Deploy Active Directory Federation Services
KB ID 0001140 Problem The actual configuration of ADFS depends largely on what you intend to do with it. Here I’m using it to broker connections from my Microsoft Web Application Proxy. This article is just to ‘join the dots’ and covers just the installation of the role itself. Solution Before you Start: Make sure you have a certificate ready to use for ADFS. I typically use a wildcard cert for this, it’s...
ADFS Test Page Error
KB ID 0001545 Problem I was setting up ADFS in Server 2019 today, and once I have all the basics setup, I like to got to, https://{server-fqdn}/adfs/ls/IdpInitiatedSignon to test, but this happened; The resource you are trying to access is not available. Contact your administrator for more information. Error details .Activity ID: 3c53140c-cff3-4b59-0900-0080010000d4 .Error details: MSIS7012: An error occurred while processing the...
Cant Copy a Group Policy Object
KB ID 0001543 Problem Was asked this this morning, why couldn’t someone ‘Copy’ a Group Policy Object (GPO)? Solution At first I was confused, (I made the same mistake they had), look at what I’m trying to copy? It’s not a Group Policy Object, its a ‘Link’ to a GPO. (Note: There’s a shortcut arrow!’) Locate the actual GPO and you can copy it! Related Articles, References, Credits,...
Windows Adding Firewall Rules With PowerShell
KB ID 0001538 Problem There was a question on Experts Exchange this morning, the asker wanted to be able to add a ‘Trusted’ network range to their Windows Server Firewall settings as a ‘allow all ports’ rule. Solution You can of course add this manually in the GUI, normally I’d simply Add a Firewall Rule with a Group Policy. but the problem with that is, that’s fine if you want to open a particular...
You Have Exceeded the Maximum Number of Computer Accounts
KB ID 0001536 Problem A few weeks ago, this was asked in a forum, and while I knew what the problem was, I’d never seen it myself. So I recreated the problem on the test network to look at why it happened, and how to fix / get around the problem. The following error occurred attempting to join the domain {domain-name} You computer could not be joined to the domain, You have exceeded the maximum number of computer accounts you...
Windows: Deploy and Configure DNSSEC
KB ID 0001524 Problem Like many protocols and solutions, DNS was designed in a time when we all trusted each other, and a ‘hacker’ was some sort of farm equipment. To ensure when you get a response form a DNS server it is coming from where you expect it to, and you can trust it. We use DNSSEC. Basically it signs the DNS record with a digital cypher. The client can then validate the DNS record when it receives it and it...