🟠 High ⏱ 5–30 min Last verified: 23 March 2021 Affected versions: Windows Server 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
How to Configure Windows Server 2019 Software Load Balancer Software Load Balancer (SLB) is a component of the Windows Server 2019 Software Defined Networking (SDN) stack that provides inbound and outbound network traffic load balancing and Network Address Translation (NAT). SLB operates at Layer 4 (TCP/UDP) and distributes connections across backend server pools using ECMP […]
🟠 High ⏱ 5–30 min Last verified: 22 March 2021 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]
How to Configure High Availability for DHCP with DHCP Failover on Windows Server 2016 DHCP (Dynamic Host Configuration Protocol) is a critical network service — when it fails, new devices cannot obtain IP addresses and existing leases eventually expire, causing network outages. Windows Server 2016 includes DHCP Failover, a feature that allows two DHCP servers […]
What Is Just Enough Administration (JEA)? Just Enough Administration (JEA) is a PowerShell security technology built into Windows Server 2019 that allows administrators to delegate specific administrative tasks without granting full administrative privileges. With JEA, a help desk operator can restart a service or reset a password through a constrained PowerShell endpoint that exposes only […]
Introduction Automating Windows Server 2016 provisioning with PowerShell and Terraform enables fully repeatable, infrastructure-as-code server deployments. PowerShell handles operating system configuration, role installation, and application setup. Terraform manages the underlying infrastructure layer — creating virtual machines on Hyper-V, Azure, or VMware — and passes configuration data to PowerShell via user data scripts or provisioners. Together […]
Introduction The Active Directory Tiered Administration Model on Windows Server 2016 divides admin privileges into Tier 0 (AD/DC infrastructure), Tier 1 (member servers), and Tier 2 (workstations). Keeping admin credentials separate at each tier prevents a compromised helpdesk account from pivoting to domain admin, drastically reducing breach impact. Creating the Tier OU Structure Build an […]
How to Set Up Windows Server 2016 Credential Guard Credential Guard is a Windows Server 2016 virtualization-based security (VBS) feature that protects Windows credential hashes and Kerberos tickets from theft. It uses hardware virtualization to isolate the Local Security Authority Subsystem Service (LSASS) process in a separate, secure execution environment called the Secure Kernel, making […]
🟡 Medium ⏱ 5–30 min Last verified: 17 March 2021 Affected versions: Windows Server 2019 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
How to Manage Users and Computers in Active Directory on Windows Server 2012 R2 Active Directory Domain Services (AD DS) is the backbone of identity management in Windows enterprise environments. Managing user accounts and computer objects is among the most frequent tasks performed by domain administrators. On Windows Server 2012 R2, you have a rich […]
