Duo: Migrate from LDAP to LDAPS
KB ID 0001647 Problem With the impending ‘turning off’ of cleartext LDAP queries to Windows Server, I wanted to make sure my new Duo deployments were already using LDAPS. I got LDAP deployed very quickly and easily, but making the ‘swap’ to LDAPS proved to be massively problematic. Normally I find Duo a pleasure to deploy, but their technical documentation just confused me for this and I went running up some...
Get Ready for LDAPS Channel Binding
KB ID 0001645 Problem I have written about Enabling LDAPS a long time ago, but it’s a subject that’s about to become important again, so I’ll revisit the subject. Microsoft are about to ‘enforce’ LDAPS authentication against their domain controllers, in the March 2020 round of updates. Now delayed until second half of 2020. What does that mean? Well lookups against LDAP will now need to be secure, (i.e....
Veeam: No Backup Proxy is Able to Process this VM
KB ID 0001644 Problem While setting up some new backups, all the virtual machine failed like so; Unable to allocate processing resources. Error: No backup proxy is able to process this VM due to proxy processing mode restrictions. Solution On the face of it this looks like a simple problem, either you backup proxy does not have the capacity, you have too many jobs running at one, or you need to deploy some more backup proxies....
Azure AD Connector: Disable ADFS Authentication
KB ID 0001643 Problem Why would you want to disable ADFS authentication? Well what if ADFS is down, or you want to revert to some other authentication method? I was in a position a few weeks ago where I needed to disable ADFS on a clients Azure AD Sync. At that time the Microsoft Tech on the phone steered us towards doing what I can only describe as a ‘forced de-federation’. This involved using Powershell and it resets the...
Azure Pass-through Authentication
KB ID 0001642 Problem I’ve never really taken the time to look at pass-through authentication, I set up Azure AAD sync, then I either use ADFS or I don’t. It was only when looking at removing ADFS, that I even looked at it as an option. How does Pass-through Authentication Work? Remote client attempts to authenticate to Office 365 (Azure Active Directory). Azure queues the request and sends it to an Azure Authentication...
Microsoft Edge (macOS) Migrate Bookmarks from Safari
KB ID 0001641 Problem So now theres a version of Microsoft Edge for macOS! Normally I would not bother, but I spend a lot of time in SharePoint and Azure so I thought, rather than my usual approach of playing ‘Browser Roulette’ I’d try Microsoft Edge and see what it was like. My usual browser of choice is Safari, but the install wizard defaults to wanting to import bookmarks / favourites* from Chrome. (I do also have...
Password Sync: No Recent Syncronization
KB ID 0001640 Problem I recently migrated the server that was running my Azure AD Connector. It was showing no errors post migration so I thought no more about it. A few days later I logged in to Office 365 and saw this; AAD Connect Status Azure AD Connect Password sync: no recent synchronization Solution Apparently this can suddenly happen if you are running an old version of AAD Connect. But I checked and mine was brand new,...
Windows Server – Change Your Password in an RDP Session (Send Ctrl+Alt+Del)
KB ID 0001183 Problem Colleague: Windows Server, Where’s Windows Security gone? Me: Eh? Colleague: Windows Security! Me: What are you trying to do? Colleague: I want to change my password and I can’t send a Ctrl+Alt+Delete to the remote server. Well I know that pressing Crtl+Alt+Delete would let you change your password like so; I wasn’t aware that in Server 2008 and earlier if you were connected via RDP you got a...
Cisco Firewall Port Forwarding
KB ID 0000077 Problem Note: This is for Cisco ASA 5500, 5500-x, and Cisco Firepower devices running ASA Code. Note2: If your firewall is running a version older than 8.3 you will need to scroll down the page. Port forwarding on Cisco firewalls can be a little difficult to get your head around, to better understand what is going on remember in the “World of Cisco” you need to remember two things….. 1. NAT Means...
Page Ooops!
This page exists because it keeps getting indexed and I can’t work out where the link is coming from. For all of you who arrived here, please use the comments section below to let me know which page you came from! Thanks PeteLong 20/07/20