I’ve experienced that many people deliberately disable the Windows firewall. They don’t want to get annoyed with it, if something don’t work as expected. But there’s nothing to worry about, because it […]
PowerShell: Configuring Windows Firewall
Firewalls control traffic. They use technology such as Stateful Inspection to establish a connection to other networks. In this article I describe how to configure the host-based Windows Firewall by using Windows […]
Cyber Security: Installing Microsoft Advanced Threat Analytics (ATA) version 1.8
Microsoft Advanced Threat Analytics (ATA) is a platform that enables you to protect your infrastructure from cyber attacks. ATA is using a parsing engine to capture network traffic of protocols such as […]
PowerShell: Notify me when someone is added to the Administrator Group
Will you be notified when there are changes to group memberships? No? Memberships in groups are particularly interesting. Especially if it is the group of the domain administrators. The following article shows […]
Active Directory Flexible Single-Master (FSMO) in Action
What if a domain controller fails? Operations Masters have special tasks which must be performed by Domain Controllers in an Active Directory domain. If a Domain Controller fails, this special role must […]
Display only Folders that a User has Access: Configuring Access Based Enumeration on Windows Server 2012/2016
Access based enumeration enables you to configure advanced display options for shared folders. If a user is mapped to a network drive and this network drive has the Access Based Enumeration Feature […]
The new netstat: Playing with Get-NetTCPConnection
For some reason, I don’t like netstat. Never did. Fortunately PowerShell provides a similar command to netstat: Get-NetTCPConnection. Let’s discover the options of this command in form of this blog post.
Active Directory: Force replication of all Domain Controllers on all Sites at once
Active Directory Domain Services uses pull replication to replicate Active Directory Partitions. This means that the Domain Controller on which replication is started receives the data from the source Domain Controller. It’s like a […]
Learning PowerShell with Active Directory Administrative Center (PowerShell History Viewer)
For managing Active Directory Domain Services, still most of the administrators use Active Directory Users and Computers (dsa.msc). They are used to it. But it´s worth taking a look at the Active […]
Active Directory: Send Messages to all currently logged on Users (msg.exe)
Do you remember the net send command? And do you remember the security concerns? Last week I played with msg.exe. Msg is the “new” net send. I tried to send a message […]
PowerShell: Adding Active Directory Users from Text Files (Bulk)
When it comes to importing huge numbers of users, csv is No. 1. But what about text files? Sure, you can export content of text files to csv. But in this article, […]
Windows Server 2016: Configuring Time based Group Membership with PowerShell
With Windows Server 2016 there is a new Feature called Privileged Access Management Feature. This feature is only available in Active Directory Environments running Windows Server 2016 Forest Mode. This guide shows […]
Demoting the last Active Directory Domain Controller with PowerShell
Today I’ve made a decision. Weeks ago, I have changed the default language of the operating system of my Domain Controller from German to English. It worked great. But now, I found […]
PowerShell: Configuring Fine Grained Password Policies (PSO)
Since Windows Server 2008, Domain Administrators are able to configure password polices per user and per group. This article shows how to set up password policies (Password Setting Objects) with PowerShell.
PowerShell: Enable Remote Desktop on multiple Servers remotely (Bulk)
In this article I show how to activate Remote Desktop on multiple server systems in an active directory environment by using Windows PowerShell. In large environments, it might be necessary to enable […]



