Reading Time: 4 minutes At one of my meetups, I talked about Azure Security and how you can monitor your Active Directory’s security events cheaply using Azure Security Centre and Azure Log Analytics. There are a few prerequisites to this which I have pointed out below. I have not gone into the details about Read more…
Reading Time: 6 minutes In this blog post, I am going to walk you through how to Install, Configure and use Microsoft LAPS. But first, let’s explain what Microsoft LAPS is. Local Administrator Password Solutions (LAPS) is a solution provided by Microsoft to manage the local administrator account on domain joined computers and servers. Read more…
Reading Time: 2 minutes Recently I have needed to configure an Active Directory to replicate changes between sites straight away. They had everything set to replicate at the default 15 minutes but this was not quick enough due to a dispersed helpdesk. The best way to do this is to enable Use Notify replication. Read more…
Reading Time: 2 minutes A cool new feature of Active Directory Domain Services on Server 2016 is the ability to allow administrators to assign temporary group membership to users. This is expressed by TTL (Time-To-Live) Value. This value will be added to the Kerberos ticket. When a user is assigned to a group temporally, Read more…
Reading Time: < 1 minute Recently at work, we have had some issues on a customer site with GPO’s. As we were on a tight schedule I wanted to force replication rather than wait for the normal replication cycle to happen. It is really easy to force a replication, and this article will show you Read more…
Reading Time: 2 minutes Below I will show two ways of enabling the Active Directory Recycle Bin. AD DS Recycle Bin has been around since Windows Server 2008 R2, but it had no GUI to enable or work with it. In fact, you had to use ADSI edit. Windows Server 2012 added the ability Read more…
Reading Time: 3 minutes Now Windows Server 2016 has been out for a few months I have decided to update my lab Domain to 2016 forest functional level. But first I need to migrate the FSMO (Flexible Single Master Operation) Roles to my new Windows Server 2016 Domain Controllers. In this Step by Step Read more…
Reading Time: < 1 minute Recently at work, I have been involved on a project that has used GPO to lock down End User Devices and also deploy shortcuts to the users desktops. As we wanted the shortcuts to display for all users we decided to publish the shortcuts to the public desktop. All was Read more…
Reading Time: 2 minutes Recently at work, I was adding a new Domain Controller to an existing forest and I just could not get past “Creating the NTDS Settings” I have done this many times in the past and never had this issue. After trying a few times and a lot of waiting, I Read more…
Reading Time: 3 minutes Sometimes, as a sysadmin you may need to move the Active Directory database and / or log files from one location to another. This may be due to your Domain Controller running out of space. The location you choose to move the files to may be a different folder or Read more…