TLS 1.0 and 1.1 Disable Gotchas

https://learn.microsoft.com/en-us/troubleshoot/windows-server/remote/rds-connection-broker-or-rdms-fails-caused-by-disabled-tls-10 2. Upgrade NPS Radius to Use it and EAP\26 Upgrade Servers and Clients to use TLS1.2 Disable Servers and Clients from TLS1.0\1.1 Min SQL Native Client […]

Windows Server \ Exchange ISOs

It isn’t possible to do an in-place upgrade using windows server evaluation media. Licensed media must be used. Server 2019 Server 2022 Server 2016 ExchangeServer2016-x64-cu12.iso link below:https://www.microsoft.com/en-us/download/details.aspx?id=57827 […]

Security Best Practice \ Health Check

AssetsInternal IP’sExternal IP’sNetwork Devices – Switches \ Routers \ AP’sStorage DevicesHypervisor Versions Business ProcessNew User and Leaver Guide Password Management ToolVulnerability ManagementChange ManagementMonitor HaveIBeenPwnedRansomware Readiness AssesmentSOC AssesmentCompromise […]

LDAPS\LDAP Channel Binding

2020 LDAP channel binding and LDAP signing requirements for Windows (KB4520412) https://evotec.xyz/four-commands-to-help-you-track-down-insecure-ldap-bindings-before-march-2020/ https://www.petenetlive.com/kb/article/0001645 https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/ldap-channel-binding-and-ldap-signing-requirements-march-2020/ba-p/921536 If the LdapEnforceChannelBinding key is not present, the server will use the new […]