Security: prevent local logon on Windows servers

Intro In this tutorial, we will see how to prevent local logon on Windows servers. What you should know is that by default all users are allowed to log on locally to Windows except for domain controllers. For servers in Workgroup, the problem is less posed but for servers members of a domain, all users …

Read more



Admin Center: installation in gateway mode

Intro In this tutorial, we will see how to install the Admin Center in gateway mode. As a reminder, the Admin Center is a Web interface that allows the administration of Windows servers using WinRM. From the Admin Center, it is almost possible the same as with the graphical interface: Monitor a set of servers …

Read more



GPO: Central store

Vérification via l'éditeur de l'utilisation du magasin central

Presentation of the central store The central store makes it possible to share and synchronize all of the Group Policy Definition (ADMX) files on all of the domain controllers by relying on the SYSVOL folder. By default the ADMX files are in the C:\Windows\PolicyDefinitions folder which is specific to each domain controller. It is also …

Read more



Active Directory: authentication policy

Presentation of authentication policies With Windows Server 2012R2 and the new ADAC (Active Directory Administration Center) administration console, Microsoft has added authentication policies that provide an additional layer of security. In the summary of authentication policies will allow or not to allow a user logs on to a desktop or server, or vice versa control …

Read more



Add an AD DS domain controller to an existing domain

Schéma multi AD

In this article, I will explain how to add a domain controller to an existing domain and manage replication links. Below, an illustration of the final architecture: Throughout this tutorial, we will add the controller XXXX-AD1 to the existing domain, which already has two controllers on site A. Prerequisites for XXXX-AD1: When adding the first …

Read more



GLPI link with an Active Directory

In this article, we will see how to configure GLPI with an Active Directory so that users can identify with their Windows session name and password. Configuration of the Active Directory in GLPI From the navigation menu go to Configuration 1 > Authentications 2. In the External Authentications list, click LDAP Directories 1. Click on …

Read more



FSMO roles

Presentation of FSMO roles In an Active Directory environment, there are 5 Flexible Single Master Operation (FSMO) roles, two roles are unique in the forest and the other three are unique in a domain. A domain controller can have none or more FSMO roles. Domain Naming Master It is unique in the forest, it is …

Read more



Active Directory: access the Active Directory Schema console

The Active Directory Schema console is not available natively, it is necessary to register it in order to access it. This console is to be used with great care, improper handling can put the entire Active Directory forest in error. This console gives access to the role FSMO: Schema Master. 1. Open a command prompt …

Read more



Create an Active Directory environment in PowerShell

Introduction In this tutorial, we will see how to create an Active Directory environment using PowerShell, that is to say the creation of the first domain controller which includes: The Active Directory tutorial: installing and configuring a domain controller explains how to do it using the graphical interface. Prerequisites Ideally from a blank server, which …

Read more



Active Directory: Add a Domain Controller to PowerShell

Introduction In this tutorial, we will see how to add an Active Directory domain controller to an existing domain using PowerShell. To do this through the GUI, I invite you to read this article: Add an AD DS Domain Controller to an Existing Domain. (fr) Adding a domain controller to PowerShell is done in two …

Read more