In this detailed guide, we will look at how to implement DNS split-brain policies in an Active Directory environment. Creating a split-brain DNS setup is crucial for managing different DNS responses based on whether the request is internal or external. This can help streamline network traffic, improve security, and ensure that internal and external users…
Read More “Implement Split-Brain DNS Policies in Active Directory” »
In Active Directory (AD), distribution groups and security groups serve distinct purposes. Distribution groups are primarily used for email distribution lists, while security groups are used to assign permissions to resources within your network. Converting a distribution group to a security group can be necessary for managing access control more effectively. Please see How to…
Read More “How to convert distribution group to security group” »
Active Directory (AD) groups are essential for managing permissions and access within an organization’s IT environment. The group scope defines how permissions and memberships are applied and propagated across domains and forests. There are three types of group scopes: Universal, Global, and Domain Local. Each has its own characteristics and use cases. This guide will…
In this article, we will learn how to Raise or Downgrade AD Domain and Forest Functional Level. Upon installation of Active Directory Domain Services (AD DS), basic Active Directory features are automatically enabled, along with domain-wide and forest-wide features. To enable “all domain-wide features” the domain controllers must run the latest Windows Server version. Please…
Read More “Raise or Downgrade AD Domain and Forest Functional Level” »
Let’s Encrypt provides free, trusted SSL certificates, widely accepted by many authorities and browsers. The certificates are signed by the Internet Security Research Group (ISRG) Root X1, ensuring a high level of trust. Certbot, a command-line tool developed in Python, makes it easy to request and renew these certificates from Let’s Encrypt. Although direct support…
Read More “Install Lets Encrypt Certificate on Windows with Certbot” »
In this article, we shall discuss “AD Recovery: Fix device ran into an issue with error 0xc00002e2”. Recently, my lab environments have been repeatedly restarting due to a faulty switch. After extensive research to solve this issue before performing VM recovery, I discovered that the problem was caused by the Hyper-V host experiencing unplanned restarts….
Read More “AD Recovery: Fix device ran into an issue with error 0xc00002e2” »
Encryption is a powerful tool for protecting data on your Windows devices. However, there are times when you might need to disable it. Let’s walk through the process of disabling device encryption in Windows 10/11 and understand the difference between Device Encryption and BitLocker Drive Encryption. Kindly see, How to Change BitLocker Password in Windows and how…
BitLocker is a Windows security feature that provides encryption for entire volumes. It addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned devices. In this article, we shall discuss the following topic “understanding BitLocker Windows Update Shutdown or Reboot option behavior”. This is important for maintaining system security and functionality….
Read More “BitLocker Windows Update Shutdown or Reboot option behavior” »
Managing workstations without domain administrator rights is not only possible but also enhances security by minimizing high-level access to Active Directory (AD). In this guide, we’ll walk through creating a dedicated AD group for workstation management and assigning it the necessary privileges using Group Policy. Please read Delete or Rename and Create a Protected Organisation…
Read More “Grant Non-Domain Admin Privileges to Manage Workstation” »
When working within a networked environment, it may be necessary to control whether a device can connect to both a domain-based network and a non-domain-based network at the same time. Windows offers a policy setting that can prevent computers from connecting to both domain-based networks and non-domain-based networks simultaneously. Please see how to mitigate File…
Read More “Allow and Disallow Simultaneous Connection to Domain and Non-Domain network” »
The error message “This file came from another computer and might be blocked” often pops up due to Windows’ security measures aimed at protecting your system from potentially harmful files. While these mechanisms are essential for security, they can sometimes block legitimate files you need for work or personal use, causing inconvenience. This guide will…
Read More “File Came From Another Computer And Might be Blocked Error” »
Trellix ePO is a product that helps simplify and extend endpoint security management with native controls, threat intelligence and third-party integrations. In this article, we shall discuss Why you should not Upgrade Windows on an ePO Server. Please see ePO Server Settings: Trellix ePO AD integration and ENS Agents Installation, and how to Disable SQL…
Read More “Why you should not Upgrade Windows on an ePO Server” »
It is worth pointing out that, Trellix ePO – On-prem 5.10.0 introduces a new strategy with the release of cumulative updates instead of patches. Updates address product defects and often introduce new features. Because updates are cumulative, you only need to apply the latest available Trellix update. Please take a look at “Trellix ePolicy Orchestrator Installation…
Read More “Trellix ePO On-prem 5.10.0 Service pack 1 Update 3 upgrade” »
