If you’re in charge of Group Policy settings, you know how critical the registry.pol file is and how nerve-wracking it can be when things go awry. Luckily, Windows now provides much more actionable i...

Here is the link: Cross Forest - Certificate Enrollment | Microsoft Community Hub PKIsync.ps1 script At this time, we’re going to keep things simple. The goal is to create an Active Directory r...

  Howdy everyone! The cat is out of the bag when it comes to Microsoft’s forward outlook on RC4 usage in Kerberos. In the past few months, we have published the following.  Beyond RC4 for Windo...

Have you ever seen a user suddenly lose access to a resource, only to discover they were removed from a group—but with no record of when or how it happened? Tracking deleted group memberships in Acti...

Welcome to part one of my blog series on Cross Forest Certificate Enrollment. Nowadays, businesses often run across multiple Forests for distinct reasons. You would like to ensure secure authenticati...

Hello team, Manuel here. In recent years, Microsoft has introduced Strong Certificate Name Mapping (Strong Mapping) as a requirement for certificate-based authentication in Active Directory environme...

Howdy, everyone! I wanted to write this blog post to discuss the new Kerb3961 library introduced in Windows Server 2025 / Windows 11 24H2. It is (hopefully) making encryption type (etype) usage withi...

In our tech-savvy age, networks are all the rage 🌐;  Joining a domain, though, can sometimes feel like a cage 🖥️.   It makes managing PCs a breeze, with security and ease 🔒,  But troubleshoo...

This is the fourth article in a series: Stop Worrying and Love the Outage, Vol I: Group Policy and Sharing Violations Stop Worrying and Love the Outage, Vol II: DCs, custom ports, and Firewalls/ACL...

Hello, this is Byron from the Microsoft Directory Services Support team. Today, I’d like to share information about an alternative recovery approach for Public Key Infrastructure (PKI) environments. ...