GPO run file located in different forest?

Hello Community
    In Windows 2008 Server exists Domain1/Forest1 as the trusting domain
and a Domain2/Forest2 as the trusted domain in a one-way trust relationship,
can a GPO in Domain1/Forest1 execute a program file, bat file, html file, aspx file
or any other type of file that resides in Domain2/Forest2 and if so how?
    Thank you
    Shabeaut

> In Windows 2008 Server exists Domain1/Forest1 as the trusting domain
> and a Domain2/Forest2 as the trusted domain in a one-way trust relationship,
> can a GPO in Domain1/Forest1 execute a program file, bat file, html
> file, aspx file
> or any other type of file that resides in Domain2/Forest2 and if so how?
Since Domain2 is the trusted domain, Accounts from Domain2 can
authenticate and gain access to ressources in Domain1, not vice versa.So
the answer is:
To access ressources in Domain2 from Domain1, the accessor has to
provide valid credentials of a Domain2 account.
Which I believe essentially translates ot "no, they cannot".
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Similar Messages

Running File Explorer as Different User

Hi all.
I work in a domain environment where we log in with standard accounts for day-to-day work and use separate elevated accounts only when needed, and only to run applications that require elevation. This works fine for most things in 8.1, but once again,
Microsoft has disabled the ability to run File Explorer with different credentials. To me, this is insecure and counterproductive. They tell us we should never be logged on with administrative rights, and I agree with that, but this restriction
is the one thing that makes this impossible. In 7, I could get around this by running Explorer cmd or PowerShell using elevated (domain) credentials, but now this won't even work! I get not one but two errors stating that I have insufficient permission
to do this. Is there any workable solution for this, or has Microsoft finally succeeded in forcing us to add our staff accounts back into domain groups or logging in with elevated rights just so we can manage permissions?
Thanks.
A very frustrated server admin
Derek

Hi,
Have you tried to use the runas command, as mentioned in the link below?
runas /user:domain\username "c:\windows\explorer.exe /separate"
http://social.technet.microsoft.com/Forums/windows/en-US/2a366967-f9fb-4010-81f3-94dc15c86ad3/run-explorer-as-a-different-user?forum=w7itprosecurity
Yolanda Zhu
TechNet Community Support

