If a trust relationship between a Windows workstation and an Active Directory domain is broken, the computer won’t be able to establish a secure channel with the domain controller, and…
Shadow session mode allows RDS administrators to view and interact with the user’s desktop. Remote Desktop Shadowing mode works on all modern versions of Windows starting from Windows Server 2012…
Windows administrative shared folders are used for remote access and computer management. By default, the following administrative shares are created by Windows:
Many administrators of Windows terminal servers noticed that starting from Windows Server 2012, the management snap-ins tsadmin.msc (Remote Desktop Services Manager) and tsconfig.msc (Remote Desktop Session Host Configuration) are missing…
iSCSI (Internet Small Computer System) is an SCSI protocol that allows to access storage devices over the IP protocol. Using iSCSI, you can connect your server to a shared network…
In August 2020, Microsoft released an update to fix a critical Windows Server vulnerability in Active Directory — CVE-2020-1472 (more known as Zerologon) . This update was successfully installed on…
To perform some actions in Windows, it’s not enough to have administrator privileges. For example, you cannot replace or delete system files and some registry keys, stop system services or…
You can use file system object access event auditing to identify a specific user who created, deleted, or modified a specific file. In this article, we’ll show you how to…
The Windows.edb file (Windows.db in Windows 11) is the location of the index database for the Windows Search service. The search index allows users to quickly search for files, emails…
During a clean OS install, Windows Installer creates a special System Reserved Partition (SRP) on the MBR disk partition table. This is a hidden partition with the NTFS file system,…