Core Infrastructure and Security Blog

Options

1,388

Stanislav Belov on 01-16-2020 11:59 PM

Hi there! You are reading the next issue of the Infrastructure + Security: Noteworthy News series! As a reminder, the No...

730

wallenc on 01-13-2020 12:01 AM

In this post, I'll walk you through configuring the Ansible Azure Dynamic Inventory plugin (azure_rm) to use a managed i...

2,244

Bruno Gabrielli on 01-05-2020 03:01 PM

Hello everyone, after a long time, I am back with a new post. Today I will drive you through the configuration of a load...

2,613

John_Clyburn on 12-30-2019 12:00 AM

I’ve recently been working with Software Defined Networking (SDNv2). I’ve been primarily working with Windows Server 201...

7,331

LijuV on 12-22-2019 09:00 PM

Use Azure Security Center and Log Analytics to store security events from Windows servers and KQL to query them

3,030

Stanislav Belov on 12-17-2019 11:55 PM

Hi there! You are reading the next issue of the Infrastructure + Security: Noteworthy News series! As a reminder, the No...

3,428

John_Clyburn on 12-16-2019 12:00 AM

The following document explains how to use PowerShell to install System Center Configuration Manager CB 1902...

19.8K

Mike Kammer on 12-10-2019 06:21 AM

Hello all, this is Mike Kammer, and today we'll look into how to figure out what to do when we get that pesky "this upda...

4,037

Paul Bergson on 12-04-2019 02:12 PM

Microsoft provides Windows 10 BitLocker management from both Azure (via Intune) and SCCM with enhanced features expected...

6,024

wallenc on 11-26-2019 01:08 PM

In this post, I'll show how to use an Automation runbook to onboard Windows and Linux VMs to a Log Analytics workspace

2,651

Zoheb Shaikh on 11-19-2019 06:22 AM

Hello Everyone, my name is Zoheb Shaikh and I’m a Solution Engineer working with Microsoft Mission Critical team (SMC). ...

1,882

Stanislav Belov on 11-12-2019 11:00 PM

Hi there! You are reading the next issue of the Infrastructure + Security: Noteworthy News series! As a reminder, the No...

3,288

SteveMat on 11-11-2019 02:27 PM

Hello, my name is Steve Mathias, Microsoft Premier Field Engineer (PFE) and I wanted to spend a moment to discuss the “m...

59.4K

Alan La Pietra on 11-04-2019 06:26 AM

Upcoming March 2020 updates will change default behavior of LDAP CBT and Signing (integrity). Want to know more? Just go...

867

Sean Leonard on 11-01-2019 03:23 PM

First published on MSDN on Dec 05, 2018 During a recent MIM PAM deployment, I was asked if it would be possible to creat...

877

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Aug 23, 2018 I recently ran into an issue after updating MIM 2016 to version 4.

976

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Aug 15, 2018 Summary: I recently ran into an issue after upgrading a MIM Environment to MIM 2...

950

Joe_Zinn on 11-01-2019 03:22 PM

First published on MSDN on Jul 19, 2018 Introduction:This document is intended to be used as an operational build docume...

781

Sean Leonard on 11-01-2019 03:21 PM

First published on MSDN on Jun 21, 2018 I want to review a huge blocker that held up one of my recent installations of M...

769

Joe_Zinn on 11-01-2019 03:21 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

742

Joe_Zinn on 11-01-2019 03:21 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

1,980

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 12, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

785

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 12, 2018 Introduction:This document is intended to be used as an operational preparatory ...

1,081

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 07, 2018 Introduction:This document is intended to be used as an operational preparatory ...

1,171

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on Jun 01, 2018 Introduction:This document is intended to be used as an operational build docume...

1,869

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 31, 2018 Introduction: Some application installers require specific versions of .

2,300

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 25, 2018 Using This Guide:Introduction:This document is intended to be used as an operati...

788

AMARSIGLIA on 11-01-2019 03:20 PM

First published on MSDN on May 15, 2018 Everyone put your phones down and get your pencils ready.

806

Joe_Zinn on 11-01-2019 03:20 PM

First published on MSDN on May 09, 2018 OVERVIEW: Enterprise environments often contain multiple independent MIM install...

760

ktackett on 11-01-2019 03:17 PM

First published on MSDN on Apr 12, 2018 Scenario:In a MIM environment, a user goes through a name change (marriage, divo...

Latest Comments

in LDAP Channel Binding and LDAP Signing Requirements - Update now scheduled for March 2020 on 01-22-2020

@RossUA Thanks for the great insight.

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - Update now scheduled for March 2020 on 01-21-2020

@jpenning It looks like ldp.exe doesn't have a setting that controls negotiate for LDAP Signing and Channel Token binding. Therefore, you have to use registry to enable or disable Signing and Integrity. To disable LDAP Signing negotiation for the client, configure key ldapclientintegrity=0 under HKL...

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - Update now scheduled for March 2020 on 01-21-2020

@RossUA Got it - thanks! In this test scenario, what exactly made it a 'signed' NTLM request? Is it possible to use LDP to test an NTLM attempt that is not requesting signing?

0 Likes

in LDAP Channel Binding and LDAP Signing Requirements - Update now scheduled for March 2020 on 01-21-2020

@jpenning On the Bind dialogue, you choose Advanced, press Advanced button and choose the authentication protocol you want to use:

1 Likes

in LDAP Channel Binding and LDAP Signing Requirements - Update now scheduled for March 2020 on 01-21-2020

@RossUA Thanks for that. Forgive my ignorance, I figured out how to test the simple bind with the LDP tool - but can't figure out how to test with NTLM?

0 Likes

Infrastructure + Security: Noteworthy News (January, 2020)

Configure Ansible to use a Managed Identity with Azure Dynamic Inventory

How To Install Log Analytics Gateway Using Load Balancers In Azure

The NcHostAgent Service Cannot be Located on the Computer

Using Azure Security Center and Log Analytics to Audit Use of NTLM

Infrastructure + Security: Noteworthy News (December, 2019)

Install ConfigMgr CB 1902 using PowerShell

The "This Update is not Applicable to this Computer" Anomaly

BitLocker, Intune, and Raven

Use Azure Automation to onboard VMs to Log Analytics

The Case of SPNs Breaking Group Policy Application

Infrastructure + Security: Noteworthy News (November, 2019) - Microsoft Ignite Edition

Demystifying Microcode Updates for Intel and AMD Processors

LDAP Channel Binding and LDAP Signing Requirements - Update now scheduled for March 2020

View a PAM User's Roles with Advanced Search Scope Configuration

MIM 4.5.26.0 - MPR Creation - The Required Field Cannot Be Empty

MIM 2016 SP1 - Portal Servers Run Out of Disk Space.

MIM 2016 SP1 - Service and Portal Installation Guide

MIM PAM Feature Installer Failure - SetADForestFunctionalLevel

Applying a Release Update to the MIM Service and Portal

Applying a Release Update to the MIM Synchronization Service and Offline Spare

Installing MIM Synchronization Service with an Offline Spare

Install the MIM 2016 Management Agent (MIM MA)

Service Accounts, SPNs, and Kerberos Delegation configurations for MIM Service and Portal Installation

Install of SharePoint Foundation 2013 SP1 for use with FIM / MIM

Windows Server 2012 R2 – Uninstalling .Net Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.71

Installing MIM Synchronization Service with an Offline Spare

MIM Handy Tip Series - Breadcrumbing

Calculating the domain and populating user attributes across multiple MIM implementations.

Updating Attributes Based on a Detected Name Change