Seiten

Links

ESAE
http://aka.ms/cyberpaw
http://aka.ms/ESAE
https://docs.microsoft.com/en-gb/windows-server/identity/securing-privileged-access/securing-privileged-access-reference-material
https://gallery.technet.microsoft.com/Privileged-Access-3d072563
http://aka.ms/cleansource




Exchange
http://www.slipstick.com/

WSUS
WSUS Troubleshooting Survival Guide
WSUS Support Team Blog
WSUS Forum
WSUS in Windows Server 2012
WSUS Product Team Blog
Microsoft Update Product Team Blog

Exchange
http://msexchangeguru.com/team/

Exchange & DPM
http://www.dpmpro.de/exchange-daten-wiederherstellen-mit-dpm/


Firewall
https://sourcedaddy.com/windows-7/troubleshooting-windows-firewall.html



Disjoint Namespace
http://technet.microsoft.com/en-us/library/cc731125(v=ws.10).aspx#feedback
http://blogs.technet.com/b/askds/archive/2008/05/29/kerberos-authentication-problems-service-principal-name-spn-issues-part-1.aspx
http://blogs.technet.com/b/askds/archive/2008/05/14/troubleshooting-kerberos-authentication-problems-name-resolution-issues.aspx
http://myitpath.blogspot.de/2011/07/security-database-on-server-does-not.html

PKI
PKi documentation
https://social.technet.microsoft.com/wiki/contents/articles/987.windows-pki-documentation-reference-and-library.aspx

the basics
https://blogs.technet.microsoft.com/askds/2009/09/01/designing-and-implementing-a-pki-part-i-design-and-planning/

http://social.technet.microsoft.com/wiki/contents/articles/987.windows-pki-documentation-reference-and-library.aspx
http://social.technet.microsoft.com/wiki/contents/articles/7381.ad-cs-mmc-help.aspx
http://blogs.technet.com/b/pki/archive/2012/12/20/viewing-expired-certificate-revocation-list-crl.aspx
Pki Lab
https://technet.microsoft.com/de-de/library/hh831348(v=ws.11).aspx
key archival
https://social.technet.microsoft.com/wiki/contents/articles/7573.active-directory-certificate-services-pki-key-archival-and-management.aspx
https://blogs.technet.microsoft.com/pki/2009/08/07/understanding-key-archival/

Pki & LDAPs
https://blogs.technet.microsoft.com/russellt/2016/06/03/custom-ldap-certs/
https://support.microsoft.com/en-us/help/938703/how-to-troubleshoot-ldap-over-ssl-connection-problems
https://blogs.technet.microsoft.com/askds/2008/09/16/third-party-application-fails-using-ldap-over-ssl/
http://www.ldap389.info/en/2010/09/06/powershell-domain-controller-certificate-kerberos-authentication-template/



(Certificate Policy) CP & CPS (Certification Practice Statement)
http://www.bundesbank.de/Navigation/DE/Service/Services_Banken_und_Unternehmen/PKI/CP_und_CPS/cp_und_cps.html
https://www.ietf.org/rfc/rfc3647.txt


https://wiki.mozilla.org/CA:Information_checklist

pki und rdp
http://www.darkoperator.com/blog/2015/3/26/rdp-tls-certificate-deployment-using-gpo
http://www.derekseaman.com/2013/01/creating-custom-remote-desktop-services.html
http://www.petenetlive.com/KB/Article/0000944
http://www.rdsgurus.com/ssl-certificates/windows-2012-r2-how-to-create-a-mostly-seamless-logon-experience-for-your-remote-desktop-services-environment/
http://terenceluk.blogspot.de/2014/03/using-active-directory-gpo-to-issue.html
https://pkiworld.com/tag/rdp/
https://kb.iu.edu/d/bess
https://blogs.technet.microsoft.com/askperf/2014/01/24/certificate-requirements-for-windows-2008-r2-and-windows-2012-remote-desktop-services/
https://blogs.technet.microsoft.com/enterprisemobility/2010/04/09/configuring-remote-desktop-certificates/
https://technet.microsoft.com/en-us/library/cc771869(WS.10).aspx
https://support.microsoft.com/en-us/kb/2531138


Pki und SANs
https://blog.css-security.com/blog/hidden-dangers-certificate-subject-alternative-names-sans


