Security

Security related items and thoughts

2

Unable To Access WAP AD FS Proxy Instance Externally

Posted on by Rhoderick Milne [MSFT]

When deploying AD FS and Web Application Proxy it is common to run into some networking issues.  Normally this is due to firewall rules not being set correctly.

However we need to be aware of the default behaviour of WAP and factor that into our deployment.

When WAP is installed, it will write additional firewall rules into the Windows firewall.  However, the default rules do not cover all monitorin… Read the rest “Unable To Access WAP AD FS Proxy Instance Externally”

2

RDCMan Download Removed

Posted on by Rhoderick Milne [MSFT]

Update 26-4-2021:  RDCMan is now available again!

Rejoice and be thankful - see this post for more details please.  I'll leave the post below for historical context.

A perennial favourite subject on the blog has been the topic of Remote Desktop Connection Manager (RDCMan).  This was an internal Microsoft tool which was made available to customers.  Initially version 2.2 then version 2.7 was released.

How… Read the rest “RDCMan Download Removed”

7

Easy Way To Retrieve Certificate Thumbprint Using PowerShell

Posted on by Rhoderick Milne [MSFT]

Since many certificate operations involve knowing the certificate’s thumbprint, it is always useful to to have an easy way to get this information.  In some of the online documentation it mentions you can copy the thumbprint out of the Certificate MMC snap-in and then manually delete the spaces between the data.  No thanks.

However, if you *really* want to do that, or a quick and easy way to launch… Read the rest “Easy Way To Retrieve Certificate Thumbprint Using PowerShell”

1

Update WAP Published Application Certificate

Posted on by Rhoderick Milne [MSFT]

A base Web Application Proxy (WAP) provides AD FS proxy capability in addition to also publishing on-premises web applications to the Internet.  This can be used to publish services such as Exchange OWA and Autodiscover.

Publish Applications using AD FS Preauthentication can used in certain situations to pre-authenticate the incoming request before it is passed onto the internal server.  Alternative… Read the rest “Update WAP Published Application Certificate”