• 如何手動刪除RMS Server註冊在AD裏的SCP?

    方式一

    在AD站台及服務裏,在點選「檢視」>「顯示服務節點」後,即可以看到下圖的選項,直接將RMS SCP刪除。

    clip_image002

    clip_image004

    方式二

    1. 安裝Support Tools,執行adsiedit。

    2. 找到以下位置

    Configuration [your domain]

    CN=Configuration, DC=yourdc, dc=com

    CN=Services

    CN=RightsManagementServices ->刪除之

    CN=SCP -> 刪除之

    clip_image002[5]

    方式三

    1. 下載Rights Management Services Administration Toolkit with SP2並安裝

    http://www.microsoft.com/downloads/details.aspx?FamilyID=bae62cfc-d5a7-46d2-9063-0f6885c26b98&DisplayLang=en

    2. 進入CMD,將目錄切換到 C:\Program Files\RMS SP2 Administration Toolkit\ADScpRegister>

    3. 執行ADScpRegister.exe unregisterscp

  • DNS - Additional "com.tw" (or "xxx.yyy") entry may appear in DNS suffix search list

    CAUSE
    ===================
    When "UseDomainNameDevolution" is configured to 0, a single default entry is placed in the DNS suffix search list, for example "sub.domain.com.tw"

    However, a devolutionized DNS suffix search list is populated if the entry is configured to 1, for example:
    "sub.domain.com.tw"
    "domain.com.tw"
    "com.tw"

    This is normal and a by-design behaviour

    SUGGESTION
    ===================
    Normally the client would uses domain name devolution to resolve an unqualified query. So it is normal be observe multiple DNS suffix entries under DNS suffix search list returned by ipconfig command.

    We may manually disable it by:
    1. Setting "UseDomainNameDevolution" (HKLM\Software\Policies\Microsoft\Windows NT\DNSClient) to 0
    or
    2. Manually populate the search list as described in Q275553 http://support.microsoft.com/KB/275553

  • Sysvol與Netlogon分享權限遺失

    經常遇到Sysvol或是netlogon分享資料夾沒有共用出來

    請確認資料夾結構正確,若是資料夾遺失,請重新建立空的資料夾

    1.停用NETLOGON服務

    2. 開始>執行>輸入 regedit 按下確定.

    2. 找到以下登陸值:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters

    3. 看到右邊是窗,雙擊 SysvolReady 修改.

    4. 僵直改為 1 , 點選確定.

    5.重新啟動NETLOGON服務

    啟動後應該可以看到資料夾已正常分享出來

  • Remote Server Event Log Access 'Access Denied'

    Problem
    =======
    Remote Server Event Log Access 'Access Denied'


    clip_image002

    Cause
    ======
    - Opened Regedit at Workstation and checked the following settings:

    =============================================================

    HKLM\SYSTEM\CurrentControlSet\CONTROL\SecurePipeServes\winreg

    Ensure LocalService has read permission

    clip_image004

    Solution
    ======
    To resolve this issue, use Registry Editor to grant Read Only permissions to the Local Service user account. To do this, follow these steps:

    1. Click Start, click Run, type regedit, and then click OK.
    2. Expand the following registry subkey:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ SecurePipeServers

    1. Right-click winreg, and then click Permissions.
    2. Click Add.
    3. In the Enter the object names to select box, type Local Service, and then click OK.
      Alternatively, you can type the name of a user or group that you want to grant access permission.
    4. In the Permissions for LOCAL SERVICE list, next to Read, click to select the Allow check box.
    5. Quit Registry Editor, and then restart your computer.
  • Windows VISTA SP2 中 10個half-open Active Connections的限制取消

    相信最近更新VISTA SP2的朋友們會發現,以往大家說的10個網路連線數量的限制悄悄的不見了。這點是獲得證實的,這個限制在VISTA SP2中被取消了,很多人一定很好奇,為什麼以往要限制這個連線數量呢?理由主要指有一個:

    當發生大量病毒Break Out的時候,有些種類的病毒(蠕蟲)會在系統中建立大量的連線數並且嘗試感染或是工及其他電腦,為了減低這樣的危險性,我們以往的Clinet作業系統都會加上相關的限制。但是這樣也造成了其他的問題,例如P2P程式或是網路電視的程式,需要同時多點傳訊的當下,就會透過"竄改的" TCPIP.SYS系統檔案來達到這個目的。對使用者來說,看起來似乎網路是變快了,但是這個被"竄改"的TCPIP.SYS極有可能裡面會有有心人士加入的後門系統,這個部分反而成為系統安全性的大漏洞。

    因此,在SP2裡面,預設這個10個連線數量的限制已經取消,使用者再也不需要使用"竄改的" TCPIP.SYS來得到更好的網路連線效能。但是,如果您還是需要這個限制的話,還是有方法可以做得到:

    請您開啟登錄檔編輯程式(regedit.exe)並且找到以下的機碼:
    2009-07-16_085011

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
    名稱:EnableConnectionRateLimiting
    值:1

    最後也請大家儘快升級VISTA SP2,獲得新的安全性更新和更好的效能。