Active Directory

How to Set Up DNSSEC on Windows Server 2022 — step-by-step Windows Server 2022 tutorial on Progressive Robot

How to Set Up DNSSEC on Windows Server 2022

How to Configure SQL Server Authentication and Logins on Windows Server 2022 Securing access to SQL Server starts with understanding its authentication models and then carefully configuring logins, server roles, database users, and permissions. SQL Server 2022 on Windows Server 2022 supports two authentication modes, a rich role-based access control system, and built-in auditing capabilities. […]

Read more
How to Set Up Attack Surface Reduction Rules on Windows Server 2022 — step-by-step Windows Server 2022 tutorial on Progressive Robot

How to Set Up Attack Surface Reduction Rules on Windows Server 2022

Introduction to Folder Redirection and Roaming Profiles In a domain environment, users may log on from different computers. Without profile management, their Desktop files, Documents, and application settings exist only on the computer they last used. Folder Redirection and Roaming Profiles are two complementary Group Policy technologies that solve this problem by storing user data […]

Read more
How to Configure Exploit Protection on Windows Server 2022 — step-by-step Windows Server 2022 tutorial on Progressive Robot

How to Configure Exploit Protection on Windows Server 2022

Overview of Windows Server 2022 Print Services A Windows Server print server centralizes printer management, driver distribution, and print queue administration for an organization. Instead of installing printer drivers on every individual workstation, you deploy them once on the server and Windows automatically distributes them to clients when they connect. Windows Server 2022 includes the […]

Read more
How to Set Up Windows Defender Application Control on Windows Server 2022 — step-by-step Windows Server 2022 tutorial on Progressive Robot

How to Set Up Windows Defender Application Control on Windows Server 2022

Software Deployment via Group Policy Overview Group Policy Software Installation (GPSI) is a built-in Windows Server feature that lets administrators deploy software to computers or users across the domain without requiring a third-party tool. It relies on Windows Installer (.msi) packages and can install, update, or remove software based on Group Policy application. While it […]

Read more
How to Configure AppLocker on Windows Server 2022 — step-by-step Windows Server 2022 tutorial on Progressive Robot

How to Configure AppLocker on Windows Server 2022

Understanding Active Directory Replication Active Directory replication is the mechanism by which changes made on one domain controller (DC) are propagated to all other domain controllers in the domain and forest. Every object and attribute in AD has an associated Update Sequence Number (USN) and originating write metadata. When you create a user, modify a […]

Read more
How to Set Up Device Guard on Windows Server 2022 — step-by-step Windows Server 2022 tutorial on Progressive Robot

How to Set Up Device Guard on Windows Server 2022

Introduction to DNS Forwarders on Windows Server 2022 When a DNS server receives a query for a domain it is not authoritative for, it has two options: recurse using root hints, or forward the query to another DNS server. DNS forwarders let you specify exactly which upstream DNS servers your Windows Server 2022 DNS resolver […]

Read more
How to Configure Credential Guard on Windows Server 2022 — step-by-step Windows Server 2022 tutorial on Progressive Robot

How to Configure Credential Guard on Windows Server 2022

Why Audit Active Directory Changes Active Directory is the central trust authority for most Windows enterprise environments. Every privilege escalation, account takeover, lateral movement attempt, and persistence mechanism an attacker deploys will leave footprints in AD — if auditing is configured correctly. Without comprehensive AD change auditing, security teams are blind to account creation, group […]

Read more
How to Set Up NTLM Security on Windows Server 2022 — step-by-step Windows Server 2022 tutorial on Progressive Robot

How to Set Up NTLM Security on Windows Server 2022

Why LDAPS Instead of Plain LDAP By default, LDAP communications between clients and domain controllers on Windows Server 2022 travel over port 389 in plaintext. Every credential bind, directory query, and object modification is transmitted without encryption, making it trivial for any attacker with network access to capture password hashes, read sensitive directory attributes, or […]

Read more
How to Configure Kerberos Authentication on Windows Server 2022 — step-by-step Windows Server 2022 tutorial on Progressive Robot

How to Configure Kerberos Authentication on Windows Server 2022

AD LDS vs AD DS: Understanding the Difference Active Directory Lightweight Directory Services (AD LDS) is a standalone LDAP directory service that runs on Windows Server 2022 without requiring the full Active Directory Domain Services (AD DS) infrastructure. While AD DS is the enterprise-wide identity store that controls domain logon, Group Policy, and Kerberos authentication, […]

Read more
How to Set Up Multi-Factor Authentication on Windows Server 2022 — step-by-step Windows Server 2022 tutorial on Progressive Robot

How to Set Up Multi-Factor Authentication on Windows Server 2022

What Is a Read-Only Domain Controller and When to Use It A Read-Only Domain Controller (RODC) is a special type of Active Directory domain controller introduced in Windows Server 2008 that holds a read-only, non-writable copy of the AD database. RODCs were designed primarily for deployment in branch offices, remote sites, and locations where physical […]

Read more
CHAT