Introduction Debian 9 Stretch is built around the ethos of stability and free software. Setting up mount nfs shares at boot on debian 9 on Stretch leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Stretch freeze. Follow each step carefully […]
How to Harden Active Directory Against Pass-the-Hash on Windows Server 2012 R2 Pass-the-Hash (PtH) is an attack technique in which an adversary captures an NTLM credential hash from one system and uses it to authenticate to other systems without knowing the actual password. Because NTLM hashes are reusable, a single compromised credential can lead to […]
🟠 High ⏱ 5–30 min Last verified: 27 January 2021 Affected versions: Windows Server 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟠 High ⏱ 5–30 min Last verified: 25 January 2021 Affected versions: Windows Server 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟡 Medium ⏱ 5–30 min Last verified: 22 January 2021 Affected versions: Windows Server 2016 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
How to Configure NTLM Authentication on Windows Server 2012 R2 NT LAN Manager (NTLM) is a challenge-response authentication protocol that predates Kerberos in Windows environments. While Kerberos is the preferred protocol for domain authentication, NTLM remains in use for several scenarios: authentication to servers by IP address rather than FQDN, workgroup authentication, legacy applications, and […]
🟡 Medium ⏱ 5–30 min Last verified: 21 January 2021 Affected versions: Windows Server 2016 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
Introduction Deploying perform a cis benchmark audit on debian 9 on a Debian 9 Stretch machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Ensure […]
How to Configure Cross-Forest Trusts in Active Directory on Windows Server 2012 R2 Cross-forest trusts enable users in one Active Directory forest to access resources in another forest, enabling collaboration between organizations, supporting merger and acquisition scenarios, and allowing resource sharing between separate business units with independent IT governance. Windows Server 2012 R2 supports several […]
How to Set Up DirectAccess for Always-On VPN on Windows Server 2012 R2 DirectAccess is Microsoft’s always-on connectivity technology for domain-joined Windows clients. Unlike traditional VPN that requires a user to manually connect, DirectAccess automatically establishes a secure IPv6-over-IPv4 tunnel whenever the client computer detects it is outside the corporate network — before the user […]
