This is the first post in a series that focuses on customizing the RD Web Access 2012 R2 interface. This post will not focus on Branding, I will address that in later posts. Update: It turns out th…
Source : Step by Step Customizing RD Web Access 2012 R2 – Part 1 | msfreaks
This article provides powershell script to set AD user must change password at next logon and reset bulk AD users to change password at next logon from CSV file
Source : Powershell: Set AD User Must Change Password At Next Logon
Microsoft has offered a software LAPS (Local Administrator password solution), it solves the problem of common password of local administrator account on the every computers in a domain. For example on all domain joined computer’s Administrator password will be unique and only domain Admins or specific groups are authorized to view that password. LAPS only works on Domain Joined computers. Below are the some advantages of using LAPS.
Periodically randomize local administrator passwords to ensure that password updates to Active Directory succeed before modifying local secrets and passwords.
Centrally store secrets in the existing Active Directory infrastructure.
Control access through Active Directory access control list (ACL) permissions.
Transmit encrypted passwords from computers to Active Directory via encryption using the Kerberos version 5 protocol and the Advanced Encryption Standard (AES) cypher by default.
Source : vGeek: Local Administrator Password Solution (LAPS)
Sous Windows Server 2012 et 2012 R2, l’installation des MAJ automatiques s’installent parfois en pleine journée et provoque un redémarrage… sympa en production !
Pour modifier ce comportement:
Créer une GPO dans l’AD et l’affecter à la bonne OU
Aller dans Configuration Ordinateur, Modèles d’administration, Composants Windows, Windows Update
Modifier la stratégie Configuration du service Mise à jour automatiques
Choisissez le mode désiré, les jours et l’heure et s’assurer que la case « Installer durant la période de maintenance automatique » est décochée:
Permet de créer un modèle de certificat avec une validité supérieure à 2 ans, valable pour MS Exchange et TS Gateway
Delprof2 is the unofficial successor to Microsoft’s Delprof which does not work with operating systems newer than Windows XP. Here are the main facts:
By termserv
Introduction:
This blog post contains a high-level overview of different types of profiles, considerations for choosing a profile solution for your deployment, highlights of new profile features in Windows Server 2008 R2, and a best practices recommendation for deploying roaming user profiles with folder redirection in a Remote Desktop Services environment
Written by Dale
With the recent release of Internet Explorer 11 / IE11, Microsoft have released a KB article on how to set Internet Explorer settings using Group Policy Preferences.
However they are missing out one vital step when setting this up. If you follow those instructions, even editing the group policy on a Windows 8.1 machine does not resolve it.
Bienvenue sur la KBelliot ;) 