Any Windows host directly connected to the Internet with an open RDP port is periodically logged for remote brute-force password attempts. To effectively protect the default Remote Desktop protocol port…
In Windows Server 2012R2/2016/2019, you can use the graphical Server Manager console to install and remove server roles and features. However, in most cases, you can do the same from…
You can use the Get-ADDomainController PowerShell cmdlet to get information about the domain controllers in Active Directory. This cmdlet is a part of PowerShell Active Directory module and requires RSAT…
A Windows administrator can use the good old Dnscmd cli tool or DNSServer module for PowerShell to manage DNS zones and records. In this article we’ll cover the basic operations…
In this article, we will review the purpose of domain controllers holding FSMO roles in Active Directory, how to identify the current FSMO role holders, how to transfer one or…
A separate account of type Computer is created for a computer when you join it to an Active Directory domain. A computer object in AD has several mandatory attributes: sAMAccountName,…
This post explains several methods for blocking access to specific websites, domains, URLs, or IP addresses on a Windows computer without using third-party tools. The most effective way to block…
When creating new user accounts in Active Directory, an administrator sets a unique initial password for each account and tells it to a user (usually at the first logon a…
Force Tunnel mode is enabled by default for all VPN connections in Windows (the ‘Use default gateway on remote network‘ option enabled in the VPN settings). In this mode, name…
You can use the Get-MessageTrackingLog cmdlet in the Exchange Management Shell to analyze mail flow, message forensics and to get different information about messages sent or received by a specific…