LIke any other object in the Windows world, services are objects, you can therefore give users rights on them. Let’s see for example how to allow start stop service rights to non-administrators. In order to change the permissions to a service, you’ll need an account who has rights to change […]
In a previous post, we looked at some powershell oddities when it comes to Credential use. In this “Powershell criticism: part 2”, let’s look at some language construction irritating way to express things shortly, when doing nested enumeration. As a language used by system administrators, you’ll use Powershell in two […]
In a Tweet, Jeffrey Snover was asking if the community had anything to say to make Powershell better. This kind of tweet may not be very easy to answer in 280 characters, but if you take time to think about it, it interrogates the way you’re using the language. Did […]
When you’re establishing a relying party trust with a provider filtering group membership you send through your AD FS Farm is often a prerequisite, either for performance issues -so that the token is not too big- or for security reasons as you do not want your provider to know your […]
Losing one domain controller isn’t a thing you appreciate, but rebuilding one DC in an running forest is easy. Losing an entire forest because of corruption or compromised assets isn’t exactly that. In this series, Let’s see how to prepare an AD Forest Disaster Recovery plan. Hint: you’d better practice […]
In his blog, Paul Romer mentions a book ‘Why information grows’ and take some time to review how differently the physicist and the economist may think about that resource called information and its storage. In his demonstration, codified information (i.e. information that can be stored using hardware devices) does not […]
Microsoft courses about their PKI implementation (Or AD Certificate Services as we should now call it) just scratches the surface by telling you the differences between root CA, subordinate CA and the stand-alone / entreprise difference that comes with the CA being member of a domain. Some good links to […]
Here are redirection links related to the security updates: The wsusscn2.cab file used by the Windows Update Agent API, the MIcrosoft Baseline Security Analyzer and the open source wsusoffline project to get a list of available and needed patches; An Excel worksheet with a list of superseded / active bulletins […]