.java files located in different directories - trouble compiling

My attempts at getting my main .class file (../master/BicycleMaster.class) to automatically recognize that it's supporting .class file (../master/child/BicycleChild.class) located one directory below keep failing and the .java files won't compile.
If I move both .java files to the same location (in the ../master directory) then they compile and run just fine, but it's when I want to separate them into the two different directories that I have a problem compiling them. They won't compile because the references in BicycleMaster.jave to BicycleChild.java can't be resolved.
I was hoping - if you have time - that you might be able to show me by example in the code below? In the file ../master/BicycleMaster.java I added 'package master;' as the first line of the code. It was my impression that this would tell the compiler to look in the sub-directories for any additional .java files. This didn't work either.
HERE ARE THE DETAILS:
Directory of K:\COMMON\ITS\STEVEB\java\master
03/04/2008 04:25 PM <DIR> .
03/04/2008 04:25 PM <DIR> ..
03/04/2008 04:24 PM 612 BicycleMaster.java
03/04/2008 03:54 PM <DIR> child
1 File(s) 612 bytes
K:\COMMON\ITS\STEVEB\java\master>type BicycleMaster.java
package master;
class BicycleMaster {
    public static void main(String[] args) {
        //Create 2 different bicycle objects
        BicycleChild bike1 = new BicycleChild();
        BicycleChild bike2 = new BicycleChild();
        //Invoke methods on the objects
        bike1.changeCadence(50);
        bike1.speedUp(10);
        bike1.changeGear(2);
        bike1.printStates();
        bike2.changeCadence(50);
        bike2.speedUp(10);
        bike2.changeGear(2);
        bike2.changeCadence(40);
        bike2.speedUp(10);
        bike2.changeGear(3);
        bike2.printStates();
}Directory of K:\COMMON\ITS\STEVEB\java\master\child
03/04/2008 03:54 PM <DIR> .
03/04/2008 03:54 PM <DIR> ..
03/04/2008 03:54 PM 524 BicycleChild.java
1 File(s) 524 bytes
K:\COMMON\ITS\STEVEB\java\master\child>type BicycleChild.java
class BicycleChild {
    int cadence = 0;
    int speed = 0;
    int gear = 1;
    void changeCadence(int NewValue) {
        cadence = NewValue;
    void changeGear(int NewValue) {
        gear = NewValue;
    void speedUp(int increment) {
        speed = speed + increment;
    void applyBrakes(int decrement) {
        speed = speed - decrement;
    void printStates() {
        System.out.println("Your cadence: "+cadence+", Your speed: "+speed+", Your gear: "+gear);
}HERE ARE THE ERRORS:
First I compile the ../master/child/BicycleChild.java file and it compiles fine. This I attempt to compile ../master/BicycleMaster.java and I get the following errors:
K:\COMMON\ITS\STEVEB\java\master>javac BicycleMaster.java
BicycleMaster.java:5: cannot find symbol
symbol : class BicycleChild
location: class master.BicycleMaster
BicycleChild bike1 = new BicycleChild();
^
BicycleMaster.java:5: cannot find symbol
symbol : class BicycleChild
location: class master.BicycleMaster
BicycleChild bike1 = new BicycleChild();
^
BicycleMaster.java:6: cannot find symbol
symbol : class BicycleChild
location: class master.BicycleMaster
BicycleChild bike2 = new BicycleChild();
^
BicycleMaster.java:6: cannot find symbol
symbol : class BicycleChild
location: class master.BicycleMaster
BicycleChild bike2 = new BicycleChild();
^
4 errors

Thanks so much for responding. Progress was definetly made as the compiler now works longer before erroring out. Sadly it's still erroring out for a reason I'm not understanding. Please let me know if you can see where I'm going wrong.
Here's how it played out for me:
K:\COMMON\ITS\STEVEB\java>echo %classpath%
.;k:\common\its\steveb\java\;C:\Program Files\Java\jre1.6.0_04\lib\ext\QTJava.zip
K:\COMMON\ITS\STEVEB\java\master\child>javac BicycleChild.java
K:\COMMON\ITS\STEVEB\java\master\child>cd ..
K:\COMMON\ITS\STEVEB\java\master>javac BicycleMaster.java
BicycleMaster.java:5: cannot find symbol
symbol : class BicycleChild
location: class master.BicycleMaster
BicycleChild bike1 = new BicycleChild();
^
BicycleMaster.java:5: cannot find symbol
symbol : class BicycleChild
location: class master.BicycleMaster
BicycleChild bike1 = new BicycleChild();
^
BicycleMaster.java:6: cannot find symbol
symbol : class BicycleChild
location: class master.BicycleMaster
BicycleChild bike2 = new BicycleChild();
^
BicycleMaster.java:6: cannot find symbol
symbol : class BicycleChild
location: class master.BicycleMaster
BicycleChild bike2 = new BicycleChild();
^
4 errors
Here are the two programs revised as you suggested:
K:\COMMON\ITS\STEVEB\java\master\child>type BicycleChild.java
package master.child;
class BicycleChild {
    int cadence = 0;
    int speed = 0;
    int gear = 1;
    void changeCadence(int NewValue) {
        cadence = NewValue;
    void changeGear(int NewValue) {
        gear = NewValue;
    void speedUp(int increment) {
        speed = speed + increment;
    void applyBrakes(int decrement) {
        speed = speed - decrement;
    void printStates() {
        System.out.println("Your cadence: "+cadence+", Your speed: "+speed+", Your gear: "+gear);
}K:\COMMON\ITS\STEVEB\java\master>type BicycleMaster.java
package master;
class BicycleMaster {
    public static void main(String[] args) {
        //Create 2 different bicycle objects
        BicycleChild bike1 = new BicycleChild();
        BicycleChild bike2 = new BicycleChild();
        //Invoke methods on the objects
        bike1.changeCadence(50);
        bike1.speedUp(10);
        bike1.changeGear(2);
        bike1.printStates();
        bike2.changeCadence(50);
        bike2.speedUp(10);
        bike2.changeGear(2);
        bike2.changeCadence(40);
        bike2.speedUp(10);
        bike2.changeGear(3);
        bike2.printStates();
}

