Configuring Split-Brain DNS on Windows Server

Split Brain DNS allows you to configure the DNS server to return different responses depending on the request source address (IP subnet). In this post, we will look at how to configure Split DNS on Windows Server using DNS policies (supported on Windows Server 2016 and newer).

Continue reading “Configuring Split-Brain DNS on Windows Server”

Create Trust Relationship Between Active Directory Forests

Trust relationships between AD domains allow users from one domain to authenticate to another domain. Trusting relationships are most often configured when merging or migrating multiple organizations.

Continue reading “Create Trust Relationship Between Active Directory Forests”

Install Active Directory Certification Authority (ADCS) on Windows Server

Active Directory Certificate Services (AD CS) allows you to deploy your own PKI infrastructure on a domain network and use it to issue and manage certificates. In this article, we will look at a typical Certification Authority (CA) deployment scenario: installing a root CA and subordinate enterprise AD CS on two Windows Server hosts, and configuring Group Policy to issue certificates in a domain.

Continue reading “Install Active Directory Certification Authority (ADCS) on Windows Server”

Active Directory Recycle Bin: How to Enable and Restore Delete Objects

The Active Directory Recycle Bin allows a domain administrator to restore any deleted object (user, computer, security group) in the AD domain. AD Recycle Bin is available in all versions of Active Directory starting with Windows Server 2008 R2. In this article, we will show how to enable the Active Directory Recycle Bin and restore a deleted user.

Continue reading “Active Directory Recycle Bin: How to Enable and Restore Delete Objects”

Mapping Network Drives (Shared Folders) on Windows

Windows lets you mount any shared (SMB) network folder located on a remote computer or server as a local drive. In this way, you can also connect a share on a NAS device or a USB drive that is connected to the network router. The mapped network folder is assigned a separate drive letter that can be accessed in File Explorer and file managers.

Continue reading “Mapping Network Drives (Shared Folders) on Windows”

Clearing the Print Spooler Queue on Windows

If you have a large number of network printers connected to your Windows print server, you may find that the print queue gets stuck from time to time. A stuck job in the print queue prevents other documents from printing. In this case, you should try to remove the stuck print job or clear the print queue completely.

Continue reading “Clearing the Print Spooler Queue on Windows”

Disable Local User Accounts in Windows with GPO and PowerShell

Best security practices for Windows domain networks recommend disabling local user accounts on computers and servers in an Active Directory domain. Local users who have administrative permissions on a computer can be a weak point in the security of your network. You can use tools such as Windows LAPS (Local Administrator Password Solution) to set unique, complex passwords for local administrators, or you can use AD Group Policies to completely disable local administrator and user accounts.

Continue reading “Disable Local User Accounts in Windows with GPO and PowerShell”

How to Find Your Computer’s Serial Number on Windows

If you need to find the serial number for your computer or laptop, you do not need to look in the documentation or the manufacturer’s label on the case/motherboard. Windows can get your computer’s serial number from the BIOS. To get the serial number from the BIOS, query a specific class in the WMI namespace.

Continue reading “How to Find Your Computer’s Serial Number on Windows”