While using S/MIME certificates for mail encryption or any other type of certificates in the system environment it's good practice to check from time to time whether some of them are not expiring and not being renewed for some reason. Sometimes user is just not connected due to holidays or some error occurs. Then, certificate [...]
Recently I was cleaning up our DNS system after adding new NICs to the server and during this process I accidentally disabled DNS service on IPv6 protocols. I am perfectly aware of dangers of disabling IPv6 in recent Windows versions(2008 and up) but somehow I decided that DNS servers shouldn't listen or respond on [...]
Hi, starting with Windows 10 (1607 I think) screen saver GPOs are completely skipped in Windows PRO domain joined. I think it happens due to screen control panel is switched off in newer builds. At least this is was information i have received when trying to test screen saver in my 1803 build: Screen saver [...]
While searching for some useful GPOs I encountered very nice thread with clear and thorough explanation about how to restrict/whitelist locations and file types that can be executed in Windows OS using Group Policy Object. Commenter state that using this method he basically got rid of all threads in his environment and analysing his approach [...]
When running an Active Directory environment based on Windows Server it is critical to have proper time synchronization in order to keep authentication going. Time difference larger than 5 minutes may result in authentication failures on clients and error event logs on Active Directory Domain Controller. Standard time.windows.com sometimes is not responding or can't be [...]
There are times, when you as an IT admin have something called a senior-moment and on the brand new server when creating a data store for file server (or virtual machine) you format data partition as MBR (Master Boot Record). It doesn't really make any difference unless you want to have: more than 4 primary partition [...]
There are times, when after creating and setting up domain environment you realize that you made a mistake in naming convention. For example domain with .local or .intranet was used. According to Microsoft and many sources like for example mdmarra.com blog you should avoid TLD and avoid above names since they are now sold by ICANN and [...]
Recently we tried to migrate our old Windows Server 2003 box holding Active Directory FSMO roles to Windows 2008 R2. After joing 2008r2 to our domain we wanted to transfer all FSMO roles to it. It all went well without any problems. Next step was to join another 2008r2 as second DC and demote old [...]
When you create a user in AD and assing a login script to do something based on memberOf attribute and you assign only one group to that user you will run in a strange situation. User is a member of the group, has all privileges, windows sees them but when you use logon vbs script [...]
After buying few more disks for our Thecus NAS 7700Pro I have decided to have System State backup of one of our servers. After creating a new share, configuring backup task, I've encountered a following error: The version does not support this version of the file format After some googling, testing and changing options in [...]