There are many reasons why you may want to do this but probably the most likely is the "Leaver" scenario. A common way of dealing with leavers is to simply convert their Mailbox to a Shared Mailbox, and then terminate…
Every now and then you receive an email with a URL in it that makes you pause and think. Maybe it's from a colleague or a friend, and almost looks legit, but something is telling you it might not be. …
Booking a meeting? Need to find available times? We work with a multitude of different clients from the pre-sales process, thru to implementation and project closure. Very often there are many stakeholders but getting everyone together at a time that…
As an IT support organisation, we pride ourselves on staying up to date as much as possible with current trends and changing technologies, particularly in the Microsoft space. As such we keep a keen eye on technical blogs, whitepapers, LinkedIn…
One of our clients recently asked to present all their options for Remote Support to their end-users. This organisation, like many others is always keen to keep costs down and has opted not to use a third-party solution, but instead…
If you've been dealing with Group Policy Objects (GPO) for any length of time you'll know that when a new version of the ADMX templates are released there are often no release notes as to what has changed. If you're…
Very brief observation from us today. A customer complained that the mobile attribute was not syncing from their local Active Directory to Office 365/Azure Active Directory - even though AAD Connect was reporting the attribute changes.... It turns out, that…
Recently we observed an issue with Domino Rooms that we migrated to Exchange/Office 365. In short, appointments contained within cannot be cancelled or re-scheduled and always remain as zombie reservations (unless manually cleaned up). Coexistence This is addition to coexistence…
Paying it forward… Well, not really, just plain old IT email forwarding. We all (Messaging Admins) have used forwarding extensively, but it struck me that there are several ways to achieve the same thing. Most often the forwarding scenario comes…
Alright, we've covered a lot of ground, but let's wrap up by grabbing our original questions and answering the 1. Why is there a problem with SIDHistory and Domain Local Groups, and exactly what is the problem? We've seen that…
We have covered a lot of ground so far, and we have touched on the Kerberos conversations that go on, but let's take a deeper look at exactly how these messages are made up and how they are protected. Elements…
Alright then, we've covered SIDs, SIDHistory, and Tickets. Let's move onto Access Tokens. Privilege Access Certificate The Privilege Access Certificate or PAC is a Microsoft extension to Kerberos utilizing the Authorization Data field in the tickets. This is sometimes referred…
Ok I think we have talked enough about SIDs in the previous two parts on SIDs and SIDHistory. Let's move on to Kerberos tickets... Luckily in Kerberos there are really only two tickets (which confusingly are sometimes also referred to…
In this blog we will be exploring SID History, and it follows on from Part 1 which gave an overview of Kerberos, and Part 2 which was all about SIDs. The attribute sid-history has been there right since Windows 2000…
In Part 1 we set the scene in regards to how Kerberos works at a high level, so let's now get down and dirty with Security Identifiers (SIDs) What is a Security Identifier (SID)? From MSDN: "A security identifier (SID)…