Access when no DC is avaliable

My boss has refused to add a second DC to our domain in spite of my repeated requests to do so. He is under the impression that cached credentials will allow users to function ok. Correct me if I am wrong but cached credentials will not allow access to
network resources will they? What is the limitation of cached credentials?

check out link below, to shed some light.
Interactive logon: Number of previous logons to cache (in case domain controller is not available)
http://technet.microsoft.com/en-us/library/jj852209.aspx
from link above:
If a domain controller is unavailable and a user's logon information is cached, the user is prompted with the following message:
A domain controller for your domain could not be contacted. You have been logged on using cached account information. Changes to your profile since you last logged on might not be available.
If a domain controller is unavailable and a user's logon information is not cached, the user is prompted with this message:
The system cannot log you on now because the domain DOMAIN NAME is not available.
Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
IT Stuff Quick Bytes

Similar Messages

I am getting the message "The windows installer Service could not be accessed when trying to install Itunes on my new computer, any help would be appreciated.

I am getting the message "The windows installer Service could not be accessed when trying to install Itunes on my new computer, any help would be appreciated.

Hey there Frank0619,
If you have not been able to install iTunes because the Windows Installer service is not available, I would recommend the troubleshooting in the following troubleshooting to help.
Issues installing iTunes for Windows
These in particular:
Make sure you have an administrator account.
To install iTunes, you'll need to log in to your computer with an administrator password. If you're not sure if you have an administrator account, read Windows 7: How do I log on as an administrator? You could also refer to your computer's help system, contact your IT department, or visit support.microsoft.com for assistance.
Install the latest Microsoft Windows updates.
To download the latest updates, visit the Microsoft Windows Update website. iTunes for Windows requires Windows XP, Windows Vista, Windows 7, or Windows 8 with the latest Service Pack installed. If you can’t install the updates, refer to your computer's help system, contact your IT department, or visit support.microsoft.com for assistance.
Download the latest version of iTunes.
The latest version of iTunes can be downloaded at http://www.apple.com/itunes/download/.
Disable conflicting software.
Some Windows background processes can cause issues for other programs and processes. These conflicts can prevent applications, such as iTunes, from installing. Disable conflicting processes by starting your computer using MSConfig:
Using Msconfig to troubleshoot conflicts in Windows XP
Using Msconfig to troubleshoot conflicts in Windows Vista, Windows 7, and Windows 8
Some security software made by other companies can't be disabled using MSConfig. If you've installed security software and you're having issues installing iTunes or QuickTime for Windows, you might need to disable or uninstall security software to resolve installation issues.
Restart your computer.
Install iTunes.
Thank you for using Apple Support Communities.
All the best,
Sterling

I am working with Adobe 'Classroom in a book' and it's asking me for 'write access' when saving.

I am working with Adobe 'Classroom in a book' and it's asking me for 'write access' when saving.
How do I do that.
I tried going to file >get info and it would not allow me to unlock.
How do I do that?

It sounds like the folder you are saving to does not have the proper permission for you to write to it. What OS are you using?

My time capsule says it only has 473.24 gb for my back up of 534gb. the only back up I can access when I enter the time machine was yesterdays so what has happened?

my time capsule says it only has 473.24 gb for my back up of 534gb. the only back up I can access when I enter the time machine was yesterdays so any idea what is happening? I have the latest irmware update.
Marmimag

There is an issue with latest Lion update.. it is killing TM.
https://discussions.apple.com/message/19858557#19858557
Otherwise check via the airport utility if there is something else using space on the hard disk.

Form 11g - Is is possible to block specific forms access when user directly type form name in url ?

Hi everyone,
We have XXF000.fmb, XXF001.fmb , XXF002.fmb , XXF003.fmb in 6i.
For migration to 11g , we recompile these forms and move fmx to 11g form server under form_path.
In 6i , we login for validation & responsibilities control in XXF000, So we can use account info to verify if user have priviledge to access XXF001, XXF002 and XXF003.
But in 11g , we can access these forms vial url request , such as : http://<host>:<port>/forms/frmservlet?form=XXF000 ; http://<host>:<port>/forms/frmservlet?form=XXF001 ... etc
These may cause some unexpected access and operations in functions.
Is is possible to block specific forms access when user directly type form name in url ?
Thanks.
Hendry

You need to alter your formsweb.cfg file, either directly or through the Fusion web interface. You need to set the following parameters:
#this sets the default form for your application
form=yourmenuform.fmx
#this stops these parameters being entered in the URL, seperate different parameters with commas
restrictedURLparams=form,pageTitle,HTMLbodyAttrs,HTMLbeforeForm,HTMLafterForm,log

Does anyone know how to reset the Keychain login access when booting from disc?

