The patch was released back in 2021 to meditate a remote code execution vulnerability, aka PrintNightmare . After the patch was installed, only accounts that have local admin rights could install or update any printer driver from a printer server. A UAC prompt will pop up every time you try to install a printer from a printer server. To bypass that, [ ] The post Group Policy to Bypass the UAC…
Most of the time, I manage the licensing part of Microsoft 365 manually, but from time to time, using PowerShell can be easy and clean. To view account license and service details First, connect to Microsoft Graph. Connect-Graph To list all license plans you purchased with part number and ID, Get-MgSubscribedSku Select-Object SkuPartNumber, SkuID To list the services that [ ] The post Managing…
If you use a shared mailbox and sometimes wonder who deleted some of the emails from the inbox, you can search the audit log to find out. Before you go any further, check if you have turned on the Audit Log Search in your tenant first. Get-AdminAuditLogConfig Format-List UnifiedAuditLogIngestionEnabled If you haven t, do this to turn it on. Set-AdminAuditLogConfig [ ] The post Audit Email Deletion…
When it comes to moving data between different servers, being able to assign a second server name to the same server could be very useful. It s not only possible but fairly easy to do as well. Adding alternate DNS name to a Server If DNS name resolution is the only thing you need, you can either manually add an A [ ] The post Adding Multiple Server Names to A Windows Server first appeared on KC's…
The IIS server on Windows doesn t have a feature that can automatically redirect traffic out of the box. There are multiple ways to accomplish it but the easiest way is probably to use a module called URL Rewrite. Go to the URL Rewrite Module site to download the installation file and run it on a server you want to enforce [ ] The post Enforcing HTTP to HTTPS on IIS first appeared on KC's Blog .
For internal-use IIS-based sites, you can enable HTTPS by self-signing a certificate and distributing it through the Group Policy so you can avoid seeing warning messages like this. Self-Signing a Certificate Simply open an elevated PowerShell window and run the following command to self-sign a 5-year certificate to the certificate store on the local machine. New-SelfSignedCertificate -DnsName…
When a new computer model comes along, your deployment may fail and end up like this. If that s the case, it s time to add the drivers of the new computer model to the MDT system. Ideally, you will need two sets of drivers for that new device, one for the WinPE bootable drive and one for regular deployment. Download these [ ] The post MDT – Inject Out-of-Box Drivers for New Computer Models first…
This is how to send emails from an app or device not named Outlook through the Microsoft 365 network. According to Mail Flow Best Practices, there are 3 options available. SMTP Auth If you can deal with Modern Authentication in the form of OAuth, this option provides you with the most reliable email delivery. And you do need a licensed [ ] The post Options to Send Emails using Microsoft 365 first…
Generally speaking, in-place upgrading from one server version to another usually goes almost perfectly, given that the upgrade path is supported. You can just mount an ISO image and go with it. But when the server you are upgrading is a domain controller. There are other things to consider before going ahead. Pre-upgrade First, if you have Azure (Entra) AD [ ] The post In-Place Upgrading A…
If you don t have a software deployment tool, such as PDQ Deployment, uninstalling a program remotely on a computer could be painful. With PowerShell, it could make the process a lot easier. Uninstalling a program via WMI First, let s see how to view the installed program. Get-CimInstance -Class Win32_Product -ComputerName $computername To specify which program, you can pipe the result [ ] The…