Domain

Tailscale and SMB file shares

2nd May 2025

Tailscale is good for getting basic IP connectivity but it introduces some complexity when the user needs INTERNAL DNS for domain authentication. Case in point; remote user is trying to…

📌
0💬 read more

Domain Controller STS time guessing OFF

28th August 2023

Domain Controllers may use the time field in SSL connections to guess at the time when other time sources are unavailable. OpenSSL puts random values in this field. Steve Gibson…

📌
0💬 read more

HowTo Verify your Domain isn’t using LM or NTLMv1

14th April 2023

some explan goes here open your fav MMC console OR start, run, mmc.exe (enter) File, Add / Remove Snap InIn the left pane choose Computer ManagementIn the Select a Computer…

📌
0💬 read more

Finding Domain Kerberos Delegations

31st March 2022

nice powershell script here https://blog.netwrix.com/2021/11/30/what-is-kerberos-delegation-an-overview-of-kerberos-delegation/

📌
0💬 read more

Windows log file sizing

5th April 2021

By default Windows uses a Rotating log file which means that when the log file gets full, the oldest entries automatically get over written. the default log size is 128mb…

📌
0💬 read more

Group Policy Extensions

24th September 2020

Group Policy is great for enforcing settings on a domain or group of users. You can also add extensions to support M$ Office, Chrome etc extensions come as a set…

📌
0💬 read more

Disable Old Accounts

12th November 2019

To reduce your attack surface it makes sense to disable unused accounts. Here are some methods to figure out if an accout is unused. For a small number of users,…

📌
0💬 read more