I recently had Lion go bad on my Mac Pro (screen hung up with twirly grey circle). I tried unsuccessfully to repair permissions etc, so I decided to install Snow Leopard onto my other internal drive as this was the latest system I had on a disc; bootup with that and update to Lion.
After installation the machine restarted and asked me for the login user and password. I thought this was odd as usually it would ask to set this up when you first bootup; I can't get past the login. My question is how do I reset the keychain login access when booted m a disc or is there a default I can use?
Regards

I re-installed in the end and the usual load in screen came – all sorted...

I transfered data from my old Mac, but now it tells me "No Access" when I try to open the files. How can I fix that?

I transfered data from my old Mac, but now it tells me "No Access" when I try to open the files. How can I fix that?

That's the problem, then. The files are under your 'old' user account. You should be able to access them if you log into your old account. However, that's not going to let you move them to your new user account. It's for situations like this that I always create a root user account (although I seldom access it). With a root user account, you can copy files from one user account to another. Note that someone may come up with a better idea than what I would use, but here goes.
Read http://support.apple.com/kb/ht1528 and set up a root user. Then you can transfer files from one account to another. If you like, you can delete this account after you've moved your files.
Good luck,
Clinton

Cascaded routers: no internet access when second router not use NAT

Cascaded routers: no internet access when second router not use NAT
Here is my setup:
[pre]
WAN
|
| 74.96.170.x (WAN IP) |
| Router1(Verizon FiOS Router) |
| Model: MI424WR-GEN2 (Rev F) |
| Firmware: 20.21.0.2 |
| Def router: 74.96.170.1 |
| 192.168.1.1 (Local IP) |
|
| 192.168.1.22 (WAN IP) |
| Router2(Linksys) |
| Model: WRT54GL v1.1 |
| Firmware: v4.30.16 |
| Def Router: 192.168.1.1 |
| 192.168.2.1 (Local IP) |
|
| Computer 192.168.2.160 |
| Def Router: 192.168.2.1 |
"q.route" 120L, 4441C written
[m.wang@m-wang-ltm2:/Users/m.wang/m/Network]
$ more q.route
Cascaded routers: no internet access when second router not use NAT
Here is my setup:
[pre]
WAN
|
| 74.96.170.x (WAN IP) |
| Router1(Verizon FiOS Router) |
| Model: MI424WR-GEN2 (Rev F) |
| Firmware: 20.21.0.2 |
| Def router: 74.96.170.1 |
| 192.168.1.1 (Local IP) |
|
| 192.168.1.22 (WAN IP) |
| Router2(Linksys) |
| Model: WRT54GL v1.1 |
| Firmware: v4.30.16 |
| Def Router: 192.168.1.1 |
| 192.168.2.1 (Local IP) |
|
| Computer 192.168.2.160 |
| Def Router: 192.168.2.1 |
| NO iptables, basic setup |
[/pre]
On computer, I have:
[pre]
# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.2.1 0.0.0.0 UG 2 0 0 enp2s0
loopback localhost 255.0.0.0 UG 0 0 0 lo
192.168.2.0 * 255.255.255.0 U 0 0 0 enp2s0
[/pre]
On Router2, I have:
[pre]
Routing Table Entry List
Destination LAN IP | Subnet Mask | Gateway | Hop Count | Interface
192.168.2.0 255.255.255.0 0.0.0.0 1 LAN & Wireless
192.168.1.0 255.255.255.0 0.0.0.0 1 WAN (Internet)
0.0.0.0 0.0.0.0 192.168.1.1 1 WAN (Internet)
[/pre]
Router2's Operating Mode is Gateway. On Router1, I have:
[pre]
[Router1] Routing Table
Name Destination Gateway Netmask Metric Status
Network (Home/Office) 192.168.2.0 192.168.1.22 255.255.255.0 0 Applied
Network (Home/Office) 192.168.1.0 192.168.1.1 255.255.255.0 0 Applied
Routing Protocol: Internet Group Management Protocol (IGMP)
Default Gateway: 74.96.170.1
[/pre]
On computer, I can run tcptraceroute to yahoo.com OK:
[pre]
# tcptraceroute yahoo.com
Selected device enp2s0, address 192.168.2.160, port 46596 for outgoing packets
Tracing the path to yahoo.com (206.190.36.45) on TCP port 80 (http), 30 hops max
1 192.168.2.1 0.610 ms 0.729 ms 0.735 ms
2 192.168.1.1 1.843 ms 1.378 ms 1.363 ms
3 l100.washdc-vfttp-107.verizon-gni.net (96.241.146.1) 13.620 ms * *
... /* It reached the destination. */
[/pre]
I want to change Router2's Operating Mode from "Gateway" to "Router" because I
want to turn off NAT on Router2 so that I can access all computers attached to
Router2 by their individual IP instead of using port forwarding at Router2.
The problem is after the mode change from "Gateway" to "Router", and regardless
whether I disable RIP or enable RIP, and on what interfaces it is enabled, computer
192.168.2.160 does not have internet connection.
Observations:
[0] INTRAnet works as I can reach computer 192.168.2.160 from computer behind Router1
192.168.1.x and vice versa.
[1] ping and traceroute *work* on Router2 itself using the built-in dianostic tool.
[2] nslookup on computer 192.168.2.160 always works on new lookup. It uses
192.168.2.1 as the resolver.
[3] tcptraceroute stops after step 2:
[pre]
# tcptraceroute yahoo.com
Selected device enp2s0, address 192.168.2.160, port 45999 for outgoing packets
Tracing the path to yahoo.com (98.139.183.24) on TCP port 80 (http), 30 hops max
1 192.168.2.1 2.553 ms 0.534 ms 0.638 ms
2 192.168.1.1 1.342 ms 0.964 ms 0.867 ms
3 * * *
[/pre]
[4] tcpdump shows that computer 192.168.2.160 tries to reach out and nothing is returned:
[pre]
13:34:03.172828 IP 192.168.2.160.45999 > 98.139.183.24.http: Flags [S], seq 1122548929, win 0, length 0
13:34:06.175786 IP 192.168.2.160.45999 > 98.139.183.24.http: Flags [S], seq 1122548929, win 0, length 0
13:34:09.178804 IP 192.168.2.160.45999 > 98.139.183.24.http: Flags [S], seq 1122548929, win 0, length 0
[/pre]
This is not expected because NAT to internet should still be done by Router1, no? Computer
behind Router1 with IP 192.168.1.x has internet connection.
[5] It looks like I cannot change the Routing Table Entry on Router2. I do not think I need to change anything,
just an observation.
[6] If I use LAN to LAN connection, then both intranet and internet works. [The internet IP of Router2 can be
anything not in the same subnet of the Router1, and DHCP on the local side should be disabled to avoid conflict
with the the DHCP on Router1].

