Posts

Showing posts from December, 2018

Disable IPv6 Loopback on Windows

netsh interface ipv6 show prefixpolicies In the list above the lines with labels 3 and 4 represent IP4 compatibility listings. If you increase their precedence they will be preferred. They need to be higher than the one with label 0 as that is the localhost address. netsh interface ipv6 set prefix ::/96 60 3 netsh interface ipv6 set prefix ::ffff:0:0/96 55 4

Create A MSA Group Using PowerShell – Server 2012

Open PowerShell: Import-Module Activedirectory Create the Service Account: New-ADServiceAccount -name  -Enabled $true -DNSHostName .domain.com -PrincipalsAllowedToRetrieveManagedPassword “ ” Example: New-ADServiceAccount -name MSA1 -Enabled $true -DNSHostName MSA1.domain.com -PrincipalsAllowedToRetrieveManagedPassword “Sql Server Group” Add computer to service account: Add-ADComputerServiceAccount -Identity  -ServiceAccount $ Example: Add-ADComputerServiceAccount -Identity SQL1 -ServiceAccount MSA1$ Install Service Account: Install-ADServiceAccount -Identity $ Example: Install-ADServiceAccount -Identity MSA1$ To test to see if this has worked: Test-ADServiceAccount -Identity $ Example: Test-ADServiceAccount -Identity MSA1$ https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd391964%28v%3dws.10%29

Managed Service Accounts: Understanding, Implementing, Best Practices, and Troubleshooting

Image
Ned here again. One of the more interesting new features of Windows Server 2008 R2 and Windows 7 is Managed Service Accounts. MSA’s allow you to create an account in Active Directory that is tied to a specific computer. That account has its own complex password and is maintained automatically. This means that an MSA can run services on a computer in a secure and easy to maintain manner, while maintaining the capability to connect to network resources as a specific user principal. Today I will: Describe how MSA works Explain how to implement MSA’s Cover some limitations of MSA’s Troubleshoot a few common issues with MSA’s Let’s be about it. How Managed Service Accounts Work The Windows Server 2008 R2 AD Schema introduces a new object class called  msDS-ManagedServiceAccount . Create an MSA, examine its  objectClass  attribute, and notice the object has an interesting object class inheritance structure: Computer  msDS-ManagedServiceAccount   organizationalPerson  Top