Admin

RDP Error “To sign in remotely, you need the right to sign in through Remote Desktop Services.” even if the user is in the Remote desktop services group in Domain Controller

by

Since a domain controller, it is additional security we may also need to add users; Open Group Policy Editor. 1. Simultaneously press the Windows  + R keys to open the run command box.2. Type gpmc.msc and press Enter. In Group Policy Editor navigate to: Default Domain Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment. Under the Allow logon locally Click Add … Read more

Remove white spaces in the Exchange database

by

Methods to find white space in Exchange It is important for IT administrators to regularly check for white spaces & remove them to increase the efficiency of the system. Here are three professional approaches to finding white space in Exchange. Checking white spaces in a specific mailbox database For checking white spaces in a specific … Read more

WordPress Redirects to the old URL after Migration.

by

Login to the WordPress admin panel on the new server and change the WordPress Address (URL) and Site Address (URL). If you don’t have admin credentials, use the alternate way by changing the value in MySQL DB. Additionally, you can use the below steps to reset the admin password. Use this if you wanna change … Read more

Default Values of AD Password Policy.

by

Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy Topic Description Enforce password history Describes the best practices, location, values, policy management, and security considerations for the Enforce password history security policy setting. Maximum password age Describes the best practices, location, values, policy management, and security considerations for the Maximum password age security policy setting. Minimum password age Describes the best practices, … Read more

“The encryption type requested is not supported by the KDC” when the user tries to reset

by

In this case, the error can be resolved in one of two ways. Steps to configure the policy setting Network security: Configure encryption types allowed for Kerberos Method 1 – Local Security Policy Method 2 – Group Policy Object (GPO) If this is for the specific service account, for example, an SQL Service account. Steps to … Read more

Transfer FSMO Role

by

Transferring the RID Master, Infrastructure Master and PDC Emulator Role Checking the Current Role Holders You can learn about three domain-wide role holders, including their FQDNs, by running the following cmdlet:Get-ADDomain You can use the Get-ADDomain cmdlet again after transferring FSMO roles to make sure that the operation was successful. Transferring the Roles You can transfer a … Read more

How to Create Custom Attributes In Active Directory

by

Permissions and Requirements Register Schema snap-in Adding Custom Attributes Add the active directory schema snap-ins You will receive Schema Object Creation warning message indicating that creating schema objects is a permanent operation. Click Continue to proceed.  Now you will see the following Create New Attribute window. Enter the Common Name, LDAP Display Name. For example, if you … Read more

Deploy File to Intune Enrolled Devices as Win-32 App

by

Deploy File to Intune Enrolled Devices Deploy a file to Intune enrolled device’s to “C:\Users\Public\Desktop” through Intune Step 1: Prepare the files: Step 2″ Create an Install, Remove & Detect script & save each scripts A. Install: #Installation Script: Install-file.ps1 $FileName = “FileToDesktop.pdf” $ScriptPath = [System.IO.Path]::GetDirectoryName($MyInvocation.MyCommand.Definition) Copy-Item -Path “$ScriptPath\$FileName” -Destination “$Env:Public\Desktop” B. Remove: # Remove … Read more

SCCM Log Location

by

Locating log files Configuration Manager and dependent components store log files in various locations. These locations depend on the process that creates the log file and the configuration of your environment. The following locations are the defaults. If you customized the installation directories in your environment, the actual paths may vary. https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/about-log-files

Enabling BitLocker through Intune.

by

Configure Endpoint Protection profile At the moment of writing, I still use an Endpoint Protection profile in Microsoft Intune to configure encryption settings as I haven`t tested the BitLocker settings yet which are found on the Endpoint Security tab. Give the configuration profile a Name Under Windows Encryption it is important to at least configure these settings for … Read more

Exchange Back Pressure issue.

by

Back pressure is a monitoring feature of the Microsoft Exchange Transport service that monitors system resources such as disk space and memory on Transport servers (the Hub Transport and the Edge Transport servers) and stops message/mail submission if it’s running low on these resources. The following system resources are monitored as part of the back … Read more