SSL/TLS
https://letsencrypt.org/
https://bettercrypto.org/
https://www.ssllabs.com/ssltest/
https://www.digicert.com/sha1-sunset/
https://projects.dm.id.lv/Public-Key-Pins_calculator
https://crt.sh/
https://tlswg.github.io/tls13-spec/
https://github.com/tlswg/tls13-spec/wiki/Implementations
https://badssl.com/
http://www.heise-events.de/webinare
https://www.psw-group.de/ssl-zertifikate/

crytography
https://www.linkedin.com/pulse/users-guide-cryptography-part-six-jonathan-jenkyn

certificate internals
https://morgansimonsen.com/2013/04/16/understanding-x-509-digital-certificate-thumbprints/



CRLPeriods
https://blogs.technet.microsoft.com/pki/2008/06/04/how-effectivedate-thisupdate-nextupdate-and-nextcrlpublish-are-calculated/
CRL
https://blogs.technet.microsoft.com/xdot509/2012/11/26/pki-design-considerations-certificate-revocation-and-crl-publishing-strategies/
Server vs clientcerts
https://blogs.msdn.microsoft.com/kaushal/2012/02/17/client-certificates-vs-server-certificates/
https://www.openssl.org/docs/manmaster/apps/x509v3_config.html

delete old certificates
https://gallery.technet.microsoft.com/scriptcenter/Script-to-delete-expired-8fcfcf48



NDES
http://social.technet.microsoft.com/wiki/contents/articles/9063.network-device-enrollment-service-ndes-in-active-directory-certificate-services-ad-cs.aspx
http://www.petenetlive.com/KB/Article/0001021

OCSP
https://technet.microsoft.com/en-us/library/cc770413(v=ws.10).aspx
CRLs publishing
http://blogs.technet.com/b/configmgrteam/archive/2009/05/01/how-to-publish-the-crl-on-a-separate-web-server.aspx
PKI and Powershell
http://pspki.codeplex.com/


Best Practices for Implementing a Microsoft Windows Server 2003 Public Key Infrastructure
https://technet.microsoft.com/en-us/library/cc772670(v=ws.10).aspx

Guidance for Determining Key Lengths, Validity Periods, and Signing Algorithms
http://www.keylength.com

Kerberos
http://www.msxfaq.de/verschiedenes/kerberos.htm
http://www.adopenstatic.com/faq/
http://blogs.technet.com/b/askds/archive/2008/03/06/kerberos-for-the-busy-admin.aspx
https://tools.ietf.org/html/rfc1510
https://technet.microsoft.com/en-us/library/cc772815(v=ws.10).aspx
http://www.roguelynn.com/words/explain-like-im-5-kerberos/

AD

Design

http://technet.microsoft.com/en-us/library/cc754678%28v=WS.10%29.aspx

Schema exportieren und in testumgebung updaten 
http://technet.microsoft.com/en-us/magazine/2009.04.schema.aspx

Recovery

http://www.digitalforensics.be/blog/?s=Follow+the+procedure+below+to+fix+Microsoft+Active+Directory+database+problems+%28c
Recovering Your Active Directory Forest

Security

https://adsecurity.org/
https://www.dsinternals.com/en/
https://www.harmj0y.net/blog/


AD Papierkorb

Active Directory Recycle Bin Step-by-Step Guide

Snapshot

AD Snapshot

Troubleshooting

LSASS.exe CPU high
https://blogs.technet.microsoft.com/askds/2007/08/20/troubleshooting-high-lsass-cpu-utilization-on-a-domain-controller-part-1-of-2/
https://blogs.technet.microsoft.com/askds/2007/08/23/troubleshooting-high-lsass-cpu-utilization-on-a-domain-controller-part-2-of-2/
https://blogs.technet.microsoft.com/askds/2016/04/14/are-your-dcs-too-busy-to-be-monitored-ad-data-collector-set-solutions-for-long-report-compile-times-or-report-data-deletion/
https://gallery.technet.microsoft.com/Event-1644-reader-Export-45205268
https://msdn.microsoft.com/en-us/library/bb727054.aspx
https://support.microsoft.com/de-de/kb/2550044
https://blogs.msdn.microsoft.com/ntdebugging/2011/04/27/the-mystery-of-lsass-exe-memory-consumption-when-all-components-get-involved/
https://blogs.technet.microsoft.com/askpfeplat/2014/03/09/another-troubleshooting-adventure-more-real-life-memory-pool-leaks/