Losing File Locations Across Different Users

Hi!
The snow yesterday caused a partner to open an InDesign Book that I was working on, but when she opened a file in the book, the links were broken.
A little background: are are both using IDCS5 on an Intel iMac using MacOs 10.6.6. The ID book & files (as well as graphics) are on a disk we call "X", and the content (DOCX) files are all kept on a drive called "Y". Both "X" & "Y" drives are on the same IP address, and as near as I can tell, are connected the same way from both her and my machine. The server itself is a Windows Server 2008.
Now, ID finds the graphics on both machines just fine. It is the content source on the "Y" drive that gets lost. The link information on my machine says "Y:/content...", while hers says "X:/content..."
Any idea what is causing this issue? A little research tells me that sometimes MacOs doesn't actually save network locations starting in the "/Volumes" folder, but our IT Specialist has checked this and says that both our network settings are the same. We are both logging on to the network from two separate accounts as well. We are also not structuring these files as XML, so there are no attributes assigned to our linked assets.

Im excited to be heading to New York this week for the AWS Summit, and not just for the chance to discover strange new life forms. Its a a well timed event as we are doing a lot of work in with public cloud services, and Im looking forward to getting some feedback from people using F5 in AWS. As preparation, Im running through a crash course in Python and Ansible to better understand the excellent AWS deployment scripts that Alex Applebaum and Chris Mutzel have put up on Github. I urge you to check them out although very much a proof of concept at the moment, they represent a great starting point. If you need more of a primer about F5 in AWS then check out Chriss latest blog post, which will give you an overview of the F5 networking setup in AWS. Ill be honest, Im only really dabbling in automation tools at the moment, but the power of...

File location is different for other webpages

I was wondering if this is bad? I have my template set for my other pages as like ../file name, but when I do my other pages its //C /user / documents/ website. Does this automattically self correct when I up load to a server or what?

This is how all links will look in an unsaved page. DW has no idea what the path is to any linked file until you have saved the page, so it uses an absolute 'file' link to compensate. When the page is saved, the link is automatically adjusted in light of the location of the saved page and the location of the target file.
If you have saved pages that contain links looking like that, then your links will NOT work when you upload the files. Almost always, this problem is the result of not working within a site that has been properly defined in Dreamweaver. Can we see the path that you have placed in the Local Root folder part of your site definition (edit it with DW's SITE > Manage Sites menu option).

Running sql scripts from different directory

Hi
I have sql scripts in different directories as follows:
D:\myapp\sql
- load.sql
- init.sql
D:\myapp\sql\schema
-users.sql
-structure.sql
D:\myapp\sql\populate\
- data1.sql
- data2/sql
load.sql call all the other scripts as below:
@init.sql
@schema\users.sql
@schema\structure.sql
@populate\data1.sql
@populate\data2.sql
All my scripts run correctly when I run load.sql from D:\myapp\sql on comand prompt.
I need a way to run this script from a different directory say D:\ or C:\
I am writing a installer which will execute from a different directory.
Right now I get a file not found error for scripts within schema an populate folder.
Please let me know how can I make this work from a different directory.
Thanks
kelvin

Hi peter. i think you cannot run files spread across different locations.
--the method which u specified always looks to the defined path

Running out of space on my C: partition. Need to move CC suite of apps to D: partition. tried to do this in install/file location preferences but it didn't make a difference.

Running out of space on my C: partition. Need to move CC suite of apps to D: partition. tried to do this in install/file location preferences but it didn't make a difference.

