In this tutorial, I will explain how to change the password of the KrbTgt account. Before explaining how to change the password of this account, I will give you some explanations. Who is krbtgt? The krbtgt account is a disabled service account in the Active Directory, which is used for the distribution of Kerberos Tickets, …
In this tutorial, we will address a security point on an Active Directory environment, which is the domain joining of computers. What you need to know (some administrators don’t know this), all domain users can join a computer to a domain, they can even join up to 10 computers. Domain administrators have no limit as …
In this tutorial, I will explain how to force DNS registration of computers by Group Policy (GPO) in an Active Directory environment. Maintaining a clean, up-to-date DNS (Active Directory) zone is not easy, especially with dynamic computer registration. The first step is the activation of automatic cleaning, but it happens that once this is activated, …
In this tutorial, I will explain how by Group Policy (GPO) in an Active Directory environment, block the launch of programs and prevent the installation of certain software with the software restriction policy. By default, if the users are not administrator (local) of the computer, it is not normally possible to install programs, on the …
In this tutorial dedicated to Active Directory and security, I will give you some tips to harden the level of security in order to be less vulnerable to attacks. The different configuration points, which will be discussed, simply allow attacks to be made more difficult and longer internally, in no way will they guarantee that …
In this “troubleshooting”, I will explain how to remove the Remote Installation Services settings that are configured on the Default Domain Policy. On Active Directory domains, which were created with an older version of Windows Server (2003), User settings are configured (Policies / Windows Settings / Remote Installation Services / Client Installation Wizard Options). Custom …
For companies that use firefox as a browser, it was difficult to control due to the lack of admx file and the implementation of policies required scripts to copy the settings file. Since May 2018, firefox has officially offered ADMX files in order to be able to set up group policies (GPO) to configure Firefox …
In this tutorial, I will tell you how to harden password security with Lithnet Password Protection for Active Directory. Lithnet Password Protection for Active Directory is a free utility that installs on domain controllers, which will allow us to increase password security with: Create a forbidden password dictionary, also taking into account the replacement of …
In this first tutorial dedicated to Windows Server 2022, I will show you how to install an Active Directory domain controller. Si vous débutez avec les services Active Directory, je vous invite à suivre le cours j’ai créé avant : In this tutorial, here is what we will see: Installing the Active Directory Domain Services …
Presentation DFS Replication allows you to set up a replication of a folder between several servers. There are “two types of replications”. One-way replication This type of replication is mainly used to centralize file server backups on a backup server. Multidirectional replication This type of replication makes it possible to have a folder with the …