Miscellaneous

Linux Tips: Remove annoying firefox update message If you do not want to get a prompt from firefox to update every time that you start up your browser (i.e. for whatever reason) - if you're not using the latest version of firefox: Step 1: Create a directory named: distribution in the same directory as your firefox executable. Step 2: Create policies.json file under distribution . Step 3: Input the following into policies.json :-  {   "policies": {     "DisableAppUpdate": true   } } Step 4: Save file:- policies.json . Step 5: Restart firefox.

Linux tips: Stopping Firefox auto update/upgrade Step 1: To stop Firefox's auto upgrade:- search for the location of your firefox installation > delete the following files: updater | updater.ini | update-settings.ini Step 2: Go to About Firefox (in your firefox browser) > you'll see the message:- Firefox is up to date .

Windows Server 2016: Creating (network) Home Folders for AD Users // --------------------------- // Create and share a new folder:- Home_Folders Step 1: [WS2016-DC01 Server] Create Home_Folders [Folder name] in D:\ Step 2: [WS2016-DC01 Server] (Right-click) Home_Folders > (A) Sharing > Advanced Sharing > (x) Share this Folder > input Share name: Home_Folders$ ( // The $ sign will hide this folder) > Permissions > Select the permissions that you want to set (i.e. Full Control | Change | Read) > the network path is:- \\WS2016-DC01\Home_Folders$ (B) Security > Advanced > Disable inheritance > Convert inherited permissions into explicit permissions on this object > remove Users [Principal - this will remove other permissions for Home_Folders ] . // --------------------------- // Setup the Home_Folder for selected users - to be accessed thru:- H: Step 3: [WS2016-DC01 Server] Active Directory Users and Computers > select your use

Linux Mint Tips: Recover from system hang (after installing & using kernel from UKUU [Ubuntu Kernel Upgrade Utility]) // If your system hangs while running under Linux Mint (running on a kernel - // that's installed by UKUU), do the following: Step 1: Boot into GRUB > Run Recovery Mode > do fsck etc ... > Boot into GUI from recovery mode > make sure networking is available (Internet) Step 2: root > apt-get install --reinstall xserver-xorg-video-nouveau libdrm-nouveau2 libgl1-mesa-glx libgl1-mesa-dri xserver-xorg-core Step 3: Reboot Step 4: Boot into (non-UKUU installed kernel) stable kernel Step 5: Remove UKUU kernel Step 6: Remove UKUU utility

Windows Server 2016: Create a CNAME (i.e. Alias) record in DNS // -------------------- // Domain Controller: DC2 // Example 2nd level domain name: wiget.com Step 1: Server Manager > Tools > DNS > DC2 > Forward Lookup Zone > (Right-click) wiget.com > New Alias (CNAME) > Alias Name:- Alias | Fully Qualified Domain Name (FQDN):- Alias.wiget.com | Fully Qualified Domain Name (FQDN) for target host:- dc2.wiget.com . Step 2: cmd.exe > ping dc2 -4 Reply from 192.168.15.239  ... Step 2: cmd.exe > ping alias.wiget.com -4 Reply from 192.168.15.12 ... // --------------------

Windows Server 2016: WSUS (Windows Server Update Service) Schema: WSUS server (IP Address): 192.168.0.39 // ------------------- // Install WSUS Step 1: Server Manager > Add Roles and Features > Windows Server Update Services > (x) Store updates in the following location (choose a valid path ....) - C:\Update (as an example - recommended to choose a new hdd/drive as the updates can be very big) > (x) Restart the destination server automatically if required > Install > Launch Post-Installation tasks . // ------------------- // Synchronize WSUS with Microsoft Update Step 2:  Server Manager > WSUS > (Right-Click) Server Name (choose your selected server) > Windows Server Update Services > (x) Synchronize from Microsoft Update > if your server require a proxy service to access the Internet, fill in the details else > Start Connecting > specify the product in which you want updates (i.e. never choose all as the updates will be huge

