Expert Windows Server setup and configuration services to optimise your IT infrastructure, enhance security, and improve network performance
A domain controller (DC) provides critical services like authentication and authorization for an Active Directory domain. More accurately, a DC runs on Windows Server operating system and that has Active Directory Domain Services (AD DS) installed on it. All these we will see very shortly. In this guide, we will learn how to how to…
Read More “How to add a new Domain Controller to an Existing Domain” »
In this article, we will learn how to Raise or Downgrade AD Domain and Forest Functional Level. Upon installation of Active Directory Domain Services (AD DS), basic Active Directory features are automatically enabled, along with domain-wide and forest-wide features. To enable “all domain-wide features” the domain controllers must run the latest Windows Server version. Please…
Read More “Raise or Downgrade AD Domain and Forest Functional Level” »
Let’s Encrypt provides free, trusted SSL certificates, widely accepted by many authorities and browsers. The certificates are signed by the Internet Security Research Group (ISRG) Root X1, ensuring a high level of trust. Certbot, a command-line tool developed in Python, makes it easy to request and renew these certificates from Let’s Encrypt. Although direct support…
Read More “Install Lets Encrypt Certificate on Windows with Certbot” »
In this article, we shall discuss “AD Recovery: Fix device ran into an issue with error 0xc00002e2”. Recently, my lab environments have been repeatedly restarting due to a faulty switch. After extensive research to solve this issue before performing VM recovery, I discovered that the problem was caused by the Hyper-V host experiencing unplanned restarts….
Read More “AD Recovery: Fix device ran into an issue with error 0xc00002e2” »
Encryption is a powerful tool for protecting data on your Windows devices. However, there are times when you might need to disable it. Let’s walk through the process of disabling device encryption in Windows 10/11 and understand the difference between Device Encryption and BitLocker Drive Encryption. Kindly see, How to Change BitLocker Password in Windows and how…
BitLocker is a Windows security feature that provides encryption for entire volumes. It addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned devices. In this article, we shall discuss the following topic “understanding BitLocker Windows Update Shutdown or Reboot option behavior”. This is important for maintaining system security and functionality….
Read More “BitLocker Windows Update Shutdown or Reboot option behavior” »
Copy and paste between your Windows or MacOS and Hyper-V Server or VMs running do not work correctly. In order to be able to use the copy and paste feature between your device and Hyper-V, this needs to be configured in advance. Therefore, we will discuss how to perform Copy and Paste between your device…
Read More “Copy and Paste between your device to a VM running in Hyper-V” »
Managing workstations without domain administrator rights is not only possible but also enhances security by minimizing high-level access to Active Directory (AD). In this guide, we’ll walk through creating a dedicated AD group for workstation management and assigning it the necessary privileges using Group Policy. Please read Delete or Rename and Create a Protected Organisation…
Read More “Grant Non-Domain Admin Privileges to Manage Workstation” »
Trellix ePO is a product that helps simplify and extend endpoint security management with native controls, threat intelligence and third-party integrations. In this article, we shall discuss Why you should not Upgrade Windows on an ePO Server. Please see ePO Server Settings: Trellix ePO AD integration and ENS Agents Installation, and how to Disable SQL…
Read More “Why you should not Upgrade Windows on an ePO Server” »
In this article, we shall discuss how to Perform BitLocker Recovery Password Rotation in Active Directory. Kindly see, How to Change BitLocker Password in Windows and how to Force BitLocker Recovery mode: How to unlock BitLocker Protected Drive. Maintaining the security of BitLocker-encrypted drives is crucial. Situations may arise where users forget their PINs or…
Read More “Perform BitLocker Recovery Password Rotation in Active Directory” »
Hyper-V is Microsoft’s hardware virtualization solution that enables one to create and run a software version of a computers referred to as virtual machines (VMs). Each VM acts like a separate PC, running its own operating system and programs. In this article, we may get an error “Could not connect to the virtual machine try to connect…
Read More “Could not connect to virtual machine try to connect again Hyper-V” »
Windows Deployment Services (WDS) facilitates the deployment of Windows operating systems over the network. Thereby, eliminating the need to install each operating system directly from a USB, or DVD. This network-based installation of Windows operating systems reduces complexity and cost compared to manual installations. In this article, we shall discuss “Install Windows Deployment Services on…
Read More “Install Windows Deployment Services on Windows Server 2022” »
Windows Server Update Services (WSUS) centralises the management and distribution of Windows updates. Instead of relying on GPO or individual computers to fetch updates from the internet, administrators can control and distribute updates within the network using WSUS. In this article, we shall discuss how to install WSUS on Windows Server 2022. Please see how…