*unselected "Sync music" from the appropriate tab. And iTunes warned: if you do this, we will delete every playlist and song on your iPod*
To change to manually managing an iPod you don't "unselect" sync music, you "select" manually manage songs and videos. If you want to delete songs from iTunes and keep them on the iPod you need to change the update option of your iPod by checking the box beside "manually manage songs and videos" in the Summary tab and clicking Apply. Your iPod will not sync with iTunes in this mode so it can have different content, you can get details here:
Managing content manually on iPod
iPod 101: Fill 'er Up
One major word of caution. If you delete songs or videos from your computer and have no back up other than the iPod you will risk losing them permanently if your iPod fails or you find you have to restore it to solve a problem. You should consider investing in an additional internal or external hard drive to store/back up your music. Alternatively at the very least back up anything you can't replace such as iTunes downloads to CD or DVD: How to back up your media in iTunes
Something else to be aware of when using an iPod in manual mode is that the "Do Not Disconnect" message will remain on the display until you physically eject the device. In that case use Safely Remove Hardware icon in the Windows system tray on your desktop or check this link: Safely Disconnect IPod
I don't have any TV shows so I can't speak from experience here but looking at the TV tab it appears you can only sync shows, there's no manually manage option. Syncing would require that you keep the shows on your computer otherwise they would be removed from the iPod the next time you syncronised with iTunes.

Default File Location for Word using GPO

I have just launched Office 2013 for my users.   Those users access Word and Excel via Terminal Servers.   So, I need ways to set the defaults for these products so I don't have to touch each users login/machine.   I have been
able to use Group Policy for everything I need except in Word and the default file location.   I have tried the GPO administrative template for Office 2013 and went to Microsoft Word 2013 > Word Options > Advanced > File Locations and set
the path to N:\
Did the gpupdate /force and nothing changed.                               However, Group Policy will set
it in Excel.
So then I tried using the registry template in GPO.     Here I used HKEY_CURRENT_USER with path to
Software\Microsoft\Office\15.0\Word\Options and the value name is DefaultPath
Value data is N:\
That doesn't work either.
HOW are we suppose to set defaults to our network in Word.
I have also did the entry in GPO to "block signing into Office"                     None Allowed
We don't and won't be using SkyDrive in our type of business

Hi,
Based on my tested in my environment, I went to set the Default File Location via group policy.
Word: Microsoft Word 2013/Word Options/Advanced/File Location/ and change the Default File Location
Excel: Microsoft Excel 2013/Excel Options/Save and change Default file location
Both of them works fine. As you said " However, Group Policy will set it in Excel." Does it mean that you set Word and Excel via two group policies at the same time, but it only works in Excel?
If it is, please try to re-download and change the
Word ADMX to test.
If the issue still exist, please try to use Gpresult command Or RSOP to check group policy result on client.
When troubleshooting group policy issues, we use the gpresult command to confirm whether GPOs are really applied to the client (computer/user). You can run the following command in a command prompt:
gpresult /z > c:\policy.txt
For more details about the usage of command Gpresult, please refer to the following link:
http://technet.microsoft.com/en-us/library/bb490915.aspx
When you read the output, the c:\policy.txt file in this sample, please
examine the results of the report to find the answers to these questions.
Does the report list the particular GPO as applied?
Is the setting listed in the report?
Is the GPO listed in the Denied List
More reference:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/382c97e8-93c8-4022-b8fe-22401037d14c/forum-faq-common-steps-to-start-troubleshooting-group-policy-application-issues?forum=winserverGP
Regards,
George Zhao
TechNet Community Support

How can I save my data and the date,the time into the same file when I run this VI at different times?

