how many VMs on which versions.

I just ran into something similar with Windows 10 connecting to 2012 R2 RDG and having the remember credentials checked. It would not let anyone login after it remembered their creds.

It requires a registry entry for the client. Not sure if it would benefit you, but here it is.

reg.exe Add "HKCU\Software\Microsoft\Terminal Server Client" /V "RDGClientTransport" /T REG_DWORD /D "1"

@dbeato said in Windows 10 Cumulative Update for 1709 KB4103727 cause RDP to not connect:

Saw this today:

https://www.askwoody.com/2018/problems-with-credssp-updates-cve-2018-0886-breaking-rdp-connections/

I had been meaning to go back and look at the article from April referencing the credssp cve, but haven't had a chance. According to what others are saying there, any cumulative update for the server from March 2018 and later should have the patch and will allow connections.

That is why I tell people the policy is to reboot every night before you leave for the day. Most people do... some don't. This is the exact reason why this is the policy.

@flaxking said in Anyone Attempting Deploying Printers through SaltStack?:

@scottalanmiller This makes me miss my old job. I was working on replacing all of our GPOs with Salt and printer deployment was coming up. However, as a solo SMB IT employee, I had an insane amount of time on my hands.

I am a solo SMB employee and have no time on my hands. We just hired about 10 people in the last 4 weeks and 2 start in a week and 2 more possibly the week after. No real time to do anything more than setup new employees.

@dbeato said in Handling user AppData - Windows:

@wrx7m said in Handling user AppData - Windows:

@bbigford said in Handling user AppData - Windows:

@dbeato said in Handling user AppData - Windows:

I responded to you on another forum but basically I said was Sync bookmarks through Firefox and Chrome Sync with their accounts. For signatures copy it from a sent message.

Relying on users to log in is too much manual. Needs to be fully automated where possible.

Are you the one that creates their signatures in the first place? If not, they can copy and paste that from a sent message in a few seconds. It is way easier than creating a signature from scratch.

Edit: Also, how often do you have a system fail this bad, where copying and pasting a signature is TMW?

Unless they have multipe RDS servers

@dbeato said in Handling user AppData - Windows:

@wrx7m said in Handling user AppData - Windows:

@bbigford said in Handling user AppData - Windows:

@dbeato said in Handling user AppData - Windows:

I responded to you on another forum but basically I said was Sync bookmarks through Firefox and Chrome Sync with their accounts. For signatures copy it from a sent message.

Relying on users to log in is too much manual. Needs to be fully automated where possible.

Are you the one that creates their signatures in the first place? If not, they can copy and paste that from a sent message in a few seconds. It is way easier than creating a signature from scratch.

Edit: Also, how often do you have a system fail this bad, where copying and pasting a signature is TMW?

Unless they have multipe RDS servers

Good point. I didn't see RDS in the OP, though. Also, I would hope his RDS servers are regularly backed up (including user profiles)

@bbigford said in Handling user AppData - Windows:

@wrx7m said in Handling user AppData - Windows:

@dbeato said in Handling user AppData - Windows:

@wrx7m said in Handling user AppData - Windows:

@bbigford said in Handling user AppData - Windows:

@dbeato said in Handling user AppData - Windows:

I responded to you on another forum but basically I said was Sync bookmarks through Firefox and Chrome Sync with their accounts. For signatures copy it from a sent message.

Relying on users to log in is too much manual. Needs to be fully automated where possible.

Are you the one that creates their signatures in the first place? If not, they can copy and paste that from a sent message in a few seconds. It is way easier than creating a signature from scratch.

Edit: Also, how often do you have a system fail this bad, where copying and pasting a signature is TMW?

Unless they have multipe RDS servers

@dbeato said in Handling user AppData - Windows:

@wrx7m said in Handling user AppData - Windows:

@bbigford said in Handling user AppData - Windows:

@dbeato said in Handling user AppData - Windows:

I responded to you on another forum but basically I said was Sync bookmarks through Firefox and Chrome Sync with their accounts. For signatures copy it from a sent message.

Relying on users to log in is too much manual. Needs to be fully automated where possible.

Are you the one that creates their signatures in the first place? If not, they can copy and paste that from a sent message in a few seconds. It is way easier than creating a signature from scratch.

Edit: Also, how often do you have a system fail this bad, where copying and pasting a signature is TMW?

Unless they have multipe RDS servers

Good point. I didn't see RDS in the OP, though. Also, I would hope his RDS servers are regularly backed up (including user profiles)

RDS is separate from file services (where RDS is used at remote offices). All systems are backed up (VMware/Veeam environment). Doesn't apply to this thread though so I didn't bring it up.

I figured It was more of an aside.

After seizing the roles on DC-B, you could then remove DC-A from AD, DNS, etc (if it is an older version, you would have to do metadata cleanup in ADSIedit). Afterward, you could add a new server, promote it to a DC and be back up and running.

Looks like it has resolved on its own. 3ms and 4ms for all IPs mentioned above.

I was thinking of upgrading my GF's family's wireless, as they are still on 802.11g and could definitely use the upgrade. I have been using a single UAP AC lite for a couple years now and like it. I have been using my laptop with the controller installed on it, but only launch the controller when I need to update the firmware or change the config.

Obviously, I don't want to be the only one that can set it up/manage theirs. Are there other options for initial setup and/or ongoing management of Unifi APs?

@bnrstnr said in Ubiquiti Unifi APs - Do You Need a Controller?:

@wrx7m

Well, if I could read on the app, I would have answered my own question. LOL

Thanks

I noticed that in Windows 10, opening task manager while logged in as a standard user, displays the UAC login prompt. I see other people have had this behavior in prior versions, but am wondering why the hell this happens.

I haven't tried it yet, but posts show that a user can enter in their creds to open it. If that is the case, what is the point of displaying the prompt to begin with. In Windows 7, it would open the task manager and certain features would prompt to elevate to admin only if you chose them.

Is this the new normal?

Firefox started changing version numbers like every month, a few years ago.