This is going to be probably one of the, if not the most, driest blog posts I’ve written. But I’m a huge fan of CIS benchmarks and controls – and these 20 controls are a great starting point in terms of compliance and general hardening of your organizations security. Update: I made a new post regarding…
Not too long ago, when a new device got dropped off at IT, we’d have to go through the manual process of setting it up for the user – sometimes this was sped up by using images. Depending on your organizations workflow and what needed to be install, it would sometimes take a while before…
Credential Guard is a component of Microsoft’s Virtualization-based Security Suite (VBS). With the help of the hypervisor, it protects the hashes of the credentials cached in RAM from attackers. And it is super simple to enable using Intune or Group Policy! So how does Credential Guard work? After successfully logging on to Active Directory, Windows…
A few months ago, I found myself setting up an on-prem server rack with one of my “Off-The-Shelf” standard solutions. Pretty easy job but what took the longest was the massive amount of documentation the client asked me to write up for compliance purposes. Step. By. Step. Kids; you wouldn’t believe how much of my…
OK. Let me admit something. I did a write-up for some internal documentation at VENZO… and I copy/pasted quite a bit of this section pretty much all of it from How to enable WinRM with domain controller Group Policy for WMI monitoring – Auvik Support so kudos to the original author! But to be honest; it’s been…
Today we’re going to be looking at Network address translation (NAT) networking in Hyver-V. This should particularly useful if you’re coming from my quick ‘n dirty homelab guides about setting up and Doman Joining the brand new Windows 10 and Windows Server VMs you set up Hyper-V! Let’s get going! So, what’s NAT? A public IP address is required to access…
And Hey! You! Yes, you! Do you remember when I wrote a post about How to Install Windows as a Hyper-V Virtual Machine? Of course you do! And as useful as having Virtual Machines (VM) on your box is! There are other ways to use VMs. Like Azure! Azure VMs is that you don’t have to worry about…
Azure Storage Account. Pretty cool name. So what are they? Why do you want them? How do you make them? And how do you use them? I’m glad you asked! Just jump past the weird Dall·E generated image of “a guy in a storage room with a lot of boxes looking confused“. Confused, Dall·E. I wanted…
As helpful as wizards like Intune Security Baselines are useful for greenfields and inexperienced admins, those needing a little umph in their setups (especially those admins used to on-premise GroupPolicy Administrative Templates) found Intune’s offerings lacking – forced to use CSP policies and custom OMA-URIs like in the example above. The settings catalogue aims…
Security baselines are intended to make it easier to configure security-related settings in Windows or Edge. They are available from Microsoft as Group Policy packages, or they can be configured through the interfaces for mobile device management such as Intune. In my opinion, they are mainly intended for clients who have limited experience with Intune and/or security, i.e.,…