Tag: Windows Server 2019

Active Directory Vulnerability Assessment with Purple Knight: Domain Controller Owner Is Not an Administrator

Posted on Link State By Link State No Comments on Active Directory Vulnerability Assessment with Purple Knight: Domain Controller Owner Is Not an Administrator
Active Directory Vulnerability Assessment with Purple Knight: Domain Controller Owner Is Not an Administrator

The Hidden Backdoor: Auditing Domain Controller Ownership with Purple Knight. In today’s threat landscape, Active Directory (AD) remains one of the most critical and most targeted components of enterprise infrastructure. In this guide, we shall discuss “Active Directory Vulnerability Assessment with Purple Knight: Domain Controller Owner Is Not an Administrator”. Please see Set Special File…

Read More “Active Directory Vulnerability Assessment with Purple Knight: Domain Controller Owner Is Not an Administrator” »

Windows Server

AGMP extended support ends April 2026: Find alternative solution

Posted on Christian By Christian No Comments on AGMP extended support ends April 2026: Find alternative solution
AGMP extended support ends April 2026: Find alternative solution

In this guide, we shall discuss “AGMP extended support ends April 2026: Find alternative solution“. Microsoft BitLocker Administration and Monitoring (MBAM) and Advanced Group Policy Management (AGPM), both components of the Microsoft Desktop Optimization Pack (MDOP). Have reached their official End of Support today (14/04/2026). Please see How to extend a VM Hard Disk on VMware…

Read More “AGMP extended support ends April 2026: Find alternative solution” »

Windows Server

Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD

Posted on Link State By Link State No Comments on Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD
Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD

This article discusses “Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD”. On March 10, 2026, Microsoft disclosed a new security vulnerability affecting Active Directory Domain Services (AD DS). Please, see How to run Apps as an administrator on Windows, and how to Enable Exploit Protection feature on Windows using the Windows Security App, Microsoft Endpoint Configuration…

Read More “Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD” »

Windows Server

How to fix Domain Join Error during Windows Deployment

Posted on Christian By Christian No Comments on How to fix Domain Join Error during Windows Deployment
How to fix Domain Join Error during Windows Deployment

The message “ZtiDomainJoin has attempted to join to domain” comes from Microsoft Deployment Toolkit (MDT). This happens during an automated or Lite touch OS deployment as shown in the image below. Therefore, in this guide, we shall discuss How to fix Domain Join Error during Windows Deployment. Please see how to fix the following errors…

Read More “How to fix Domain Join Error during Windows Deployment” »

Windows Server

How to set up Devolution Remote Desktop Manager on Windows

Posted on Christian By Christian No Comments on How to set up Devolution Remote Desktop Manager on Windows
How to set up Devolution Remote Desktop Manager on Windows

In this guide, we shall discuss how to set up Devolution Remote Desktop Manager on Windows. Devolusion Remote Desktop Manager is an application that integrates a comprehensive set of tools and managers to meet the needs of any IT team. It is designed to centralise remote connection technologies, credentials, and secure access to these resources….

Read More “How to set up Devolution Remote Desktop Manager on Windows” »

Windows

Setup Windows Admin Center Modern Gateway for Single Sign-On

Posted on Christian By Christian No Comments on Setup Windows Admin Center Modern Gateway for Single Sign-On
Setup Windows Admin Center Modern Gateway for Single Sign-On

Windows Admin Center is a browser-based app that the customer self-deploys and uses to manage servers, clusters, hyperconverged infrastructure, and Windows 10 PCs . Recently, we discussed how to upgrade Windows Admin Center 2306 – 2311 and also touched on how to install WACmg 2410. But in this guide, we shall discuss how to setup…

Read More “Setup Windows Admin Center Modern Gateway for Single Sign-On” »

Windows Server

Configure Active Directory-Based Activation (ADBA) for Windows

Posted on Christian By Christian No Comments on Configure Active Directory-Based Activation (ADBA) for Windows
Configure Active Directory-Based Activation (ADBA) for Windows