I have a question. Unfortunately in order to ask my question, I have to have a lengthy description of my setup. Basically, I have a second Linksys router in "router" operating mode with NAT disabled connected to the Verizon router, and I have a computer which is in a different subnet (192.168.2.x) behind the Linksys router. This computer can communicate with computers behind Verizon router in subnet (192.168.1.x), but cannot reach internet. This is a simplified version of my question, full details are in the original post.
If I setup the Linksys router in "gateway" operating mode, which means with NAT enabled, then both intranet and internet works, but there is no easy way to setup port forwarding for 10 compueters in 192.168.2.x network to communicate with 10 computers in 192.168.1.x network.
If I setup the Linksys router in a LAN to LAN configuration with Verizon routers, but this way all computers are in the same subnet, I want them to be in different subnet for access control and things like that.
I hope this makes things a little clear.
Thanks.

My Canon T2i gives message "card can not be accessed" when I turn on camera.

My Canon T2i gives message "card can not be accessed" when I turn on camera. Can not format with camera. New memory card does not help. How can I get my camera to work?

Hi delphinus!
Thanks for posting.
What specific memory cards have you tried? When was the camera purchased?
If this is a time sensitive-matter, additional support options are available at Contact Us.
Did this answer your question? Please click the Accept as Solution button so that others may find the answer as well.

When would it be avaliable the iPad Mini in stores in Mexico or via Apple Online Store?

Hi there:
When would it be avaliable the iPad Mini in stores in Mexico or via Apple Online Store? (Mx) Domain
I'm really looking forward in buying the Mini, but I'm wondering if i should wait for de Mini or a just buy de iPad with Retina Display
Regards!....

Here's hopping Apple reads the submitted requests for Passbook on iPad.
Below is a copy of my submission:
Please add Passbook to iPad with iCloud sync.
Best reason for having Passbook on iPad (with my workflow):
While at home relaxing using my iPad, I check-in for my Delta flight, I'm offered an option to add my ticket to Passbook during the process.
If Passbook were available, one click and I'm done.
But no, I have to cancel the process, go pickup my much slower and smaller iPhone, start all over, and finish the process standing up next to the wall where the iPhone is charging after a long work day.

Can free online books be downloaded to memory of ipad2 so that book can be accessed when not within wi-fi range

can free online books be downloaded to memory of ipad2 so that book can be accessed when not within wi-fi range

It depends on what books you're referring to. All books from the iTunes Store are downloaded to your iPad and except for any special features the book may contain that requires an Internet connection will be readable without such a connection.
If you're talking about books from some other source, we'd need to know the source before we could offer opinions.
Regards.

