Configuring the maximum amount of devices colleagues can Workplace Join
We’ve discussed the WorkPlace Join functionality in Active Directory Federation Services in Windows Server 2012 R2 (and up) and the accompanying Registered Device objects in Active Directory Domain...
View ArticleAdvances in Active Directory since Windows Server 2003
In six months time, on July 14 2015, Microsoft ends the extended support for Windows Server 2003. After 11 years and 6 months (Windows Server 2003 became generally available on May 28th, 2003) the plug...
View ArticlePictures of ITPRO|DEV Connections Greece 2014
Last weekend, I had the opportunity to speak at ITPRO|DEV Connections 2014 in Athens, Greece. This meant I not only had the opportunity to share knowledge with Greek IT Pros, joined by the their IT...
View ArticleKnowledgeBase: Domain Controller promotion stops responding when NetBIOS over...
Sometimes, an easy task becomes daunting. Especially when you’re working with technology like Active Directory Domain Services and you can’t even get a server promoted to a Domain Controller because...
View ArticleUpdate your Federation Servers with MS14-077 to patch CVE-2014-6331 (Important)
During the November 2014 Patch Tuesday, Microsoft has released Security Bulletin MS114-077, that describes how a vulnerability in Active Directory Federation Services (AD FS) could allow unintentional...
View ArticleWindows 10 Technical Preview 2 (Build 9926) is now available
Earlier today, Microsoft released a new preview for Windows 10, codenamed Technical Preview 2 and wearing build number 9926 (in proud lime green on navy blue, oh wait…) Windows 10 Technical Preview 2...
View ArticleKnowledgeBase: You receive a “Your request could not be processed” error when...
Recently, after deploying Azure Self-service Password Reset (SSPR) for a customer, I discovered some odd behavior. After we worked through the error tree, we finally worked out the issue. Since it...
View ArticleI will be speaking at Nordic Infrastructure Conference 4th Edition
The speaker season for 2015 is about to start. Of course, we’re kicking off with the Nordic Infrastructure Conference (NICConf) in Oslo, Norway. I’ll be copresenting two sessions with Raymond Comvalius...
View ArticleWorkPlace Join vs. DirectAccess
Previously, I discussed the differences and commonalities for WorkPlace Join and Domain Join. Today, I would like to discuss the differences and commonalities between two very similar and yet widely...
View ArticleVulnerabilities in Group Policy could allow security policy bypassing...
For its February 2015 Patch Tuesday on Tuesday February 10, Microsoft has released two security bulletin to address issues in Group Policy that would allow an attacker using a Man-in-the-middle (MitM)...
View ArticleSecurity Thoughts: Include command line in process creation events
Windows 8.1 and Windows Server 2012 R2 introduced an awesome new feature, called Include command line in process creation events, a Group Policy setting that expands the Audit Process Creation policy...
View ArticlePictures of the 2015 Nordic Infrastructure Conference
Raymond and I delivered two sessions at the 4th edition of the Nordic Infrastructure Conference (NIC) in Oslo, Norway. This was my second time on stage for NIC and Raymond’s third time. Just like last...
View ArticleVideo: Running highly-sensitive Domain Controllers on Hyper-V and Azure
Active Directory Domain Controllers hold the keys to your kingdom. So how do you virtualize these castles of identity, without compromising on the requirements of your organization? In this session,...
View ArticleVideo: Join the Virtualized!
Windows 10 brings a huge change when it comes to joining the trusted environment. How does the virtualization of the join change the security paradigm that we got so used to over the past decade. What...
View ArticleRunning downlevel VMs on Windows 10 Hyper-V? Update the Integration Components
I’m seeing lots of people adopting the Technical Previews of Windows 10 and Windows Server 2016 around me, and running Virtual Machines (VMs) on the built-in Hyper-V hypervisor seems to be among the...
View ArticleSecurity Thoughts: Vulnerability in SChannel allows security bypassing...
In recent days, a new attack vector, called the FREAK technique, that facilitates SSL/TLS Man-in-the-Middle (MitM) attacks was in the news. Microsoft has confirmed that its implementations of SChannel...
View ArticleSecurity Thoughts: Vulnerability in NETLOGON cloud allow spoofing (MS15-027,...
While this has proven to be n interesting month with the Factoring RSA Export Keys (FREAK) technique affecting a plethora of Operating Systems, Microsoft has also issued an update to address a...
View ArticleKnowledgeBase: The user name and password box might not appear on the sign-in...
Yesterday, Microsoft issued a new Knowledgebase article for the brave people, like you ant me, that run Windows 10 Technical Preview, build 10041. It fixes a bug where the user name and password box...
View ArticleKnowledgeBase: Azure MFA Portal shows error “Error communicating with the...
When you’re setting up Microsoft Azure Multi-factor Authentication (Azure MFA) in a setup involving the on-premises MFA Server, and want to use the User portal for registration, you might encounter an...
View ArticleKnowledgebase: You receive a "Web Service Requests must be protected by...
I have identified an issue with Azure Multi-Factor Authentication (MFA) in a hybrid deployment. When you access the User Portal to activate the mobile app, you receive an error. All other Multi-Factor...
View Article