Core Infrastructure and Security Blog

Options

520

Mike Kammer on 12-10-2019 06:21 AM

Hello all, this is Mike Kammer, and today we'll look into how to figure out what to do when we get that pesky "this upda...

2,853

Paul Bergson on 12-04-2019 02:12 PM

Microsoft provides Windows 10 BitLocker management from both Azure (via Intune) and SCCM with enhanced features expected...

3,073

wallenc on 11-26-2019 01:08 PM

In this post, I'll show how to use an Automation runbook to onboard Windows and Linux VMs to a Log Analytics workspace

1,858

Zoheb Shaikh on 11-19-2019 06:22 AM

Hello Everyone, my name is Zoheb Shaikh and I’m a Solution Engineer working with Microsoft Mission Critical team (SMC). ...

1,445

Stanislav Belov on 11-12-2019 11:00 PM

Hi there! You are reading the next issue of the Infrastructure + Security: Noteworthy News series! As a reminder, the No...

2,366

SteveMat on 11-11-2019 02:27 PM

Hello, my name is Steve Mathias, Microsoft Premier Field Engineer (PFE) and I wanted to spend a moment to discuss the “m...

11.5K

Alan La Pietra on 11-04-2019 06:26 AM

Upcoming January 2020 updates will change default behavior of LDAP CBT and Signing (integrity). Want to know more? Just ...

470

Sean Leonard on 11-01-2019 03:23 PM

First published on MSDN on Dec 05, 2018 During a recent MIM PAM deployment, I was asked if it would be possible to creat...

504

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Aug 23, 2018 I recently ran into an issue after updating MIM 2016 to version 4.

598

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Aug 15, 2018 Summary: I recently ran into an issue after upgrading a MIM Environment to MIM 2...

511

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Jul 19, 2018 Introduction:This document is intended to be used as an operational build docume...

410

Sean Leonard on 11-01-2019 03:21 PM

First published on MSDN on Jun 21, 2018 I want to review a huge blocker that held up one of my recent installations of M...

402

Joe_Zinn on 11-01-2019 03:21 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

380

Joe_Zinn on 11-01-2019 03:21 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

402

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

405

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 12, 2018 Introduction:This document is intended to be used as an operational preparatory ...

595

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 07, 2018 Introduction:This document is intended to be used as an operational preparatory ...

814

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 01, 2018 Introduction:This document is intended to be used as an operational build docume...

1,482

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 31, 2018 Introduction: Some application installers require specific versions of .

1,940

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 25, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

396

AMARSIGLIA on 11-01-2019 03:20 PM

First published on MSDN on May 15, 2018 Everyone put your phones down and get your pencils ready.

413

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 09, 2018 OVERVIEW: Enterprise environments often contain multiple independent MIM install...

381

ktackett on 11-01-2019 03:17 PM

First published on MSDN on Apr 12, 2018 Scenario:In a MIM environment, a user goes through a name change (marriage, divo...

361

AMARSIGLIA on 11-01-2019 03:12 PM

First published on MSDN on Nov 27, 2017 In this post we will continue the understanding of using functions in a rules ex...

371

ktackett on 11-01-2019 03:12 PM

First published on MSDN on Nov 26, 2017 Recently I have received several questions and “Ridiculous” Comments on the Post...

378

AMARSIGLIA on 11-01-2019 03:09 PM

First published on MSDN on Oct 13, 2017 Special Thanks to Mr.

355

ktackett on 11-01-2019 03:08 PM

First published on MSDN on Sep 22, 2017 Something I get asked about a lot are the different types of outbound synchroniz...

369

ktackett on 11-01-2019 03:08 PM

First published on MSDN on Sep 20, 2017 Welcome to Part 2 of the “Sync Rule Walk Through” series.

367

ktackett on 11-01-2019 03:07 PM

First published on MSDN on Sep 20, 2017 While we’ve touched on sync rules in the past with some examples, I’d like to de...

423

ktackett on 11-01-2019 03:05 PM

First published on MSDN on Sep 15, 2017 This is Part 5 in a series of commonly used management agents.

Latest Comments

in LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates on 12-12-2019

@Justin_Shi Hi Justin, you can go with only one but to cover all security concerns related to this issue we recommend to change both. Also because the update will update both. Channel Binding Token info (was FAQ): https://internal.support.services.microsoft.com/en-us/help/2022970 Channel Binding for...

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates on 12-11-2019

Hi @Alan La Pietra, One question here, according to the 2 documents here:LDAP channel bindingLDAP signingCan I just follow one doc to make my communications between LDAP clients and Active Directory domain controllers more secure? Or I must configure both the 2 to get this advantages. What's the dif...

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates on 12-11-2019

If there is a requirement to secure the binding with a certificate, either internal CA or third party CA, and the domain ends in .local, is it possible to obtain a certificate from a third party CA for a upn suffix that is available externally and use this instead to bind securely? Deploying an inte...

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates on 12-11-2019

For those with Macs, it looks like they do not support CBT (Channel Binding Tokens) so it won't be possible to set LdapEnforceChannelBinding to 2, but it does work with it set to 1 (Compatibility Mode). I'm guessing most people will have to stay in that mode anyway, due to an assortment of 3rd party...

2 Likes

in The "This Update is not Applicable to this Computer" Anomaly on 12-11-2019

Thank you, fascinating read and very informative! I do hope to build up my Windows troubleshooting skills higher and higher. Whenever I have to reinstall Windows to get an update applied I feel defeated :) Is there a good source to learn about Windows Update internals and troubleshooting things arou...

0 Likes

The "This Update is not Applicable to this Computer" Anomaly

BitLocker, Intune, and Raven

Use Azure Automation to onboard VMs to Log Analytics

The Case of SPNs Breaking Group Policy Application

Infrastructure + Security: Noteworthy News (November, 2019) - Microsoft Ignite Edition

Demystifying Microcode Updates for Intel and AMD Processors

LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates

View a PAM User's Roles with Advanced Search Scope Configuration

MIM 4.5.26.0 - MPR Creation - The Required Field Cannot Be Empty

MIM 2016 SP1 - Portal Servers Run Out of Disk Space.

MIM 2016 SP1 - Service and Portal Installation Guide

MIM PAM Feature Installer Failure - SetADForestFunctionalLevel

Applying a Release Update to the MIM Service and Portal

Applying a Release Update to the MIM Synchronization Service and Offline Spare

Installing MIM Synchronization Service with an Offline Spare

Install the MIM 2016 Management Agent (MIM MA)

Service Accounts, SPNs, and Kerberos Delegation configurations for MIM Service and Portal Installation

Install of SharePoint Foundation 2013 SP1 for use with FIM / MIM

Windows Server 2012 R2 – Uninstalling .Net Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.71

Installing MIM Synchronization Service with an Offline Spare

MIM Handy Tip Series - Breadcrumbing

Calculating the domain and populating user attributes across multiple MIM implementations.

Updating Attributes Based on a Detected Name Change

Rules Extensions –Understanding Date Time Conversion Part 2

Rules Extensions –Understanding Date Time Conversion Part 1

(WAL) – Workflow Example – Removal of a multivalued reference attribute

Outbound Synchronization Rule Type Application - Explained

Sync Rule Walk Through: Outbound System Scoping Filter User Synchronization Rule

Sync Rule Walk Through: Inbound User Synchronization Rule

Management Agent Configuration – Part 5: Active Directory Lightweight Directory Service Management Agent