Windows Server 2016: File and Folder Access Auditing and Monitoring // ------------------------ // Setup Auditing - notification when access if successful or failure Step 1: (Right-click) Folder > Properties > Security > Advanced > Auditing > Add > Select a Principal > Enter the object name to select:- (E.g.) Administrator Step 2: Server Manager > Tools > Group Policy Management > (selected Domain) Group Policy Object > (Right-click) Default Domain Policy [Make sure domain is Enforced ] > Edit > (choose either Computer Configuration or User Configuration) Computer Configuration > Policies > Windows Settings > Security Settings > Local Policy > Audit Policy > Audit Object Access // Remember that the Computer/User need to logoff & re-login for the (new) // Group Policy to be active. // ------------------------ //  Looking into the (Audit) event log for File Access Step 3: run: event viewer > Windows Logs &

Windows Server 2016: Create Reverse DNS Zone  Schema: Server Name:- SERVER006 IPv4 Address:- 192.168.0.30 // ------------------ // When Reverse DNS zone is not created Step 1: powershell:- ps> C:\Users\Administrators> nslookup [Response] Default Server: Unknown Address:   ::1 > set type=ptr > 192.168.0.30 Server: Unknown Address:   ::1 ===Unknown  cannot find 30.0.168.192.in-addr.arpa. : Non-existant domain >exit // ------------------ // Setup Reverse DNS Zone // Note: the entry for 192.168.0.30 Reverse DNS Zone might not appear instantly // (when viewed under DNS Manager > Reverse Lookup Zones) - might require a // [All tasks] reload or refresh (right-click under DNS Manager) Step 2: Server Manager > DNS Manager > (Right-click) Reverse Lookup Zone > New Zone > Primary Zone > (Active Directory Zone Replication Zone) (x) To all DNS servers running on domain controllers in this domain: (E.g.) windowsninja.local > IPv4

Windows Server 2016: Implementing DNS  Schema: Hostname: NLB-NW-01 IP Address: 10.0.0.19 Logon Domain: NLBLAB Host name for Mail: mail.nlb-solutions.com IP Address: 10.0.0.144 // ------------------- // Install DNS Server Step 1: Server Manager > Manage > Add Roles and Features Wizard > ... // ------------------- // Note: (a) Forward lookup zone - query IP address of a hostname: e.g. // c:\> nslookup www.google.com // Note: (b) Reverse lookup zone - find hostname from IP address (if configured) : // e.g. c:\> ping 172.217.194.99 Step 2: Server Manager > Tools > DNS > DNS Manager > configure DNS server > create forward lookup zone (recommended for small networks) > The server maintains the zone (Primary Server Location) > Zone Name: nlb-solutions.com > Create a new file with this file (i.e. zone file) name: nlb-solutions.com.dns > if forwarders are not configured (unrecognised dns queries will use Root Name DNS server ins

Windows Server 2016: Configure Remote Access VPN  // Domain Controller Schema:- // ***************************** // Host Name: SRT_DC01 // Primary DNS: mylab.local // IPv4 address: 192.168.49.101 // Netmask:  255.255.255.0 // Gateway: 192.168.49.1 // DNS Servers: 192.168.49.101 // Server Schema:- // ***************** // Computer Name: SRT-SRV01 // Domain: mylab.local // Private (NIC 1) IP: 192.168.49.1 (IPv6 Enabled) // Public (NIC2) IP: 10.0.0.1 (IPv6 Enabled) // -------------------------------------------------------------------------------------- // Install Remote Access services 1)  [Server Manager - Dashboard] - click on Manage - Click on Add roles and features - under Before you begin - click on Next - under Installation Type, select (x) role-based or feature-based installation - click on Next - under Server Selection ( // select your destination server, E,g: SRT-SRV01.mylab.local) , click on (x) Select a server from the server pool , choose your select

Windows Server 2016: File Screen using FSRM (File Server Resource Manager) // -------------------------------------------------------------------------------------- // Installation of FSRM (File Server Resource Manager) 1)  [Server Manager - Dashboard] - click on Manage - Click on Add roles and features - under Before you begin - click on Next - under Installation Type, select (x) role-based or feature-based installation - click on Next - under Server Selection ( // select your destination server, E,g: SRT-DC01.mylab.local) , click on (x) Select a server from the server pool , choose your selected server from the Server Pool -  click on Next - under Server Roles, click on File and Storage Services - click on File and iSCSI Services - select (x) File Server Resource Manager -  under Add Roles and Features Wizard, click on Add Features - click on Next - under Features, click on Next - under Confirmation, click on Install - under Results, click on Close . // -------