Active Directory-Based Activation (ADBA) is a Microsoft Volume Licensing method that automatically activates Windows that are joined to an Active Directory (AD) domain. Here is how to set up and configure the Key Management System (KMS) if you have non-domain joined devices. Therefore, in this guide, we shall discuss how to configure Active Directory-Based Activation…

Read More “Configure Active Directory-Based Activation (ADBA) for Windows” »

Windows Server

How to set up and configure the Key Management System (KMS)

Posted on Christian By Christian No Comments on How to set up and configure the Key Management System (KMS)
How to set up and configure the Key Management System (KMS)

Key Management Service (KMS), like Multiple Activation Key (MAK) activates Microsoft products such as Windows and Office. You should install the KMS server, also known as the KMS host on a server inside your local network. Note that, KMS clients connect directly to the KMS host to activate both Windows etc. In this guide, we…

Read More “How to set up and configure the Key Management System (KMS)” »

Windows Server

Server Certificate could not be updated: Private key does not match

Posted on Christian By Christian No Comments on Server Certificate could not be updated: Private key does not match
Server Certificate could not be updated: Private key does not match

In this article, we will discuss how to troubleshoot “Server Certificate could not be updated: Private key does not match”, and and determine the root case of this issue. This concern arose during the process of uploading a new SSL/TLS certificate to Trellix ePolicy Orchestrator (ePO) for securing web-based access to the console over the…

Read More “Server Certificate could not be updated: Private key does not match” »

Windows Server

Fix Error 0x87E10BC6 on a PC running Windows non-core Edition

Posted on Christian By Christian No Comments on Fix Error 0x87E10BC6 on a PC running Windows non-core Edition
Fix Error 0x87E10BC6 on a PC running Windows non-core Edition

In this article, we shall discuss how to Fix Error 0x87E10BC6 on a PC running Windows non-core Edition. The error code 0x87e10bc6 occurs when there is an issue with activating Windows as we will see very shortly. This can be due to various reasons such as server issues, firewall interference, or incorrect product key. Please,…

Read More “Fix Error 0x87E10BC6 on a PC running Windows non-core Edition” »

Windows, Windows Server

Protect your Windows Devices with MFA with SystoLOCK

Posted on Christian By Christian No Comments on Protect your Windows Devices with MFA with SystoLOCK
Protect your Windows Devices with MFA with SystoLOCK

SystoLOCK is a passwordless Multi Factor Authentication (MFA) platform developed by Systola GmbH here in Deutschland (Germany). Therefore, in this article, we shall discuss how to protect your Windows Devices with MFA with SystoLOCK. Please, see Creating IAM Users, Adding MFA and Policies on AWS, “MFA on Root Account: Create a User on AWS and…

Read More “Protect your Windows Devices with MFA with SystoLOCK” »

Security | Vulnerability Scans and Assessment, Windows, Windows Server

Convert Windows Server Datacenter to Standard: Install Windows Server via iDRAC Virtual Media

Posted on Christian By Christian No Comments on Convert Windows Server Datacenter to Standard: Install Windows Server via iDRAC Virtual Media
Convert Windows Server Datacenter to Standard: Install Windows Server via iDRAC Virtual Media

In this article, I will show you how to Convert Windows Server Datacenter to Standard: Install via iDRAC Virtual Media. Previously, we have discussed how to convert Windows Server Essentials or Evaluation to Retail Edition, and we also discussed the differences between Windows Sever Evaluation, Essential and Retail Edition. Specifically, steps to convert Windows Server…

Read More “Convert Windows Server Datacenter to Standard: Install Windows Server via iDRAC Virtual Media” »

Windows Server

How to install Trellix MVISON Endpoint

Posted on Christian By Christian No Comments on How to install Trellix MVISON Endpoint
How to install Trellix MVISON Endpoint

The “Trellix MVISION Endpoint” and Trellix Endpoint Security (ENS) are both Trellix Endpoint protection products. They are slightly different and offer different use cases. Trellix offers both to provide flexibility and broader coverage for varying customer needs and environments. In this article, I will show you how to install Trellix MVISON Endpoint. Please, see how…

Read More “How to install Trellix MVISON Endpoint” »

Security | Vulnerability Scans and Assessment