Recently I had to install a KMS server in an isolated DMZ environment that had no connection to the internet.  We were previously using MAK keys and activating over the phone, this quickly became a hassle and a KMS solution was required.  I have previously implemented KMS solutions before with no issues, but ran into issues creating an offline KMS server and then converting the existing MAK clients to KMS clients.  One of the main issues was the inability to access online document... [More]

Sometimes it necessary to set special permissions on user objects.  For instance when using a Blackberry server, the SendAs permission needs to be set. I see many admins struggle with the setting that permission only to see it disappear within a few hours.  The issue usually on occurs on a few users.  So why is this?  Usually it is always traced back to that user is in a Domain Admin or Enterprise Admins group, or at one time they used to be.  So why does that make... [More]

The best security is to use a limited (i.e. normal user) account for day to day operations and use a second administrative account only for administrative functions.  Too often, I see that many admins are too lazy to do this.  The most common argument is that it's too much hassle or 90% of my day to day job is admin functions.  Fair enough.  Maybe 90% of your job is admin functions, but you can still do it securely and with relative ease.  Security isn’t ... [More]

Well this year has been quite busy.  Sorry I haven't been able to post to my blog lately.  I'be been swamped with home life, work and night courses.  I've completed my courses and winter sports are all over, so hopefully I'll have some time to spend here before it gets warm outside. (: See you soon   Pber

I updated the blog today to a new version.  The latest version had some features I required greatly. Thank you for your patience during the brief outage while upgrading. Sorry for any inconvenience caused. Pber