joeware – never stop exploring… :)

I recently received an email of: <SNIP> I have a bunch of previously sensitive&protected accounts where I like to enable inheritance..

Out of curiosity how many people need to run my tools on pre-Windows Server 2008 machines?

While Microsoft put a weak “important’ rating on CVE-2020-0601 the NSA (yes that NSA) has called it critical and severe.

So try two… When I updated the web pages last night, I apparently updated a page that didn’t have the newer download mechanism in it so ended up breaking the download for AdFind.

The latest version of AdFind, V01.52.00, is now released.

I have stripped out the debugdebugs and the expiration code as I am thinking at the moment that this will be the last build of V01.52.00 barring any bug reports that are serious enough to deal with… I will use it at work for a week and see if there are any

Looks like wordpress updated something… Everything has gone cuckoo!

AdFind V01.52.00 is close to release.

After, more than <cough>two decades<cough> in a professional role of some sort of ops, engineer, architect, dev ops person in IT or Information Security in very large multinational Fortune 1-50 sized companies I have grown to dislike complexity in a way t…

I have a friend at work named AJ, AJ Plichta, if you must know.

For Windows Server 2019 and newer OSes I have decided to add in the numeric portion of the DSA Version String to the “Directory” string that is listed at the top of every run in the header… Any thoughts, comments, and/or feedback before I lock into the de…

I have had quite a few people ask me to get to the getting and get the jwDCLocator.pl script made available for them to start looking at it.

Microsoft has a specific method for returning basic information that can be used for finding what site (and what is the next closest site) for any given machine that reaches out to a domain controller with a LDAP query.

No changes to the script… $ uname -mrs FreeBSD 12.0-RELEASE amd64 $ perl jwDCLocator_linux.pl /domain:k16tst.test.loc jwDCLocator V01.02.00pl Joe Richards (support@joeware.net) March 2019 Initializing Logging to logfile 20190326-2229-jwDCLocator.log… Read…

Getting very close to being ready to release the reasonable effort platform agnostic version perl script that will run through the DC Locator process.

So you are sitting around and suddenly want to put serviceConnectionPoint objects into your LDS instance and suddenly realize that they didn’t put the SCP objectclass definition in LDS nor is it an optional LDIF file to add… So I created one using ADSchem…

[Sat 03/16/2019 16:41:06.51] E:\DEV\perl\jwDCLocator>perl jwdclocator.pl /domain:k16tst.test.loc jwDCLocator V01.01.00pl Joe Richards (support@joeware.net) March 2018 Initializing Logging to logfile 20190316-1641-jwDCLocator.log… Reading configuration file

Apologies, the tool downloads were broken for a little bit there.

1.

…Yeah I know, I hate it too… joe

1.

0.

0.

Active Directory location capability is all based on open standards based DNS SRV records which are designed to offer location capability for ANY services.

While working on some posts about writing code for leveraging Active Directory I realized that a very weak point I have run into with many (perhaps most) apps is the logging, particularly for use in troubleshooting and/or debugging of issues.

I previously wrote that many applications that are using Active Directory aren’t meeting even the lowest bar for proper Active Directory integration.

A while back I said, hey got a new job, will be spending more time posting stuff and learning news things and sharing that new learning.

The pictures do not do this justice.

If you intend to sign up for a digital wallet anytime in the future consider using coinbase (I chose it[1]) and also consider using the following link for joining.

I think I have sorted out the issues with the downloads and have switched the www.joeware.net portion of the site to use https: scheme by default.

Slowly getting there… For the blog, it should always force to a scheme of https://.

I have received some emails asking why this blog is considered insecure by Chrome.

I spent some time this weekend relearning something I learned 15 or so years ago… How to make 2.5.5.14 (DN with String) attribute schema changes that actually work.

Unfortunately after nearly 17 years (first awarded October 2001) of being re-awarded the MVP Award year over year for an ever name changing space around Windows Server Directory Services I was not awarded this year.

I posted about this about a decade ago but going through email this morning I found at least 8 or 9 questions from people in some way shape or form related to it so I figured I would re-post and maybe it will show up search engines more or perhaps people…

Forest/Domain Mode = WinThreshold??

So many large companies over the years have struggled with information being spread (synced) all over the damn place within their corporate network boundaries.

Years ago, 13 years ago specifically, I wrote a post about people who allow non-expiring service / application / generic IDs.

. .. … …. . ..

[Updated: 2018/07/07] There are a series of control access rights (CARs) that are specifically tied to granting permissions for returning “Replicated Changes” which are changes to the Directory Service (DS) that would be (and are if everything is working…

The reg key hklm\system\currentcontrolset\services\lanmanserver\parameters has a specific value you can set under it called EnableECP.

This is the magic reg key if you use Outlook 2016 for POP3/IMAP and other want to not have to re-do all of your settings… Computer\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles

So annoying…. reg add HKCU\Software\Microsoft\Office\16.0\Common\Graphics /t REG_DWORD /v DisableAnimations /d 1 /f

I picked up SnagIt some time ago and I didn’t initially use it very much because it felt a bit overwhelming next to the built-in simple Snipping Tool but I recently forced myself to sit down with it and sort it out and I am glad I did because it is absolu…

Windows 2000 Active Directory was released to manufacturing 18 years ago on December 15, 1999.

Active Directory is now an adult.

As I find myself digging through the AdMod source code adding functionality and fixing small bugs here and there I realize that someone much smarter than I wrote the original version.

AdMod work is coming along nicely… E:\DEV\cpp\vs\AdMod\Debug>adfind -hh .

…AdMod just compiled start to finish under Visual Studio 2017… Only 3 evenings of fixing compiler errors and linker errors!

Started the port of AdMod from C++ Builder to Visual Studio 2017… This will be much more difficult and involved than AdFind, no room for mistakes in AdMod since it actually changes things.