How to enable Windows Time Service Auditing

Windows Server
Accurate time in a domain environment is essential for authentication between clients and servers to work correctly. Kerberos v5 protocol requires a tolerance of less than 5 minutes, anything more than this and you will get authentication errors.

I’ve recently been investigating a a server who’s time leaped 28 days into the future! So wanted to start auditing the Windows Time service to see what made the change.

So in this blog post I’ll show you how to enable Windows Time service auditing.

Continue reading

Dell EMC Server Update Utility SUU 17.10.00 released

Dell Server Update Utility

The latest version of Dell EMC Server Update Utility (Dell SUU) 17.10.00 was released on the 17th October 2017. The Dell EMC SUU is an application used to help patch Dell PowerEdge servers. It will compare currently installed drivers and firmware with those available on the mounted iso file.

Continue reading

WatchGuard Fireware v12.0.1 released

watchguard

Update – 10/11/17 A new build of 12.0.1 (build 546110) has been released for M200 and M300 devices. If you haven’t updated already, maybe wait a week to make sure this build is ok before upgrading. Having a remote Firecluster die on you isn’t fun, as happened with our upgrade to the original 12.0.1 Fireware!

Fireware 12.0.1 builde 546110 M200 M300 issue

Update – 07/11/17 don’t install 12.0.1 on a M200 or M300 Firecluster yet. The download has been temporarily pulled from the WatchGuard website for these products only. 

WatchGuard Fireware v12.0.1 was released on 31 October 2017. This replaces the previous version of 12.0.0.

Full release notes can be found here. Please read them before upgrading! Your Firebox must be running, XTM v11.7.5, v11.8.4 or v11.9 or higher before upgrading. Continue reading

VMware vCenter Server Build Numbers and Lifecycle Matrix

vmware

I’m still doing a lot of VMware work at the moment, so to go alongside the ESXi build numbers blog post, below is a list of vCenter Server Build numbers, and Lifecycle support matrix for them.

The latest version is vCenter Server 6.5 Update 1 released 27th July 2017.

Below is a snapshot of the current versions as of 24 October 2017.

As with any new software test in a development environment first before upgrading to a new major version, let others lead the way on the bleeding edge and wait for Patch 1 to be released.

Lifecycle Matrix
Version 6.5
Version 6.0
Version 5.5
Version 5.1
Version 5.0 Continue reading

Exchange 2010 SP3 Update Rollup 18 installation tips

Microsoft Exchange 2010 SP3 Update Rollup 11 Installtion tips

Microsoft released the Exchange 2010 SP3 Update Rollup 18 on 6 July 2017.

I installed Update Rollup 18 on my test SBS 2011 server this morning and it took 11 minutes 30 seconds from start to finish, so I wouldn’t expect it to take much longer than this in production.

Please test before installing into your production environment. Maybe even wait a few days or a week or two from the release date to make sure the QA is up to scratch on it.

For migrations to Exchange 2016, Exchange 2010 SP3 Update Rollup 11 is the minimum version that will be supported in a coexistance environment.

Continue reading

Dell EMC Server Update Utility SUU 17.07.00 released

Dell Server Update Utility

EDIT: Version 17.10 has now been released, see the post Dell EMC Server Update Utility SUU 17.10 released.

The latest version of Dell EMC Server Update Utility (Dell SUU) 17.07.00 was released on the 7th July 2017. The Dell EMC SUU is an application used to help patch Dell PowerEdge servers. It will compare currently installed drivers and firmware with those available on the mounted iso file.

Continue reading

PowerShell: How to use Get-ADUser to list all recently created accounts (and recently changed accounts)

PowerShell

For the next couple of posts I’ll be looking into AD security and auditing. In this article we’ll look at how to use Get-ADUser to list all recently created accounts.

With the increasing number of cyber attacks, security is at the top of most IT departments agenda. There are many checks you can perform to make sure AD is safe and secure, and that only valid or approved modifications have been made to user accounts. I’ll look at AD auditing in a future post, but this will be a handy snippet of PowerShell to help you identify recently created AD accounts, and a bonus bit of code to identify recently modified accounts!

Continue reading