tag:blogger.com,1999:blog-974388299612639862024-11-01T02:38:50.032-07:00mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.comBlogger243125tag:blogger.com,1999:blog-97438829961263986.post-32245080748092701982015-10-08T13:34:00.000-07:002015-10-11T14:19:52.530-07:00

Thanks to the improvements of virtualization and storage technologies, it’s not difficult to clone a disk. A great advantage for disaster recovery, but also a potential risk for the security of your information.Microsoft allows to encrypt the disks of a server with a feature named BitLocker. We are going to see how you can enable BitLocker on a physical or virtual server to

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-54660502671728446772015-10-08T13:33:00.000-07:002015-10-11T14:19:52.551-07:00

Roaming Profiles allow users of an Active Directory Domain to access their desktop and documents from any PC of the domain.It’s a powerful feature that can improve the productivity of the employees and make their lives easier.The best thing about Roaming Profiles is how they are easy to set up.Before configuring a Roaming Profile, we need to create a Share. Open

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-70581863396240439622015-10-08T13:30:00.000-07:002015-10-11T14:19:52.572-07:00

We’ve already seen how to restrict software on Windows Server 2012 // R2 using GPOs. There’s another way available since Windows Server 2012, thanks to a feature called AppLocker.We still use GPOs – AppLocker is a subset of GPOs – to enforce software restriction but it’s easier and more powerful.AppLocker can manage execution permissions

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-56646055439213480852015-10-08T13:27:00.000-07:002015-10-11T14:19:52.592-07:00

One great advantage of using Active Directory Domain Services is the possibility to share a printer in just a few clicks with a group of computers or users.Since Windows Server 2012 isn’t even necessary to create a Group Policy Object (GPO), Windows will do the job for us speeding up the process.We are going to show how you can share an existing (installed)

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-35085223438819677122015-10-08T13:25:00.000-07:002015-10-11T14:19:52.610-07:00

System administrators often need to deploy one or more Registry Keys in business environment. Customized software or hardware need particular configurations and companies usually have solutions tailored to their needs.Whatever the reason is, a Group Policy is the best way to deploy a Registry Key in an Active Domain Directory Services.The configuration is quite

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-90179564696438853962015-10-08T13:22:00.000-07:002015-10-11T14:19:52.627-07:00

One of the greatest advantages of having an Active Directory Domain is the possibility to deploy software packages via GPO (Group Policy Object). Software deployment is crucial in business environments to save time and money.Microsoft not only gives us a simple way to deploy software, but also provides a quick solution to uninstall it when we don’t need it

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-52301350869952095752015-10-08T13:19:00.000-07:002015-10-11T14:19:52.645-07:00

Now it’s time to restrict devices. Device restrictions can improve the security of a business network and limit potential headaches to the IT staff.It’s also really easy to enforce a device restriction GPO.Open the Server Manager and launch the Group Policy Management:Create a new GPO:Edit the policy:Navigate to the path Computer Configuration\Policies

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-63674120569900842412015-10-08T13:18:00.000-07:002015-10-11T14:19:52.660-07:00

To prevent users from connecting to USB storage devices by group policy If a USB storage device is already installed on the computer: Click Start –  All programs  – Administrative Tools – Group Policy Management.Create or Edit Group Policy ObjectsExpand Computer Configuration – Preferences – Windows Settings.Right click Registry&

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-48575579947247392122015-10-08T13:11:00.000-07:002015-10-11T14:19:52.677-07:00

Site restrictions are common in business networks. Mangers and entrepreneurs want to limit potential distractions and Microsoft offers a range of solutions to achieve the objective. An usual practice is to adopt a proxy server but you can enforce site restrictions on Internet Explorer – even the latest versions – using a simple Active Directory Group Policy.In this

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-34992194506052476462015-10-08T13:09:00.000-07:002015-10-11T14:19:52.697-07:00

Now it’s time to prevent users of an Active Directory Domain Services from using specific applications.Surprisingly enough, it’s much easier to restrict software than websites. You just need to access thedomain controller and follow these steps.Open the Server Manager and launch the Group Policy Management:Create a new Group Policy Object:Give a name to the new&

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-71479898139518859242015-10-08T13:06:00.000-07:002015-10-11T14:19:52.715-07:00

Proxy servers may be useful in business environments to restrict websites, analyze Internet traffic or for caching purposes. There are several proxy servers available on the market but we won’t talk about them.Instead, we’re going to see how to force proxy settings via Group Policy (GPO) on Windows Server 2012 // R2. The Policy will only affect 

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-43397868026429825012015-10-08T12:57:00.000-07:002015-10-11T14:19:52.730-07:00

We will use Group Policy Preferences to set password on local user accounts.Click Start – All programs – Administrative Tools – Group Policy Management.Create or Edit Group Policy Objects.Expand Computer Configuration – Preferences – Control Panel Settings.Right click on Local Users and Groups – New – Local User.Note: Group policy update will take 90 min (

