Editor’s Note: CyberArk Secrets Hub is a relatively new product designed to unify secrets management across hybrid and multi-cloud environments. It supports syncing secrets from AWS, Azure Key Vault, and more, into a centralized, policy-controlled interface. Last year, I set up CyberArk Secrets Hub as part of a proof-of-concept (POC) with support from third party…
Category: Trouble Shooting
Microsoft will release security update in March 2020 for all supported Windows platforms that will enable LDAP channel binding and LDAP signing on Active Directory servers by default. The DC will reject Simple Authentication and Security Layer (SASL) LDAP binds that do not request signing (integrity verification) or to reject LDAP simple binds that are…
After I deployed security updates via SCCM server, I found some servers couldn’t find the updates. On the SCCM server console, I also saw some servers have no client installed, but I clearly knew I installed them recently. These servers were virtual machines created by other technician in last 2 or 3 months. I remembered…
My admin account got locked out again. I thought I fixed this issue and posted an article at http://www.itreliable.com/wp/its-really-odd-ad-admin-account-got-locked-by-configuration-manager-health-evaluation-job/ But something still caused the issue, not as often as it was. I checked the time it happened and I found this event in the Event Viewer. Subject: Security ID: S-1-5-18 Account Name: DC201$ Account Domain: AD Logon…
Since last week, I could not connect to 2 remote desktop servers which are in a different city. The error message was “Remote Desktop can’t connect to the remote computer for one of these reasons:” With many years experience, I could tell it’s network related issue. As the issue happening, the servers were still in…
Since last Monday the same admin account got locked every night. Windows Event Messages – — Event 1 of 1: Log Name: Security Source: Microsoft-Windows-Security-Auditing Logged: 03/09/2019 00:35:58 Event ID: 4740 Level: Audit Success User: Computer: ABCDC1.AD.ABC.COM A user account was locked out. Subject: Security ID: S-1-5-18 Account Name: DC201$ Account Domain: AD Logon ID:…
In last round of server patching, I had more than 40 servers running Microsoft Windows Server 2008 R2 Standard SP1 failed to install KB4093118 which is 2018-04 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4093118). I worked with Microsoft support with one server and solved the issue. PROBLEM: Failed to Install KB4093118 on…
I started to take over the responsibility of server patching after a server admin left recently. We use SCCM 2012 to patch servers. I met a few servers had the SCCM client certificate none issue. But not all fixes are same. The below screen shot shows the issue. Server A had this issue after I updated the SCCM client. There is another server B had…
I had this issue on several servers running 64 bit Windows Server 2008 R2 SP1 standard edition. It happened when I manually run IE11-Windows6.1-x64-en-us.exe to install Internet Explorer 11. I followed the Internet Explorer Troubleshooter page and checked Prerequisite updates for Internet Explorer 11. I have downloaded all required updates and run the files to install. Most…
This is an wired issue I had recently when I was working on a Windows domain decommission project. Let me use company.local, ad.company.local and abc.com as the example. ad.company.local is the child domain of company.local. There are two way trusts between abc.com and company.local domain. abc.com is the old domain. All most all computers are in ad.company.local…