A file share is a directory on a device whether physical or virtual containing files and directories that are accessible to other users via the network. It utilizes the supported file sharing protocols “SMB or NFS”. In this article, we shall Create Folders and Enable File sharing on Windows Server. This is also application to…
Read More “Create Folders and Enable File sharing on Windows” »
The Windows ADK and Windows PE add-on provide tools for customizing Windows images for large-scale deployment and testing system quality, performance, and applications running on it. Therefore, In this article, we shall discuss the new fix for Windows PE working for Windows 11 and Windows Server 2022. Please see how to install Endpoint Configuration Manager…
Read More “Windows PE working for Windows 11 and Windows Server 2022” »
In this guide, I will show you How to determine Tombstone Lifetime in Active Directory. A Tombstone Lifetime will help determine how long a deleted object can be stored within an active directory. This deleted object is not fully removed from the Active Directory but is marked as a Tombstone Lifetime object. We cannot access…
Read More “How to determine Tombstone Lifetime in Active Directory” »
In this detailed guide, we will look at how to implement DNS split-brain policies in an Active Directory environment. Creating a split-brain DNS setup is crucial for managing different DNS responses based on whether the request is internal or external. This can help streamline network traffic, improve security, and ensure that internal and external users…
Read More “Implement Split-Brain DNS Policies in Active Directory” »
In Active Directory (AD), distribution groups and security groups serve distinct purposes. Distribution groups are primarily used for email distribution lists, while security groups are used to assign permissions to resources within your network. Converting a distribution group to a security group can be necessary for managing access control more effectively. Please see How to…
Read More “How to convert distribution group to security group” »
Active Directory (AD) groups are essential for managing permissions and access within an organization’s IT environment. The group scope defines how permissions and memberships are applied and propagated across domains and forests. There are three types of group scopes: Universal, Global, and Domain Local. Each has its own characteristics and use cases. This guide will…
In this article, we will learn how to Raise or Downgrade AD Domain and Forest Functional Level. Upon installation of Active Directory Domain Services (AD DS), basic Active Directory features are automatically enabled, along with domain-wide and forest-wide features. To enable “all domain-wide features” the domain controllers must run the latest Windows Server version. Please…
Read More “Raise or Downgrade AD Domain and Forest Functional Level” »
Let’s Encrypt provides free, trusted SSL certificates, widely accepted by many authorities and browsers. The certificates are signed by the Internet Security Research Group (ISRG) Root X1, ensuring a high level of trust. Certbot, a command-line tool developed in Python, makes it easy to request and renew these certificates from Let’s Encrypt. Although direct support…
Read More “Install Lets Encrypt Certificate on Windows with Certbot” »
In this article, we shall discuss “AD Recovery: Fix device ran into an issue with error 0xc00002e2”. Recently, my lab environments have been repeatedly restarting due to a faulty switch. After extensive research to solve this issue before performing VM recovery, I discovered that the problem was caused by the Hyper-V host experiencing unplanned restarts….
Read More “AD Recovery: Fix device ran into an issue with error 0xc00002e2” »
Encryption is a powerful tool for protecting data on your Windows devices. However, there are times when you might need to disable it. Let’s walk through the process of disabling device encryption in Windows 10/11 and understand the difference between Device Encryption and BitLocker Drive Encryption. Kindly see, How to Change BitLocker Password in Windows and how…
BitLocker is a Windows security feature that provides encryption for entire volumes. It addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned devices. In this article, we shall discuss the following topic “understanding BitLocker Windows Update Shutdown or Reboot option behavior”. This is important for maintaining system security and functionality….
Read More “BitLocker Windows Update Shutdown or Reboot option behavior” »
Managing workstations without domain administrator rights is not only possible but also enhances security by minimizing high-level access to Active Directory (AD). In this guide, we’ll walk through creating a dedicated AD group for workstation management and assigning it the necessary privileges using Group Policy. Please read Delete or Rename and Create a Protected Organisation…
Read More “Grant Non-Domain Admin Privileges to Manage Workstation” »
When working within a networked environment, it may be necessary to control whether a device can connect to both a domain-based network and a non-domain-based network at the same time. Windows offers a policy setting that can prevent computers from connecting to both domain-based networks and non-domain-based networks simultaneously. Please see how to mitigate File…
Read More “Allow and Disallow Simultaneous Connection to Domain and Non-Domain network” »