Windows Server 2016: Enable Quotas on shared folders using FSRM (File Server Resource Manager)  Metadata: Domain: mylab.local IP: 192.168.49.101 // ------------------------------ // Install FSRM on server 1)  [Server Manager - Dashboard] - click on Manage - Click on Add roles and features - under Before you begin - click on Next - under Installation Type, select (x) role-based or feature-based installation - click on Next - under Server Selection ( // select your destination server, E,g: SRT-DC01.mylab.local) , click on (x) Select a server from the server pool , choose your selected server from the Server Pool -  click on Next - under Server Roles, click on File and Storage Services - click on File and iSCSI Services - select (x) File Server Resource Manager -  under Add Roles and Features Wizard, click on Add Features - click on Next - under Features, click on Next - under Confirmation, click on Install - under Results, click on Close . // -----------------

Windows Server 2016: Active Directory with DNS // Note: Make sure that you have assigned your preferred Computer Name (E.g. WS2016) & Ethernet (whether static IP [E.g. 192.168.16.3 (IPv6 Enabled)] or DHCP address) under Server Manager. //  --------------------------------- // Step 1) specifies the steps to installation & configuration of DNS & Active Directory Services. 1) [Server Manager - Dashboard] - Click on Manage - Click on Add roles and features - under Before you begin - click on Next - under Installation Type, select (x) role-based or feature-based installation - click on Next - under Server Selection ( // select your destination server) , click on (x) Select a server from the server pool , choose your selected server from the Server Pool -  click on Next - under Server Roles, select (x) Active Directory Domain Services - under Add Roles and Features Wizard, click on Add Features - click on Next - under Features, click on Next - under AD DS, click on

Windows Server 2016: Print Server - Deployed Printers  // Note: Deployed Printers are printers that are directly connected to the Server 1) [Server Manager - Dashboard] - Click on Tools - click on Print Management - Under Print Management, look for Print Servers, make sure that a print server e.g. DC01 (local) [using your hostname] exists - click on DC01 - click on Printers - right-click on first printer listing (e.g. Generic / Text only) - click on Deploy with Group Policy   - beside GPO name, click on Browse - under Browse for a Group Policy Object, under All - click on Default Domain Policy - click ok - under Deploy with Group Policy, Printer Name, select (x) The users that this GPO applies to (per user) - click Add - The printer name: \\DC01\Generic /Text Only , GPO: Default Domain Policy , Connection Type: Per User will appear - click Apply - click OK (if successful). 2) [Server Manager - Dashboard] - Click on Tools - click on Print Management - Under Pri

Windows Server 2016: Print Server Configuration // To access server manager, click on Start menu & look for Server Manager // -------------------------------------------- // Installation of Print Server 1) [Server Manager - Dashboard] - Click on Manage [upper right-hand corner] - click on Add Roles and Features - under Select Installation type, click next [(x) role-based or feature-based installation] - under Server Installation, click next [(x) Select a server from server pool] - under Server Roles, select (x) Print and Document Services - under Add roles and Features Wizard, click Add Features - click next [back to Server Roles] - click next [back to Features] - click next [under Print and Document Services] - click next [under Roles Services, (x) Print Server ] - click Install [under Confirmation] - click close [under View installation progress]. // Note: Installation of Print Server does not require server reboot. // ---------------------------------

Windows Server 2016 tips: setup trust between 2 domains Schema: - DC21: Domain Controller ( pns.vn ), IP: 10.0.0.21 | WIN1091 : Domain member ( pns.vn ) , IP: 10.0.0.91 - DC22: Domain Controller ( pnj.vn ), IP: 10.0.0.22 | WIN1092 : Domain member ( pnj.vn ) , IP: 10.0.0.92 Setup a trust between pns.vn  & pnj.vn 1)  ( DC21: Domain controller) - Server Manager  - Dashboard - click on Tools - click on DNS - DNS manager -  click on DC21 - click on Conditional Forwarders - under New Conditional Forwarder - under DNS domain, input " pnj.vn "- under IP addresses of the master servers, input " 10.0.0.22 "  - click OK - click on Conditional Forwarders , you should see " pnj.vn " . 2) Type " cmd " to load command prompt. Type " ping pnj.vn " on commandline. If failure [ "Ping request cannot find host pnj.vn"], do this:- (DC22: Domain controller) - type " wf.mfc " to load Windows Firewall with Adva