PrintNightmare: secure print configuration

In this “little” tutorial, I will show you how to set up a “secure” configuration. Since the publication of the PrintNightmare flaw, Microsoft has deployed several updates to correct this problem and took the opportunity to modify the behavior of Windows to harden the configuration. In this tutorial, we will see the parameters to use …

Read more

KB5005033: Allow non-administrators to install printer drivers

To fight against the flaws that affect the print spooler on Windows, the KB5005033 of August 2021, modifies the behavior of Windows 10 by requesting the administrator rights for the installation and the update of the print drivers. The changes proposed in this article bypass the KB related blockage, which again exposes your system. It …

Read more

Nginx: configuration as reverse proxy

In this tutorial dedicated to Nginx, I will explain how to configure it in order to have a reverse proxy. Before getting to the heart of the matter, I will quickly introduce you to Nginx and what a reverse proxy. For this tutorial, I used an Ubuntu 20.04 machine. Introducing Nginx Nginx is a web …

Read more

Guacamole: manage access to your IT environment

In this tutorial, I will explain how to install Guacamole on Ubuntu, configure access to equipment and use it. Before starting the technique, I will first introduce you to Apache Guacamole and especially why to put it in place. What is Guacamole? No, I’m not going to talk about the avocado sauce recipe in this …

Read more

Bitlocker : enable encryption with a TPM chip

Introduction In this tutorial, I will tell you how to activate Bitlocker with a TPM chip. Bitlocker is a feature of Windows that allows you to enable encryption of a hard drive in order to secure data. The TPM chip is a hardware chip which will store the decryption key and which is specific to …

Read more

Windows 10 : Activate Windows Defender Application Guard

In this “how to” tutorial, we will see how to activate Windows Defender Application Guard, which is a feature available on Windows 10 (Pro / Enterprise) and which allows you to launch the Microsoft Edge browser in an isolated environment.

AppLocker : configuration in an Active Directory environment

Presentation In this tutorial, we will see how to configure AppLocker in an Active Directory environment using group policies. AppLocker is a Windows feature that is similar to a firewall at the application level. AppLocker allows you to control the applications running on computers. AppLocker is able to act on: Executables (.exe). Windows Installer (msi, …

Read more

Bitlocker : store recovery password in Active Directory

Presentation In this tutorial, we will see how to store the Bitlocker recovery password in the Active Directrory. The recovery password is requested when the user forgets his pin code or when he wishes to access the hard disk on another computer when the TPM module has been used. Viewing passwords is done using the …

Read more