Windows Certificate Services – Setup a CRL
May17

Windows Certificate Services – Setup a CRL

Setup a CRL KB ID 0000957 Problem One of the often-overlooked tasks in a Public Key Infrastructure (PKI) deployment is configuring your Certificate Services Certificate Revocation List (CRL). For smaller deployments with only one server, you don’t need to worry about complex design considerations (though a CRL doesn’t have to be hosted on a Certificate Services server). In my test environment, I have only one PKI server,...

Read More
Cisco ASA Domain Authentication and Trust (Allowing)
May08

Cisco ASA Domain Authentication and Trust (Allowing)

ASA Domain Authentication KB ID 0000973  Problem I cringed this morning when I was asked about this, last time I had to get a client to authenticate to a domain through a firewall, it was ‘entertaining’. The problem is Windows loves to use RPC, which likes to use random ports, so to make it work you either had to open TCP ports 49152 and 65535 (Yes I’m Serious). Or you had to registry hack all your domain controllers...

Read More
Windows Server 2025 Trust Relationship Failures Post-Upgrade
May06

Windows Server 2025 Trust Relationship Failures Post-Upgrade

2025 Trust Relationship KB ID 0001917 Problem Following a full upgrade of all domain controllers (DCs) to Windows Server 2025, organisations may experience trust relationship failures between domain-joined workstations and the domain. This issue predominantly affects clients running Windows 10/11 versions up to 23H2. Notably, environments retaining at least one older DC do not encounter this problem. Symptoms Users unable to log in to...

Read More
Windows Displaying a Logon Notice (legal notices)
Apr29

Windows Displaying a Logon Notice (legal notices)

 Logon Notice KB ID 0000328 Problem It’s been a while but when I was asked my notes were seriously out of date .Should you with to enable this feature then do the following. Solution : Logon Notice Logon Notice Option 1 – via Domain Policy 1. On a domain controller, Start > administrative tools > Group Policy Editor > Either edit an existing policy or create a new one (Remember its a computer policy you need to...

Read More
Updating Domain Computer Objects with Last Logon and Machine Information
Apr09

Updating Domain Computer Objects with Last Logon and Machine Information

Last Logon KB ID 0001340  Problem I can’t really take the credit for this, I was at a client’s site a few weeks ago, and they were doing this. I thought ‘That’s cool, I’ll have a play with that when I get the chance”. Essentially, you update the description of the Computer object(s) in AD so that they list; The last user who logged on. What time they logged on. What AD ‘Site’ the machine...

Read More
Disaster Recovery Planning for AD & Entra ID
Mar12

Disaster Recovery Planning for AD & Entra ID

Disaster Recovery Planning KB ID 0001911 Problem When Disaster Recovery Planning for Active Directory (AD) and Entra ID (formerly Azure AD) is vital to ensure the continuity of identity services during failures, cyberattacks, or unforeseen disasters. Below is a structured approach to building a resilient disaster recovery strategy. Solution: Disaster Recovery Planning Define Objectives and Scope Recovery Time Objective (RTO):...

Read More