In this blog we will be exploring SID History, and it follows on from Part 1 which gave an overview of Kerberos, and Part 2 which was all about SIDs. The attribute sid-history has been there right since Windows 2000…
In Part 1 we set the scene in regards to how Kerberos works at a high level, so let's now get down and dirty with Security Identifiers (SIDs) What is a Security Identifier (SID)? From MSDN: "A security identifier (SID)…
I recently did some work at a client to help migrate them to a new Active Directory. While setting up the migration including password and SidHistory syncs I told them to be careful of Domain Local Groups which can cause…
So often do I work on my laptop or on servers and I have to open a file in Notepad to edit it, however the file is protected so you have to not only be an administrator but you need…
Today a client that we had previously migrated off Lotus Notes asked us about applying Groups to their Shared Mailboxes in Office 365 but ensuring that the Shared Mailbox Owners had the ability modify those Groups to provide access. This…
Introduction We have a current client that deal directly with blind and partially sighted people. They have a customised Word Template where the default normal font must be Arial size 14 with Headings etc additionally edited for their needs as…
We're often asked why our Migration as a service offering is more advantageous than any on-premises solution an organisation could wish to deploy. Typically if a company has decided to host their email in the Microsoft cloud they have…
DirectAccess has come a long way and with Windows Server 2016 it is pretty easy to install as a single site, single server deployment. What if you need additional resilience though, what if you want a fail over server? You…
Azure AD Connect (AADC) integrates your Active Directory with Azure Active Directory (and from there with the various Active Directories for your workloads) AADC has an account on-premises that has rights within Active Directory and depending on what you are…
Nero Blanco has become a Power365 Certified Partner! Power365 is a Binary Tree product that solves Office 365 cross-tenant integration and migration challenges for when your organization goes through a merger or acquisition, has users in multiple Office 365 tenants,…
An interesting challenge was discovered at a client recently during testing in a development (pre prod) environment. Whilst we were not the architects of the directory synchronisation, it serves for a great blog/article. A very very large customer (300k…
This is a summary of a great session by Mark Russinovich talking about Azure Inside Azure Datacenters Data center design When Microsoft plans new data centers they start with geographies (Geos) which are gradually coming down to country (Germany, France,…
Window 1709 (Fall Creators) has a great new feature called Files on Demand. It is a OneDrive feature that we actually talked to Microsoft about at Ignite in 2015. Basically it makes OneDrive more like other file syncing tools, where…
As part of a project I'm working on I was asked to install and configure Sysmon on all servers using DSC (Azure Automation DSC in this case) After a bit of effort I came up with the following Configuration…
While working on DSC for a client I came across the need to use Composite Configurations, however it needed to work with Azure Automation. Microsoft did use to say that Azure Automation DSC does not support partial or composite configurations,…