cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Core Infrastructure and Security Blog
Home
Options
480

ConfigMgr Bitlocker Management

Naveen_Kanneganti on 04-03-2020 09:52 AM
This post is intended to give you guidance to implement Configmgr Bitlocker management, monitoring and troubleshooting.
2,389

Use Intune MAM to Control Office Mobile Apps and Office 365 Content

Michael Hildebrand on 03-25-2020 06:23 AM
We're posting an out-of-band, mid-week post about using Intune Mobile App Management Policies to help secure and control...
3,259

Azure DSC for Zero Trust Windows 10 Devices Managed by Intune

skissel on 03-23-2020 01:25 PM
In a Zero Trust environment, the security gap between Intune and Group Policy could be a roadblock to more organizations...
518

Configuring the MIM 2016 Microsoft Generic SQL Connector for Oracle Date Time Values

Joe_Zinn on 03-19-2020 07:48 AM
The following document contains information needed to solve date time issues configuring the Microsoft Generic SQL Conne...
4,544

SCCM: Housekeeping Collections

Matt Balzan on 03-13-2020 07:33 AM
A guide how to manage and troubleshoot the collections that are affecting the performance on your site
2,092

Exporting Resultant Set of Policy (RSoP) data using PowerShell

LijuV on 03-09-2020 08:48 AM
Use PowerShell to generate RSoP planning mode (modeling) data
1,333

Can't connect to Windows Share - Error code: 0x80070035. The network path was not found.

John_Clyburn on 03-02-2020 12:00 AM
Hello everyone, my name is John Clyburn and I am a Sr. consultant in MCS. I recently ran into a problem connecting to a ...
1,403

VM Checkpoints Names in the Hyper-V Manager Window...

John_Clyburn on 02-27-2020 12:00 AM
Hello everyone, my name is John Clyburn and I am a Sr. consultant in MCS. I recently ran into an interesting problem wit...
2,887

Infrastructure + Security: Noteworthy News (February, 2020)

Stanislav Belov on 02-25-2020 11:55 PM
Hi there! You are reading the next issue of the Infrastructure + Security: Noteworthy News series! As a reminder, the No...
2,671

Building the Totally Network Isolated Root Certification Authority

DanielMetzger on 02-23-2020 03:00 PM
Use a Windows 10 laptop and convert it to a secure Hyper-V host to run the offline root CA.
2,237

Be Aware, Azure Security Center CSV Reports is Now Generally Available!

Bruno Gabrielli on 02-21-2020 11:22 AM
Hello Security universe, today I came across an interesting news directly from the Product Group. After quite some time,...
4,734

Initially Isolate Tier 0 Assets with Group Policy to Start Administrative Tiering

DanielMetzger on 02-20-2020 08:37 AM
I am going to show you how to use a minimal set of Group Policy objects to isolate domain admins and domain controllers ...
1,527

App-V Publishing Fails If You Apply UserConfig Files

BrandonWilson on 02-19-2020 05:54 AM
Some reports were received where app publishing is failing when using a User Configuration File applied to the packages....
4,199

Script to send Email alerts on Expiring certificates for Important Certificate Templates

Zoheb Shaikh on 02-13-2020 12:00 AM
Hi all! Zoheb Shaikh here again, and this time I will be sharing an interesting script to alert on Expiring certificates...
5,035

The VM xxx cannot be migrated to Host xxx due to incompatibility issues….

John_Clyburn on 02-10-2020 12:00 AM
Hello everyone, my name is John Clyburn and I am a Sr. consultant in MCS. I’ve recently been working with SCVMM 2019. I ...
3,925

Enable Vulnerability Assessment Check in Azure Security Center (ASC)

Tim_Beasley on 02-06-2020 02:10 PM
Ever wonder how potentially vulnerable your tenant is in Azure? Learn how to enable the vulnerability assessment check i...
2,276

How to use Group Managed Service Accounts (gMSA) in Azure Automation Hybrid Worker

hspinto on 02-04-2020 07:21 AM
Learn how to use Azure Automation Hybrid Worker in on-premises scenarios where you need to authenticate against local re...
10.1K

Preparing to Deploy Extended Security Updates

Jon Warnken on 01-30-2020 06:53 AM
With the end of support for Windows 7, Windows Server 2008, and Windows Server 2008 R2 on January 14, 2020, many of our ...
3,450

Converting ETL Files to PCAP Files

Sean Greenbaum on 01-28-2020 09:19 AM
In this post, lets look into how to convert ETL files captured by NETSH into a .PCAP file format that can be used by oth...
1,242

Sample Code: End-to-End Certificate Transparency requests on ADCS CA

NoMoePwds on 01-24-2020 02:10 PM
First published on TECHNET on Dec 12, 2018 Hello all, Tochi Ezebube here again from the Active Directory Certificate Ser...
1,009

How will Certificate Transparency affect existing Active Directory Certificate Services environments?

