Core Infrastructure and Security Blog

Options

1,205

Stanislav Belov on 01-16-2020 11:59 PM

Hi there! You are reading the next issue of the Infrastructure + Security: Noteworthy News series! As a reminder, the No...

637

wallenc on 01-13-2020 12:01 AM

In this post, I'll walk you through configuring the Ansible Azure Dynamic Inventory plugin (azure_rm) to use a managed i...

2,231

Bruno Gabrielli on 01-05-2020 03:01 PM

Hello everyone, after a long time, I am back with a new post. Today I will drive you through the configuration of a load...

2,600

John_Clyburn on 12-30-2019 12:00 AM

I’ve recently been working with Software Defined Networking (SDNv2). I’ve been primarily working with Windows Server 201...

7,262

LijuV on 12-22-2019 09:00 PM

Use Azure Security Center and Log Analytics to store security events from Windows servers and KQL to query them

3,021

Stanislav Belov on 12-17-2019 11:55 PM

Hi there! You are reading the next issue of the Infrastructure + Security: Noteworthy News series! As a reminder, the No...

3,420

John_Clyburn on 12-16-2019 12:00 AM

The following document explains how to use PowerShell to install System Center Configuration Manager CB 1902...

19.8K

Mike Kammer on 12-10-2019 06:21 AM

Hello all, this is Mike Kammer, and today we'll look into how to figure out what to do when we get that pesky "this upda...

4,030

Paul Bergson on 12-04-2019 02:12 PM

Microsoft provides Windows 10 BitLocker management from both Azure (via Intune) and SCCM with enhanced features expected...

5,925

wallenc on 11-26-2019 01:08 PM

In this post, I'll show how to use an Automation runbook to onboard Windows and Linux VMs to a Log Analytics workspace

2,595

Zoheb Shaikh on 11-19-2019 06:22 AM

Hello Everyone, my name is Zoheb Shaikh and I’m a Solution Engineer working with Microsoft Mission Critical team (SMC). ...

1,874

Stanislav Belov on 11-12-2019 11:00 PM

Hi there! You are reading the next issue of the Infrastructure + Security: Noteworthy News series! As a reminder, the No...

3,277

SteveMat on 11-11-2019 02:27 PM

Hello, my name is Steve Mathias, Microsoft Premier Field Engineer (PFE) and I wanted to spend a moment to discuss the “m...

58.1K

Alan La Pietra on 11-04-2019 06:26 AM

Upcoming March 2020 updates will change default behavior of LDAP CBT and Signing (integrity). Want to know more? Just go...

859

Sean Leonard on 11-01-2019 03:23 PM

First published on MSDN on Dec 05, 2018 During a recent MIM PAM deployment, I was asked if it would be possible to creat...

873

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Aug 23, 2018 I recently ran into an issue after updating MIM 2016 to version 4.

971

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Aug 15, 2018 Summary: I recently ran into an issue after upgrading a MIM Environment to MIM 2...

939

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Jul 19, 2018 Introduction:This document is intended to be used as an operational build docume...

775

Sean Leonard on 11-01-2019 03:21 PM

First published on MSDN on Jun 21, 2018 I want to review a huge blocker that held up one of my recent installations of M...

764

Joe_Zinn on 11-01-2019 03:21 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

736

Joe_Zinn on 11-01-2019 03:21 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

1,973

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

780

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 12, 2018 Introduction:This document is intended to be used as an operational preparatory ...

1,072

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 07, 2018 Introduction:This document is intended to be used as an operational preparatory ...

1,166

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 01, 2018 Introduction:This document is intended to be used as an operational build docume...

1,863

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 31, 2018 Introduction: Some application installers require specific versions of .

2,296

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 25, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

784

AMARSIGLIA on 11-01-2019 03:20 PM

First published on MSDN on May 15, 2018 Everyone put your phones down and get your pencils ready.

801

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 09, 2018 OVERVIEW: Enterprise environments often contain multiple independent MIM install...

753

ktackett on 11-01-2019 03:17 PM

First published on MSDN on Apr 12, 2018 Scenario:In a MIM environment, a user goes through a name change (marriage, divo...

Latest Comments

in LDAP Channel Binding and LDAP Signing Requirements - Update now scheduled for March 2020 on 01-21-2020

@RossUA Got it - thanks! In this test scenario, what exactly made it a 'signed' NTLM request? Is it possible to use LDP to test an NTLM attempt that is not requesting signing?

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - Update now scheduled for March 2020 on 01-21-2020

@jpenning On the Bind dialogue, you choose Advanced, press Advanced button and choose the authentication protocol you want to use:

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - Update now scheduled for March 2020 on 01-21-2020

@RossUA Thanks for that. Forgive my ignorance, I figured out how to test the simple bind with the LDP tool - but can't figure out how to test with NTLM?

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - Update now scheduled for March 2020 on 01-21-2020

@jpenning Yes, it is possible to use NTLM while authenticating the LDAP Bind and have signing afterwards. You can try it with ldp.exe tool:At the same time, simple ldap bind doesn't work, which proves that server is requiring signing:Both tests done with connection to port 389.

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - Update now scheduled for March 2020 on 01-21-2020

Is the KB number already known for that March 2020 update ?

0 Likes

Infrastructure + Security: Noteworthy News (January, 2020)

Configure Ansible to use a Managed Identity with Azure Dynamic Inventory

How To Install Log Analytics Gateway Using Load Balancers In Azure

The NcHostAgent Service Cannot be Located on the Computer

Using Azure Security Center and Log Analytics to Audit Use of NTLM

Infrastructure + Security: Noteworthy News (December, 2019)

Install ConfigMgr CB 1902 using PowerShell

The "This Update is not Applicable to this Computer" Anomaly

BitLocker, Intune, and Raven

Use Azure Automation to onboard VMs to Log Analytics

The Case of SPNs Breaking Group Policy Application

Infrastructure + Security: Noteworthy News (November, 2019) - Microsoft Ignite Edition

Demystifying Microcode Updates for Intel and AMD Processors

LDAP Channel Binding and LDAP Signing Requirements - Update now scheduled for March 2020

View a PAM User's Roles with Advanced Search Scope Configuration

MIM 4.5.26.0 - MPR Creation - The Required Field Cannot Be Empty

MIM 2016 SP1 - Portal Servers Run Out of Disk Space.

MIM 2016 SP1 - Service and Portal Installation Guide

MIM PAM Feature Installer Failure - SetADForestFunctionalLevel

Applying a Release Update to the MIM Service and Portal

Applying a Release Update to the MIM Synchronization Service and Offline Spare

Installing MIM Synchronization Service with an Offline Spare

Install the MIM 2016 Management Agent (MIM MA)

Service Accounts, SPNs, and Kerberos Delegation configurations for MIM Service and Portal Installation

Install of SharePoint Foundation 2013 SP1 for use with FIM / MIM

Windows Server 2012 R2 – Uninstalling .Net Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.71

Installing MIM Synchronization Service with an Offline Spare

MIM Handy Tip Series - Breadcrumbing

Calculating the domain and populating user attributes across multiple MIM implementations.

Updating Attributes Based on a Detected Name Change