梦想照进现实 – Page 3 – Just a place for me…….

Configure certificate auto-enrollment

Before you perform this procedure, you must configure a server certificate template by using the Certificate Templates Microsoft Management Console snap-in on a CA that is running AD CS. Membership in both the Enterprise Admins and the

How to Configure Microsoft Local Administrator Password Solution (LAPS)

We need to confirm the following before we go ahead with the Microsoft LAPS configuration. 1. Client operating systems – Windows Server 2019, Windows Server 2016, Windows 10, Windows Server 2012 R2, Windows Server 2012, Windows Server

Windows Server 2019 Remote Desktop Services Configuration and Licensing Activation

Server 2019默认远程桌面连接数是2个用户，如果多余两个用户进行远程桌面连接时，系统就会提示超过连接数，可以通过添加远程桌面授权解决： 1.添加远程桌面授权服务第一步：服务器管理 – 添加角色和功能打开添加角色和功能向导窗口，选择基于角色或给予功能安装：第二步：添加远程桌面会话主机和远程桌面授权功能：

How to seize the Operations Master Role

操作主机是ActiveDirectory中的特殊对象，具备操作主机角色的域控制器担任着活动目录核心功能，如果操作主机不可用，整个活动目录都会出现异常，甚至崩溃。操作主机角色的唯一性决定了不是任意一台域控制器都能管理整个域，当一台承担着操作主机角色的域控制器需要停机维护，就需要将主机角色转移到另一台正常运行的域控制器上；但是当承担操作主机角色的域控制器突然崩溃，无法正常运行，就需要使用强制手段占用操作主机，它被称为强制转移。

Migrating The Active Directory Certificate Service From Windows Server 2008 R2 to 2019 with different FQDN name

Step 1: Backup Windows Server 2008 R2 certificate authority database and its configuration Log in to Windows 2008 R2 Server as member of local administrator group Go to Start > Administrative Tools > Certificate Authority

Step-By-Step: Migrating The Active Directory Certificate Service From Windows Server 2008 R2 to 2019

Step 1: Backup Windows Server 2008 R2 certificate authority database and its configuration Log in to Windows 2008 R2 Server as member of local administrator group Go to Start > Administrative Tools > Certificate Authority

Certificate Services – Migrate from SHA1 to SHA2 (SHA256)

Here we can see my CA server is using SHA1 Note: If your server says the provider is Microsoft Strong Cryptographic Provider and not Microsoft Software Key Storage Provider then skip down a bit. You may have multiple Certificates

Windows Server 2012 R2 Force Uninstall Domain Controller

本次实验要演示的是强制卸载域控制器并且在其他域控制器上删除不需要的服务器对象，这种情况在现实的生产使用环境中经常使用，每个企业每年都会有增减域控制器的时候，而且在减少了域控制器之后，原本的域还会继续使用，这样就需要在其他域控制器删除不需要的服务器对象。首先实验的大环境是在XXX.com这个域中，有两台域控制器Server01和Server02，我们要删除域控制器Server01，并清除Server02上面不需要的服务器对象，事先的准备工作已经做好了。接下来我们删除Server01上的域控制器，打开服务器管理器—管理—删除角色和功能。

Join Computer to Domain with Desired Computer Name and OU

Step #1: This is the simplest method to add a computer to a domain. In this example you will be prompted for credentials followed by the required reboot. Add-Computer -DomainName “your.domain.here” Restart-Computer Step #2: If

How to disable SSL v2 and SSL v3 on the client via Group Policy

To disable SSL v2 and SSL v3 its best to create a Computer based Group Policy settings that applies at the top level of your domain. In GPMC navigate to Computers Configuration > Policies >