Users are evils, the weakest link in the whole security defense system, myself included. So the best way to stop them from making stupid mistakes is to take away their ability to do so. That means, no more local admin rights, which has been the best practice for quite some time. To check what are the members in my Local […]
Cached credentials are extremely useful for laptops that don’t always connect to their domain controls. When you log into one that is outside of your network, Windows checks if the entered username and password match the local cached copy and will let you in if it does. But it’s not necessary on a desktop computer that is always wire-connected to […]
I was deploying a new Windows 10 installation on an old box via MDT the other day and it was failed. A quick Google search tells me that this is something to do with UEFI boot. It makes sense since it’s an old box. So, I created another sequence that only formats and prepares the disk for BIOS legacy boot […]
One of the steps deploying a computer these days is to encrypt the disk by enabling BitLocker in the sequence. But I was getting an error message telling me that the encryption failed because TPM Password missing. Please provide Password via TpmOwnerPassword or AdminPassword Since none of the password is present in the sequence or the configuration file, the encryption […]
Before you delete a mailbox from Microsoft 365, it’s always a good idea making a copy of the mailbox as a backup, just in case later on there are something there you want to dig up. But how can we do that, since there is no direct way of doing it? And no, exporting the mailbox out of Outlook isn’t […]
After getting a lot of phishing emails with suspicious HTML attachments, I was scared and decided to pull the trigger to get them blocked on the server level so no one will see them in their Outlook inbox. Sign into Microsoft 365 Portal and go to Exchange Admin Center. Click Mail Flow on the left-side pane, and click the little […]
I have an MDT setup working perfectly until lately when I am trying to deploy the system on a few new Lenovo computers I just purchased. The setup is just stuck at a blank Wizard.hta screen and doesn’t want to move forward. It’s stuck at the stage where the OS installation is just about to begin. The preliminary thought is […]
I have a Azure AD Synced group that I don’t want people to see from the address book. Since it’s a synced account I can’t do much in Office 365 console once it’s synced. So how can I do that? Turns out, it’s pretty easy and straightforward. Open Active Directory Users and Computers on your computer, make sure Advanced Features […]