Active Directory

Common Problems 112482

Windows Server 2019 – SmartScreen blocking unsigned internal installers – Fix & Prevention

🟢 Low   ⏱ 5–30 min  Last verified: 3 April 2021 Affected versions: Windows Server 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Common Problems 113022

Windows Server 2016 — IPsec site-to-site tunnel renegotiation fails after certificate renewal on RRAS — Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 24 March 2021 Affected versions: Windows Server 2016 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
How to Set Up Event Log Forwarding on Windows Server 2016 — step-by-step Windows Server 2016 tutorial on Progressive Robot

How to Set Up Event Log Forwarding on Windows Server 2016

How to Set Up Windows Server 2016 Event Log Forwarding Windows Event Log Forwarding (WEF) allows you to collect event logs from multiple Windows computers and consolidate them on a central collector server. This is critical for centralized security monitoring, compliance, and SIEM integration without deploying agent software. WEF uses the Windows Remote Management (WinRM) […]

Read more
How to Configure DHCP Failover on Windows Server 2016 — step-by-step Windows Server 2016 tutorial on Progressive Robot

How to Configure DHCP Failover on Windows Server 2016

How to Configure High Availability for DHCP with DHCP Failover on Windows Server 2016 DHCP (Dynamic Host Configuration Protocol) is a critical network service — when it fails, new devices cannot obtain IP addresses and existing leases eventually expire, causing network outages. Windows Server 2016 includes DHCP Failover, a feature that allows two DHCP servers […]

Read more
How to Configure PowerShell Just Enough Administration (JEA) on Windows Server 2019 — step-by-step Windows Server 2019 tutorial on Progressive Robot

How to Configure PowerShell Just Enough Administration (JEA) on Windows Server 2019

What Is Just Enough Administration (JEA)? Just Enough Administration (JEA) is a PowerShell security technology built into Windows Server 2019 that allows administrators to delegate specific administrative tasks without granting full administrative privileges. With JEA, a help desk operator can restart a service or reset a password through a constrained PowerShell endpoint that exposes only […]

Read more
How to Set Up Active Directory Tiered Administration on Windows Server 2016 — step-by-step Windows Server 2016 tutorial on Progressive Robot

How to Set Up Active Directory Tiered Administration on Windows Server 2016

Introduction The Active Directory Tiered Administration Model on Windows Server 2016 divides admin privileges into Tier 0 (AD/DC infrastructure), Tier 1 (member servers), and Tier 2 (workstations). Keeping admin credentials separate at each tier prevents a compromised helpdesk account from pivoting to domain admin, drastically reducing breach impact. Creating the Tier OU Structure Build an […]

Read more
How to Enable Credential Guard on Windows Server 2016 — step-by-step Windows Server 2016 tutorial on Progressive Robot

How to Enable Credential Guard on Windows Server 2016

How to Set Up Windows Server 2016 Credential Guard Credential Guard is a Windows Server 2016 virtualization-based security (VBS) feature that protects Windows credential hashes and Kerberos tickets from theft. It uses hardware virtualization to isolate the Local Security Authority Subsystem Service (LSASS) process in a separate, secure execution environment called the Secure Kernel, making […]

Read more
Common Problems 112533

Windows Server 2019 — Asymmetric routing through multi-homed NICs triggers firewall state drops — Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 17 March 2021 Affected versions: Windows Server 2019 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Common Problems 113415

Windows Server 2012 R2 — Split-brain DNS returns incorrect internal host records for hybrid workloads — Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 14 March 2021 Affected versions: Windows Server 2012 R2 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]

Read more
CHAT