Posts

Windows Server 2019: Active Directory Rights Management Service (Part 2)

Windows Server 2019: Active Directory Rights Management Service (Part 2) // ************************* // Metadata: // DC31:- Domain Controller (Yi.vn) - IP: 10.0.0.31 // DC32:- Exchange Server - IP: 10.0.0.32 // DC33:- Domain Member (Install AD RMS) - IP: 10.0.0.33 // DC34:- Domain Member (Install Certificate Server) - IP: 10.0.0.34 // WIN101, WIN102 clients // Turn off firewall for all // ************************* 1) DC33 > File Explorer > C: > Create New Folder > Folder Name: Policy > Policy Properties - Sharing > Share > Choose people on your network to share with:- Everyone (Permission Level: Read/Write) > Share > Policy:- \\DC33\Policy   > Done > 1) DC33 > Server Manager > Tools > Active Directory Rights Management Services > Active Directory Rights Management Services - dc33.yi.vn (local) - Exclusion Policies - (right-click) Users > Enable User Exclusion > dc33.yi.vn (local) - Exclusion Policies - (right-cli...

Windows Server 2019: Active Directory Rights Management Service (Part 1)

Windows Server 2019: Active Directory Rights Management Service (Part 1) // ************************* // Metadata: // DC31:- Domain Controller (Yi.vn) - IP: 10.0.0.31 // DC32:- Exchange Server - IP: 10.0.0.32 // DC33:- Domain Member (Install AD RMS) - IP: 10.0.0.33 // DC34:- Domain Member (Install Certificate Server) - IP: 10.0.0.34 // WIN101, WIN102 clients // Turn off firewall for all // ************************* // -------- // DC31 // -------- 1) DC31 > Server manager > Tools > Active Directory Users and Computers > Active Directory Users and Computers - Yi.vn - Services > New Object User:- Create in:- Yi.vn/Services - Last Name: rmsservices - User logon name:- rmsservices @Yi.vn > Password: **** **** - (x) Password never expires > 1) a) Active Directory Users and Computers - Yi.vn - Services - Name:              Type: rmsservices   User // -------- // DC34 - Inst...

Firefox tips: Turn off search suggestions

Firefox tips: Turn off search suggestions 1) about:config 1) a) Set browser.urlbar.maxRichResults to 0 1) b) Set browser.urlbar.oneOffSearches to false

Firefox Tips: Howto re-enable all disabled extensions

Firefox Tips: Howto re-enable all disabled extensions // If you're using Ubuntu, just following step 1) else // goto step 2) // ############### // Step 1 // ############### 1) about:config 1) a) Set xpinstall.signatures.required to false . // ############### // Step 2 // ############### 2) about:config 2) a) Set devtools.chrome.enabled to true . 2) b) Open browser console by pressing:- CTRL + Shift + J 2) b) i) or press F12 (then goto Console) 2) c) Copy & paste the following into browser console:- // Re-enable *all* extensions     async function set_addons_as_signed() {         Components.utils.import("resource://gre/modules/addons/XPIDatabase.jsm");         Components.utils.import("resource://gre/modules/AddonManager.jsm");         let addons = await XPIDatabase.getAddonList(a => true);       ...

Windows Server 2016: Group Policy settings to trust a self signed certificate

Windows Server 2016: Group Policy settings to trust a self signed certificate 1) [Server Manager] > Tools > Group Policy Management > Group Policy Management - Forest: widget.internal - Domains - (right-click) widget.internal > Create a GPO in this domain, and Link it here > New GPO - Name: WorkCertTrust > OK > 2) [Server Manager] > Tools > Group Policy Management > Group Policy Management - Forest: widget.internal - Domains - widget.internal - (right-click) WorkCertTrust > (x) Link Enabled  | Edit > Group Policy Management Editor - WorkCertTrust (DC2.WIDGET.INTERNAL) - Computer Configuration - Policies - Windows Settings - Security settings > (left-hand side) Public Key Policies - (right-click) Trusted Root Certification Authorities > Import > File to import - File name: \\DC2\NETLOGON\work.pfx > Private Key Protection - Password:  xxx xxx  | (x) Mark this key as exportable. this will allow you to back...

Windows Server 2012: Active Directory Certificate Services

Windows Server 2012: Active Directory Certificate Services 1) Server Manager > Manage > Add Roles and Features > Server Selection - Name: LON-CA1 | IP Address: 172.16.0.40 | Operating System: Microsoft Windows Server 2012 R2 > Server Roles - (x) Active Directory Certificate Services > Add Features > AD CS - Role Services - (x) Certificate Authority  | (x) Certificate Enrollment Policy Web service | (x)  Certificate Enrollment Web service | (x) Certification Authority Web Enrollment | (x) Network Device Enrollment Service | (x) Online Responder > Add Features > Next > Install > 1) i) Results - Configure Active Directory Certificate Services on the destination server > 1) ii) AD CS Configuration - Credentials - Credentials: LON-CA1\Administrator >  AD CS Configuration - Role Services - Select Role services to configure -  (x) Certification Authority > Next > Setup Type - (x) Standalone CA >...

Windows Server 2012: Active Directory Domain Service Sites and Replication

Windows Server 2012: Active Directory Domain Service Sites and Replication // Creating site 1) [Windows Server 2012] > Server Manager > Tools > Active Directory Sites and Services > Active Directory Sites and Services - (right-click) Sites > New Site > Create in: Adatum.com/Configuration/Sites | Name: PARIS-SITE | Select a site link object for this site. Site link objects are located in the Sites/Inter-SiteTransports container:-             Link Name:                       | Transport (click)  DEFAULTIPSITELINK     IP 1) i)  OK > // Creating site subnet 2) [Windows Server 2012] > Server Manager > Tools > Active Directory Sites and Services > Active Directory Sites and Services - Sites - (right-click) Subnets >New Subnet > Create in: Adatum.com/Configuration/Sites/Subnets | Prefix: 172.16.4.0/24 | Prefix name ...