Chris Blankenship's Ramblings

PAC – When a forest trust isn’t enough

Windows Kerberos Authentication includes a custom field called the (Privilege Attribute Certificate)PAC field that contains a list of security group relative group ID’s for which the user is a member. For example, if a user is a member of three security groups then the PAC would include a relative group ...

The Uselessness of NewSID

For years I have been using NewSID to simplify duplication of servers in my test lab. Mark Russinovich's excellent tool provided a new SID and computer name without much effort. Even though NewSID was not designed for Vista I have had success using it to quickly duplicate Windows Server ...

Kerberos Delegation Across A Cross Forest Trust

Short version When you chose to implement a cross forest trust with another organization you must realize that Kerberos Delegation is a real security risk. A malicious admin could enable Kerberos Delegation on a server that would allow impersonation across the trust. Long version In the past ...

ACL Settings for WordPress on IIS

After getting my WordPress blog I wanted to ensure that my file ACL’s were configured correctly. This process is a little different than configuring BlogEngine.NET because WordPress runs using impersonation instead of a separated service account and anonymous account. Unfortunately there was added complexity I upgraded my web ...

Pardon the dust…

For the last couple of years I have been using the excellent blog engine called BlogEngine.NET. While mostly happy with the framework and customization capabilities I was always slightly bothered by the incomplete feel of the product. This isn’t a dig on BlogEngine.NET, as I still think it’s an ...

Robert Graham’s Security Guru

I found this article a while back and it struck me as an excellent guideline to follow. Unfortunately as time passes things like this article get filed away and forgotten. Then one day last week I stumbled across it again and decided to add it to my blog for future ...

Oh the agony of relocating Hyper-V VMs

Recently I had to rebuild a RAID drive containing my Hyper-V VM’s. Seemed like a simple task of backing up the files from the RAID drive. So I stopped the Hyper-V services and then copied all of the VM folders onto an external USB hard drive. After rebuilding the RAID ...

Hyper-V Routing without a Router VM

This week I have been spending some time thinking about my Hyper-V configuration. One particular aspect of Hyper-V has given me a bit of pain: Hyper-V Virtual Networks. It has taken some time to get my head around the networking configurations. Fortunately there have been some excellent articles written that ...

When a VBScript object is not an Object

The other day I was writing some HTA code and ran into something mildly frustrating. Normally I have been focused on writing code using JavaScript but for this project I had to use VBScript. While trying to interact with the HTML components of the HTA page I came across an ...

Mmm, mmm, mm! Barack Hussein Obama

Wow… that’s really all I can say about the attached video… This was filmed around June 19, 2009 at the B. Bernice Young Elementary School in Burlington, NJ.

Links for 2009-07-28 [del.icio.us]

Wed, 29 Jul 2009 00:00:00 PDT

San Diego Motorcycle Stores, Parts, Service & Repair etc.
List of Motorcycle Vendors in San Diego
ConfigurationManager class in C#
Using Configurationmanager in C# to handle application configuration settings

Links for 2009-07-27 [del.icio.us]

Tue, 28 Jul 2009 00:00:00 PDT

.NET TREATS & TRICKS
Excellent sample code for .NET and Active Directory

Links for 2009-07-21 [del.icio.us]

Wed, 22 Jul 2009 00:00:00 PDT

Guru-Web: Building a Windows 2008 x64 Laptop
Tips for installing Windows 2008 on your laptop

Links for 2009-07-13 [del.icio.us]

Tue, 14 Jul 2009 00:00:00 PDT

Links for 2009-07-03 [del.icio.us]

Sat, 04 Jul 2009 00:00:00 PDT

SundayMorningRides

Links for 2009-07-01 [del.icio.us]

Thu, 02 Jul 2009 00:00:00 PDT

Speedzilla RC51 Forum

Links for 2009-06-26 [del.icio.us]

Sat, 27 Jun 2009 00:00:00 PDT

PartsFish
Look up parts for your bike