Configure WSUS to have computers download updates from Microsoft

In this tutorial, I will explain how to configure WSUS so that computers download updates directly from the Microsoft website and not from your WSUS server. This configuration has the advantage of reducing the disk space required for storing updates, but at the cost of putting more strain on your internet connection. The timing of …

Read more



Configure a DNS Forwarder on Windows Server with PowerShell

In this tutorial, I will explain how to add a DNS forwarder on Windows Server using PowerShell. The Cmdlets used in this tutorial are launched in a PowerShell window run as Administrator. To begin displaying the redirectors enter the following command: As you can see, there is already a DNS forwarder configured on server 1.1.1.1 …

Read more



Active Directory: Setting up an authentication silo

In this tutorial, I will explain how to set up an authentication silo with Active Directory, but before going into detail, I will explain in a few words what an authentication silo is used for. In fact it is quite simple, it allows to control on which computers a user can connect, the authentication silos …

Read more



Hyper-V: Live Migration configuring Kerberos delegation

Microsoft Hyper-v

In this tutorial, I’ll walk you through how to configure Live Migration on Hyper-V using Kerberos instead of CredSSP. By default CredSSP is used for authentication during a live migration between the two hosts, which requires logging into both Hyper-V servers simultaneously. The use of Kerberos means that you do not need to open your …

Read more



ARR: Block PowerShell access to Exchange

In this tutorial, I will show you how to block PowerShell remote access to Exchange with ARR. As a security measure, if you use IIS ARR to publish Exchange servers to the Internet, you must block PowerShell remote access. By default, it is possible to remotely administer an Exchange server with PowerShell, we find all …

Read more



ARR – HTTP to HTTPS redirection

In this tutorial, I will explain to you how to set up a redirection of a site from HTTP to HTTPS with ARR. If you don’t yet know IIS ARR, I’ll let you discover it in this tutorial: IIS ARR: Installation and configuration. This type of redirection is often implemented when using ARR with an …

Read more



GPO – make a domain user local administrator of a computer

In this tutorial, I’ll show you how to make a domain user local administrator of a computer or server using Group Policy (GPO). In a previous tutorial, I explain how to do this using restricted groups, which involved creating an Active Directory group, putting the user in that group and then using the group policy, …

Read more



GPO: force DNS computer registration

In this tutorial, I will explain how to force DNS registration of computers by Group Policy (GPO) in an Active Directory environment. Maintaining a clean, up-to-date DNS (Active Directory) zone is not easy, especially with dynamic computer registration. The first step is the activation of automatic cleaning, but it happens that once this is activated, …

Read more