Troubleshooting:account lockout

http://jackstromberg.com/tag/microsoft_authentication_package_v1_0/
https://support.microsoft.com/en-us/help/109626/enabling-debug-logging-for-the-netlogon-service


Account lockout
https://blogs.technet.microsoft.com/pie/2016/10/02/the-source-of-my-account-lockouts-are-my-domain-controllers/

Trusted sites
http://evilgpo.blogspot.de/2016/03/internet-explorer-site-to-zone.html

Tools
Ad replication
http://blogs.technet.com/b/deds/archive/2012/06/26/neu-im-sortiment-active-directory-replication-status-tool-adreplstatus.aspx

Netzwerkmonitoring
http://blogs.technet.com/b/messageanalyzer/archive/2013/02/15/microsoft-message-analyzer-beta-2-is-released-build-5950.aspx
http://blogs.msdn.com/b/canberrapfe/archive/2012/03/31/capture-a-network-trace-without-installing-anything-works-for-shutdown-and-restart-too.aspx
netsh trace start capture=yes

tracelog
https://docs.microsoft.com/en-us/windows-hardware/drivers/devtest/example-5--enabling-trace-providers

70-410
http://borntolearn.mslearn.net/certification/server/w/wiki/491.410-installing-and-configuring-windows-server-2012.aspx#fbid=PHCLu1bnrFO

70-411
http://borntolearn.mslearn.net/certification/server/w/wiki/492.411-administering-windows-server-2012.aspx#fbid=PHCLu1bnrFO

70-412
http://borntolearn.mslearn.net/certification/server/w/wiki/493.412-configuring-advanced-windows-server-2012-services.aspx#fbid=PHCLu1bnrFO

Powershell
http://www.powershellpraxis.de/
http://powershell.com/cs/blogs/ebookv2/default.aspx

TOOLS
NTFS
http://cjwdev.co.uk/Software/NtfsReports/Info.html (NTFS Permission Reporter)

Zertifizierung
Foren
http://www.certforums.com/

KMS
http://technet.microsoft.com/en-us/library/ee939272.aspx


Penetration Testing / Hacking
http://www.netspi.com/blog/
https://www.exploit-db.com/
https://www.shodan.io/

windows kennwörter
http://bernardodamele.blogspot.de/

Allgemein
http://www.nogeekleftbehind.com/
http://www.pcidatabase.com/

DNS
DNS Aging and Scavenging
https://technet.microsoft.com/en-us/library/cc759204(WS.10).aspx
https://technet.microsoft.com/en-us/library/cc757041.aspx
http://blogs.technet.com/b/networking/archive/2008/03/19/don-t-be-afraid-of-dns-scavenging-just-be-patient.aspx

Labs
http://social.technet.microsoft.com/wiki/contents/articles/1262.test-lab-guides.aspx
https://technet.microsoft.com/en-us/virtuallabs/bb467605.aspx

BSOD - Analyse
http://www.dedoimedo.com/computers/windows-bsod.html 

Powershell
https://www.powershellgallery.com/

Cybersecurity
https://www.hacking-lab.com/events/
https://www.arneswinnen.net/

GPO
debugging
https://blogs.technet.microsoft.com/askds/2015/04/17/a-treatise-on-group-policy-troubleshootingnow-with-gpsvc-log-analysis/
audit
https://blogs.msdn.microsoft.com/canberrapfe/2012/05/01/auditing-group-policy-changes/

Windows Internals
https://channel9.msdn.com/Shows/Defrag-Tools

System Center Operations Manager
http://social.technet.microsoft.com/wiki/contents/articles/20796.the-system-center-2012-r2-operations-manager-survival-guide.aspx
Dashboards (technet)
https://www.youtube.com/watch?v=4Z5g9enyVWY


registry
http://research.omicsgroup.org/index.php/Windows_Registry#Command_line_editing


TO Watch
https://channel9.msdn.com/Series/System-Center-2012-R2-Operations-Manager-Management-Packs
https://channel9.msdn.com/Series/Tipps--Tricks-fr-ausgewhlte-SystemCenter-Produkte/SCOM-Haeufige-Probleme-und-Overrides

blogs
https://morgansimonsen.com/
https://www.symantec.com/blogs/
https://www.dsinternals.com/en/
https://blogs.technet.microsoft.com/the_9z_by_chris_davis/






Keine Kommentare:

Kommentar veröffentlichen