How Many Users in AD? (User Count)
KB ID 0001748 Problem I had to get some stats from a number of customers earlier today, one of the stats I needed was the user count from within their respective Active Directories. If you have a tedious job to do, there’s usually a PowerShell command to help! Getting Object Numbers From Active Directory User Count (Get-ADUser -Filter *).Count Computer Count (Get-ADComputer -Filter *).Count Group Count (Get-ADGroup -Filter...
O365 with Duo MFA (Without a P1 License?)
KB ID 0001737 Problem Working for a cloud service provider, (and a Duo partner). I get a lot of queries about Duo MFA for Office 365. Typically (I think) the best solution is to enable Azure Conditional Access and couple that with Trusted sites, so clients get challenged when out on the road, but not in the office. The drawback of this is Azure Conditional Access requires a P1 License, at time of writing that’s about $6 a month...
Adding Duo 2FA to Microsoft ADFS
KB ID 0001656 Problem I did a Duo run through a few weeks ago, and to be honest their documentation is usually pretty good. I was spinning this up as a PoC for a client so I thought I’d put my take on the procedure here. ADFS Duo Pre-Requisites I already have a Duo Authentication Proxy server setup and my users are enrolled, you will need to set this up first. See the following article; Duo: ADSync and Enroll Users via SMS Log...
Windows Group Policy – Disable The Local Windows Firewall
KB ID 0001090 Problem I’ve got nothing against the Windows firewall, it’s certainly a lot easier to manage now than it was back in the XP SP2 days. But I find a lot of clients still just ‘want it gone’ and, providing they have a decent corporate firewall in front of them that’s fair enough. Solution 1. On a domain controller or a client running the remote administration tools > Windows Key+R >...
Adding a Windows Server 2019/2016 Domain Controller
KB ID 0001262 Problem Once upon a time, adding a domain controller that was running a newer version of the Windows Server family involved opening command line and schema prepping, and GP prepping etc. Now all this happens in the background when adding a 2019 domain controller and the wizard is doing the heavy lifting for you. Solution 2008 to 2019 Domain Controller 2008 to 2016 Domain Controller Obviously the server needs to be a...