Server Core App Compatibility Feature on Demand allows you to troubleshoot Windows Server Core with GUI tools that are locally installed. Let's see how.
Source : 4sysops:
Learn how to save time and extract actionable data from your Windows performance counter logs with the free, PAL tool!
So you've developed code. Great! Now you have to publish it to your users. But how There are many ways to accomplish this but one of the most used is NuGet. NuGet is a technology that allows you to publish code in the form of packages for others.
Learn how to download and install VMware PowerCLI in this complete, step-by-step walkthrough.
Out-GridView Returns! It’s been almost 3 years since PowerShell Core debuted for Linux and Mac, and as we’ve increased our cmdlet coverage more and more, one cmdlet has always stood out as a top, cross-platform request. Today, we are excited to announce that Out-GridView is debuting on all Core-supported platforms through the GraphicalTools Module.
Last month we announced that PowerShell 7 will be the next release of PowerShell. Here I will provide more details of areas we’ll be investing in for the PowerShell 7 release. When will I get it?! Today, we’re releasing our first preview of PowerShell 7.
Microsoft is extending the number of Group Policy settings in Windows 10 1903. This time they will not be used to configure new features but rather the existing ones. For example, one of the policies can force the installation of updates. And for the first time, you can manage Storage Sense centrally.
VS Code remote support for WSL, Containers, and SSH
Today we're excited to announce the preview of three new extensions for Visual Studio Code that enable seamless development in Containers, remotely on physical or virtual machines, and with the Windows Subsystem for Linux (WSL). You can get started right away by installing the Remote Development Extension Pack.
Magento released new versions of its content management software to patch a total of 37 newly-discovered security vulnerabilities, including a critical SQL injection flaw.
Though most of the reported issues could only be exploited by authenticated users, one of the most severe flaws in Magento is an SQL Injection vulnerability which can be exploited by unauthenticated, remote attackers.
FireEye releases Commando VM, a fully customized Windows-based operating system for ethical hacking and penetration testing
The official SqlServer module now includes a version of the Invoke-Sqlcmd cmdlet that runs in PSCore 6.2 and above. The version of the SqlServer module which contains this cmdlet is 21.1.18095-preview and is available in the PowerShell Gallery. In order to install this preview version of the module, you must run Install-Module (or Update-Module if you already have it installed) with the -AllowPrerelease. (Without that parameter you will receive the previous version of the module.)
If you have never used concurrent remote desktop to support your Windows clients, this post is about to make your day! Concurrent remote desktop can allow you, as an admin, to interactively use a client OS while the main user is still actively logged in.
Netikus.net System32 is a well-organized online database that allows you to search Windows Event Logs, error codes, code snippets, and geo IPs.
If you run Microsoft SQL Server on VMware vSphere, you do so to have more flexibility, high availability, and a gain in performance. But if you do it wrong, you might end up with the exact opposite: bad performance and frustration. In this post, we'll have a look at some basic configuration, then at the ESXi and hardware (BIOS) level, and eventually at the VM level.
The Windows Compatibility module (WindowsCompatibility) is a PowerShell module that lets PowerShell Core 6 scripts access Windows PowerShell modules that are not yet natively available on PowerShell Core. (Note: the list of unavailable commands is getting smaller with each new release of PowerShell Core. This module is just for things aren’t natively supported yet.)
Windows 10 has included Remote Server Administration Tools (RSAT) as optional features since the Insider Preview Build 17682. Therefore, you no longer need to download and install these tools manually on the admin workstation after an OS upgrade. Instead, you can add them via the Settings app or by using PowerShell.
PowerShell type accelerators are aliases for .NET classes or types, which makes using classes in PowerShell scripts much easier. The intention behind type accelerators is to use shorter names for .NET classes and types and save some unnecessary typing. For example, when you use the type accelerator to define an integer value, there's actually no data type called int. Instead, it's just an alias for the class.
If you are a developer or system administrator that wants to learn about working with containers, Docker for Windows provides a great way to get up and running quickly. Windows 10 contains built in support for Windows Containers and Hyper-V Containers. Additionally, you can run Linux containers using Hyper-V, a minimal Linux kernel and userland in the Windows 10 Fall Creators Update and in Windows Server 1709 or later.
In this article, I will show you how to create a Linux container in Windows 10 using Docker for Windows. If you want to perform the same task on Windows Server, you’ll need Docker Enterprise Edition (Docker EE) instead. To follow the instructions below, you must be running Windows 10 version 1709 or later, on a device that supports Hyper-V with at least 4096MB of RAM. Docker for Windows supports 64-bit Pro and Enterprise editions of Windows 10 only.
