esSJae's Virtualization Blog

Virtualization and other IT topics

Archive for the ‘Sysadmin’ Category

Running DNS, DHCP, ADUC, etc, MMC Admin consoles with Windows 10 Microsoft Account

Posted by essjae on March 7, 2016

Note: This assumes you’ve already got the RSAT tools installed.  RSAT for Windows 10

Building on my post here for Hyper-V manager:

https://smudj.wordpress.com/2016/02/10/running-hyper-v-manager-as-a-different-user-in-windows-10-runas/

You can use the same method to get Active Directory Users and Computers (ADUC) and DNS MMC admin consoles working if you’re logged in with your Microsoft account versus your domain account:

admin-tools

DNS shortcut:

C:\Windows\System32\runas.exe /savecred /user:domain\username  "cmd /c Start /B %SystemRoot%\system32\mmc.exe %SystemRoot%\system32\dnsmgmt.msc""

Icon path:

%SystemRoot%\system32\dnsmgr.dll

ADUC shortcut:

C:\Windows\System32\runas.exe /savecred /user:domain\username  "cmd /c Start /B %SystemRoot%\system32\dsa.msc""

Icon path:

%SystemRoot%\system32\dsadmin.dll

When you double-click, you’ll get prompted for the password (if you haven’t already) and also for UAC

uac

dns

DHCP is a little more involved as the RSAT doesn’t include the DHCP manager.  NOTE: this is not currently supported by MS

  1. 1. copy dhcpmgmt.msc and dhcpsnap.dll.mui from %windir%\system32\system32\en-us on the 2012 server to the same location on the w10 pc
  2. copy dhcpsnap.dll from %windir%\system32\ on the 2012 server to the w10 pc
  3. From an admin cmd prompt run: regsvr32.exe dhcpsnap.dll
  4. Create the short-cut: C:\Windows\System32\runas.exe /savecred /user:domain\username  “cmd /c Start /B %SystemRoot%\system32\mmc.exe %SystemRoot%\system32\dhcpmgmt.msc””
  5. Change Icon path: %SystemRoot%\System32\dhcpsnap.dll

You’ll need to manually add your DHCP server each time you run this.  I haven’t found a way to save the config.

*This was done with Windows 10 Build 1511 and Windows Server 2012.

For additional snap-ins, just modify the last part of the short-cut with the correct mmc path for the add-in you want.

Posted in Sysadmin, Windows, Windows 10, Windows 2012 | Tagged: , , , , , , | Leave a Comment »

Configuring/Removing Password Policies in Windows Server 2012 for Lab/Demo environments

Posted by essjae on June 24, 2015

The default password policies are pretty strict for a lab or demo environment.  If you’re not in a domain, it’s easy to modify these settings from the Local Security Policies:

  1. Run gpedit.msc
  2. Under Computer Configuration–>Windows Settings–>Security Settings–>Account Policies–Password Policy
    1. Change the Policy Security Settings you want.

Under a domain controller, you can do this via the Active Directory Administrative Center

  1. Run dsac.exe, or via the GUI it’s under Administrative Tools–>Active Directory Administrative Center
  2. Go to YourDomain(local)–>System–>Password Settings Container
  3. Click New from the Tasks menu
  4. Create your Password Settings

Here’s the window, note that I’ve already created a password policy.  A new forest/domain will not have anything populated in it.

dsac

I don’t recommend disabling all these settings if you’re in a production environment.

Posted in Sysadmin, Windows 2012 | Tagged: , | Leave a Comment »