Search This Blog

Friday, September 29, 2017

Can't logon because the logon method you are using is not allowed on this computer?

Can't logon because "the logon method you are using is not allowed on this computer" ?
(this howto is for people making first steps in windows  domain configuration)


  1. this is a result of group policies.
     when working with domain, you need to edit group policy, not local policy (if you run the editor [gpedit.msc] it won't help, cause all helpful bits would be greyed out).
    hence, do not start group policy management editor but start instead the group policy management console gpmc.msc
  2.  how to edit group policies?
       once the group policy management screen is open,   go into the relevant forest, into domain controllers, to the "default domain controllers policy",
     there choose the "settings" tab,
     there,right click the Computer Configuration\policies\ windows settings\Security Settings\Local Policies\user rights assignment
    and choose edit (if your edit is greyed out, go to item 3 in this post)
    and lo and behold - the group policy management editor (similar to the one you know from a non-domain windows) will open but with editing working properly.
    now, go to Computer Configuration\policies\ windows settings\Security Settings\Local Policies\user rights assignment
    ( make sure you are editing the right place)
    and there you need to edit two items:
    a) allow log on locally - make sure everything relevant be included (but don't be too generous. remember, this is the domain controller!)
    b) deny log on locally - make sure this one does not include the ones you wish to be able to logon locally....

    Now you need to wait. It takes about 15 minutes for changes to propagate and become active, even if we are talking about a single Domain Controller. If I learn how to initate propagationI'll update this post.
  3. why can't my user edit group policies ?!? (why is my edit greyed out?)
    if your admin user cannot edit policies  try administrator. assuming he can, it is a matter of the groups included in the delegation of the group policy management. add the relevant group or the relevant user.
    Now you need to wait about 15 minutes for propagation. 
  4. what to do if I get an internet explorer security message when I open the group policy management ?
    when you first open the group policy management, you will get a message that tells that "content within this application coming from the website listed below is being blocked by internet explorer enhanced security configuration".
    error message: "content within this application coming from the website listed below is being blocked by internet explorer enhanced security configuration"
    What to do ? Add the site to the trusted sites zone
    (logical considering that this is our own local machine, no? )
    two add and one close actions later, you will see the contents of the default domain policy. 

some shortcuts: 

  • to run the group policy management, type gpmc.msc 
  • to run the active directory users and computers, type dsa.msc    

Wednesday, September 20, 2017

a quick and dirty solution for running power shell scripts

Found myself trying to execute my first power shell script and unable to run it because of Power Shell's restrictive execution policy. Found a quick and dirty solution for running power shell scripts
which is not too horrible for develop or test environments, as long as we assume they are properly secure and are willing to ignore all the lectures regarding the need to stop the negligence in which
security is handled in development and testing environments... which I am , at 00:06 at night, wishing
to see the fruits of my labor and being quite frustrated with Microsoft's annoying approach regarding self certificates in older windows environments (I'm working on an older Power Shell version and the recommended solution for this version has been deprecated....)

So, with no further introductions, the quick and dirty solution:

1) run power shall as admin
2) see current execution policy by
    Get-ExecutionPolicy
3) enable running locally developed scripts by:
    Set-ExecutionPolicy RemoteSigned
4) remember at end of session
    Set-ExecutionPolicy Restricted
(so we'll get back to maximum security)

source:
WindowsITPro - running powershell scripts 

Tuesday, September 19, 2017

vmware cannot load vmmon on ubuntu 16 host?

As I've wrote perviously, after years living with Virtual Box,
I'm experimenting with vmware.

After a period of having a wonderfully stable network for testing and learning on my ubuntu host
all of a sudden it happened: The guest machines wouldn't start with vmware producing the dreaded error message informing that vmmon cannot be loaded.

My searchs for an answer on the internet brought me to discussions that mostly suggested -
either turning off safe boot or
reconfiguring vmware drivers (sudo vmware-modconfig --console --install-all )
(I think that this vmmon not loading thread on askubuntu sums up the common wisdom.

But safe boot was already off, because of other considerations (I verified, just to be on the safe side) and there have been no kernel updates, so  after scratching my head, i decided to try something simpler first:
1) apt-get update
2) apt-get upgrade

It seemed logical that before doing anything else, this should be performed.
And indeed -  that solved the problem.

(
p.s
why did that work ?
I have to admit, ashamed, that at the moment, I have no idea.
But sometimes, as the late Douglas Adams once wrote, if you delve
too deep seeking an answer, the question might be taken from you,
and in my case, there are other issues I wish to pursue
which interest me more...
but if I found out, I'll update this post with another p.s)