Auto log off for specific users on Windows Server 2022
Hello, we have one tower server that runs windows server 2022 and everyone RDPs in with their own account and they should log off after 5 minutes of inactivity. Except for one user that is in the control room and that should not log out. I tried using…
CA migration
Hello, I have a DC server that contains the role of Certificate Authority (CA). I want to de-promote this server to a domain member server. If I de-promote the server: Will the CA configuration be kept? In case I have to migrate it to a new server: Can…
Application consistent warning in event viewer
The log below is keep repeating in event viewer , what is it should I be worried ? Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID…
Monthly patch update does not go up
Monthly patch update does not go up, restart the computer back to the original version, how to solve?
This Application has been blocked by your system administrator. But which application?
Hi everyone, On a RDS Server recently installed users has the message "This Application has been blocked by your system administrator." But I can't find which application generate this message. I looked in event viewer and in Windows Security…
LSA Auditing
Hi All I have the following requirement to enable (Enforce LSA Auditing) through GPO on all my servers. I have an OU with a couple of test VMs, and I have created a GPO and enabled the two policies below: Computer Configuration > Administrative…
Can you see other devices that are not connected to your microsoft account?
One of my microsoft accounts has been hacked by someone and they leaked devices that were connected to a different microsoft account. I was wondering how they were able to know about the device models when it wasn't even connected to the account that was…
![](https://techprofile.blob.core.windows.net/images/iUn-b9_AMkuBikaCwNTSLQ.png?8DA1C2)
server 2012 patches and advice
With regards to servers still running windows server 2012, according to the endoflife.date website Microsoft Windows Server | endoflife.date – this version is still covered by "Extended Security Updates" until 13/10/2026. Are "extended…
Can you see other devices that are not connected to your microsoft account?
One of my microsoft accounts have been hacked, they were talking about the model of my laptop as well as my huion tablet, how do they know what device models I have if my devices are connected to this account instead of the hacked one?
![](https://techprofile.blob.core.windows.net/images/iUn-b9_AMkuBikaCwNTSLQ.png?8DA1C2)
Changing WAP&ADFS SSL certificate from a GoDaddy Issued to CA issued
Dear Guys, I am planning to decommission our Godaddy issue SSL certificate used for WAP and ADFS. Since everything is moving the cloud. I dont see the point to keep paying the old SSL certificate issued by GoDaddy. Instead I am thinking to get CA issue…
Forwarding Windows Server firewall logs to other location like syslog server?
Would it be possible to forward or configure the Windows server firewall logs to a SIEM or SYSLOG server? Currently, using the official method through Group Policy only allows me to create the log on a specific server locally.…
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
Query on Group policy
Hi All, I want to capture Scheduled Task Event logs, i.e., when a scheduled task is created, updated, modified, or deleted. Can I achieve this using the below GPO? Computer Configuration --> Policies --> Windows Settings --> Security Settings…
AD assessment tools
Are there any recommended reporting tools that you can use to scan your Active Directory setup and configuration and get a report of problems/risks/non recommended settings to address?
Event log failure 4625 (brute force attack)
I am receiving constant 4625 event log failures in my machine every 10 minutes. The machine lies under the firewall with RDP enabled in it. When I try to check the account name and domain, it is showing as I mentioned in the example i.e If the audit…
AD default domain password policy advice
I am trying clarify some of specific settings within a domain password policy (settings report was produced based on Get-ADDefaultDomainPasswordPolicy). For info - there are no additional fine grained password policies in operation which may supersede…
Can I revoke an SSL certificate using API calls towards the AD-CS?
Hello, I have very little experience with Windows Servers and even less with AD-CS. In our company we use AD-CS to issue certificates for all services, including Linux machines. At the moment the process is manual, but we need to automate it using…
How do I install SSL/TLS cipher suite for Biztalk server2009
Hi, Recently my connections from Biztalk to an external financial system started failing with the message A message sent to adapter "WCF-Custom" on send port "SP_IMOS_AP_HEAD_TO_OCI_AP_HEAD" with URI…
Renew AD Root certificate - How to?
Hi Everyone, I need to renew my root certificate and I don't have a clue how to do this correctly. My DC's are 2012 R2 and 2019 and my AD DFL and FFL are: Windows Server 2012 R2, clients are all W10 and servers mostly 2008 and above and a tiny…
Notification or Alerts for MFA setting
Hi Everyone Could we setup an alert when a MFA method is added, changed or deleted in Microsoft account setting security option?
CredUI selects wrong Smartcard certificate
Hi Community, I experience an issue, that not the certificate I would expect according to the "Filter duplicate logon certificates" Group Policy is shown by CredUI when the certificate was issued using the certreq.exe command. If I issue…