The ramblings of a computer geek
If you need to quickly check the health of a protocol, Microsoft Exchange 2013 onwards provides a URL that you can query to ascertain the health of the service. Obviously if you query this and get nothing (i.e. a timeout) you can assume something is wrong, or if you get anything other than a “200 […]
More...
NOTE: See https://geekmungus.co.uk/?p=3619 for the most up to date article! We’ve had an issue with the recent “Security Update for Microsoft Windows (KB5019964)” update, as by the looks of it a load of other people. In our case we are running Microsoft Windows 2016 domain controllers, the NetApp filers are pretty old we’re readying to […]
More...
Running a disk test need not be complicated. Microsoft provide a cheeky little hard disk test program that can be used, you can download it from https://github.com/microsoft/diskspd. A simple run can be completed with the following command to test the hard drive performance based on the parameters entered. If you wish you can add “> […]
More...After an update Microsoft Exchange 2016 – Security Update For Exchange Server 2016 CU22 (KB5015322), following the upgrade the following appeared: The Exchange server appeared to operating fine, mail flow was fine, the DAG operating as expected, users who are using ActiveSync, Exchange Anywhere or EWS all appeared to have no problems. However using OWA […]
More...The Microsoft Exchange 2016 ESE database engine manages the database engine and database files that make up the Mailbox Databases on the Microsoft Exchange server; it reads and writes data to and from the database and manages the database files through background management tasks. The Exchange databases are based on the JET database engine and […]
More...To find gMSA (Group Managed Service) Accounts i.e. group managed accounts and if your ADUC doesn’t have this as an option you can use a “Custom Search” and click “Advanced”, then use the following string in the “Enter LDAP query:” https://www.mssqltips.com/sqlservertip/5340/using-group-managed-service-accounts-with-sql-server/
More...Kerberos is an authentication technology, if you’ve used Microsoft Windows and Active Directory (AD) you will have heard of Kerberos as its the authentication method used to secure an AD Domain and any hosts and devices that are joined to it. I’d like to provide a fairly high-level run through of how Kerberos works, so […]
More...Microsoft Active Directory uses the concepts of “domains”, a domain is the outer edge of a security compartment; within a domain, user accounts, computer accounts and resources are authenticated and share a common authentication source. There is also the concept of a “forest”, a forest is a collection of domains, in the most basic configuration […]
More...NagiosXI and other monitoring tools have ways to determine if your SSL certificates on say a web server are nearing expiry, but what if you have software that uses a certificate but that certificate is not directly poll-able over the standard HTTPS checks. The script which can be found here, is a passive check, so […]
More...The Kemp Load Master allows for the configuration of authentication offloading to itself (from the Microsoft Exchange server supporting Kerberos) to allow for the Kemp Load Master to act as a sP (Service Provider) against an IdP (Identity Provider) for example OKTA. The use of SAML via OKTA allows for any SAML (and Kerberos KCD […]
More...