Tip: Replace certificate for RDP

Certificate warnings are annoying, regardless of the program. In this case, a remote desktop connection (RDP) warns of an invalid certificate. Everyone is probably familiar with this message: This is a "normal" Windows server, i.e. not a remote desktop host (terminal server), RDP is only activated here for administration purposes. In the standard configuration, Windows uses ... Read more

New updates for Exchange Server 2013 / 2016

Today is regular Exchange Patch Day and updates have been released for Exchange Server 2013 and Exchange Server 2016. The most important new features at a glance: Windows Server 2016 Support for Exchange 2016 CU 3 .NET Framework 4.6.2 Support for Exchange 2016 and Exchange 2013 Improvements to high availability for Exchange 2016 Installation of updates in local language, ... Read more

HowTo: Create group policies yourself (ADMX)

Group policies make an admin's life easier and can be created with little effort. The advantage is obvious: registry settings can be easily distributed to many computers using group policies. The following article contains a short HowTo on how to create group policies yourself using the free "old-school" tool "ADMX-Migrator". Foreword Also for Exchange Server ... Read more

Critical security update for all Exchange Server versions (MS16-108)

Outside of the usual patch interval for Exchange Server, Microsoft has released a security update for all Exchange Server versions, which is intended to fix several security vulnerabilities classified as high or critical. Here is the link to the security bulletin: Microsoft Security Bulletin MS16-108 Brief description of the vulnerability: This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe vulnerabilities could allow remote code execution in some of the ... Read more

Group policy for deactivating SSL 3.0 and TLS 1.0 (ADM and ADMX)

Configuring SCHANNEL settings for SSL 3.0 and TLS 1.0, for example, is possible under Windows using the registry. For a larger number of servers or computers, however, group policies are more suitable for configuration, so I have created corresponding templates that make the settings in the registry. Foreword The group policies record changes to the registry ... Read more

Active Directory Rights Management Services (RMS) and Exchange 2016 (Part 3)

In part 1 of this article series, the RMS server was installed and in part 2 the configuration took place. Now the integration into Exchange 2016 follows. As a reminder, the environment from parts 1 and 2 once again: Environment The environment in which the Active Directory rights management services are installed looks as follows: There are a few ... Read more

Active Directory Rights Management Services (RMS) and Exchange Server 2016 (Part 2)

In part 1 of this article series, the RMS server was installed, in part 2 we will now look at the configuration. To remind you of the environment from Part 1: Environment The environment in which the Active Directory rights management services are installed looks like this: There are a few users with Outlook 2016, a domain controller, 3 ... Read more

Active Directory Rights Management Services (RMS) and Exchange 2016 (Part 1)

The Active Directory Rights Management Services (AD RMS) is basically a DRM system. DRM is often used by streaming services to ensure that a piece of music can only be played if there is a corresponding subscription. AD RMS uses a very similar concept, files are provided with a license and encrypted. About ... Read more

Windows 10 Anniversary Update and the PowerShell (Bug)

In this post, I described that my PCs did not receive a Windows 10 Anniversary Update via Windows Update. I had installed the update manually. A mistake, as I have now discovered: https://blogs.msdn.microsoft.com/powershell/2016/08/23/powershell-dsc-broken-in-kb3176932/ Exactly one day after my update, the information was published that the Windows 10 Anniversary Update (1607) had problems with the PowerShell DSC ... Read more