Category Archives: Active Directory
Active Directory
Azure AD Connect version 1.3.21.0 fixes an elevation of privilege vulnerability (CVE-2019-1000)
Written on May 16, 2019 at 11:53 AM, by Sander Berkouwer
Hot on the heels of Azure AD Connect version 1.3.20.0, Microsoft released version 1.3.21.0 earlier this week to address an elevation of privilege vulnerability. Azure AD Connect is Microsoft’s free Hybrid Identity bridge product to synchronize objects and their attributes from on-premises Active Directory Domain Services (AD DS) environments and LDAP v3-compatible directories to Azure […]
Get your copy of the Active Directory Administration Cookbook today
Written on May 6, 2019 at 10:14 AM, by Sander Berkouwer
The new Active Directory Administration Cookbook is now available. [Packt] [Amazon] [Tomlinsons] [Fnac] [Lehmanns] [ManagementBoek] For the last seven months, I worked with Packt Publishing to write the fourteen chapters in this 620-page book, containing all the essential howtos and their gotchas for managing both on-premises Active Directory and Azure AD. It has been an […]
Azure AD Connect v1.3.20.0 offers the next level of identity synchronization
Written on May 1, 2019 at 6:34 PM, by Sander Berkouwer
Last week, Microsoft released the long impending release of Azure AD Connect version 1.3.20.0 on the Azure AD Connect Version Release History page. Azure AD Connect is Microsoft’s free Hybrid Identity bridge product to synchronize objects and their attributes from on-premises Active Directory Domain Services (AD DS) environments and LDAP v3-compatible directories to Azure Active […]
I’m presenting my Active Directory 101 course with Netwrix again
Written on April 11, 2019 at 6:57 PM, by Sander Berkouwer
Whether you are an Active Directory novice or an experienced IT professional, enroll in my upcoming free online course for step-by-step instructions and industry best practices for Active Directory management. These sessions are also a great way to get ready for Exam 70-742. Note: These webinars cover only 3 out of 5 topics for Microsoft […]
Knowledgebase: In-place Upgrading Domain Controllers to Windows Server 2019 while still using NTFRS breaks SYSVOL Replication and DSLocator
Written on April 10, 2019 at 1:29 PM, by Sander Berkouwer
In a domain that is configured to use the File Replication Service, the SYSVOL folder is not shared after you in-place upgrade a Windows Server 2019-based Domain Controller from an earlier version of Windows. Until this directory is shared, Domain Controllers do not respond to DCLOCATOR requests for LDAP, Kerberos, and other Domain Controller workloads. […]
Ten things you need to know about Pass-through Authentication
Written on February 28, 2019 at 4:27 PM, by Sander Berkouwer
For Azure AD, Microsoft offers and recommends to use Pass-through Authentication (PTA) as the authentication method. This method is then used to authenticate to applications, services and systems connected to Azure AD, like Office 365, Intune and Power BI. However, there are a couple of things you should know: Only outbound connections When using […]
Windows Server 2019’s February 2019 Quality Update fixes two authentication issues
Written on February 22, 2019 at 3:55 PM, by Sander Berkouwer
Windows Server 2019’s February 2019 Cumulative Quality Update, bringing the OS version to 17763316 , offers a fix for two authentication issues. About Windows Server 2019 Updates Microsoft issues two major updates each month for Windows Server 2019, as outlined in the Patching with Windows Server 2016 blogpost. On the second Tuesday of each […]
KnowledgeBase: The Windows Server 2019 Active Directory DFL and FFL do not exist
Written on January 4, 2019 at 1:54 PM, by Sander Berkouwer
There is no Windows Server 2019 Forest Functional Level (FFL) or Windows Server 2019 Domain Functional Level (DFL) in Microsoft Windows Server’s Active Directory Domain Services (AD DS). Impact The unavailability of the Windows Server 2019 Forest Functional Level (FFL) and Windows Server 2019 Domain Functional Level (DFL) has the following impact: There are, […]
Azure AD Connect version 1.2.70.0 updates the non-standard connectors
Written on December 20, 2018 at 12:27 PM, by Sander Berkouwer
Yesterday, Microsoft released a new version of Azure AD Connect, its free Hybrid Identity bridge product to synchronize objects and their attributes from on-premises Active Directory Domain Services (AD DS) environments and LDAP v3-compatible directories to Azure Active Directory. What’s Fixed There is only one fix in version 1.2.70.0. This build updates the non-standard connectors […]
Critical DNS Server Heap Overflow Vulnerability could allow Remote Code Execution (Critical, CVE-2018-8626)
Written on December 13, 2018 at 4:00 PM, by Sander Berkouwer
This week, for its December 11th 2018 Patch Tuesday, Microsoft released a security update for supported versions of Windows Server acting as DNS Servers. As many Domain Controllers are installed and configured as such, this is a serious vulnerability. The update addresses the vulnerability by modifying how Windows DNS servers handle requests. About the […]