In this guide, I will discuss how to Harden Active Directory Using CIS Benchmark and MSCT 1.0. IT infrastructure security has become an essential priority for any organization. In this context, the Active Directory (AD) domain represents the core of identity management, permissions, and network resources. Please, see “An account with the same name exists…
Read More “Harden Active Directory Using CIS Benchmark and MSCT 1.0” »
Microsoft Active Directory Domain Services (AD DS) are a directory service that help organize network resources within Active Directory environment. It supports user/group management, group policies, multiple directory servers (i.e., domain controllers), Kerberos authentication, etc. In this article, we shall learn how to Create New Users and Join Synology NAS to Active Directory. Please see…
Read More “Create New Users and Join Synology NAS to Active Directory” »
In this article, we will learn how to change Active Directory Domain name from dot local to dot com (.local to .com.). Since global DNS does not recognise .local domains, and they lack global uniqueness. Also, they are not suitable for services that require access beyond the local network. While this is generally not problematic…
Read More “Change Active Directory Domain name from dot local to dot com” »
Organizational units (OUs) in an Active Directory Domain Services (AD DS) managed domain to let you logically group objects such as user accounts, service accounts, or computer accounts. In this article, I will show you how to Delete or Rename and Create a Protected Organisation Unit in AD. Please see these related guides: How to add…
Read More “Delete or Rename and Create a Protected Organisation Unit in AD” »
In this article, you learn how to add an account with the same name exists in Active Directory: Re-using the account was blocked by a security policy. When attempting to add a pre-created PC to a domain or reuse an existing computer account. Please see Active Directory Ports: Service and network port requirements for Windows,…
Windows Hello for Business (WHFB) is a modern two-factor authentication that replaces password authentication on devices. It uses key-based or certificate-based authentication and at least two unique factors “something the user knows (PIN) or something the user is (biometrics), combined with something they have (physical access to their device)”. WHFB offers secure, convenient single sign-on…
Read More “WHFB Hybrid Cloud Kerberos Trust Model is now available” »
In this article, I will show you how to Perform the Time of day restriction: How to Configure logon hours for users in Active Directory. Please see how to Resolve Account restrictions are preventing this user from signing in: User Account Password has expired. There are times you may want to restrict users’ access to…
Read More “Configure logon hours for users in Active Directory” »
The account expiration date is used for access control purposes. Let us assume an organization temporarily create an AD account for someone that needed access to one of your servers or a workstation, there is every possibility that you can forget to disable the account when the person completes his task. This can open the way…
Read More “How to set an account expiration date in Active Directory” »
In this write-up, I will take you through the step-by-step guide on how to install and configure Active Directory Domain Services on Windows Server 2022. Before we delve into the hands-on session of this write-up, let’s take a look at some of the amazing new features that Windows Server 2022 brings. A quick peep into…
Read More “Install and configure Active Directory Domain Services on Windows Server” »
In this article, we shall discuss the steps resolving “Service Principal Name: How to add or reset and delete SPNs”. A service principal name (SPN) is a unique identifier of a service instance. SPNs are used by Kerberos authentication to associate a service instance with a service logon account. For example, to enable the MBAM server to…
Read More “Service Principal Name: How to add or reset and delete SPNs” »
Active Directory communication involves the following ports and as a system administrator, you must be familiar with some of the following ports already. In this article, we will discuss the Service and Network Port requirements for Active Directory. You may want to see the following related guides: Pass-Through Authentication with on-Premise AD, reasons to deploy AAD, Microsoft Azure Active…
Read More “Service and Network Port requirements for Active Directory” »
In this article, I will walk you through how to “Fix an appropriate resource file could not be found for the file for BitLocker Management: The system can not find the file specified”. The Central Store is a file location that the Group Policy tools check. It consists of a folder structure created in the…
Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Kerberos delegation is to enable an application to access resources hosted on a different server t. For some related content on Active Directory, see the following guides. The sign-in method you are trying to use is not…
Read More “How to configure a service account for Kerberos delegation” »
