Tag: Microsoft Windows

Active Directory Vulnerability Assessment with Purple Knight: Domain Controller Owner Is Not an Administrator

Posted on Link State By Link State No Comments on Active Directory Vulnerability Assessment with Purple Knight: Domain Controller Owner Is Not an Administrator
Active Directory Vulnerability Assessment with Purple Knight: Domain Controller Owner Is Not an Administrator

The Hidden Backdoor: Auditing Domain Controller Ownership with Purple Knight. In today’s threat landscape, Active Directory (AD) remains one of the most critical and most targeted components of enterprise infrastructure. In this guide, we shall discuss “Active Directory Vulnerability Assessment with Purple Knight: Domain Controller Owner Is Not an Administrator”. Please see Set Special File…

Read More “Active Directory Vulnerability Assessment with Purple Knight: Domain Controller Owner Is Not an Administrator” »

Windows Server

AGMP extended support ends April 2026: Find alternative solution

Posted on Christian By Christian No Comments on AGMP extended support ends April 2026: Find alternative solution
AGMP extended support ends April 2026: Find alternative solution

In this guide, we shall discuss “AGMP extended support ends April 2026: Find alternative solution“. Microsoft BitLocker Administration and Monitoring (MBAM) and Advanced Group Policy Management (AGPM), both components of the Microsoft Desktop Optimization Pack (MDOP). Have reached their official End of Support today (14/04/2026). Please see How to extend a VM Hard Disk on VMware…

Read More “AGMP extended support ends April 2026: Find alternative solution” »

Windows Server

Steps to customize Windows PE boot images

Posted on Christian By Christian No Comments on Steps to customize Windows PE boot images
Steps to customize Windows PE boot images

You can customize the Windows PE (WinPE) boot images included with the Windows ADK by adding drivers, optional components, and the latest cumulative updates, because they include only a minimal set of features and drivers by default. In this guide, we shall discuss “Steps to customize Windows PE boot images”. Please, see how to enable…

Read More “Steps to customize Windows PE boot images” »

Windows, Windows Server

Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD

Posted on Link State By Link State No Comments on Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD
Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD

This article discusses “Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD”. On March 10, 2026, Microsoft disclosed a new security vulnerability affecting Active Directory Domain Services (AD DS). Please, see How to run Apps as an administrator on Windows, and how to Enable Exploit Protection feature on Windows using the Windows Security App, Microsoft Endpoint Configuration…

Read More “Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD” »

Windows Server

How to fix Domain Join Error during Windows Deployment

Posted on Christian By Christian No Comments on How to fix Domain Join Error during Windows Deployment
How to fix Domain Join Error during Windows Deployment

The message “ZtiDomainJoin has attempted to join to domain” comes from Microsoft Deployment Toolkit (MDT). This happens during an automated or Lite touch OS deployment as shown in the image below. Therefore, in this guide, we shall discuss How to fix Domain Join Error during Windows Deployment. Please see how to fix the following errors…

Read More “How to fix Domain Join Error during Windows Deployment” »

Windows Server

How to upgrade Windows Admin Center from v2411 to v2511

Posted on Christian By Christian No Comments on How to upgrade Windows Admin Center from v2411 to v2511
How to upgrade Windows Admin Center from v2411 to v2511

Microsoft has officially released Windows Admin Center (WAC) version 2511, delivering restored High Availability (HA), major backend fixes, security enhancements, and significant usability improvements across core management tools. In this article, we shall discuss “How to upgrade Windows Admin Center from v2411 to v2511”. Please, see how to deploy Veeam Recovery Orchestrator and Agents to…

Read More “How to upgrade Windows Admin Center from v2411 to v2511” »

Windows Server

How to set up Devolusion Remote Desktop Manager on Windows

Posted on Christian By Christian No Comments on How to set up Devolusion Remote Desktop Manager on Windows
How to set up Devolusion Remote Desktop Manager on Windows

In this guide, we shall discuss how to set up Devolusion Remote Desktop Manager on Windows. Devolusion Remote Desktop Manager is an application that integrates a comprehensive set of tools and managers to meet the needs of any IT team. It is designed to centralise remote connection technologies, credentials, and secure access to these resources….

Read More “How to set up Devolusion Remote Desktop Manager on Windows” »

Windows

Upgrade PowerShell Core Windows or Mac and Linux System

Posted on Christian By Christian No Comments on Upgrade PowerShell Core Windows or Mac and Linux System
Upgrade PowerShell Core Windows or Mac and Linux System

In this article, we shall discuss the steps to upgrade PowerShell Core Windows or Mac and Linux System. Microsoft officially stopped adding new features to “Windows PowerShell” (version 5.1) as it recieves security and bug fixes only. It is considered “feature complete” and is tied strictly to the Windows operating system as it is built…

Read More “Upgrade PowerShell Core Windows or Mac and Linux System” »

Windows, Windows Server

Harden Active Directory Using CIS Benchmark and MSCT 1.0

Posted on Link State By Link State No Comments on Harden Active Directory Using CIS Benchmark and MSCT 1.0
Harden Active Directory Using CIS Benchmark and MSCT 1.0

In this guide, I will discuss how to Harden Active Directory Using CIS Benchmark and MSCT 1.0. IT infrastructure security has become an essential priority for any organization. In this context, the Active Directory (AD) domain represents the core of identity management, permissions, and network resources. Please, see “An account with the same name exists…

Read More “Harden Active Directory Using CIS Benchmark and MSCT 1.0” »

Windows Server

Preliminary Guide for WSUS Analysis and Initial Assessment

Posted on Link State By Link State No Comments on Preliminary Guide for WSUS Analysis and Initial Assessment
Preliminary Guide for WSUS Analysis and Initial Assessment

Before optimising update management, troubleshooting patching issues, or preparing for a WSUS migration or cleanup, it is essential to perform a preliminary analysis of the WSUS (Windows Server Update Services) environment. In this article, we will discuss the Preliminary Guide for WSUS Analysis and Initial Assessment”. Please, see How to Disable the Password Manager of…

Read More “Preliminary Guide for WSUS Analysis and Initial Assessment” »

Windows Server

Query MBAM-protected Client for non-compliance [Part 2]

Posted on Christian By Christian No Comments on Query MBAM-protected Client for non-compliance [Part 2]
Query MBAM-protected Client for non-compliance [Part 2]

IT support teams face numerous BitLocker compliance alerts daily from remote, and home/hybrid deployments. But without remote WMI queries etc., each ticket demands time-consuming VPN/RDP sessions, physical dispatches, or endless “reboot due to upgrades and updates. In this article, we shall discuss how to query MBAM-protected Client for non-compliance [Part 2]. Please, see how to…

Read More “Query MBAM-protected Client for non-compliance [Part 2]” »

Windows, Windows Server