Posts

Windows System Administrator Interview Questions Part1

What is Active Directory? An active directory is a directory structure used on Microsoft Windows based computers and servers to store information and data about networks and domains. It is primarily used for online information and was originally created in 1996. It was first used with Windows 2000. An active directory (sometimes referred to as an AD) does a variety of functions including the ability to provide information on objects, helps organize these objects for easy retrieval and access, allows access by end users and administrators and allows the administrator to set security up for the directory. Active Directory is a hierarchical collection of network resources that can contain users, computers, printers, and other Active Directories. Active Directory Services (ADS) allow administrators to handle and maintain all network resources from a single location . Active Directory stores information and settings in a central database What is LDAP? The Lightweight D...

Access Based Enumeration in Windows Server 2008

Image
ABE filters shared folders visible to a user based on that individual user’s access rights, preventing the display of folders or other shared resources that the user does not have rights to access.   End users see only what files and folders they need for their responsibilities rather than spending time looking through lists of inaccessible folders and files. Administrators can be more productive because they do not have to help less-skilled users navigate through dense shared folders. Administrative inefficiencies can consume resources as surely as technical problems, and minimizing time-consuming problems help make any IT organization more productive.   ABE was introduced in Windows Server 2003 SP1 as an additional install, once installed you could manage ABE through a GUI, cmd-line tool or using the API's. we  have ABE in Windows Server 2008 and we have a GUI where you can enable this. Let me explain to you how you do it: 1. Open the "S...

DNS Changer Malware

Image
It has been observed that a malware called as DNS Changer Trojan which changes the DNS server entries in the computer systems and ADSL /VoIP router (home gateway devices) is widely propagating. The malware initially infects the Windows or Apple computers and subsequently gain access to routers connected to those systems to exploit weakness like default factory configurations, easily guessable passwords etc. Once exploited or accessed, changes the DNS settings in the said computers and devices and make them point to rouge foreign DNS servers. In a typical attack scenario, the unwitting users are enticed to download malware (similar to Trojan:BAT/Dnschanger.B ) which subsequently, tampers the Windows network settings (entry of DNS in the host file, adding a proxy in the browser settings) in the host computer and scans for the connected DSL devices and tries to login directly to the Admin interface to change the DNS settings in the routers.  By achieving this,...

How to Disconnect shared drives through Command Prompt

 Imagine that you browse through and connect to a share, entering your username and password to gain access. The problem is that you stay connected, and there’s no visible way to disconnect yourself. If you try and shut down the other PC, you’ll receive a message that users are still connected. So let’s disconnect! Open up a command prompt, and then type in the following: net use This will give you a list of the connected drives, including the ones that aren’t actually mapped to a drive letter. To disconnect one of the connections, you can use the following command: net use /delete \\server\sharename For example, in this instance we’d disconnect like so: net use /delete \\192.168.10.100\root$ Now when you run the “net use” command again, you’ll see that you’ve been properly disconnected. If you wanted to actually connect to a share without mapping a drive letter, you can do the following: net use /user:Username \\server\sharename Password You could then just ...

How to Change the Logon Screen Background in Windows 7 through Group Policy

Image
First, Create a jpg file you want as logon screen background which should be less than 256kb, name it as backgroundDefault.jpg and place it inside a server share, ex. \\servername\share\backgroundDefault.jpg Copy our wallpaper file to the user’s workstation. Instruct Windows to use our file instead of the default %WinDir%\System32\oobe\background.bmp file. With the  Group Policy Preferences , we can copy our wallpaper to the user’s computer, while reserving the right to pull it off if the computer leaves the scope of the GPO.  To copy files, open GPMC and follow these steps:

Script to Backup folder with date

This tutorial will show you how to use a simple Windows Batch file and the task scheduler to create an automated daily backup. We will use the date variable to backup the files into folders with  Date as the folder name. First you will need to open notepad. The easiest way is going to start > run and typing notepad. copy and paste the following to the notepad  and set drive as the destination drive and folder where do you want to backup (here its my D drive and folder name is BCK,and my source folder is C:DVR )and save it with the .bat extension

Creating a Starter GPO in Windows Server 2008

Starter GPOs (Group Policy Objects) can be created or added to a domain in a few ways. A starter GPO can be created from scratch using a blank template, it can be created by restoring from a starter GPO backup folder, or it can be imported from a provided Starter GPO cabinet file. To create a new starter GPO, follow the below steps: 1. Log on to a designated Windows Server 2008 administrative workstation. 2. Open the Group Policy Management Console. 3. Expand the domain to expose the Starter GPOs container and select it. 4. Verify that the starter GPO functionality is enabled by viewing the right pane. 5. Right-click the Starter GPOs container in the left pane, and select New. 6. In the New Starter GPO dialog box, type in a name for the new starter GPO, and enter a comment to describe what will be included in this starter GPO and when and where it should be applied as a template. 7. Click OK to create the new starter GPO.