Windows Server

Performing AD Schema Updates in a safe way

Published September 25, 2007 |

Updating from 2003 to 2003 R2 & implementing Exchange are 2 common administrative tasks which both require a schema update. Since I’ve mentioned “updating from 2003 to 2003 R2”, I’ll take the opportunity to add some “notes from the field” to this blog post, which will increase success rate of the update and limit the […]

Posted in 001_Security, Active Directory, Windows Server | Tagged 2003-schema-update, Active Directory, ad, ad-schema-update-verification, disable_inbound_repl, disable_outbound_repl, download-exchange-2007-tools-for-schema-update, fsmo, how-to-upgrade-schema-version-30-to-31, is-it-safe-to-update-ad-domain, is_gc, ntfrs, safe, schema update, schema-disable-outbound-replication, schema-update-2003, schema-update-disable-replication, schema-update-reboot-required, stop-replication-repadmin, updating-windows-2003-schema

Delegating AD Admin tasks to non-Admin accounts

Published September 17, 2007 |

By Peter Van Eeckhoutte (corelanc0d3r)

Designing a distributed/international Active Directory is certainly the most important piece of a successful AD implementation. One of the issues that should be dealt with is whether you want to allow other people to be Enterprise/Domain Admin or not. If you ask me : it’s not a good idea. You should restrict those rights to […]

Posted in 001_Security, Active Directory, Windows Server | Tagged Active Directory, active-directory-2008-r2-non-administrator-access-to-security-event-log, allow-non-admin-users-to-create-active-directory-accounts, authorize, check-event-logs-on-dc-delegation, delegate-dhcp-administration-2008, delegate-read-only-access-to-the-security-event-log-on-domain-controllers, delegate-security-rights-to-non-domain-admin, delegate-wins-administration, delegated-rights-wins, delegation, dhcp, list-authorization-dhcp-2008, metasploit-exploiting-windows-server-2003-adding-an-administrative-account, netservices, sddl, security descriptor, the-specified-servers-are-already-present-in-the-directory-service-windows-2008-r2, wins-admin-rights, wins-delegate-permissions-to-read

How to restore a Windows 2003 DC using ASR and VMWare

Published September 14, 2007 |

By Peter Van Eeckhoutte (corelanc0d3r)

The following procedure should work for any type of hardware, but I’ve used VMWare (so this procedure is also valid if you want to convert a physical Domain Controller to VMWare). Additionally, the procedure works for Windows 2003 server, but also for Windows XP (professional) Prerequisites : ASR backup .bkf file and the ASR floppy […]

Posted in Active Directory, Virtualization, Windows Server | Tagged 2003, Active Directory, apipa, apipa-address, ASR, asr-setup-could-not-detect-a-floppy-drive-on-your-machine-windows-2003, automated system recovery, bkfrestorescript, DC, how-to-restore-a-windows-2003-dc-using-asr-and-vmware, konvert-windows-asr-backup-to-vmware, naming-information-cannot-be-located-after-restore, ntbackup, restore, the-sysvol-and-netlogon-shares-are-missing-after-you-restore-a-domain-controller-from-backup, vmware, vmware-attache-bfk-file, vmware-converter-windows-server-2003-restore, windows, windows-2003-asr-procedure

AD 2003 DC Restore Technique using VMWare (without having to grant local DC/Domain Admin rights)

Published September 12, 2007 |

By Peter Van Eeckhoutte (corelanc0d3r)

In certain distributed AD scenario’s, Domain Admins group membership or local DC admin privileges are restricted to certain people only. This is a good thing to do, but it requires you to think about certain issues before they happen. One of these issues is backup and restore. Yes, you can schedule a system state backup […]

Posted in Active Directory, Virtualization, Windows Server | Tagged 2003, Active Directory, ad, bkf-to-vm, bkf-to-vmware, converting-dc-2003-to-vmware, dc-vmware-recover, domain-controller-vm-snapshot-fix-restore-mode, hacking-active-directory-restore-mode-vm, import-bkf-file-into-vmware, ntds-dit-restore-file-vm, problems-with-restored-vmware-dc, restore, restore-dc-to-vm, restore-vm-domain-controller, restoring-a-domain-controller-to-virtual-machine, vmware, vmware-recover-domain-controller, vmware-reinstall-drivers-windows-ntbackup-restore, vmware-server-2003-f8-directory-restore-mode

Restoring 2003 AD Objects using Windows 2008 Server

Published July 14, 2007 |

By Peter Van Eeckhoutte (corelanc0d3r)

Anyone managing an Active Directory knows about the administrative troubles and work that can be caused when an object (such as a user) gets deleted. The admin needs to either restore the object, and then manually fill out the attributes (such as password, group membership and so on), or restore a backup of the ntds.dit […]

Posted in Active Directory, Windows Server | Tagged 2003, 2008, Active Directory, active-directory-recovery-2003-auf-2008, can-i-restore-2003-ad-backup-in-2008, esentutl-p-for-ntds-technet, how-to-restore-active-directory-2003-from-ntbackup-to-2008, recover-win-2003-ad-on-win2008, restauration-ad-2003-vers-2008, restore, restore-2008-system-state-to-2003-server, restore-active-directory-2008-from-2003-backup, restore-ad-from-2003-system-state-to-2008-server, restore-server-2003-ad-to-2008, restore-to-alternate-location-access-ntds-dit, restore-user-obiect-from-ntdsdit, restore-windows-2003-group-policy-into-windows-2008, server, where-is-the-ntds-dit-in-an-alternate-location-restore, win-2008-recover-ad-with-files

Set up Anonymous Access to Sharepoint sites

Published July 12, 2007 |

By Peter Van Eeckhoutte (corelanc0d3r)

The default behaviour for public internet facing websites should allow for anonymous access, but in reality, SharePoint does not accept anonymous access by default. So how can you set up the SharePoint site to accept both anonymous access and domain credentials ? In fact, it is very easy. It might not matter much, but […]

Posted in Sharepoint, Windows Server | Tagged anonymous access, anonymous-access-not-coming-under-site-settings, anonymous-access-to-sharepoint-internet-site, anonymous-access-to-sharepoint-site, anonymous-access-to-the-website, configure-anonymous-access-sharepoint-2007-team-site, core-lan-settings, grant-anonymous-access-sharepoint-2007, grant-anonymous-acess-to-sharepoint-site, how-anonymous-access-comes-in-settings, how-to-set-up-anonymous-access-sharepoint, setting-up-anonymous-sharepoint-sites, Sharepoint, sharepoint-access-to-anonymous, sharepoint-anonymous-access-team-site, sharepoint-anonymous-acess-account, sharepoint-set-page-anonymous, sharepoint-set-up-anonymous-team-site, wss, wss-3-0-grant-anonymous

Corelan Cybersecurity Research

:: Knowledge is not an object, it's a flow ::

Performing AD Schema Updates in a safe way

How to restore a Windows 2003 DC using ASR and VMWare

AD 2003 DC Restore Technique using VMWare (without having to grant local DC/Domain Admin rights)

Restoring 2003 AD Objects using Windows 2008 Server

Set up Anonymous Access to Sharepoint sites

Corelan Training

Donate

Corelan Team Merchandise

Corelan on Slack

Actions

Categories

Hi there!

We have good news for you!