Windows Server 2012 R2 and IIS affected by Heartbleed exploit? [closed]

IIS is not vulnerable as it does not use the OpenSSL library Update, quote Troy Hunt: Not all web servers are dependent on OpenSSL. IIS, for example, uses Microsoft’s SChannel implementation which is not at risk of this bug. Does that mean that sites on IIS are not vulnerable to Heartbleed? For the most part, … Read more

Powershell: Set a Scheduled Task to run when user isn’t logged in

I’m not a fan of embedding my credentials into a script (which a few other example here do) and additionally, you generally can’t do this from something like Packer or some other system/configuration automation or in a cloud provider with an pseudo-randomly generated password. Plus, generally, I feel hardcoding your credentials into a script or … Read more

Windows Server 2012 R2 prevent automatic logoff due to inactivity

In brief Unlock/turn on console log display off timeout feature in Power Option Set timeout to 0 to turn it off. Detail Steps Unlocked the missing Power Settings feature in Server 2012. Open the following registry key – HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\7516b95f-f776-4464-8c53-06167f40cc99\8EC4B3A5-6868-48c2-BE75-4F3044BE88A7 Set the following value – Attributes => 2 Now open Control Panel>Power Options>Change Plan Settings>Change Advanced … Read more

Windows 2012 can’t validate forwarders without a root zone?

I tried to reproduce this on both Windows 2012 and Windows 2012 R2 but couldn’t get the same end result. I can confirm the initial validation error (An unknown error occurred while validating the server.), and I can see the strange query for . IN SOA, but clicking “OK” at that point appears to work … Read more

Technical details for Server 2012 de-duplication feature

As I suspected, it’s based in the VSS subsystem (source) which also explains it’s async nature. The de-dupe chunks are stored in \System Volume Information\Dedup\ChunkStore\*, with settings in \System Volume Information\Dedup\Settings\*. This has significant impacts to how your backup software interacts with such volumes, which is explained in the linked article (in brief: w/o dedupe … Read more

How to disable TLS 1.0 in Windows 2012 RDP

Disabling TLS is a system-wide registry setting: https://technet.microsoft.com/en-us/library/dn786418.aspx#BKMK_SchannelTR_TLS10 Key: HKLM SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server Value: Enabled Value type: REG_DWORD Value Data: 0 Also, the PCI requirement for disabling early TLS does not go into effect until June 30, 2016. Internet Explorer is one product I know of that has a separate configuration option for the TLS/SSL encryption … Read more

Why is my domain controller causing my router to send advertisements for Unique Local Addresses?

While I still don’t know exactly why this happened (and would welcome explanations!) it seems to be fixed now. I went over the networking configuration with a fine tooth comb, and discovered to my chagrin that the default gateway had a typo in it! [dc1]: PS C:\Users\Administrator\Documents> Get-NetRoute -PolicyStore PersistentStore -AddressFamily IPv6 ifIndex DestinationPrefix NextHop … Read more