Posts

Is Your Corporate "Front Door" Wide Open? Why 2FA is No Longer Optional.

Image
  In my 18+ years managing IT infrastructure—from legacy on-premise servers to modern hybrid cloud environments like Azure and O365—I have witnessed monumental shifts in technology. We have faster networks, smarter AI, and more resilient cloud storage. Yet, despite billions spent annually on sophisticated firewalls, intrusion detection systems, and endpoint protection, the vast majority of corporate breaches still start the same way they did twenty years ago: A compromised password. It is time for a hard truth in the corporate world: Single-factor authentication (passwords alone) is dead. Relying on it today isn't just an outdated practice; it is a critical business risk. If your corporate network, email, or VPN is accessible with just a username and password, your "digital front door" is effectively unlocked, waiting for anyone who finds the key. Here is why implementing Two-Factor Authentication (2FA), or Multi-Factor Authentication (MFA), is the single most important s...

Missing SYSVOL and NETLOGON

Open Regedit Browse to  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters Set  SysVolReady  from 0 to 1 Close Regedit This will create the SYSVOL share Verify the replication by running the following command. For /f %i IN ('dsquery server -o rdn') do @echo %i && @wmic /node:"%i" /namespace:\\root\microsoftdfs path dfsrreplicatedfolderinfo WHERE replicatedfoldername='SYSVOL share' get replicationgroupname,replicatedfoldername,state The states should translate as below 0 = Uninitialized 1 = Initialized 2 = Initial Sync 3 = Auto Recovery 4 = Normal 5 = In Error If you run the command to see the state of the replication you will see that the servers are all showing state 4 as below and both Sysvol and Netlogon will be replicated Enable Ginger Cannot connect to Ginger Check your internet connection or reload the browser Disable in this text field Rephrase Rephrase current sentence Edit in Ginger ×

How to Switch Domain Controller or Logon server in client

To find the current logon server Open the command prompt and type echo %logonserver% To switch the Domain Controller Open the command prompt and type nltest /Server: ClientComputerName  /SC_RESET: DomainName \ DomainControllerName To set the Domain Controller Via Registry Open the registry editor Navigate to: HKEY_LOCAL_MACHINE/ SYSTEM/ CurrentControlSet/ Services/ Netlogon/ Parameters Create a String value called “SiteName“, and set it to the domain controller you wish the computer to connect to. (ie. DC1.domain.com)

Install .NET Framework 3.5 Offline

Connect a  Windows 10 installation USB  that is the exact same  build  as what is currently installed. Or,  Mount  a  Windows 10 ISO  that is the exact same  build  as what is currently installed. Open This PC in File Explorer (Win+E), and make note of the drive letter of this USB or mounted ISO. Open an elevated command prompt. Type the command below in the elevated command prompt, and press Enter Dism /online /enable-feature /featurename:NetFX3 /Source: <driveletter> :\sources\sxs /LimitAccess