I upgraded to iOS5 and neither camera nor notification center can be accessed when phone is locked

I upgraded to iOS5 and neither camera nor notification center can be accessed when phone is locked

iPhone User Guide (For iOS 5.0 Software)
Read the manual.
Double tap the home button.

CU8 Update - Public Folder Calendar and Contacts show up in OWA that no longer exist and I cannot access when selecting.

We recently updated to CU8. I went to test out the new Public Folder access to calendars and contacts. I first go to Calendars in OWA and I see a list of several calendars. I see one that is listed twice, one I can open and the other states "Couldn't
open calendar - A connection couldn't be made with the shared calendar. Remove the calendar and try to add it again, or ask the owner to share it again." I also see other calendar's that we used in the past but no longer reside under public folders.
I get the same error on them.
For People, I can go there and I see a section called "Public Folder" and there is a contact list called "IT Team Contacts". When I click on it, it states in the middle pane "Your request can't be completed right now.
Please try again later." This contact list is not on our public folders.
Any ideas on why we I'm seeing these issues?
Thanks,
Jeff Dailey

Seems like some orphaned PF favorites. You should be able to remove them from Outlook, or via MFCMAPI

I have an email attachment that I would like to be able to access when NOTconnected. I found one suggestion that I should open the attachemtn iniBooks and save it there. Unfortunately, I have no idea how to do that.

I am trying to store an email attachment (an Excel spreadsheet) somewhere on my iPhone 5 to be able to access it easily in the future. I do not need the ability to work on it, just to access it, although it would be convenient if i could load updated versions over it on a regular basis. The spreadsheet was created in Excel on a laptop with Win 7. I read one posting that said I should save the document to iBooks and then could open it whenever I wanted. The same posting refered to something in the upper right corner of the attachment that enabled me to save it to iBooks. Unfortunately, there is no such option showing when I looked at the file, which I did email to myself. I was able to open the attachment, but can't get beyond this point. My tech ability doesn't go much beyond being able to power up my phone, so I need a really simple solution, if one exists.

First of all, Excel file can't save to iBook. (iBook only can view PDF files). That's why you don't see it in "open in" options. In order for you to save excel, you will need a third party app like Numbers, Office2. There are a few free apps that can use to view. I used Office2 from Byte2, because I can not only store and view later, I can do some edit too. Especially when you want to edit a few numbers and re send them to my office or clients will be very useful for me.

How can you deny bash system access when sourcing a file?

I'm having another one of my "Linux noob" moments. This is probably easy to answer for the experienced bashers here.
I need a bash function to extract data from a PKGBUILD for use in other scripts. I want to write it in such a way that there is no significant risk when checking PKGBUILDs from possibly untrusted sources. It would be unreasonable to request the user to manually inspect every PKGBUILD when only extracting information (i.e. not building the package) and when dealing with many PKGBUILDs.
The function itself is very simple in the unsafe version:
for ARG in $@; do
source "$ARG"
echo "$pkgname $pkgver $pkgrel"
done
The reason that I want to source the file is to catch variable changes within the script (obviously missing the build function, but there are some that change outside of it). Parsing the file externally is likely to miss some changes.
How can I safely source the PKGBUILD? Ideally I want to completely limit access to the system, specifically the users home directory. Is there a way to do this as a user without write permissions? Is this what the "nobody" user is for?
I've considered using chroot but that appears to need root privileges. I want to avoid sudo.
Thanks.
Last edited by Xyne (2009-05-19 11:09:25)

Well, unsetting the PATH seems a good idea, but what if the pkgbuild contains sth like this:
pkgver=$(uname -r)
or any similar manner of dynamically generating one of the variables Xyne's interested in by using a command in a subshell? While the following works (i.e. fails as it should):
~$> OLDPATH=$PATH;export PATH="";/bin/bash -r -c 'foo=$(rm foo);foo=$(/bin/rm foo)';export PATH=$OLDPATH
/bin/bash: rm: No such file or directory
/bin/bash: /bin/rm: restricted: cannot specify `/' in command names
any legitimate use of command substitution will fail as well. Not to mention redirection, which is disabled in a restricted shell as well.
And yes, disabling (possibly) malicious bash builtins may be done as well, but it will fail as well if they are used in a legitimate way.
Using "nobody" also relies on the assumption that the user's files aren't world-writable. I think the only safe solution is using a chroot after all, but maybe I'm missing something here.

Access when no DC is avaliable

Similar Messages

Maybe you are looking for