250 Hello - ProTips

0

Check If AD FS WSTrust Endpoint Enabled

Posted on 14th November 2022 by Rhoderick Milne [MSFT]

Active Directory Federation Services (AD FS) uses endpoints to provide access to features. There are a series of different endpoints which each serve a different purpose from password reset, publishing federation metadata or multiple web services protocols. It is important to ensure that only the required features are actually enabled, and also if those features are to be made available internal… Read the rest “Check If AD FS WSTrust Endpoint Enabled”

0

WordPress Linux Web App Poor Performance

Posted on 3rd November 2022 by Rhoderick Milne [MSFT]

Having to host, upgrade and manage WordPress is not really my main job. The various posts over the years will provide a small clue that other things take up most of my time and are my day job. Life was certainly easier when TechNet was still around as a dedicated team ran the MSDN and TechNet blog platforms and provided all of the infrastructure support. All I had to do was write the posts.

Alas… Read the rest “WordPress Linux Web App Poor Performance”

0

Why Can’t I Search For Content In TechNet and MSDN Blogs?

Posted on 3rd October 2022 by Rhoderick Milne [MSFT]

There was a time when every obscure error code, undocumented quirk, and tricky deployment scenario in the Microsoft ecosystem had an answer, and more often than not you would find it on the MSDN or TechNet blogs. Written by Microsoft engineers, product teams, and MVPs who lived and breathed the technology, these posts were not marketing gloss. They were raw, detailed, and practical. The kind of c… Read the rest “Why Can’t I Search For Content In TechNet and MSDN Blogs?”

0

How to Use NsLookup To Check DKIM Record

Posted on 3rd October 2022 by Rhoderick Milne [MSFT]

There are a multitude of online tools that help diagnose issues with various mail services, but understanding what these tools actually check is valuable. One example is around manually checking published DomainKeys Identified Mail (DKIM) records. DKIM is described in RFC 4871. As an interesting piece of history DKIM went through a previous iteration "Domain-Based Email Authentication Using Pub… Read the rest “How to Use NsLookup To Check DKIM Record”

0

Joys of Server 2012 R2 TLS Defaults in June 2022

Posted on 30th June 2022 by Rhoderick Milne [MSFT]

Windows Server 2012 R2 was a great platform and was very widly adopted. Unlike it’s less popular step-sister, Server 2012. At least the R2 product had a start button, rather than the start pixel….

However, it really does show its age when viewed under a modern security lens. Unsurprisingly, things have changed from a security perspective over the last decade. Not all of the Server 2012 R2 defaul… Read the rest “Joys of Server 2012 R2 TLS Defaults in June 2022”

0

Move FSMO Roles Using PowerShell

Posted on 11th February 2022 by Rhoderick Milne [MSFT]

Rather than kicking it old school and using the classic tools such as AD Users & Computers (dsa.msc) to move FSMO roles, PowerShell makes it nice and easy to get this done rapidly.

In this example we are moving the roles gracefully, but there is also the -Force option.

State Of The Nation

To start with, let's confirm where the FSMO roles currently reside:

Note that server DC-1.wingtiptoys.ca… Read the rest “Move FSMO Roles Using PowerShell”

1

How To Request Certificate Without Using IIS or Exchange–Updated 2022

Posted on 1st February 2022 by Rhoderick Milne [MSFT]

Back in the year 2014 the post How To Request Certificate Without Using IIS or Exchange was released to help create TLS certificates. One of the main use cases was Active Directory Federation Services (AD FS) as in 2014 it was pretty much a requirement for enterprise migration to Office 365. Password Hash Sync (PHS) and Pass Through Authentication (PTA) were still a twinkle in a developer’s eye….

I… Read the rest “How To Request Certificate Without Using IIS or Exchange–Updated 2022”

0

Remote Desktop Connection Manager Download (RDCMan) 2.90

Posted on 27th January 2022 by Rhoderick Milne [MSFT]

Welcome to 2022 and a new release of Remote Desktop Connection Manager (RDCMan) version 2.90!

The Sysinternals blog lists the following changes to RDCMan which are well worth reviewing from a security standpoint.

Receives support for Restricted Admin (/restrictedAdmin from mstsc) and Remote Credential Guard (/remoteGuard from mstsc) and bug fixes.

Below you can see the Security Settings tab with these… Read the rest “Remote Desktop Connection Manager Download (RDCMan) 2.90”

0

Change Certificate Friendly Name To Unique Value

Posted on 6th January 2022 by Rhoderick Milne [MSFT]

Imagine that you have two certificates installed, but for whatever reason the same friendly name was used for both of them. You can certainly identity each of them by comparing the valid from/valid to dates or the thumbprint. That adds just a little extra overhead that you may not want to deal with.

As an alternative, you can modify the friendly name to a more suitable value. This allows you to… Read the rest “Change Certificate Friendly Name To Unique Value”

2

IIS SMTP Virtual Server Component No Longer Supported

Posted on 8th December 2021 by Rhoderick Milne [MSFT]

Please consider this a quick PSA (Public Service Announcement) as it is still common that I run into environments with the IIS SMTP service still running and processing mail.

While the component has had a long and interesting life, it is now unsupported as it is tied to the support lifecycle of Windows Server 2003.

For more details and information please see:

How to: Install and Configure SMTP Virtua… Read the rest “IIS SMTP Virtual Server Component No Longer Supported”