Microsoft is investigating LSASS memory leaks (caused by Windows Server updates released during the November Patch Tuesday) that might lead to freezes and restarts on some domain controllers. LSASS ...

When you log in to a Windows 11/10 domain-joined machine and try to connect to the already mapped drive or multiple client workstations are unable to correctly ...

A new report out today from unified identity security company Silverfort Inc. details a previously undisclosed denial-of-service vulnerability in Microsoft Corp.’s Netlogon protocol that could allow ...

Although domain controllers can be configured to obtain an IP address from DHCP, it’s best practice to configure a static IP address so that it can be reliably discovered across the network. You may ...

I have my DHCP server (on Sonicwall) configured to give out the domain controller/DNS server ip as primary DNS, for secondary DNS I have set to give out 1.1.1.1, for tertiary 8.8.4.4 Does this comply ...

At our organization I'm responsible for our Windows infrastructure and another guy looks after all the Linux/*nix stuff. We're currently running a domain using Windows 2003 R2 Domain Controllers with ...

In two previous articles (here and here) I shared some classic Active Directory mistakes people have made that got their companies into serious trouble. Here’s another mistake that on the face of it ...

Microsoft is reinforcing warnings about the critical role Active Directory (AD) domain controllers play in large-scale ransomware attacks, aligning with U.S. government advisories on the persistent ...

As CISA noted, "installation of updates released May 10, 2022, on client Windows devices and non-domain controller Windows Servers will not cause this issue and is still strongly encouraged." "This ...

The Kerberos authentication method originated at the Massachusetts Institute of Technology in the 1980s, as part of a project called Athena. The project involved integrating the computers on the MIT ...

It’s back to the future – remember the Windows NT Backup Domain Controller (BDC)? It could log you on, but you couldn’t make any changes to it. The 2008 version of the BDC goes by the new name of Read ...