Sheik's Site
Under the “Default Domain Policy” on the GPMC.MSC enable the policy on the following location. Computer Configuration > Policies → Windows Settings → Security Settings → Advanced Audit Policy Configuration → Audit Policies → Account Management: Audit User Account Management → Define → Success and Failures.
https://learn.microsoft.com/en-us/troubleshoot/windows-client/windows-7-eos-faq/windows-7-extended-security-updates-faq https://learn.microsoft.com/en-us/lifecycle/faq/extended-security-updates https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2012-r2?source=recommendations https://learn.microsoft.com/en-us/lifecycle/policies/fixed
Get-WmiObject win32_service | Select Name,StartName | Sort-Object StartName For specific account Get-WmiObject win32_service | Select Name,StartName | Where-Object {$_.StartName -eq “<ACCOUNT>”}
Name Order Action Hive Key Value Name Type Value DataSSL2.0-Client 20 Update HKEY_LOCAL_MACHINE SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client Enabled REG_DWORD 00000000SSL2.0-Client 21 Update HKEY_LOCAL_MACHINE SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client DisabledByDefault REG_DWORD 00000001SSL2.0-Server 18 Update HKEY_LOCAL_MACHINE SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server Enabled REG_DWORD 00000000SSL2.0-Server 19 Update HKEY_LOCAL_MACHINE SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server DisabledByDefault REG_DWORD 00000001SSL3.0-Client 22 Update HKEY_LOCAL_MACHINE SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client Enabled REG_DWORD 00000000SSL3.0-Client 23 Update HKEY_LOCAL_MACHINE SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client … Read more
Now let’s look at how to create Microsoft Defender firewall rules via Group Policy. To configure your rules, go to Computer Configuration -> Windows Settings -> Security Settings -> Windows Firewall with Advanced Security. The following sections are available in Firewall GPO: Let’s try to create an allowing inbound firewall rule. For example, we want to … Read more
https://learn.microsoft.com/en-us/azure/site-recovery/how-to-migrate-run-as-accounts-managed-identity Prerequisites Before you migrate from a Run As account to a managed identity, ensure that you have the appropriate roles to create a system-assigned identity for your automation account and to assign it the Contributor role in the corresponding recovery services vault. Benefits of managed identities Here are some of the benefits of using … Read more
Connect to Windows Internal Database We can connect to the WID using the Named Piped connection. To read more about named pipe connections. Open SQL Server Management Studio 🡪 On Connect to Server screen, specify the following named pipe connection string in the Server name textbox and click on Connect. np:\\.\pipe\MICROSOFT##WID\tsql\query Below is the screenshot of … Read more
Method 1 : Enable TLS 1.2 and TLS 1.3 manually using Registry Let’s begin learning how to enable TLS 1.2 and TLS 1.3 manually using Windows Registry. Time needed: 10 minutes Method 1 : Enable TLS 1.2 and TLS 1.3 manually using Registry Method 2 : Enable TLS 1.2 and TLS 1.3 on Windows Server using Powershell Commends Follow this … Read more
Managing Exchange Online and Azure Active Directory (Azure AD) from PowerShell requires installing and configuring specific modules. Below is a step-by-step guide to help you install and set up these modules efficiently. Install Exchange Online Management Module Get-Module -ListAvailable -Name ExchangeOnlineManagement Install-Module -Name ExchangeOnlineManagement -Force Update-Module ExchangeOnlineManagement Connect-ExchangeOnline Set-ExecutionPolicy RemoteSigned Uninstall-Module -Name ExchangeOnlineManagement Install Azure … Read more
https://learn.microsoft.com/en-us/windows-server/failover-clustering/create-failover-cluster This article shows how to create a failover cluster by using either the Failover Cluster Manager snap-in or Windows PowerShell. The article covers a typical deployment in which computer objects for the cluster and its associated clustered roles are created in Active Directory Domain Services (AD DS). If you’re deploying a Storage Spaces Direct … Read more
A typical Event ID you may see when checking RDP connection event logs is Event ID 40. Event ID 40 is registered whenever a session is disconnected, that could be an interruption or the user disconnecting or logging off. Within the event text, we are given a reason code, which gives us detail on the disconnection, as … Read more
Table 1 – Microsoft Entra Connect and On-premises AD This table describes the ports and protocols that are required for communication between the Microsoft Entra Connect server and on-premises AD. Protocol Ports Description DNS 53 (TCP/UDP) DNS lookups on the destination forest. Kerberos 88 (TCP/UDP) Kerberos authentication to the AD forest. MS-RPC 135 (TCP) Used … Read more
https://learn.microsoft.com/en-us/answers/questions/193595/what-should-the-dns-record-be-set-to-when-adding-c https://learn.microsoft.com/en-us/answers/questions/306283/failover-cluster-is-adding-dns-a-record-for-cluste https://learn.microsoft.com/en-us/answers/questions/306283/failover-cluster-is-adding-dns-a-record-for-cluste Cluster network name resource failed registration of one or more associated DNS names(s) because the access to update the secure DNS Zone was denied. Cluster Network name: ‘Cluster Name’ DNS Zone: ‘<DomainName>’ Ensure that cluster name obiect (CNO) is granted permissions to the Secure DNS Zone. http://wiki.webperfect.ch/index.php?title=FailoverCluster:_EventID_1257_-_Cluster_network_name_resource_failed_registration Generally, Cluster IP addresses will … Read more
This issue may occur if the computer boots without a configured dump file. The default dump file is the pagefile. During a clean Windows OS installation, the very first boot will hit this condition as the pagefile has not been set up yet. https://learn.microsoft.com/en-US/troubleshoot/windows-server/performance/event-id-46-start-a-computer
The Windows Server Update Services (WSUS) registry configuration is a critical component for managing Windows Update behaviour in enterprise environments. Configuring WSUS settings via the Windows Registry allows administrators to ensure that client systems use the appropriate update server and follow the desired update policies. Below is a detailed explanation of a WSUS registry configuration … Read more
https://techcommunity.microsoft.com/t5/sql-server-blog/step-by-step-guide-to-setup-ldaps-on-windows-server/ba-p/385362 Click on Start –> Server Manager –> Add Roles and Features. Click Next. Choose Role-based or feature-based installation. Click Next. Select ldapstest server from the server pool. Click Next. Mark Active Directory Lightweight Directory Services from the list of roles and click Next. From the list of features, choose nothing – just click Next. … Read more
Get-ADComputer -Filter * -Property * | Select-Object Name,OperatingSystem,OperatingSystemVersion,ipv4Address | Export-CSV C:\ADcomputerslist.csv -NoTypeInformation -Encoding UTF8
Reference Link https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension-vpn#configure-certificates-for-use-with-the-nps-extension-by-using-a-powershell-script
This article helps work around an issue where the Screensaver doesn’t start after a Group Policy is configured to enable it in Windows. Applies to: Windows 7 Service Pack 1, Windows Server 2012 R2Original KB number: 2616727 Symptoms A Group Policy is configured to enable Screensaver: User Configuration\Administrative Templates\Control Panel\Personalization\Enable screen saver But there’s no … Read more