In this tutorial, I suggest you discover the dynamic access control available on Windows Server in an Active Directory environment. Before getting to the heart of the matter, I will introduce you to dynamic access control also called DAC (Dynamic Access Control). DAC adds additional control over NTFS access rights which allows rights to be …
Read moreActive Directory: configuring dynamic access control – DAC
In this tutorial “how”, we will see how to join a Windows server with graphical interface to an Active Directory domain.
In this tutorial, we will see how to restore GPO Default Domain Policy / Default Domain Controller Policy to default. On domain controllers, a DCGPOFIX command line tool is available to restore the 2 default policies. Before proceeding with the restoration of the policies, I advise you to make a backup of this one before. …
This tutorial explains how to configure password policies in Active Directory with Password Setting Objects (PSO).
In this “How” tutorial, I will explain how to create a central store to centralize the group policy definition files (ADMX / ADML).The central store allows file replication using the SYSVOL directory of domain controllers and therefore having the same configuration on all the controllers.
Presentation In this tutorial, we will see how to store the Bitlocker recovery password in the Active Directrory. The recovery password is requested when the user forgets his pin code or when he wishes to access the hard disk on another computer when the TPM module has been used. Viewing passwords is done using the …
Read moreBitlocker : store recovery password in Active Directory
Presentation In this tutorial, I will explain how to add a UPN suffix in an Active Directory domain. Before launching, we will see what is UPN (User Principal Name) and the suffix. The UPN is made up of two parts, the account identifier 1 + the suffix 2. The default suffix is the domain name …
Intro In this tutorial, we will see how to install the Admin Center in gateway mode. As a reminder, the Admin Center is a Web interface that allows the administration of Windows servers using WinRM. From the Admin Center, it is almost possible the same as with the graphical interface: Monitor a set of servers …
Presentation of the central store The central store makes it possible to share and synchronize all of the Group Policy Definition (ADMX) files on all of the domain controllers by relying on the SYSVOL folder. By default the ADMX files are in the C:\Windows\PolicyDefinitions folder which is specific to each domain controller. It is also …
Presentation of authentication policies With Windows Server 2012R2 and the new ADAC (Active Directory Administration Center) administration console, Microsoft has added authentication policies that provide an additional layer of security. In the summary of authentication policies will allow or not to allow a user logs on to a desktop or server, or vice versa control …