Windows · Remote Desktop Services Remote Desktop Services: Session Host vs Virtualization Host An architectural comparison of Remote Desktop Session Host and Remote Desktop Virtualization Host, exploring multi-session density, hypervisor-based…
Read More RDS: Session Host vs Virtualization Host
Windows · Active Directory Active Directory Trusts: Types, Transitivity, and SID Filtering Architecture Active Directory trusts establish authentication conduits across organisational boundaries — governing how Kerberos tickets traverse domains, how…
Active Directory · Kerberos Troubleshooting Fixing KRB_AP_ERR_MODIFIED: Diagnosing Broken Secure Channels and Computer Password Mismatches A technical guide to understanding, diagnosing, and resolving Kerberos 0x24 (KRB_AP_ERR_MODIFIED) errors caused by machine…
Active Directory · Troubleshooting LSASS High CPU and Memory: Causes, Isolation, and Fixes When the Local Security Authority Subsystem Service chokes a domain controller, the process itself is rarely broken…
Windows · FSMO Roles Active Directory FSMO Roles Part 2: Placement Best Practices and Forest Design Strategic placement of Active Directory operations masters across physical sites and server hardware eliminates…
Windows · FSMO Roles Active Directory FSMO Roles Part 3: Step-by-Step Guide to Transferring and Seizing Roles Master the operational procedures for transferring and seizing Active Directory operations masters via…
Active Directory · Firewall Ports Active Directory Firewall Ports — The Complete Reference Every port a domain, its member servers, and the enterprise stack bolted on top of it actually…
Homelab · Part 13 Homelab Build — Part 13 — Proxmox High Availability: HA Groups, Fencing, and Failover Architecture Transform your standalone homelab hypervisor into a resilient multi-node cluster by…
Active Directory · Troubleshooting Troubleshooting Replication Topology Errors: Resolving Events 1645, 1925, and KCC Failures Diagnose and resolve Active Directory Knowledge Consistency Checker failures, Event ID 1925 replication link errors,…
Homelab · Part 15 Homelab Build — Part 15 — Exposing Services: Setting Up a Reverse Proxy (Nginx Proxy Manager & HAProxy) Design and deploy an enterprise-grade DMZ reverse proxy…
Homelab · Part 14 Homelab Build — Part 14 — Remote Access: Adding a VPN via pfSense (WireGuard & OpenVPN) Secure external access into your homelab by deploying a high-performance…
Windows · FSMO Roles Active Directory FSMO Roles Part 1: Architecture and The 5 Roles Explained Active Directory relies on multi-master replication for day-to-day operations, but five specialised operations master…
Homelab · Part 12 Homelab Build — Part 12 — Putting It Together: Full Topology Recap A complete architectural synthesis of the homelab: trace how pfSense, redundant Domain Controllers, Enterprise…
Windows Server · Active Directory Troubleshooting Group Policy Event 1058: Resolving CSE Download Failures Diagnose and resolve Event ID 1058 errors where Client-Side Extensions fail to query or download gpt.ini…
Homelab · Part 11 Part 11 — Monitoring the Lab: A Lightweight Monitoring Stack Watching the Whole Environment Deploy a low-overhead, high-visibility telemetry stack using Prometheus, Node Exporter, Uptime Kuma,…
Homelab · Part 10 Homelab Part 10: Active Directory & Infrastructure Backup Strategy with Proxmox Backup Server A complete guide to backing up domain controllers, virtual machines, and Active Directory…
Homelab · Part 7 Homelab Build — Part 7 — Certificate Authority With time trustworthy across the forest, this part gives the lab its first internal certificate authority: the root-versus-subordinate…
Windows · Active Directory Kerberos Delegation Types Unconstrained, constrained, and resource-based delegation all let one service reuse a user’s identity to call a second service, but each draws the trust…
Oracle Linux · ZFS Oracle Linux ZFS: OpenZFS on UEK Storage Guide A practical guide to deploying and tuning OpenZFS on Oracle Linux using the Unbreakable Enterprise Kernel (UEK), covering…
Active Directory · Disaster Recovery Active Directory Recycle Bin Restore: Recovering Deleted Objects Correctly Learn how Active Directory Recycle Bin preserves attributes during object restoration and how to safely recover…
Homelab · Part 9 Enterprise File Services: SMB Shares, DFS Namespaces, and Granular Permissions Master file infrastructure design using SMB 3.x, Distributed File System (DFS) Namespaces, and Access-Based Enumeration to…
Homelab · Part 8 Part 8 — Group Policy Basics: First GPOs, Password Policies, and Basic Hardening Master Group Policy architecture, LSDOU evaluation, Fine-Grained Password Policies (FGPP), clean OU structure,…
Windows · Password Policy Fine-Grained Password Policies (PSOs) Fine-grained password policies let a single Active Directory domain apply different password and lockout rules to different groups of users — stricter…
Homelab · Part 6 Homelab Build — Part 6 — Time Hierarchy dc01 has been quietly inheriting whatever time its VM host happened to have since Part 4 — this…