About Me

My photo
Bergen, Norway
19th times Microsoft MVP (Security and Windows). IT-Dude @SpareBankenNorge

Monday, September 26, 2011

How to find english symbols when using a norwegian keyboard


Sitting on a Norwegian keyboard with computers that have english settings are often a pain in the ass.
Remeber some of the most importen once usely goes ok, but going into the "On-Screen Keyboard" to find the once I forget takes a long time. So here are a list of the once I know beeing used.
Give me a comment if somethigs missing
How to get English symbols with Norwegian keyboard:

English Symbol
Norwegian Keyboard Key
/
-
\
*
?
Shift + -
@
Shift + 2
$
Shift + 4
Shift + æ
:
Shift + ø
;
Ø
-
+
_
Shift + ?
=
\
(
Shift + 9
)
Shift + 0
< 
Shift + ;
> 
Shift + :
*
Shift + 8
&
Shift + 7
+
Shift + \
[
Å
]
¨
{
Shift + å
}
Shift + ^
Æ
|
Shift + *
#
Shift + 3

Wednesday, September 14, 2011

Windows 8 Client Secured Boot



Just read this in the Windows Developer Preview - Windows 8 Guide:
-----------------------------------------------------------------------------------------------------------
Secured boot


Secured boot stops malware in its tracks and makes Windows 8 significantly more resistant to low-level

attacks. Even when a virus has made it onto your PC, Windows will authenticate boot components to prevent
any attempt to start malware before the operating system is up and running. If the component isn’t correctly
signed by Microsoft, Windows will begin remediation and start the Windows Recovery Environment, which
will automatically try to fix your operating system.
------------------------------------------------------------------------------------------------------------
Great news for security. Still not testet and with to little information, but it might look like there will be disk encryption available for all users, even though it still state that Bitlocker are a business customer feature. Maybe Bitlocker light?

Windows Server 8 (Beta) and KMS functions

Last night (first day of Build) showed alot of cool features in Windows 8 the client, but great news about the server version was also documented in some of the documentation for the client.

On of the realy cool new features are that Active Directory will now take over the role of the KMS server and activate Windows 8 client and its also compatible with Windows 7. Great news, but it did not say anything about Office 2010, yet!.

Lots of other stuff will most likely be reveald today

Monday, September 5, 2011

TechDays gets a new session on Active Directory Management

Because of slow baby arrival I was asked to do a SCSM session on tomorrows TechDays in Norway.
Looking through the slides its clear the session was demo focused, so I had to reject since I didn't have a lab enviroment for that up and running.

But the great news is that I will instead hold a session on Group Policy, Fine-Grained Password Policies, wmi filters and stuff :-)

Monday, August 29, 2011

Changing the password of directory service restore mode

Just sitting playing around with ntdsutil and the possibility to change the directory service restore mode password. This is a feature that most companies forget, or are not aware of. If you dont know the password for the domain controllers you cant restore the Active Directory database, remember that domain controllers don't have local user database?. So the password you typed in during domain controller setup "dcpromo" are important, but easy to forget. Lots of times it's not documented and different on all dc's

You had to use a tool called "Ntdsutil", an important tool for Directory Services administration, to change password after the first setup of "Dcpromo". Luckily you could run the command from just one of the domain controllers and change it on each any every domain controller by using a line of parameters
Scripting have been the way of doing it automaticly, you had the choices of making an advanced script to collect dc server names or just use a script with manually typed name, but then it was important to update the script to reflex the changes in your active directory envimoment.

In Windows Server 2008 you could download a fix KB961320 that gave a new feature in ntdsutil to sync the password with an ordinary domain users account. This feature are buildt into the Windows Server 2008 R2. To read more about it check out the Technet page here

Still it's giving us a challenge, the new feature cannot change it on any other server then the one executing it, so is it worse then the old?
The answer are "no", because combining it with "Group Policy Preferences" you can create a scheduled task and run it regulary

And how to do it are in this great article from the people at the Microsoft Directory Service team

Sunday, August 28, 2011

Is there any features on your Windows Server that you dont use?

Of course, and this tuesday I am just going to ramble about it. http://mtug.no/Forside/tabid/58/ModuleID/416/ItemID/80/mctl/EventDetails/language/nb-NO/Default.aspx

Holding a norwegian presentation about feature and stuff that could optimize you Windows Server experience. Don't understand norwegian?. Thats strange!!!!, every norwegian person start to learn english when they are 8-9 years, so I just asummed that every english speaking country learned norwegian at the same time ;-)

Give me a sound if its worth doing a english version webcast or something

Wednesday, August 24, 2011

What log file to look at in Sccm 2007

There are few applications with more log files then Sccm 2007, and remember all of them and what they do might se imposible. But thats the great thing with internet, somebody have of course been think about this and posted info for us to use already. This time its Micosofts Technet site who have given us this page:
http://technet.microsoft.com/en-us/library/bb892800.aspx

:-)

Cleaning Up Unknown IAM Assignments Across Azure Subscriptions

  If you manage more than a handful of Azure subscriptions, IAM hygiene quickly becomes one of those tasks everyone knows is important, but ...