We’re proud to announce that the latest version of PowerShell has been released! This marks our second supported release of PowerShell Core, the open-source edition of PowerShell that works on Linux, macOS, and Windows!
By far, the biggest feature of this release is compatibility of built-in Windows modules with PowerShell Core. This means that you can natively run those modules/cmdlets with PowerShell Core and easily transition from Windows PowerShell.
Is WordPress Secure? Here's What the Data SaysIs WordPress secure? Read this post for a data-backed look at how WordPress sites get hacked, and whether or not WordPress is actually secure.
Microsoft’s John Wilcox last week posted a primer on Microsoft’s patching scheme, designed to help people understand how the company patches Windows. Here’s a translation in less obfuscatory terms, with a bit of real-world commentary.
Now that Windows 10 supports running several different Linux distros, Microsoft has added a flag to NTFS that forces the file system to recognize files and folders that are only different by case differently. In this Ask the Admin, I’ll show you how to enable the flag on a folder and explain why you might need this feature
Easily examine and understand any Windows
system's hardware and software capability to
prevent Meltdown and Spectre attacks.
Source : Gibson Research Corporation
We are excited to announce the public preview of Visual Studio Live Share! At Connect last November, we showed how Live Share enables real-time collaborative editing and debugging from the comfort of your favorite tools. Since then, we’ve worked with thousands of developers worldwide, resolved hundreds of issues, and addressed top feature requests such as adding support for Linux. We’ve benefitted greatly from all the feedback thus far, thank you! Today, we’re excited to announce that every developer using Visual Studio and Visual Studio Code can get started with Live Share today!
Windows Defender, which protects Windows 10 PCs from malware, can now keep your Mac safe from inside Google Chrome. Microsoft has turned its antivirus app into a Chrome extension that promises to detect phishing links in your emails and dodgy sites that distribute malicious software. It’s 99 percent effective, according to Microsoft, which makes Windows Defender better than rival browser protections.
So if your older scanner suddenly doesn’t work consider this: In 1709 if you did an in place upgrade, you retain the SMBv1 in your networking configuration. However because this is deemed very unsafe (and it is a risk to keep it enabled), Microsoft does a check to see if you are still using it. “In-place upgrades and Insider flights of Windows 10 Home and Windows 10 Professional do not automatically remove SMB1 initially. If the SMBv1 client or server is not used for 15 days in total (excluding the time during which the computer is off), they each automatically uninstall themselves.” So 15 days after SMBv1 on the client is not used, the system will send a dism command to disable SMBv1
Firstly... Before you start reading this, you should be familiar with the DualScan Feature of Windows 10. Find more information on the following blog posts. https://blogs.technet.microsoft.com/wsus/2017/08/04/improving-dual-scan-on-1607/ https://blogs.technet.microsoft.com/configurationmgr/2017/10/10/using-configmgr-with-windows-10-wufb-deferral-policies/ If you decided to disable DualScan (Do not allow update deferral policies to cause scan against Windows Update - Enabled) this post is for you. Let's double check...
Unless you’ve been stuck in a data center server rack, you’ve most likely heard about the next version of PowerShell, referred to as PowerShell Core. This version will run on Windows, Linux and Mac systems. For those of you considering running it on a Windows box, allow me to share 5 things you should know.
Windows Server has come a long way since Windows NT. First, we could virtualize Windows Server, and now we can even play in the realm which what was once an exclusive Linux feature: containers! Nowadays, we can bring up a Windows Server container in Docker just as easily as a Linux container, but how? Since Microsoft is a fairly recent player in the container market, the concept of Docker and containers is probably new to a lot of Microsoft shops. The best way to learn about something is doing, so let’s do it.
For this article, we’re going to start from a Windows Server 2016 host since this is the earliest version of Windows in which you can run a true Docker host.
No, really…this isn’t clickbait. For the past few weeks, we’ve been working with the Microsoft WSL team to get Kali Linux introduced into the Microsoft App Store as an official WSL distribution and today we’re happy to announce the availability of the “Kali Linux” Windows application. For Windows 10 users, this means you can simply enable WSL, search for Kali in the Windows store, and install it with a single click. This is especially exciting news for penetration testers and security professionals who have limited toolsets due to enterprise compliance standards.
Source : https://www.kali.org/news/kali-linux-in-the-windows-app-store/
There's still quite a few questions on how to install PowerCLI to offline systems. We're going to take a much closer look at that with this post!
