You know how „it’s always DNS“? A really great feature of DNS is its ability to delegate getting results of a query instead of hosting the world’s worth of name resolution locally. But to make sure your setup works as […]
AD integrated DNS is a great way to get name resolution going in a Windows-heavy network. Changes to DNS zone data are replicated across the environment using robust AD replication mechanisms, providing a globaly consistent data pool with optimal bandwidth […]
In February 2026, Microsoft opened the public preview for DNS over HTTPS in Windows Server 2025. Let’s see if the rewards to be reaped from this are worth the hassle. If you’re the TL;DR type of person, jump right here. […]
There was a time I loved explaining to people how certificates work, and I still do – but I am truly done talking about this particular item. Enough is enough. If someone asks me in the future why self-signed certificates […]
I have been very vocal in advocating against using VM snapshots for literally decades. In production, that is. In development, technical presales, or education, on the other hand, they can be a life-saving feature. If you are in a field […]
Update 2025-08-17: The August 2025 CU (KB5063880) fixes the problem describes in this post. Thanks to the AD engineering team at Microsoft for fixing this quickly! TL;DR: If you have an account lockout policy in place and your PDC Emulator […]
Last year I published an interesting finding about SSH remoting in Windows Server which, while not being sensational, did stir up several quite productive discussions. Back then, Server 2025 and its one-click activation of the SSH daemon was still in […]
There has been some buzz around Let’s Encrypt’s announcement to end OCSP support in 2025. And since Let’s Encrypt has become a purveyor of best practice to many IT organizations out there, many PKI operators are probably poring over this […]
While preparing my talk for this year’s PSConfEU, I made a discovery that, while not being a major security disaster or anything like that, still surprised me a bit. Started as a skunkworks type side project at Microsoft, SSH wormed […]
(I heard that Google Translator does a decent job on this article, but if you’re looking for the same explanation in English, head over here.) Es ist wirklich viel darüber geschrieben worden, wie man auf Domain Controllern eines Active Directory-Forests […]
Copyright © 2026 | WordPress Theme von MH Themes
