Forum Discussion
Solved
RSAT missing DNS Server Tools?
Hi, on a fresh Win 10 insider client (16278 updated to 16299) I installed Windows_InsiderPreview_RSAT_x64_16279 but it seems to be missing DNS Server Tools, the MMC snap-in. All other tools like AD,...
[UPDATE] The final 1803 release of RSAT is now on the public RSAT download page. Look for the WS_1803 package there, thanks!
-----
Here's the official KB workaround published by the DNS team:
https://support.microsoft.com/en-us/help/4055558/rsat-missing-dns-server-tool-in-windows-10-version-1709 (thanks Christoff MOrlOck for posting this previously)
The RSAT download page now also has this info under Additional Information:
Issue: DNS Tools missing
Impact: WS_1709 RSAT package users
Resolution: Use the WS2016 RSAT package or apply this workaroundThe DNS team has also fixed the root cause for RS4 and so the workaround will not be required for the upcoming RS4 RSAT package update.
Reading through this and I see a lot of frustration. One way to reduce this and possibly increase security is to provision a management server and run your elevated tools and scripts from that location. This allows you protect against pass-the-hash like security risks by using your separate elevated account to log into your management server to complete elevated tasks. Another approach if you have an RDS or Citrix farm is to publish the applications. Running these from a windows 10 desktop is going to have it's challenges. Having to reinstall RSAT tools to match the OS is not new. Spend less time complaining and aligning with the problem, get outside the box and become the solution.
Anyone have a clue how to successfully uninstall KB2693643?
PS> Uninstall-Package -Name "Update for Windows (KB2693643)" PS> Get-Package -Name "Update for Windows (KB2693643)" Name Version Source ProviderName ---- ------- ------ ------------ Update for Windows (KB2693643) msu
As you can see, uninstall seems to succeed without throwing any errors, but Get-Package says it is still installed.
Appwiz.cpl updates still lists a slightly different named "Update for Microsoft Windows (KB2693643)" with "An error has occurred. Not all of the updates were successfully uninstalled."
PS> wusa.exe /uninstall /kb:2693643
results in the following error message box:
"Windows Update Standalone Installer
"Installer encountered an error: 0x80070005
Access is denied."
In all cases, I have elevated PS.
@dareames posted the answer to uninstalling in the link below. My CBS.log had ~hundreds of error entries of not being able to remove mostly en-us folders, but none of those mattered when the registry key is deleted.
Travis, that is a good idea for the people that can afford the extra licensing. Of course MimiKatz sniffs out credentials passed to RDP servers, so by default, the jump server might not help much. A more secure solution would be to have a separate machine (preferably hardware based) accessible only via KeyboardVideoMouse switch.