One of the most annoying problems that has existed with PowerShell ever since we got PowerShell remoting in v2 is the infamous double-hop or multi-hop problem. This occurs if you try connect to another remote computer from within your remote session.
I recently discovered a new way to solve this problem that uses session configurations. This "new" way allows you to tie a credential to a PowerShell session configuration and reuse this configuration for all future connections.
PowerShell Core 6.0 is a new edition of PowerShell that is cross-platform (Windows, macOS, and Linux), open-source, and built for heterogeneous environments and the hybrid cloud.
Security researchers have uncovered how marketing companies have started exploiting an 11-year-old bug in browsers' built-in password managers, which allow them to secretly steal your email address for targeted advertising across different browsers and devices.
The major concern is that the same loophole could allow malicious actors to steal your saved usernames and passwords from browsers without requiring your interaction.
Microsoft Releases First Cross-Platform SQL Operations Studio
This product -- the first new tool for interacting with SQL Server in over a decade -- is the next step towards modernizing the dated SQL Server Management Studio tool.
Source : itprotoday.com
Références :
I bet no one saw this coming when Microsoft said that they would be moving forward with two updates per year for Windows 10 but some customers are having trouble adapting to ‘rapid release’. Announced today, the company is extending support for Windows 10 build 1511.
The IIS Team is pleased to announced the release of version 1.0 of IIS CORS Module which enables support for the Cross-Origin Resource Sharing (CORS) protocol.
Since we’ve mentioned the GLI, Woebcken revealed the next one based on the Jetta Mk7 will arrive within 12 months after the regular car. It’s not known at this point whether the next Jetta GLI will have a manual, but it might happen as per a hint dropped by VWoA’s Senior Vice President Product Planning & Strategy, Hendrik Muth: “Historically, Volkswagen Jetta GLIs have been available with a manual transmission.”
Greetings again AskDS!
Ryan Ries here. Got something exciting to talk about.
You might be familiar with the original Lingering Object Liquidator tool that was released a few years ago.
Today, we’re proud to announce version 2 of Lingering Object Liquidator!
We just released the DSC Resource Kit!This release includes updates to 6 DSC resource modules. In these past 6 weeks, 52 pull requests have been merged and 39 issues have been closed, all thanks to our amazing community!
Microsoft is pleased to announce the draft release of the recommended security configuration baseline settings for Windows 10 “Fall Creators Update,” also known as version 1709, “Redstone 3,” or RS3.
We recently announced that Windows PowerShell 2.0 is being deprecated in the Windows 10 Fall Creators Update. Deprecation is a process whereby technologies or applications are marked as legacy, signalling to users that they may be removed in the future, and that should move away from them and towards newer alternatives.
Microsoft is pleased to announce the final release of the recommended security configuration baseline settings for Windows 10 “Creators Update,” also known as version 1703, “Redstone 2,” or RS2. The downloadable attachment to this blog post includes importable GPOs, tools for applying the GPOs, custom ADMX files for Group Policy settings, and all the settings in spreadsheet form.
Security Compliance Manager (SCM) is dead. To replace it, Microsoft has released the Security Compliance Toolkit (SCT). In this Ask the Admin, I’ll explain why SCM was killed off and how the new toolkit stacks up in comparison.
As we’ve made progress on open-source PowerShell, it’s time to start talking more in-depth about:
- different editions of PowerShell
- PowerShell’s relationship to .NET Core and .NET Standard
- the future of PowerShell
- when you might expect to start taking a dependency on PowerShell Core 6.0 in production
Recently, we’ve seen an increase in the number of high CPU/High Memory usage problems with WSUS, including WSUS in a System Center Configuration Manager environment – these have mostly corresponded with Update Tuesdays.
In IIS 10.0, we introduced the IISAdministration PowerShell module which was a new way to manage IIS. This module included numerous improvements over the existing WebAdministration cmdlets.
Unfortunately, folks who hadn’t updated to Windows Server 2016 weren’t able to take advantage of the new management cmdlets until now. I’m pleased to announce that we’ve now released this module to the PowerShell Gallery and is available for use on Windows Server 2012 and above.
If you still rely on PowerShell 2.0, you should think about updating your code to work with PowerShell 5.0. Starting in the Windows 10 Fall Creators Update, Microsoft will no longer support PowerShell 2.0. In this Ask the Admin, I’ll discuss why PowerShell 2.0 poses a security risk and how to remove it from Windows 10.
In the wake of Adobe’s announcement about the end of life of Flash, Microsoft this week announced its own schedule for removing Flash from its own products.