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-36535295769865647162015-10-08T12:49:00.000-07:002015-10-11T14:19:52.744-07:00

You can create GPO and link the GPO to domain or OU containing all the computers.Step 1 : Creating a Security GroupFirst you need to create a security group called Local AdminLog onto a Domain Controller, open Active Directory Users and Computers (dsa.msc)Create a security Group name it Local Admin. From Menu Select Action | New | GroupName the group as Local

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-48830547404145676762015-09-27T06:26:00.000-07:002015-10-11T14:19:52.760-07:00

A little bit of intro about SCCM 2012 R2 :System Center solutions help you manage the physical and virtual information technology (IT) environments across data centers, client computers, and mobile devices. You can improve your productivity by using the integrated and automated solutions of System Center.What SCCM 2012 R2 can do for you?You can use the change and configuration management

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-39622405602507843502015-09-27T06:21:00.000-07:002015-10-11T14:19:52.779-07:00

Today lets go through a step by step on how to installing & configuring WSUS in Windows Server 2012 R2.But as usual, before we start, let me explain a little bit about WSUS (Windows Server Update Services).What Is WSUS?WSUS is a server role included in the Windows Server 2012 R2 OS, and that downloads and distributes updates to Windows clients and servers.WSUS can obtain updates that are

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-25956185077338488542015-09-27T06:15:00.000-07:002015-10-11T14:19:52.797-07:00

At some point your system will crash and you need to perform a manual repair of your file system. A typical situation would be power loss while you are working on the system. You reboot and the system stops and indicates you must perform a manual repair of the system using fsck.fsck (file system consistency check) is a command used to check filesystem for consistency errors and repair them on

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-53908383628551231412015-09-27T06:10:00.000-07:002015-10-11T14:19:52.811-07:00

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-49661752859500292452015-09-27T06:07:00.000-07:002015-10-11T14:19:52.822-07:00

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-83230173509754288192015-09-27T06:03:00.000-07:002015-10-11T14:19:52.835-07:00

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-60749943224154762852014-07-06T07:01:00.000-07:002015-10-11T14:19:52.848-07:00

In the previous two article we have learnt how to Backup and Restore Exchange Server 2013 database using Windows Server Backup. In this article we would be focusing on how to create Recovery Database (Aka RDB).It is very important to understand in what scenario RDB can be useful. Lets first understand the scenario.A user has deleted some important emails and that needs to be recovered. Without

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-29256491511986671222014-07-06T06:57:00.000-07:002015-10-11T14:19:52.862-07:00

In this blog we will explore something new which has been introduced in Exchange Server 2013. Yes, that’s New Outlook Anywhere configuration changes introduced for Microsoft Outlook.ScenarioClient – Microsoft Outlook 2010Exchange Server – Microsoft Exchange 2013In Previous versions of exchange so far we have seen all local clients are considered as “MAPI” clients. In Exchange Server

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-57136254131644864992014-07-06T06:56:00.000-07:002015-10-11T14:19:52.878-07:00

In this blog we will be exploring some new feature introduced in Exchange Server 2013. Microsoft has introduced a new High Availability Feature “Automatic Reseed”. To simulate the scenario we have already created two member DAG.Lets ExploreFigure 1 : Two Node DagTo understand the concept lets first explore the new DAG properties.Figure 2 : Data propertiesIn figure 2 we can see some attributes as

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-79603458654625970162014-07-06T06:55:00.000-07:002015-10-11T14:19:52.895-07:00

Disclaimer Note: The test performed is on Certificate which was issued by an Internal CA. Third party vendors may offer a different solution. Please check and understand their terms and conditions before performing any steps.Figure 1: After Disaster RecoveryFigure 2: Import Exchange CertificateIn figure 2 we have to ensure that our cursor is pointing somewhere in the middle pane. Do not

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-19034146734511436552014-07-06T06:54:00.000-07:002015-10-11T14:19:52.911-07:00

In first part we have successfully backed up Exchange Server 2013 Database. In this blog we will be performing restore.Lets see what options we have to select, so that the restore is successful with zero errors.Figure 1.1 : Windows Server Backup (Apps)In figure 1.1 we will be selecting Recover.Figure 1.2 : Getting StartedFigure 1.3 : Select Backup DateIn figure 1.3 Dates shown in BOLD 

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0tag:blogger.com,1999:blog-97438829961263986.post-85264524606187069112014-07-06T06:53:00.000-07:002015-10-11T14:19:52.929-07:00

Over the past so many years managing and maintaining Exchange Server Mailbox and Public folder Database has played a critical role for Exchange Administrators. The spontaneous growth which leads to add more room to store the large database was very critical. Preserving those databases was not that easy, because the data might go corrupt at any time. These was realized only when a backup is

mbhttp://www.blogger.com/profile/02227378672899675381noreply@blogger.com0