What is the Local Administrator Password Solution? Simply put, Microsoft’s LAPS tool randomises the local administrator account on each computer and stores the new password on the computer object in Active Directory. Specifically, part of the installation process extends your Active Directory schema to include two new values: ms-Mcs-AdmPwd Stores the current Administrator password. ms-Mcs-AdmPwdExpirationTime […]
The OneDrive for Business team has made a number of changes to support automatic configuration of OneDrive, including support for automatically signing in, configuring known folder migration, enabling offline files, and more. But since the OneDrive client is configured via GPO and not MDM policies, that meant using some rather nasty-looking custom OMA-URI policies in […]
Remember when Windows Server 2008 R2 was released, and one of the exciting new features was Managed Service Accounts? Managed Service Accounts (MSAs) held so much promise – automatic password management and automatic SPN registration. Remember all of those service you have in the domain, that are over-privileged, and whose passwords haven’t changed in the past 5 […]
Microsoft continues to deliver it’s password-less promise and introduces native FIDO2-based authentication to Windows 10 & Azure AD. “There is no doubt that over time, people are going to rely less and less on passwords. People use the same password on different systems, they write them down and they just don’t meet the challenge for […]
As part of the new updated release of administrative templates that will let you use Intune to configure select Group Policy settings for Windows PCs. These templates use the Policy Configuration Service Provider (CSP) to provide up to 2500 additional settings from Office, Windows, and OneDrive. With the ADMX based policies in Intune , we […]
Recently on 2 of my machines, I started noticing the C:\ space drop quickly over a week. Running my script (ClearLogs) removes about 30-40GB but on this 600GB drive, pretty much 500GB has been eaten up. Checking through each folder, I came across this folder in the following location: C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\Mailbox\Routing It has over […]
Quick tip: In your organization, you get a call from a departmental managers secretary to advise he/she forget to set there Out of Office and have requested you to do so. To set it, quickly launch the Exchange Management Shell (EMS) and run the following command: Set-MailboxAutoReplyConfiguration -Identity User1 -AutoReplyState Enabled -InternalMessage “Playing golf with […]
Greetings folks! Approximately four-score and seven years ago (in cloud-years), I posted a blog with a stated intention of it being the first in a series about the modern Microsoft enterprise productivity platform. I assure you, that intention remains but it’s just taken me a teeeeeeeny bit longer than I’d expected to get to […]