I use a translation stage for the experiment.For each user in the lab the stage position (to start an experiment) is different.I defined one end of the stage as zero. I want to save the position , date and time of the stage with respect to zero.I want all these in one file, nd everytime I run it it should save to the same file, like this:
2/12/03 16:04 13567
2/13/03 10:15 35678
So I will track the position from day to day.If naybody helps, I appreciate it.Thanks.

evolution wrote in message news:<[email protected]>...
> How can I save my data and the date,the time into the same file when
> I run this VI at different times?
>
> I use a translation stage for the experiment.For each user in the lab
> the stage position (to start an experiment) is different.I defined one
> end of the stage as zero. I want to save the position , date and time
> of the stage with respect to zero.I want all these in one file, nd
> everytime I run it it should save to the same file, like this:
> 2/12/03 16:04 13567
> 2/13/03 10:15 35678
>
> So I will track the position from day to day.If naybody helps, I
> appreciate it.Thanks.
Hi,
I know the function "write to spreadsheet file.vi"
can append the data
to file. You can use the "concatenate strings" to display the date,
time as well as data... Hope this help.
Regards,
celery

Can TM Backup Files Located on G4 Running OS 10.4.11?

Purchased MyBook and utilized the WD Backup software in order to backup files located on G4 running 10.4.11. Since then, have purchased a G5 iMac running 10.6.5.
Before I reformat the MyBook in order to utilize TM to automatically backup the iMac, I'd like to ensure that I can also backup the G4 files using TM via File Sharing w/ethernet connection between the two computers.
If TM can't do this automatically, I am prepared to copy the files from the G4 "manually" over to the WD MyBook once it is reformated. Since I am using the G5 almost 100% of the time, I am mostly concerned about creating a single backup of the entire G4 (which is already on the WD MyBook but will be lost if I reformat).
What would be the best way to do that (creae a complete backup of the G4) if TM cannot be utilized?
Thanks.

Brae wrote:
Purchased MyBook and utilized the WD Backup software in order to backup files located on G4 running 10.4.11. Since then, have purchased a G5 iMac running 10.6.5.
A G5 iMac can't run OS X 10.6.5. Either it's an Intel iMac or it's running (at most) OS X 10.5.x. From your system details, it seems to be running OS X 10.5.6, in which case your message should have been posted in the Leopard area instead of the Snow Leopard area.
What would be the best way to do that (creae a complete backup of the G4) if TM cannot be utilized?
You could divide that WD disk into two partitions. Use one with Time Machine to back up the iMac. When you want to back up the G4, turn off Time Machine, dismount the WD disk, then use SuperDuper! (http://www.shirt-pocket.com/) or Carbon Copy Cloner (http://www.bombich.com/) to make a "clone" backup of the G4. After the backup is complete, dismount the WD disk, mount it on the G5, then turn Time Machine back on.

Apps on computer but in a different folder. Can I merge them?I have 180 apps that iTunes can no longer "find". They appear in "my apps" and there is a file location for them. Can old purchases be restored without doing each one individually?

I have 180 apps that iTunes can no longer "find". They appear in "my apps" and there is a file location for them. Can old purchases be restored without doing each one individually?

That did the trick! Thank you.
The free trial is all I needed to migrate my iPod Touch library into my main iTunes library. For those that want to use this tool for the same needs there are some things that need to be moved manually, e.g. Apps. But you can do it within the program very easily. Also iBooks/PDFs etc. need to be moved manually. The help section will point you in the right direction.
No more switching iTunes libraries for me.

Only two hard drives - optimal file locations?

Hi,
Can anyone tell what would be the optimal file location configuration (regarding perfomance) when there are only two physical hard drives available? One is abviously running the OS (Windows XP), but how to locate raw images, ACR cache and catalog-files for optimal performance (and are there any other file locations to consider from LR point of view)? The search did not provide answer to this question, and with google everything pretty much boils down to having (at least) three physical hard drives or RAID-array, which are not an option for me.
The workstation can have only two internal drives but allows dedicated controllers for both of them, and I would prefer not to have external drive (only USB2 and FW400 connectors available). Memory is already maxed for the current mother board, and disk activity seems to be next place to optimize. The current performance is "ok", but it would not hurt to squeeze a bit more.
Running Windows XP and LR 2.3.
Thanks in advance.

