Core Infrastructure and Security Blog

Options

232

Sean Greenbaum on 01-28-2020 09:19 AM

In this post, lets look into how to convert ETL files captured by NETSH into a .PCAP file format that can be used by oth...

2,339

Stanislav Belov on 01-16-2020 11:59 PM

Hi there! You are reading the next issue of the Infrastructure + Security: Noteworthy News series! As a reminder, the No...

821

wallenc on 01-13-2020 12:01 AM

In this post, I'll walk you through configuring the Ansible Azure Dynamic Inventory plugin (azure_rm) to use a managed i...

2,423

Bruno Gabrielli on 01-05-2020 03:01 PM

Hello everyone, after a long time, I am back with a new post. Today I will drive you through the configuration of a load...

2,698

John_Clyburn on 12-30-2019 12:00 AM

I’ve recently been working with Software Defined Networking (SDNv2). I’ve been primarily working with Windows Server 201...

7,523

LijuV on 12-22-2019 09:00 PM

Use Azure Security Center and Log Analytics to store security events from Windows servers and KQL to query them

3,107

Stanislav Belov on 12-17-2019 11:55 PM

Hi there! You are reading the next issue of the Infrastructure + Security: Noteworthy News series! As a reminder, the No...

3,499

John_Clyburn on 12-16-2019 12:00 AM

The following document explains how to use PowerShell to install System Center Configuration Manager CB 1902...

19.9K

Mike Kammer on 12-10-2019 06:21 AM

Hello all, this is Mike Kammer, and today we'll look into how to figure out what to do when we get that pesky "this upda...

4,138

Paul Bergson on 12-04-2019 02:12 PM

Microsoft provides Windows 10 BitLocker management from both Azure (via Intune) and SCCM with enhanced features expected...

6,740

wallenc on 11-26-2019 01:08 PM

In this post, I'll show how to use an Automation runbook to onboard Windows and Linux VMs to a Log Analytics workspace

2,734

Zoheb Shaikh on 11-19-2019 06:22 AM

Hello Everyone, my name is Zoheb Shaikh and I’m a Solution Engineer working with Microsoft Mission Critical team (SMC). ...

1,926

Stanislav Belov on 11-12-2019 11:00 PM

Hi there! You are reading the next issue of the Infrastructure + Security: Noteworthy News series! As a reminder, the No...

3,371

SteveMat on 11-11-2019 02:27 PM

Hello, my name is Steve Mathias, Microsoft Premier Field Engineer (PFE) and I wanted to spend a moment to discuss the “m...

73.3K

Alan La Pietra on 11-04-2019 06:26 AM

Upcoming updates default behavior of LDAP CBT and Signing (integrity). Want to know more? Just go through this article.

907

Sean Leonard on 11-01-2019 03:23 PM

First published on MSDN on Dec 05, 2018 During a recent MIM PAM deployment, I was asked if it would be possible to creat...

916

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Aug 23, 2018 I recently ran into an issue after updating MIM 2016 to version 4.

1,014

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Aug 15, 2018 Summary: I recently ran into an issue after upgrading a MIM Environment to MIM 2...

1,000

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Jul 19, 2018 Introduction:This document is intended to be used as an operational build docume...

816

Sean Leonard on 11-01-2019 03:21 PM

First published on MSDN on Jun 21, 2018 I want to review a huge blocker that held up one of my recent installations of M...

809

Joe_Zinn on 11-01-2019 03:21 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

778

Joe_Zinn on 11-01-2019 03:21 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

2,021

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

825

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 12, 2018 Introduction:This document is intended to be used as an operational preparatory ...

1,135

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 07, 2018 Introduction:This document is intended to be used as an operational preparatory ...

1,206

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 01, 2018 Introduction:This document is intended to be used as an operational build docume...

1,913

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 31, 2018 Introduction: Some application installers require specific versions of .

2,338

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 25, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

827

AMARSIGLIA on 11-01-2019 03:20 PM

First published on MSDN on May 15, 2018 Everyone put your phones down and get your pencils ready.

849

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 09, 2018 OVERVIEW: Enterprise environments often contain multiple independent MIM install...

Latest Comments

in LDAP Channel Binding and LDAP Signing Requirements - March update default behavior on 01-28-2020

@JJDDASC I'm aggree with you, 3 Pages of discussion, alot of different way's, alot of confusion... For us and our customer it would be nice to know:1. does anything finaly change with the march patches now or not ?2. if yes is LDAP channel binding and signing required then ?3. if these patches reall...

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - March update default behavior on 01-28-2020

@Alan La Pietra does the fact that this article having 3 pages and growing of comments from users who are struggling to understand exactly what Microsoft is planning on doing in March give you a hint that the explanations of these changes need more work and details. I have seen the same on this foru...

2 Likes

in LDAP Channel Binding and LDAP Signing Requirements - March update default behavior on 01-28-2020

Thanks Ross, Yes, those are the links that I have used to configure STARTTLS. I have also configured the NetApps to use signing. I'm working with NetApp Support on this. They have advised not to use sealing and to use STARTTLS. They are also pretty sure that the STARTTLS has been implemented to work...

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - March update default behavior on 01-28-2020

@BenBrazil Please see updates in the previous post. What you need to do, is to configure signing and preferably sealing. Although, I guess you have to enable Channel Binding on DCs (KB4034879), before you configure client to use sealing.3269 is Secure LDAP Global Catalogue, it is using SSL(TLS) just...

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - March update default behavior on 01-28-2020

Hi Ross, Yes, I've got a certificate on our DC's. All of the other systems that I have re-configured so far using TLS over 3269 work fine. STARTTLS appears to only use port 389 to perform the initial connection request and then encrypts the connection again over 389. I'm not sure if this can be conf...

0 Likes

Converting ETL Files to PCAP Files

Infrastructure + Security: Noteworthy News (January, 2020)

Configure Ansible to use a Managed Identity with Azure Dynamic Inventory

How To Install Log Analytics Gateway Using Load Balancers In Azure

The NcHostAgent Service Cannot be Located on the Computer

Using Azure Security Center and Log Analytics to Audit Use of NTLM

Infrastructure + Security: Noteworthy News (December, 2019)

Install ConfigMgr CB 1902 using PowerShell

The "This Update is not Applicable to this Computer" Anomaly

BitLocker, Intune, and Raven

Use Azure Automation to onboard VMs to Log Analytics

The Case of SPNs Breaking Group Policy Application

Infrastructure + Security: Noteworthy News (November, 2019) - Microsoft Ignite Edition

Demystifying Microcode Updates for Intel and AMD Processors

LDAP Channel Binding and LDAP Signing Requirements - March update default behavior

View a PAM User's Roles with Advanced Search Scope Configuration

MIM 4.5.26.0 - MPR Creation - The Required Field Cannot Be Empty

MIM 2016 SP1 - Portal Servers Run Out of Disk Space.

MIM 2016 SP1 - Service and Portal Installation Guide

MIM PAM Feature Installer Failure - SetADForestFunctionalLevel

Applying a Release Update to the MIM Service and Portal

Applying a Release Update to the MIM Synchronization Service and Offline Spare

Installing MIM Synchronization Service with an Offline Spare

Install the MIM 2016 Management Agent (MIM MA)

Service Accounts, SPNs, and Kerberos Delegation configurations for MIM Service and Portal Installation

Install of SharePoint Foundation 2013 SP1 for use with FIM / MIM

Windows Server 2012 R2 – Uninstalling .Net Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.71

Installing MIM Synchronization Service with an Offline Spare

MIM Handy Tip Series - Breadcrumbing

Calculating the domain and populating user attributes across multiple MIM implementations.