Configure WSUS to have computers download updates from Microsoft

In this tutorial, I will explain how to configure WSUS so that computers download updates directly from the Microsoft website and not from your WSUS server. This configuration has the advantage of reducing the disk space required for storing updates, but at the cost of putting more strain on your internet connection. The timing of …

Read more



Active Directory: Setting up an authentication silo

In this tutorial, I will explain how to set up an authentication silo with Active Directory, but before going into detail, I will explain in a few words what an authentication silo is used for. In fact it is quite simple, it allows to control on which computers a user can connect, the authentication silos …

Read more



ARR: Block PowerShell access to Exchange

In this tutorial, I will show you how to block PowerShell remote access to Exchange with ARR. As a security measure, if you use IIS ARR to publish Exchange servers to the Internet, you must block PowerShell remote access. By default, it is possible to remotely administer an Exchange server with PowerShell, we find all …

Read more



ARR – HTTP to HTTPS redirection

In this tutorial, I will explain to you how to set up a redirection of a site from HTTP to HTTPS with ARR. If you don’t yet know IIS ARR, I’ll let you discover it in this tutorial: IIS ARR: Installation and configuration. This type of redirection is often implemented when using ARR with an …

Read more



GPO – make a domain user local administrator of a computer

In this tutorial, I’ll show you how to make a domain user local administrator of a computer or server using Group Policy (GPO). In a previous tutorial, I explain how to do this using restricted groups, which involved creating an Active Directory group, putting the user in that group and then using the group policy, …

Read more



GPO: force DNS computer registration

In this tutorial, I will explain how to force DNS registration of computers by Group Policy (GPO) in an Active Directory environment. Maintaining a clean, up-to-date DNS (Active Directory) zone is not easy, especially with dynamic computer registration. The first step is the activation of automatic cleaning, but it happens that once this is activated, …

Read more



Add an AD DS domain controller to an existing domain

Schéma multi AD

In this article, I will explain how to add a domain controller to an existing domain and manage replication links. Below, an illustration of the final architecture: Throughout this tutorial, we will add the controller XXXX-AD1 to the existing domain, which already has two controllers on site A. Prerequisites for XXXX-AD1: When adding the first …

Read more



FSMO roles

Presentation of FSMO roles In an Active Directory environment, there are 5 Flexible Single Master Operation (FSMO) roles, two roles are unique in the forest and the other three are unique in a domain. A domain controller can have none or more FSMO roles. Domain Naming Master It is unique in the forest, it is …

Read more



Hyper-V Cluster: Installation and Configuration

Introduction Through this tutorial, we will see how to set up a Hyper-v cluster under Windows Server (2012R2 / 2016/2019) step by step. Each step requires it, will take you on a tutorial to guide you in setting up a Hyper-V cluster. Prerequisites Be in an Active Directory environment, ideally having a server-side domain controller …

Read more