xud6的笔记本

Active Directory

A 8 post collection


Windows 预安装打印机驱动

 •  Filed under 打印机, Active Directory, windows

将打印机驱动复制到可以访问的共享路径
使用以下powershell脚本安装驱动

 pnputil.exe /a "\\<fileshare>\koaxpj__.inf.inf"

之后确认安装后打印机驱动的路径,在C:\Windows\System32\DriverStore\FileRepository
打开inf文件记录下实际打印机型号的名称,如

 [KONICA MINOLTA.NTamd64]
 "KONICA MINOLTA C368SeriesPCL"
 "KONICA MINOLTA C3851SeriesPCL"

使用以下powershell脚本添加具体驱动

 Add-PrinterDriver -Name "KONICA MINOLTA C368SeriesPCL" -InfPath "C:\Windows\System32\DriverStore\FileRepository\koaxpj__.inf_amd64_c4e736b89265dcc3\koaxpj__.inf"
 
 Add-PrinterDriver -Name "KONICA MINOLTA C3851SeriesPCL" -InfPath "C:\Windows\System32\DriverStore\FileRepository\koaxpj__.inf_amd64_c4e736b89265dcc3\koaxpj__.inf"

清理 GPO 中 Extra Registry Settings

 •  Filed under Active Directory, windows

对于Office Deployment中Setting值为Software\Policies\Microsoft\Office\11.0\Word\DisabledCmdBarItemsCheckBoxes\FileOpenToolsFind的项,如果在User Configuration中

Remove-GPRegistryValue -Name "Office Deployment" -Key "HKCU\Software\Policies\Microsoft\Office\11.0\Word\DisabledCmdBarItemsCheckBoxes" -ValueName "FileOpenToolsFind"

对应的如果在Computer Configuration中应把HKCU换为HKLM

Powershell 转移 FSMO

 •  Filed under Active Directory, windows

获取当前FSMO

Get-ADForest | select SchemaMaster,DomainNamingMaster
Get-ADDomain | select PDCEmulator,RIDMaster,InfrastructureMaster

转移FSMO

Move-ADDirectoryServerOperationMasterRole -Identity <Target-DC> -OperationMasterRole SchemaMaster,RIDMaster,InfrastructureMaster,DomainNamingMaster,PDCEmulator

强制转移FSMO

Move-ADDirectoryServerOperationMasterRole -Identity <Target-DC> -OperationMasterRole SchemaMaster,RIDMaster,InfrastructureMaster,DomainNamingMaster,PDCEmulator -Force

centos 7 安装windows域ca证书

 •  Filed under centos7, Active Directory, centos

首先从ca服务器下载证书,比如

http://server/certsrv

然后将下载到的cer证书以base64格式导出为crt证书。
将证书上传到服务器以下目录:

/etc/pki/ca-trust/source/anchors

运行update-ca-trust

sudo update-ca-trust