Windows Defender Credential Guard can be enabled either by using Group Policy (GPO), Windows registry, the Hypervisor-Protected Code Integrity (HVCI), or the Windows Defender Credential Guard hardware readiness tool. Credential Guard can also protect secrets in a Hyper-V virtual machine, just as it would on a physical machine. In this article, we shall discuss how…
Read More “Enable or disable Windows Defender Credential Guard” »
Kerberos is a network authentication protocol that enables clients, nodes, and services communicating over a network to connect to one another in a secure manner. In simple terms, it verifies the identity of a user or host. In this article, we shall discuss ‘Kerberos Delegation: A Comprehensive Guide”. You may also want to learn about…
Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Kerberos delegation is to enable an application to access resources hosted on a different server t. For some related content on Active Directory, see the following guides. The sign-in method you are trying to use is not…
Read More “How to configure a service account for Kerberos delegation” »
In Active Directory (AD), two authentication protocols can be used, which are Kerberos and NTLM. At present, Kerberos is the default authentication protocol in Windows. NTLM is an authentication protocol and was the default protocol used in older versions of windows. In this article, we shall discuss “Active Directory Authentication methods: Kerberos and NTLM”. Please…
Read More “Active Directory Authentication methods: How do Kerberos and NTLM work” »
Due to the recent vulnerability discovered in Zoom as reviewed by security experts on the 1st of April 2020. It allows attackers to steal Windows credentials via UNC Links. In 2019, the security provider “Preempt” discovered a vulnerability in NTLM which allows remote execution of malicious code on any Windows machine to authenticate to any…
Read More “NT LAN Manager: How to prevent NTLM credentials from being sent to remote servers” »
Clock skew is a phenomenon in synchronous digital circuit systems in which the same sourced clock signal arrives at different components at different times. The instantaneous difference between the readings of any two clocks is called their skew”. For a similar error, see Unspecified GSS failure, minor code may provide more information Clock skew too…
Read More “Kerberos error: Clock skew too great while getting initial credentials” »
This article talks about; settings up Ansible to work with Kerberos. Kerberos is reliant on a properly-configured environment to work. To troubleshoot Kerberos issues, ensure that the hostname set for the Windows host is the FQDN and not an IP address. Settings up Ansible to work with Kerberos – The forward and reverse DNS lookups…
Read More “What to note when settings up Ansible to work with Kerberos” »
A Key Distribution Center (abbreviated KDC) is also known as the Trust Center in the Kerberos system, Kerberos server, issues an on-demand ID file(TGT) for logged-in users on request, which the user can use as an ID to protect their traffic. In this article, we shall learn how to configure Kerberos for Ansible Authentication. Please…
Read More “How to configure Kerberos for Ansible Authentication” »