If you notice that your WordPress hosting provider is not running PHP 7, but has it available to its users, you may want to consider making a WordPress PHP version change so you can benefit from all of PHP 7’s features. However, in order to avoid breaking your site, you should make sure all of your site’s themes and plugins are compatible.
To check for WordPress PHP version compatibility, you can use another simple plugin called PHP Compatibility Checker.
The WordPress core uses .htaccess for two things: Permalinks and Multisite. This means that .htaccess is only required if you have enabled either of these features. Otherwise, .htaccess is entirely optional for default WordPress installations. Beyond the WP core, many plugins also use the .htaccess file for custom directives involving rewrites, redirects, custom headers, file compression, and much more. In many cases, such plugins add their .htaccess rules to your .htaccess file automatically, behind the scenes.
So even if you haven’t enabled Permalinks or Multisite, your site may be using .htaccess rules added by WordPress plugins for various types of functionality. That’s one of the cool things about .htaccess: it can be configured and customized to improve your site’s performance, security, and usability. To help you get started, this tutorial provides a collection of .htaccess techniques that are useful for any WordPress-powered site. Combined into a blank .htaccess file, these techniques serve as a great starting point for creating your own custom .htaccess file for WordPress.
Let’s say that you have a GPO that is scoped to a specific security group. If you add a computer to this security group, you would normally need to restart in order for the computer to see that it is now a member of this group. To bypass this, you can delete the system’s Kerberos ticket and run GPUpdate. The computer will magically see its new group membership without a restart.
Hello Everyone, my name is Moni and I am a Support Engineer in the Windows Devices and Deployment team here at Microsoft. In this post, I’ll be discussing an issue where the Server Cleanup Wizard for WSUS 3.0 Service Pack 2 times out when attempting to delete computers that have not contacted the server in 30 days or more....
Details of the error are as follows:
The WSUS administration console was unable to connect to the WSUS Server Database.Verify that SQL server is running on the WSUS Server. If the problem persists, try restarting SQL.System.Data.SqlClient.SqlException — Access to table dbo.tbDownstreamServerClientSummaryRollup is blocked because the signature is not valid.Source.Net SqlClient Data ProviderStack Trace:at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object[] args, Boolean synchronous)at System.Windows.Forms.Control.Invoke(Delegate method, Object[] args)at Microsoft.UpdateServices.UI.SnapIn.Wizards.ServerCleanup.ServerCleanupWizard.OnCleanupComplete(Object sender, PerformCleanupCompletedEventArgs e)
Just Enough Administration (JEA) is a new extension in the Windows Management Framework that allows you to restrict the rights of IT admins in remote PowerShell sessions. In this first part of my JEA series, I will give an overview of the basic concepts.
Occasionally you may find that you want to start over in WSUS with a fresh database (SUSDB). There can be any number of reasons for this, but typically I see people doing this if their SUSDB is rather old, has a ton of unneeded updates in it, and maintenance has not been done on the SUSDB in years. In those cases you can find that a rebuild may be faster and easier than fixing the problematic SUSDB. Typically speaking, I see people wanting to recreate the just the content dir if they accidentally unchecked the “download update files to this server only when updates are approved” and ended up with a hard drive full of unneeded files. Whatever the reason, here are the steps for recreating the SUSDB and the WSUS Content folder for a Windows Server 2012 based WSUS computer
The ProblemSource : IEInternals
From time to time, various users have complained to the IE team that they’re unable to log into assorted websites and services that they care about: Hotmail and GMail are two common examples. They report that after entering their credentials into the login page, the page seems to get caught in some sort of redirect loop, redirecting from the login page to the site back to the login page. This pattern either continues endlessly or until an error message is displayed.
The Security Compliance Manager (SCM) is a free tool from Microsoft that enables you to quickly configure, and manage the computers in your environment using Group Policy and Microsoft System Center Configuration Manager. This version of SCM supports Windows 10, and Windows Server 2016.
LGPO.exe is a command-line utility to automate the management of local group policy objects (LGPO). Version 1.0 was released last January. The PRE-RELEASE LGPO.exe v2.0 is attached to this blog post, and adds support for Multiple Local Group Policy Objects (MLGPO) and 64-bit REG_QWORD registry values. It also adds support for /e mnemonic options to enable the GP client side extensions for LAPS, Credential Guard, and Device Guard.
As you may have seen, there has been an update to the extended support lifecycle for WSUS 3.0 SP2 (WSUS 3.2). We received feedback that ending this product’s life in July 2017 would cause a significant disruption for those Windows Server 2008/R2 deployments that planned to rely upon it until January 2020. As such, the end of life for this product is now January 2020.
