By Jan De Clercq, 05/25/2012
To use IPSec through your firewalls, here are the ports to open and what they're used for.
By Jan De Clercq, 05/23/2012
The krbtgt Active Directory account is a special account used with the Kerberos protocol for user authentication.
By Jan De Clercq, 05/22/2012
Windows 8 will include enhancements to BitLocker Drive Encryption, potentially speeding and extending the feature's data-protection capabilities. Learn about these changes and how ...
By Jan De Clercq, 04/11/2012
Windows security policy settings refresh every 16 hours by default but you can change that interval with a registry hack.
By Jan De Clercq, 04/04/2012
Software Restriction Policy (SRP) rules generate events in the Windows application event log, but you can get more detail by enabling verbose trace logging.
By Jan De Clercq, 03/28/2012
Active Directory doesn't support different password policies on different organizational units (OUs), but you can use shadow groups as a workaround.
By Jan De Clercq, 03/22/2012
BitLocker is a valuable add-on to the Windows OS. MBAM can ease BitLocker deployment and management, making BitLocker even more useful.
By Jan De Clercq, 03/22/2012
A corrupt security database on Windows 7 clients can prevent GPO security settings from being applied, but you can use esentutl.exe to fix the problem.
By Jan De Clercq, 02/29/2012
The most reliable tool to retrieve the effective audit policy from a Windows machine is the auditpol.exe command-line tool.
By Jan De Clercq, 02/29/2012
Setting up auditing in Windows is always a two step process: You configure what to audit, then you configure the audit policy.
By Jan De Clercq, 02/28/2012
To ensure a Windows account is assigned only a single Certification Authority (CA) management role, you must use certutil to enable role separation on your Windows CA.
By Jan De Clercq, 02/27/2012
Microsoft software supports 4 public key infrastructure (PKI) management roles, which you can implement through the Microsoft Management Console.
By Jan De Clercq, 01/31/2012
With Windows Server 2008, Windows Vista, and later, you can store EFS private keys on users' smart cards and control these settings with Group Policy.
By Jan De Clercq, 01/30/2012
You can control specific network connections through the Microsoft Management Console (MMC) Windows Firewall with Advanced Security snap-in.
By Jan De Clercq, 01/29/2012
You can remove the administrative shares on Windows servers and prevent them from being created automatically, although Microsoft doesn't recommend it.
By Jan De Clercq, 01/27/2012
These new Group Policy settings can help you audit, analyze, and restrict NTLM authentication use in your Windows environment.
By Jan De Clercq, 12/28/2011
Use the Eventcreate utility and other command-line resources to verify that Windows event forwarding and collection is configured correction.
By Jan De Clercq, 12/23/2011
Limit Windows event collection and forwarding processing impact by turning off pre-rendering of events on source computers and by setting the max number of events sent from a ...
By Jan De Clercq, 12/21/2011
Windows event forwarding and collection was introduced with the Windows Eventing 6.0 code in Windows Vista and Windows Server 2008, but other Windows OSs can serve as event ...
By Jan De Clercq, 12/12/2011
LDAPS—or LDAP over SSL—establishes an encrypted tunnel between an LDAP client and a Windows domain controller. Learn how to set up LDAPS in a Windows Server 2008 Active Directory ...