Server Core can be configured via group policy to utilize your Windows Server Update Service (WSUS) environment. The problem is this. The server core will reboot. Unlike the GUI versions of Windows, you cannot receive little popup windows asking you to reboot the computer to complete the update installation. Server Core will reboot. To get around this will require you to manually update the server. To do this, you will need to download the .MSU files for the patches and install them using Windows Update Stand-alone Installed (Wusa.exe). In particular, you will want to add the /quite and the /norestart switches to the command line. This will prevent Server Core from reboot until you have installed all your updates and perform the reboot manually. Instructions for this procedure are in the link below.
With the AD Recycle Bin Turned on, What Happens when you Create a User Account with a Password that does not meet the Password Policy?
This was an interesting observation from one of my Windows Server 2012 classes. While working with the AD Recycle bin in a lab, one of my students discovered some interesting accounts that were created. When he created user accounts that did not meet password complexity requirements, an account is temporarily made and then deleted. When a new password is provided that meets the password requirements, then a new account is made. We discovered this in two places. First off in the Active Directory Administrative Center. This is what caused the initial confusion. Take a look. This is in the Deleted Objects OU. You can see multiple deleted accounts for Test2 and one for Test3. Test3 is a valid, functioning user account. Using the PowerShell command Get-ADObject –IncludeDeletedObjects –Filter * –Properties ObjectSID we can see that indeed, two accounts were created, with one of them deleted. Notice the RID portion of the SID is different. ...
Comments