Browse by Tags

• daniel.nerenberg
• Deployment
• Directory Services
• DNS
• Exchange Server
• File and Print Services
• Group Policy
• Guest Authors
• IIS
• Interoperability
• ISA Server
• Network
• rodney.buike
• Virtualization
• Windows Client
• Windows Server
• Windows Springboard

• Windows 7 App Locker

  Window 7 RC has been out for a few weeks now the TLA team has been busy learning and testing all the great new features. Your tip for today is on Windows 7 App Locker. Many of you know about Software Restriction Policies. They allow you to block the execution Read More... Posted Thursday, May 21, 2009 8:31 AM by daniel.nerenberg | 0 Comments Filed under: Group Policy, Security, Windows Client, Windows Springboard, daniel.nerenberg, Deployment

• Windows 7 Password Vault

  Oh boy is this a feature designed for lazy admins. When I’m not writing and keeping the site up to date I’m usually onsite working for clients. Often I’m required to have multiple emails accounts active when working with various partners. Now this isn’t Read More... Posted Monday, March 09, 2009 8:31 PM by daniel.nerenberg | 1 Comments Filed under: Security, Windows Client, Windows Springboard, daniel.nerenberg

• Critical Out Of Band Hotfix for IE Released

  Typically hotfixes are released on the second Tuesday of each month as you are all well aware. Occasionally, I can personally only remember four including this one and the one this past October, there are out of band hotfixes released. While we don’t Read More... Posted Wednesday, December 17, 2008 9:04 PM by rodney.buike | 0 Comments Filed under: Security, rodney.buike

• IIS 7 FTP over SSL

  One of the new and long awaited features in IIS 7 is support for FTPS or FTP over SSL. By default all FTP data is transfered in clear text, including the user name and password. From a security point of view you can see this is a bad thing. FTPS to the Read More... Posted Monday, October 27, 2008 9:10 AM by rodney.buike | 2 Comments Filed under: IIS, Security, Windows Server, rodney.buike

• Critical Out Of Band Hotfix Released

  Typically hotfixes are released on the second Tuesday of each month as you are all well aware. Occasionally, I can personally only remember three including this one, there are out of band hotfixes released. While we don’t normally post hotfix release Read More... Posted Thursday, October 23, 2008 8:46 PM by rodney.buike | 0 Comments Filed under: Security, Windows Server, Windows Client, rodney.buike

• Is Your DNS Patched?

  In case you have been living under a rock for the past month you have most likely heard about the DNS cache exploit recently discovered by Dan Kaminsky . This might be one of the most severe flaws discovered as it was cross platform affecting everything Read More... Posted Friday, July 25, 2008 12:27 PM by rodney.buike | 0 Comments Filed under: DNS, Security, rodney.buike

• Recovering BitLocker keys from the Active Directory

  Here at the LazyAdmin we have talked quite a bit about using BitLocker with Windows Vista . With the introduction of Server 2008 you can now also leverage Bitlocker with your 2008 servers. This is particularly attractive when deploying Read Only Domain Read More... Posted Wednesday, July 23, 2008 9:07 AM by daniel.nerenberg | 1 Comments Filed under: Directory Services, Security, Windows Server, daniel.nerenberg

• Extending your AD schema for Vista and Windows 2008

  We have talked about enabling BitLocker Active Directory integration in a previous post now we will take a look at prepping your domain to implement this integration. To take advantage of the several of the more compelling feature such as RODCs and Windows Read More... Posted Monday, July 21, 2008 9:25 AM by daniel.nerenberg | 0 Comments Filed under: Directory Services, Security, Windows Server, daniel.nerenberg

• Videocast - Securing Cached Credentials

  One of the nice things with RODCs is the ability to control cached credentials. You can also pre-populate passwords for specific users, like a branch office user, in case the branch office connection goes down but this can be a security concern if that Read More... Posted Monday, June 23, 2008 8:59 AM by rodney.buike | 0 Comments Filed under: Directory Services, Security, Windows Server, rodney.buike

