Core Infrastructure and Security Blog

Options

836

Stanislav Belov on 11-12-2019 11:00 PM

Hi there! You are reading the next issue of the Infrastructure + Security: Noteworthy News series! As a reminder, the No...

1,753

SteveMat on 11-11-2019 02:27 PM

Hello, my name is Steve Mathias, Microsoft Premier Field Engineer (PFE) and I wanted to spend a moment to discuss the “m...

4,306

Alan La Pietra on 11-04-2019 06:26 AM

Upcoming January 2020 updates will change default behavior of LDAP CBT and Signing (integrity). Want to know more? Just ...

164

Sean Leonard on 11-01-2019 03:23 PM

First published on MSDN on Dec 05, 2018 During a recent MIM PAM deployment, I was asked if it would be possible to creat...

210

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Aug 23, 2018 I recently ran into an issue after updating MIM 2016 to version 4.

290

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Aug 15, 2018 Summary: I recently ran into an issue after upgrading a MIM Environment to MIM 2...

188

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Jul 19, 2018 Introduction:This document is intended to be used as an operational build docume...

112

Sean Leonard on 11-01-2019 03:21 PM

First published on MSDN on Jun 21, 2018 I want to review a huge blocker that held up one of my recent installations of M...

115

Joe_Zinn on 11-01-2019 03:21 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

111

Joe_Zinn on 11-01-2019 03:21 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

111

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

116

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 12, 2018 Introduction:This document is intended to be used as an operational preparatory ...

165

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 07, 2018 Introduction:This document is intended to be used as an operational preparatory ...

487

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 01, 2018 Introduction:This document is intended to be used as an operational build docume...

578

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 31, 2018 Introduction: Some application installers require specific versions of .

484

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 25, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

107

AMARSIGLIA on 11-01-2019 03:20 PM

First published on MSDN on May 15, 2018 Everyone put your phones down and get your pencils ready.

110

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 09, 2018 OVERVIEW: Enterprise environments often contain multiple independent MIM install...

106

ktackett on 11-01-2019 03:17 PM

First published on MSDN on Apr 12, 2018 Scenario:In a MIM environment, a user goes through a name change (marriage, divo...

AMARSIGLIA on 11-01-2019 03:12 PM

First published on MSDN on Nov 27, 2017 In this post we will continue the understanding of using functions in a rules ex...

101

ktackett on 11-01-2019 03:12 PM

First published on MSDN on Nov 26, 2017 Recently I have received several questions and “Ridiculous” Comments on the Post...

AMARSIGLIA on 11-01-2019 03:09 PM

First published on MSDN on Oct 13, 2017 Special Thanks to Mr.

ktackett on 11-01-2019 03:08 PM

First published on MSDN on Sep 22, 2017 Something I get asked about a lot are the different types of outbound synchroniz...

ktackett on 11-01-2019 03:08 PM

First published on MSDN on Sep 20, 2017 Welcome to Part 2 of the “Sync Rule Walk Through” series.

ktackett on 11-01-2019 03:07 PM

First published on MSDN on Sep 20, 2017 While we’ve touched on sync rules in the past with some examples, I’d like to de...

104

ktackett on 11-01-2019 03:05 PM

First published on MSDN on Sep 15, 2017 This is Part 5 in a series of commonly used management agents.

AMARSIGLIA on 11-01-2019 03:02 PM

First published on MSDN on Jun 23, 2017 The following is just an example of what an MA Extension would like like and sho...

AMARSIGLIA on 11-01-2019 03:02 PM

First published on MSDN on Jun 23, 2017 This post is focused on Helper Functions that Multiple Methods can call to compl...

101

AMARSIGLIA on 11-01-2019 03:02 PM

First published on MSDN on Jun 09, 2017 Ok so you might ask what does this posting have to do with FIM, MIM, or Identity...

AMARSIGLIA on 11-01-2019 03:01 PM

First published on MSDN on Apr 07, 2017 This post is a continuation of MIM WAL–Installation Guide Part 2This is the 3rd ...

Latest Comments

in LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates on 11-14-2019

I was able to find a Mac that I put in our isolated test network. In that environment, I set the DC GPO for "Domain Controller: require signing", the domain GPO to "Network Client: require signing". On the DC GPO I created the Registry entry for "LDAP Channel Binding = 1". I successfully tested usin...

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates on 11-14-2019

ajm-b, yes that would be great. We'll be holding off on the domain controllers until February so I'll have some time. We do have a closed off test network and we may be able to test some Macs there. I don't know too much about Macs and I'm never one who joins them to the domain, but I had been under...

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates on 11-14-2019

@CFS3RD, as I understand it "Require Signing" only has to do with non-TLS 389, it doesn't come into play with 636 binds. We have plenty of macs here - if you wanna hit me up in about a month I can probably tell you how it went.

0 Likes

in Demystifying Microcode Updates for Intel and AMD Processors on 11-14-2019

Hyper-V virtual machines will be offered the microcode updates from Microsoft Update (assuming the CPUID matches) however the host is what really needs to be updated as it's payload is passed through to the virtual machines. From a Windows Server 2016 Virtual Machine: They are classified as "Updates...

1 Likes

in LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates on 11-13-2019

For our third party applications and our OSX member computers that use LDAP over SSL (port 636), will they continue to communicate successfully with the domain controllers set to Require Signing? It sounds like they will fail. In that case we'll never be able to set it to Require Signing. Related, I...

0 Likes

Infrastructure + Security: Noteworthy News (November, 2019) - Microsoft Ignite Edition

Demystifying Microcode Updates for Intel and AMD Processors

LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates

View a PAM User's Roles with Advanced Search Scope Configuration

MIM 4.5.26.0 - MPR Creation - The Required Field Cannot Be Empty

MIM 2016 SP1 - Portal Servers Run Out of Disk Space.

MIM 2016 SP1 - Service and Portal Installation Guide

MIM PAM Feature Installer Failure - SetADForestFunctionalLevel

Applying a Release Update to the MIM Service and Portal

Applying a Release Update to the MIM Synchronization Service and Offline Spare

Installing MIM Synchronization Service with an Offline Spare

Install the MIM 2016 Management Agent (MIM MA)

Service Accounts, SPNs, and Kerberos Delegation configurations for MIM Service and Portal Installation

Install of SharePoint Foundation 2013 SP1 for use with FIM / MIM

Windows Server 2012 R2 – Uninstalling .Net Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.71

Installing MIM Synchronization Service with an Offline Spare

MIM Handy Tip Series - Breadcrumbing

Calculating the domain and populating user attributes across multiple MIM implementations.

Updating Attributes Based on a Detected Name Change

Rules Extensions –Understanding Date Time Conversion Part 2

Rules Extensions –Understanding Date Time Conversion Part 1

(WAL) – Workflow Example – Removal of a multivalued reference attribute

Outbound Synchronization Rule Type Application - Explained

Sync Rule Walk Through: Outbound System Scoping Filter User Synchronization Rule

Sync Rule Walk Through: Inbound User Synchronization Rule

Management Agent Configuration – Part 5: Active Directory Lightweight Directory Service Management Agent

Rules Extensions – MA Extension

Rules Extensions – Helper Functions

Excel Functions–Data Comparison and Manipulation

MIM WAL–Installation Guide Part 3