Thank you for your advice. It has been quite a pain to find out credible setup hints for simple two drive setup.
This slightly differs from original topic, but...
Have there been more inprovements within 2.4 code than have been mentioned in release notes (e.g. http://thelightroomlab.com/2009/06/lightroom-24-and-adobe-camera-raw-54-available/)? I have currently no need for additional camera support, and the bugs mentiones as "fixed" have not been a problem for me. I have had some cases with inconsistent plug-in behaviour (and few crashes) with export plug-ins, but I have judged those as problems either with SDK or plug-in itself.

How can i use the same communication channel to place the file in 2 differe

Hello Guys,
We have a requirement where I need to archive the file that i am sending to the legacy FTP server in a Idoc to file scenario.
How can i place the file in 2 different locations. In this case place the file in the FTP server and a copy of it in the local NFS folder.

>
Rajeev kumar wrote:
> Hello,
> As per the standards we are supposed to use only one channel.
> that is one idoc, one message in the sxmb_moni.
Rajeev,
You can use an ftp job and save it on XI's folder.
Process the file into tmp directory on local file system and run operating system command to run ftp job to send the file to your file server and then copy the file to your archive folder and then delete the file from tmp.
This should solve your problem.
Regards,
AV.

Lync 2010 server and UM role on different domains in different forests

Hello
I have a Lync 2010 environment running on domain A, with exchange 2010 UM also running in Domain A. We are in the process of migrating users and mailboxes from domain A to domain B. Once we reach our enterprise voice users with exchange UM enabled
we will need to install the exchange UM role on the exchange server in Domain B.
There is a 2-way trust relationship between domain A and domain B.
All the users from are running Lync on a PC located in Domain B, using Lync credentials from Domain A.
Are there any issues running Lync 2010 and Exchange UM from different domains in different forests? Is it as simple as creating a new UM DialPlan and UM IP Gateway to the domain A Lync FQDN?
Thanks

Hi,
Each UM forest must be configured to trust the forest in which Lync Server is deployed, and the forest in which Lync Server 2013 is deployed must be configured to trust each UM forest. If Exchange UM is installed in multiple forests, the Exchange
Server integration steps must be performed for each UM forest or you’ll have to specify the Lync Server domain.
Here is a link about for UM of Lync server 2013 but similar for Lync server 2010:
http://technet.microsoft.com/en-us/library/jj966276(v=exchg.150).aspx
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Default Report File location for BIP

Hi Experts,
Is there a way to change the File Location on where a BIP report is generated, whether via adhoc or a scheduled method?
Any helpful inputs is highly appreciated :)
Thanks!

Hi,
Based on my tested in my environment, I went to set the Default File Location via group policy.
Word: Microsoft Word 2013/Word Options/Advanced/File Location/ and change the Default File Location
Excel: Microsoft Excel 2013/Excel Options/Save and change Default file location
Both of them works fine. As you said " However, Group Policy will set it in Excel." Does it mean that you set Word and Excel via two group policies at the same time, but it only works in Excel?
If it is, please try to re-download and change the
Word ADMX to test.
If the issue still exist, please try to use Gpresult command Or RSOP to check group policy result on client.
When troubleshooting group policy issues, we use the gpresult command to confirm whether GPOs are really applied to the client (computer/user). You can run the following command in a command prompt:
gpresult /z > c:\policy.txt
For more details about the usage of command Gpresult, please refer to the following link:
http://technet.microsoft.com/en-us/library/bb490915.aspx
When you read the output, the c:\policy.txt file in this sample, please
examine the results of the report to find the answers to these questions.
Does the report list the particular GPO as applied?
Is the setting listed in the report?
Is the GPO listed in the Denied List
More reference:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/382c97e8-93c8-4022-b8fe-22401037d14c/forum-faq-common-steps-to-start-troubleshooting-group-policy-application-issues?forum=winserverGP
Regards,
George Zhao
TechNet Community Support

GPO run file located in different forest?

Similar Messages

Maybe you are looking for