• Videocast - Testing DHCP Based NAP

  The other day I posted the first half of this video with the server side setup of NAP. This video will cover the client side setup and testing on both Windows Vista and Windows XP SP3. Note: Double-click on the video to go full screen. If you want to Read More... Posted Friday, June 13, 2008 9:18 AM by rodney.buike | 0 Comments Filed under: Network, Security, Windows Server, Windows Client, rodney.buike

• Videocast - Configuring DHCP Based NAP

  Server 2008 is out and one of the very cool features is NAP or Network Access Protection. This feature allow you to protect the internal network from threats. There is a nice entry on Wikipedia explaining NAP but the TLA way is to show you the quick steps Read More... Posted Tuesday, June 10, 2008 12:59 PM by rodney.buike | 0 Comments Filed under: Network, Security, Windows Server, rodney.buike

• Configuring the Vista NAP Client

  The other day I posted a tip on how to enable the Network Access Protection client on XP SP3 .  The client is also built into Vista (RTM and SP1) and is a little easier to configure.  Although the same command line from the XP SP3 config can Read More... Posted Thursday, February 21, 2008 11:32 PM by rodney.buike | 0 Comments Filed under: Security, Windows Client

• Configuring the NAP Client in XP SP3

  With the recent launch of Windows Server 2008 you are no doubt spending all your free time playing around with everything new. One thing you might be playing around with is Network Access Protection. There is a great document on getting a DHCP based NAP Read More... Posted Monday, February 11, 2008 9:52 AM by rodney.buike | 2 Comments Filed under: Security, Windows Server, Windows Client

• Encrypting Additional Drives with BitLocker

  As you may know, BitLocker Drive Encryption only encrypts the C:\ drive. If you have additional drives in your PC, or use an external USB hard drive with your notebook, you can't encrypt that drive with BDE. Officially that is :) While Vista SP1 will Read More... Posted Monday, September 24, 2007 8:32 AM by rodney.buike | 1 Comments Filed under: Security, Windows Client

• Encrypt Drive with BitLocker

  We've done a few post on BitLocker around some of the more advanced features and controls. The one thing we haven't touched yet is just how easy it is to encrypt your drive with BitLocker. Before we get started on the procedure a little review of the Read More... Posted Saturday, September 22, 2007 12:09 PM by rodney.buike | 2 Comments Filed under: Security, Windows Client

• Manage BitLocker Via The CLI

  We have gone over the GPO settings for BitLocker recently and now we are going to cover the actual configuration of BitLocker on the computer itself. There are two ways, the GUI way, or the CLI way. Today we will focus on the CLI method. There is one Read More... Posted Monday, August 27, 2007 5:10 PM by rodney.buike | 1 Comments Filed under: Security, Windows Client

• BitLocker GPO settings

  We posted an article earlier about configuration settings in BitLocker. We covered most of the tabs from the GPO configuration settings. If you investigated the BitLocker Administrative Template you may noticed a final configuration you can adjust. This Read More... Posted Tuesday, May 15, 2007 3:22 PM by daniel.nerenberg | 3 Comments Filed under: Security, Windows Client

• More Windows CA for Apache

  TLA reader Drew Dressler saw the instructions posted on this site on using a Windows CA to generate and SSL certificate for an Apache webserver. He has another method he wanted to share that he uses to do the same thing. These instructions assume you Read More... Posted Monday, April 30, 2007 8:18 AM by rodney.buike | 0 Comments Filed under: Security, Interoperability

• File System Virtualization

  One of the security features within Windows Vista that is not evident is file system virtualization. This type of virtualization allows an application a silo'd virtual store where it can read and write to without compromising the system. Let's say you Read More... Posted Thursday, April 26, 2007 7:37 AM by rodney.buike | 3 Comments Filed under: Security, Windows Client

• Wipe Your WM5 Device in OWA

  So you are out late, had a few pints, get home and the next day you realize you lost your Windows Mobile 5 device. Well you can call your mobile carrier and have them freeze the account but that won't get rid of your contacts, email messages and other Read More... Posted Monday, April 23, 2007 7:01 AM by rodney.buike | 1 Comments Filed under: Exchange Server, Security