Adventures of a CTO Active Directory Kerberos KDC certificate selection Discover the intricacies of Active Directory's Kerberos KDC certificate selection for PKINIT, including techniques for choosing a specific certificate, analysis using IDA Pro, and PowerShell cmdlets for managing certificates. This deep dive explores the challenges and solutions for ensuring the right KDC certificate is used, overcoming the unpredictability of certificate selection in Windows environments. September 6, 2023
Adventures of a CTO Active Directory LDAPS certificate selection deep dive A deep dive into Active Directory LDAPS certificate selection, detailing the technical intricacies of ensuring secure communications through TLS. This guide covers the validation and selection process, including PowerShell scripts for certificate management, aiming to clarify and resolve common issues with LDAPS implementation. August 12, 2023
Adventures of a CTO RDP NLA with Azure AD: The PKU2U Nightmare This post tackles the challenges of RDP Network Level Authentication (NLA) with Azure AD, labeled as the PKU2U nightmare, offering detailed solutions for common problems. It addresses enabling PKU2U authentication, Azure AD workplace joining, the correct Azure AD username format, and third-party application support, providing both technical insights and practical steps to mitigate these issues in Azure AD environments. August 10, 2023
Adventures of a CTO RDP Smartcard Logon: User Name Does Not Exist Navigate through the confusion of "the specified user name does not exist" error during RDP smartcard logon, offering insights into common misinterpretations and actionable solutions. This post breaks down error messages, suggests disabling strict KDC validation, and guides on certificate trust validation, ensuring successful authentication with practical steps and PowerShell commands. August 4, 2023
Adventures of a CTO PowerShell Remoting Trusted Hosts: What does it mean? This guide demystifies the "TrustedHosts" setting in PowerShell remoting, explaining its significance and how to configure it to avoid common errors. It offers solutions for enabling remote connections, particularly when Kerberos or HTTPS isn't used, ensuring security and connectivity for non-domain-joined machines or across different domains. June 17, 2023
Adventures of a CTO Windows Hello: Cloud Kerberos Trust, or Key Trust? Unpack the dilemma between Cloud Kerberos Trust and Key Trust in Windows Hello for Business deployments. This post navigates through troubleshooting login issues, clarifying deployment types, and offering solutions for transitioning between deployment models with Group Policy and PowerShell, ensuring a smoother Windows Hello setup and operational reliability. May 15, 2023
Adventures of a CTO Fix Kerberos Machine TGT Fetching on Startup Resolve RDP NLA issues on domain-joined devices outside the corporate network by configuring a scheduled task to fetch the Kerberos machine TGT at startup. This practical solution ensures secure, remote desktop access without compromising network security, detailed with step-by-step instructions and troubleshooting tips. February 26, 2023
Quick tips Extending Microsoft RDP client with API hooking in Remote Desktop Manager Out of all the protocols and platforms supported by Remote Desktop Manager, RDP on Windows is by far the most popular. August 18, 2022
News Remote Desktop Manager now supports MSRDC: enhanced RDP client options Discover the new support for MSRDC in Remote Desktop Manager. Learn how to leverage this modern RDP client for better remote access and improved connection management on Windows. March 3, 2022
Adventures of a CTO Disabling Web Proxy Auto Detect (WPAD) Correctly Explore the correct method to disable Web Proxy Auto Detect (WPAD) in Windows to enhance security without breaking essential components. This guide clarifies common misconceptions and provides a safe approach using registry modifications, avoiding potential pitfalls associated with service deactivation. February 22, 2022
Quick tips Finding secret RDP registry keys using IDA Free Uncover secret RDP registry keys with IDA Free. Follow our guide to enhance your secure RDP configurations and improve your remote access security. December 8, 2021
News Wayk is dead, long live Wayk! Summertime is the perfect time for vacation and relaxation, but it is also an opportunity to take a step back and reflect on what is to come. Building a new product from scratch and make it commercial... July 23, 2021
Security Protecting RDP passwords from Mimikatz with Remote Credential Guard Protect RDP passwords from Mimikatz attacks with Remote Credential Guard. Follow our guide to configure this feature in Remote Desktop Manager and boost your remote access security. May 25, 2021
Quick tips Set up a local PowerShell module repository: no server needed Learn how to create a local PowerShell module repository without a server. Follow our step-by-step guide to simplify module management and enhance your PowerShell scripting efficiency. March 30, 2021
Quick tips Secure Active Directory: disable LDAP unauthenticated binds Learn why disabling LDAP unauthenticated binds in Active Directory is crucial for server security. Follow our step-by-step guide to enhance your network's protection. March 17, 2021
Quick tips Configure secure LDAP (LDAPS) in Active Directory with Let's Encrypt Enhance your Active Directory security by configuring Secure LDAP (LDAPS) with Let's Encrypt certificates. Follow our detailed tutorial to ensure safe and encrypted LDAP traffic. March 10, 2021
Quick tips PowerShell Remoting Over SSH, Without SSH! A few months ago, PowerShell 7 came out, finally bridging the gap between Windows PowerShell and PowerShell Core. It is now possible to use the same PowerShell everywhere (Windows, macOS, Linux!) whil... July 21, 2020
Quick tips [Insider Series] Announcing the MongoDB CWAL Rust driver project The Black Friday deals are over and 2019 is coming to an end, but we still have something in store to satisfy the Rust developers among you. Today, we are announcing MongoDB CWAL, a community-supporte... December 5, 2019