GPO: force updates from the console

Since Windows 2012, it is possible to force the update of group policies from the Group Policy Management console. It is no longer necessary to go through all the computers and do a gpudapte. To work, the firewall must allow RPC calls to pass. Force update of GPOs remotely 1. Open the Group Policy Management …

Read more



DFS: delete a namespace on Windows Server

In this tutorial, I will explain how to delete a DFS namespace on Windows Server. In the vast majority of cases, you won’t normally need this tutorial ­čśë Although this operation is relatively simple to perform using the graphical interface, it sometimes happens that it does not go as planned, especially if you have planned …

Read more



DNS: delete a record on Windows Server

In this “How To” tutorial, I will explain how to delete a DNS record on Windows Server with the DNS Manager console. Delete a DNS record Open the DNS Manager console On a server where the DNS Manager console is installed, open it and go to the zone where you want to delete the record. …

Read more



Active Directory: change the KrbTgt account password

In this tutorial, I will explain how to change the password of the KrbTgt account. Before explaining how to change the password of this account, I will give you some explanations. Who is krbtgt? The krbtgt account is a disabled service account in the Active Directory, which is used for the distribution of Kerberos Tickets, …

Read more



Active Directory: Secure Domain Join to Domain Admins

In this tutorial, we will address a security point on an Active Directory environment, which is the domain joining of computers. What you need to know (some administrators don’t know this), all domain users can join a computer to a domain, they can even join up to 10 computers. Domain administrators have no limit as …

Read more



GPO: force DNS computer registration

In this tutorial, I will explain how to force DNS registration of computers by Group Policy (GPO) in an Active Directory environment. Maintaining a clean, up-to-date DNS (Active Directory) zone is not easy, especially with dynamic computer registration. The first step is the activation of automatic cleaning, but it happens that once this is activated, …

Read more



GPO: block programs and prevent software installation – software restriction

In this tutorial, I will explain how by Group Policy (GPO) in an Active Directory environment, block the launch of programs and prevent the installation of certain software with the software restriction policy. By default, if the users are not administrator (local) of the computer, it is not normally possible to install programs, on the …

Read more



Active Directory: harden the security of your environment

In this tutorial dedicated to Active Directory and security, I will give you some tips to harden the level of security in order to be less vulnerable to attacks. The different configuration points, which will be discussed, simply allow attacks to be made more difficult and longer internally, in no way will they guarantee that …

Read more



GPO: disabled SMBv1

In this tutorial, I will walk you through how to disable SMBv1 support add-on using Group Policy. To disable full SMBv1 support, you must act on the two SMB components which are: The server who is the one who shares The client that allows the use of shared resources. Disabling by group policy is done …

Read more