Technology
Managing WSUS
Block 1: Connect to the WSUS server and set the configuration. We are first going to set the property “Download update files to this server only when updates are appoved”, turn off all update languages,
Read MoreAuthor: Jiajie
IT operations
Delete Empty GPOs
This script will look for GPOs which have no settings at all and delete them.
Read More
IT operations
Detecting GPOs that have either no computer or user settings
These policies generally are meant for just computer or user settings. This script will disable the empty settings (for example, if a GPO has only computer setttings, it will disable user settings). This is important
Read More
PowerShell
Detecting Unlinked GPOs
Unlinked GPOs are just simply policies that aren’t applied to any OU or site. These policies aren’t
Read More
IT operations
Multi-Factor Authentication for Securing RD Gateway Server
System Environment
Read More
IT operations
Allowing RDP access to only certain IPs
A very simple fix can take care of this issue. In this repro, the following applies: I have a rule by GPO scoped to allow RDP to all systems from any IP. This is administrator
Read More
Technology
HYPER-V添加系统管理员账号
Mound the VHD，将 C:/Windows/System32/osk.exe 做个备份； 将同路径下的cmd.exe重命名为osk.exe； 重启，进入Windows登录界面，选择辅助功能，开启屏幕小键盘； 此时弹出来的是命令提示符，我们新增一个用户，输入 net user 用户名 密码 /add 再将刚才新增的用户添加到管理员组 net localgroup administrators 用户名 /add 重启，使用刚才新增的管理员账户登录吧。
Read More
Technology
如何禁止其他用户域用户登录计算机
gpedit.msc 白名单法： “本地计算机”策略 -> 计算机配置 -> Windows 设置 -> 安全设置 -> 本地策略 -> 用户权利指派 -> 在本地登录 去掉里面所有的用户，只填加你的用户帐号（注：帐号可以是域用户帐号） 这样，这台电脑就只有填加的这个用户能登录了 黑名单法： “本地计算机”策略 -> 计算机配置 -> Windows 设置 -> 安全设置 -> 本地策略 -> 用户权利指派 -> 拒绝本地登录 效果和上面差不多，在黑名单上的人就不能使用你的电脑了 使用这种方法要注意一点：
Read More