Questo articolo è disponibile anche in lingua italiana al seguente link: Microsoft Defender for Identity: implementazione e gestione | WindowServer.it The protection of your IT infrastructure must pass strictly by the Domain Controllers, because they are the ones who authenticate the various objects but also because they are the first to be under attack by […]
Windows Admin Center needs to be authorized when a user try to connect into a server and this means enable SSO. Without the configuration of a constrained Kerberos delegation, WAC will display an alert that is not possible to connect using the Use my account for this connection option. To avoid this, is necessary delegate […]
Active Directory is one of the most critical roles in every infrastructure and each Domain Controller is like diamond: no one must touch them, no update, no changes, nothing of nothing. This is very bad because all DCs must be keep aligned for the security area and this means install updates and do the best […]
Un’infrastruttura Active Directory non può esistere senza GPO. Le Group Policy Object sono la base per rendere sicura la propria infrastruttura, applicando dei modelli standard e centralizzati di regole, sia per i client che per i server. Attraverso le GPO possiamo, ad esempio: Configurare le impostazioni Windows Configurazione applicazioni come Office e Chrome Installare stampanti […]
Don’t miss the next Microsoft Ignite 2018 Tour in Milan from January 31 to February 1, 2019. Join us at the place where developers and tech professionals continue learning alongside experts. Explore the latest developer tools and cloud technologies and learn how to put your skills to work in new areas. Connect with our community to […]
Configurare un’infrastruttura Active Directory può sembrare una cosa semplice, grazie anche al wizard intuitivo, ma in verità nasconde tante piccole insidie che, se non analizzate correttamente, potrebbero portare a problemi che si possono riproporre successivamente. Non solo configurazione del prodotto ma anche approccio al virtuale, perchè se è vero che creare un Domain Controller è […]
With the evolution of Azure Active Directory, there’s the possibility to use the same tenant to manage different organizations. This is good because with the Single Sign-On, is not required have many accounts, many passwords and more complexity; so, this is very good for everyone. But the full integration means make a clean every four […]
One of the most frequent question that my customers did is how to restore Group Policy Objects or Active Directory items when they are deleted. First of all, Microsoft has introduced the Recycle Bin for Active Directory since Windows Server 2008 R2 and this can help the IT admins to restore everything without use backup […]
Migrate a customer from on-premises to the cloud sometime requires time and resources, specially when there are data and critical applications. A couple of months ago, we started a project to migrate one of our customer to Microsoft Azure and now I want share some information to show you how is simple, in the most […]
Kemp LoadMaster allows integration with Active Directory to use domain users for authentication. One of the most advantage enforce the password policies, like length and expire time. To enable you must use the bal user. First of all enable the Enable Session Management from WUI Settings, as showed in figure 1. Figure 1 […]