Active Directory

Common Problems 113578

Windows Server 2012 R2 — Dual-scan behaviour causes clients to bypass WSUS for feature updates — Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 20 September 2019 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]

Read more
Common Problems 113124

Windows Server 2016 — dsregcmd shows hybrid Azure AD join failure on Windows clients — Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 20 September 2019 Affected versions: Windows Server 2016 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Common Problems 113487

Windows Server 2012 R2 — MSIX package install blocked by AppLocker or GPO publisher policy — Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 19 September 2019 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]

Read more
How to Configure System Center Orchestrator on Windows Server 2016 — step-by-step Windows Server 2016 tutorial on Progressive Robot

How to Configure System Center Orchestrator on Windows Server 2016

How to Configure Windows Server 2016 Orchestrator System Center Orchestrator is the runbook automation engine in the Microsoft System Center suite. Orchestrator allows IT teams to create visual workflows called runbooks that automate repetitive IT processes such as provisioning virtual machines, responding to SCOM alerts, processing service requests from SCSM, rotating logs, onboarding new users, […]

Read more
Common Problems 113064

Windows Server 2016 — AD Recycle Bin recovery needed to restore accidentally deleted user object — Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 18 September 2019 Affected versions: Windows Server 2016 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
How to Set Up Privileged Access Workstations on Windows Server 2012 R2 — step-by-step Windows Server 2012 R2 tutorial on Progressive Robot

How to Set Up Privileged Access Workstations on Windows Server 2012 R2

How to Set Up Privileged Access Workstations on Windows Server 2012 R2 Privileged Access Workstations (PAWs) are dedicated, hardened workstations used exclusively for administrative tasks, isolating high-privilege credentials from the threats present on general-purpose workstations used for email, web browsing, and productivity applications. The PAW model is a critical defense against credential theft attacks, where […]

Read more
How to Configure QoS Policies on Windows Server 2016 — step-by-step Windows Server 2016 tutorial on Progressive Robot

How to Configure QoS Policies on Windows Server 2016

How to Set Up Windows Server 2016 QoS Policies Quality of Service (QoS) policies in Windows Server 2016 allow administrators to prioritize network traffic based on application, protocol, port, or IP address. By assigning different traffic classes specific bandwidth allocations and priorities, QoS prevents low-priority traffic from consuming bandwidth at the expense of business-critical applications. […]

Read more
How to Set Up a PKI Infrastructure with AD CS on Windows Server 2019 — step-by-step Windows Server 2019 tutorial on Progressive Robot

How to Set Up a PKI Infrastructure with AD CS on Windows Server 2019

Introduction to Active Directory Certificate Services A Public Key Infrastructure (PKI) built on Active Directory Certificate Services (AD CS) on Windows Server 2019 provides the foundation for internal certificate management: TLS/SSL certificates for web servers and services, smart card authentication, encrypted email (S/MIME), code signing, and encrypted file systems (EFS). A proper enterprise PKI uses […]

Read more
How to Configure Certificate Auto-Enrollment via Group Policy on Windows Server 2012 R2 — step-by-step Windows Server 2012 R2 tutorial on Progressive Robot

How to Configure Certificate Auto-Enrollment via Group Policy on Windows Server 2012 R2

How to Configure Certificate Auto-Enrollment via Group Policy on Windows Server 2012 R2 Certificate auto-enrollment allows domain computers and users to automatically request, receive, and renew digital certificates from an Enterprise CA without any manual intervention. This eliminates the administrative burden of manually issuing certificates to hundreds or thousands of devices and users, ensures certificates […]

Read more
CHAT