Hi all,
I’m Jeff Patterson, Program Manager for Work Folders and Offline Files.
Jane wrote a blog last year which covers how to use Folder Redirection with Work Folders. The blog is great for new environments. If Folder Redirection and Offline Files are currently used, there are some additional steps that need to be performed which are covered in this migration guide.
VSCode is the primary way to edit and debug PowerShell scripts on Mac OS and Linux. If you do not have it yet, follow these instructions on GitHub on installing VSCode on Mac OS/Linux/Windows and adding its PowerShell extension.
As you have probably heard by now, Microsoft has just open-sourced PowerShell and made it available for Linux and Mac OS X. In this blog post, I will take you through the steps to download, install and run PowerShell on a Mac.
As you can see this announcement is huge – not only you can freely read and change the code of the PowerShell itself, you can build it and run it almost anywhere.
The Connect app in Windows 10 Anniversary Update gives smartphone users the ability to “cast” their screens to a PC or laptop running Microsoft’s latest version of its ever-evolving operating system. Let’s call this feature the “poor-man’s Continuum.” But, more importantly, it gives Android users something that has been solely constrained to Windows devices – the ability to mirror smartphone and tablet screens to Windows 10. Notably, this feature doesn’t work for iOS and the host device must support Miracast.
Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found
Although Microsoft provides Windows Defender as an integrated part of Windows 10 they do not mandate that as your only option.
Once you install your favorite third party anti-virus/malware solution Windows Defender gets out of the way and is turned off so it does not cause any conflicts with your scanning/protection software of choice.
In the recently released Windows 10 Anniversary Update there is a new option for those of you using third party security software that allows you to take advantage of the years worth of research Microsoft has invested into protecting systems from viruses and malware.
So as many of you may know, yesterday Microsoft released a security hotfix that changed the behavior of Group Policy. Put simply if you have a security group filtered User Group Policy Object and you also removed the “Authenticated Users” group from the policy it will no longer apply after you install MS16-072.
To build fast sites, developers need powerful tools to analyze the performance of their sites and debug issues. In-browser tools like the F12 Developer Tools are a great start and the primary tools for analyzing what’s happening behind the scenes when a page slows down. However, some scenarios require measuring performance characteristics in the context of other applications and the operating system itself. For these scenarios, we use the Windows Performance Toolkit.
IIS is a mature technology with a large amount of configuration available. Historically the configuration of IIS has been done through WMI, Appcmd, PowerShell, and graphically through IIS Manager. All of these technologies have continued to serve their purpose, allowing users to configure the web server to meet their needs. Recently the IIS team has been working on a project to open up IIS configuration even more by creating a REST API that exposes the configuration system. This API is not meant to replace any of the existing configuration access mechanisms, but stand beside them and offer an open method for interacting with IIS. The REST API communicates with HTTPS making it accessible from any device that knows how to send a web request. This allows IIS to be configured more freely and opens the door for configuration clients that were not possible before, such as mobile applications.
Today we want to not only let everyone know that we are working on a REST API for IIS, we also want to let you see it. The API that we have created has a built in tool called the API Explorer that allows those with access to the API to browse the entire API surface. This means once you have a link to the root URL of the API you can navigate to this tool and browse all of the API that is available. Here is a picture of the API Explorer in action displaying an application pool resource.
A set of functions to dump OUs, Users, Groups and GPOs from one Active Directory and mirror them to another, test Active Directory. Perfect for creating a test environment.
I’ve lost count of the number of Wi-Fi routers I’ve been through over the last ten years, most ranging from just OK to the plain terrible. When I started experiencing problems with WI-FI connectivity a few months ago, I decided once again it was time to replace my router, and after lots of research, I picked the Asus RT-AC66U.
A new update is available for Windows Server 2012 and 2012 R2. This update requires manual steps in order to complete the installation. While the KB itself covers those steps, this post provides additional details on the release.
If its happen that you like to run your honeypot on a Windows system then Honeyport is something worth to try.
Honeyports is a powershell script that will Creates a job that listens on TCP Ports specified and when a connection is established, it can either simply log or add a local firewall rule to block the host from further connections.
The script is written by John Hoyt, Carlos Perez and Greg Foss and it’s available on https://github.com/Pwdrkeg/honeyport/
Hi all, Herbert Mauerer here. In this post we’re back to talk about the built-in AD Diagnostics Data collector set available for Active Directory Performance (ADPERF) issues and how to ensure a useful report is generated when your DCs are under heavy load.