Install WSUS role on Windows Server 2025

In this tutorial, we will see how to install the WSUS (Windows Server Update Services) role on Windows Server 2025, which will allow you to have a server in your environment to control the distribution of updates for Microsoft products (Windows, Office, SQL Server, etc.). The WSUS role is also a “component” of MECM, because …

Read more



ARR: Block PowerShell access to Exchange

In this tutorial, I will show you how to block PowerShell remote access to Exchange with ARR. As a security measure, if you use IIS ARR to publish Exchange servers to the Internet, you must block PowerShell remote access. By default, it is possible to remotely administer an Exchange server with PowerShell, we find all …

Read more



ARR – HTTP to HTTPS redirection

In this tutorial, I will explain to you how to set up a redirection of a site from HTTP to HTTPS with ARR. If you don’t yet know IIS ARR, I’ll let you discover it in this tutorial: IIS ARR: Installation and configuration. This type of redirection is often implemented when using ARR with an …

Read more



IIS ARR – configuration to use self-signed certificates on target server

In this new tutorial dedicated to IIS ARR, I will explain how to configure ARR in order to be able to use a self-signed certificate on the target server. In the previous tutorial, I explained how to do an SSL dump, in this configuration the target server is in HTTP, which means that the request …

Read more



IIS – Add the X-Forwarded-For field in the logs

In this tutorial, I will explain how to add the X-Forwarded-For field in the IIS logs, in order to retrieve the real IP address of a visitor when a reverse proxy is upstream of the IIS server. On the IIS Web server, open the Internet Services Management console. Select server 1 and click Logging 2. …

Read more



Crowdsec: protecting Windows servers

In a previous tutorial, I explained how to protect your Linux servers with Crowdsec in order to block “malicious” traffic. For almost 2 months now, the Crowdsec version has been available for Windows. If you are not yet familiar with Crowdsec, here is a brief presentation: Crowdsec will analyze different log files (Web, firewall, SSH, …

Read more



Certify The Web: Easily Generate Let’s Encrypt Certificates for IIS

In this tutorial, I will tell you how to easily generate Let’s Encrypt certificates for IIS with Certify The Web software. I have already covered the topic of Let’s Encrypt certificates on IIS in Installing a Let’s Encrypt certificate on IIS and this one Let’s encrypt generate a PFX with IIS to generate pfx. With …

Read more