ITOps Talk Blog

Options
935
thomasmaurer on Jan 12 2022 04:52 AM
2,661
jaydestro on Jan 10 2022 08:04 AM
2,448
thomasmaurer on Jan 10 2022 05:52 AM
2,211
Sonia Cuff on Dec 23 2021 03:00 AM
1,699
thomasmaurer on Dec 22 2021 12:00 AM
3,283
Sonia Cuff on Dec 21 2021 03:00 AM
3,331
thomasmaurer on Dec 15 2021 12:00 AM
1,729
Sonia Cuff on Dec 14 2021 01:33 AM
1,680
jaydestro on Dec 13 2021 03:00 AM
1,023
Pierre Roman on Dec 10 2021 12:00 AM
1,981
thomasmaurer on Dec 08 2021 04:48 AM
1,552
Pierre Roman on Dec 03 2021 12:00 AM
1,677
shankuehn on Dec 02 2021 12:00 AM
2,434
thomasmaurer on Dec 01 2021 12:00 AM
2,619
jaydestro on Nov 29 2021 02:00 AM
6,468
Sonia Cuff on Nov 25 2021 12:25 AM
2,653
thomasmaurer on Nov 24 2021 12:00 AM
5,663
jaydestro on Nov 23 2021 12:00 AM
2,473
jaydestro on Nov 19 2021 02:00 AM
2,049
shankuehn on Nov 18 2021 12:00 AM
3,396
thomasmaurer on Nov 17 2021 12:00 AM
7,022
Sonia Cuff on Nov 16 2021 02:00 AM
9,355
dishanfrancis on Nov 15 2021 02:00 AM
2,229
jaydestro on Nov 12 2021 05:00 AM
2,247
shankuehn on Nov 11 2021 12:00 AM
4,102
thomasmaurer on Nov 10 2021 12:00 AM
2,105
Pierre Roman on Nov 05 2021 12:00 AM
1,883
shankuehn on Nov 04 2021 12:00 AM
3,341
thomasmaurer on Nov 03 2021 01:00 AM
1,726
thomasmaurer on Nov 02 2021 02:10 AM

Latest Comments

Hello @OrinThomas , Thanks a lot ! Just one little thing :The collection of all MS Learn modules that cover these exam objectives sorted into functional groups is here: AZ-801: Configuring Windows Server Hybrid Advanced Services >> Access Denied ;)
0 Likes
Hi Ned, Reboot of the DCs solved it. Now the second environment also uses FAST. Changing above mentioned settings in GPO requires a reboot or at least a KDC-service restart perhaps ? IF not, I don't know what was the actual cause. Happy though it works now :)
0 Likes
@Wizard17 Ah good, so it's at least working somewhere :D. I've shared this with the owner and will see.
0 Likes
I check with klist, which shows service tickets as:Cache Flags: 0After enabling GPO "KDC\Always provide claims" on DCs and "Kerberos\Kerberos client support for claims" on the clients, the above looks like:Cache Flags: 0x40 -> FASTI then enabled Windows Defender Guard using DGReadiness.ps1 -Enable, ...
0 Likes
@Wizard17 Steve confirmed that turning cred guard on should absolutely not break FAST. He mentioned that he has FAST and CG enabled all the time (as you'd expect :)) and it's not disabling FAST. So we'll need to know how you're confirming this and then get some repro steps from you.
0 Likes