NoMoePwds on 01-24-2020 02:10 PM
First published on TECHNET on Mar 12, 2018 Wes Hammond here from Premier Field Engineering.
870

[CrossPost ] HTTPS Inspection and your PKI

NoMoePwds on 01-24-2020 02:10 PM
First published on TECHNET on Feb 24, 2017 Hey Everyone,A little while back I posted this article to my own personal blo...
763

How to write an NDES policy module

NoMoePwds on 01-24-2020 02:10 PM
First published on TECHNET on Nov 30, 2016 Hi there!This is Tochi Ezebube with the Active Directory Certificate Services...
855

[CrossPost] Implementing SHA-2 in Active Directory Certificate Services

NoMoePwds on 01-24-2020 02:10 PM
First published on TECHNET on Jul 24, 2015 A fellow engineer at Microsoft, Roger Grimes, has published a great article o...
895

Setting up NDES using a Group Managed Service Account (gMSA)

NoMoePwds on 01-24-2020 02:10 PM
First published on TECHNET on Apr 26, 2015 Setting up NDES using a Group Managed Service Account (gMSA)Hallo everybody, ...
892

Setting up TPM protected certificates using a Microsoft Certificate Authority - Part 3: Key Attestation

NoMoePwds on 01-24-2020 02:09 PM
First published on TECHNET on Sep 08, 2014 Hey Everyone, I am back with the last part of this 3 of this series on TPM pr...
888

Setting up TPM protected certificates using a Microsoft Certificate Authority - Part 2: Virtual Smart Cards

NoMoePwds on 01-24-2020 02:08 PM
First published on TECHNET on Jul 15, 2014 Hey Everyone, I am back with part 2 of this 3 part series on TPM protected ce...
873

Setting up TPM protected certificates using a Microsoft Certificate Authority - Part 1: Microsoft Platform Crypto Provider

NoMoePwds on 01-24-2020 02:07 PM
First published on TECHNET on Jun 05, 2014 Hey Everyone, This is Wes Hammond with Premier Field Engineering back to shar...
796

Windows Server 2012 R2/IIS8.5 - Automatic Rebind of Renewed Certificates

Amer_Kamal on 01-24-2020 02:07 PM
First published on TECHNET on Apr 28, 2014 Hello All, This is Wes Hammond with Premier Field Engineering back with follo...
865

Constraints: what they are and how they’re used

Amer_Kamal on 01-24-2020 02:06 PM
First published on TECHNET on Mar 05, 2014 Hey everyone this is Wes Hammond from Premier Field Engineering and I wanted ...
Latest Comments
Sampathkovuri
in LDAP Channel Binding and LDAP Signing Requirements - March 2020 update final release on 04-05-2020
Hi,I have been following this link to understand the LDAP changes which are going to happen in coming months and the explanation is pretty good. I have a questionI am using F5 load balancer to manage the LDAP for both secure and non secure connections and I could see load balancer's SNAT IP address ...
0 Likes
ShaharBiras
in LDAP Channel Binding and LDAP Signing Requirements - March 2020 update final release on 04-04-2020
@jdobiash thanks for your comment.For my understanding, CBT is implemented as part of Windows EPA and as long as you're using Windows authentication providers (and EPA is enabled) it will kind of be automatically sent for you (feel free to correct me if I'm wrong) In my case, I have an application t...
0 Likes
jdobiash
in LDAP Channel Binding and LDAP Signing Requirements - March 2020 update final release on 04-04-2020
The LDAP Channel Binding Token (CBT) feature is separate from signing and securing of the actual LDAP authentication (be it via LDAPS or SASL). CBTs are done to ensure that the SSL traffic itself can't be Man-in-the-middle'd (MITM), however, less things are compatible with them. A lot of 3rd party t...
0 Likes
ShaharBiras
in LDAP Channel Binding and LDAP Signing Requirements - March 2020 update final release on 04-04-2020
I couldn't find anywhere information about the following case - Would simple bind (Simple Authentication) over LDAPS still work with Channel Binding set to Required?It is clear that the signing requirement works when it's LDAPS but all the information about Channel Binding talks mainly on SASL and n...
0 Likes
Ricoli610
in Active Directory Certificate Services Frequently Asked Questions - needs your help! on 03-30-2020
@NoMoePwds This may not be a frequently asked question but hoping someone can answer it. In trying to figure out what I needed to do to ensure a new certificate template had an extension with the BMP data value "DomainController" I incorrectly added a new EKU named "DomainController" with the OID va...
0 Likes