IT Knowledge, Straight From the Trenches _

~/articles/how-to-identify-the-exact-..

Firewall

How to Identify the Exact Windows Firewall Rule Blocking Your Traffic in Windows Server 2022

Diagnosing blockages in the Windows Filtering Platform (WFP) used to require complex analysis. With the arrival of Windows Server 2022 and the Filter Origin property, it is now possible to link Event ID 5152 to the relevant firewall rule in four simple steps. See the step-by-step guide.

R

RICHARD·23 July 2026

~/articles/seguridad-o-funcionalidad-..

Security

Security or Functionality: The Dilemma

Sometimes system administrators are asked to make security improvements in our environments, but is it always possible? We explore some practical cases.

A

ADRIÁN·23 July 2026

~/articles/60-useful-command-for-wind..

CLI

60 useful command for Windows System Administrators

We review the most important PowerShell and CMD commands for a system administrator. In this first content, we cover some of the most common and useful general commands for both Windows Server and Windows client versions. In upcoming contents, we'll review other useful commands for Active Directory, networking, PKI, and WinRM, among others.

A

★ FeaturedActive Directory

[ 02 :: VIDEO_FEED ]

Latest Videos

View All

Authentication Policies and Authentication Policy Silos Deployment

In this video, I explain what authentication policies and authentication policy silos are, as well as other related concepts: tiering, FAST armoring, and Compound Authentication. Later on, I carry out a deployment of these authentication policies, showing pre-requisites, needed configurations, and how they restrict authentication.

A

ADRIÁN·24 July 2026

~/videos/60-useful-commands-for-w..▶ VIDEO

CLI

60 useful commands for Windows System Administrators

In this new video series, we review the most important PowerShell and CMD commands for a system administrator. In this first video, we cover some of the most common and useful general commands for both Windows Server and Windows client versions. In upcoming videos, we'll review other useful commands for Active Directory, networking, PKI, and WinRM, among others. Chapters 00:00 Introduction 00:12 Commands for future videos 02:09 Basic commands 02:55 Support commands 16:25 Informative commands 34:35 Console's access 39:56 Commands for registry keys and certificates 50:04 Other administrative commands 01:16:52 Ending

A

~/videos/kb4520412-ldap-or-ldaps-..▶ VIDEO

Active Directory

KB4520412: LDAP or LDAPS? Harden your AD domain with LDAP Integrity - Practical Lesson

We can require LDAP Signing since March 2020 with KB4520412. In this video we describe the differences among LDAP, LDAPS and LDAP Secure. After that, we check the different policies that can be used to harden LDAP: either with LDAP signing, LDAP sealing or SSL encryption with Windows Server 2025 and older. Chapters: 00:00 Introduction 00:12 Practice requirements 02:33 LDAP, LDAPS and LDAP Secure differences 05:02 Policies for LDAP Secure 19:54 Testing without any hardening 37:14 Testing Domain Controller: LDAP Server Signing Requirements 43:59 Testing Domain Controller: LDAP Server Signing Requirements Enforcement 45:51 Testing Network Security: LDAP Client Signing Requirements 56:10 Testing Network Security: LDAP Client Encryption Requirements 01:03:18 Final thoughts

A

~/videos/step-by-step-guide-kerbe..▶ VIDEO

Kerberos

Step by step guide: Kerberos Hardening (KB5073381)

In this last video of the Kerberos series, we show you step by step, in chronological order, how to tackle the patch that hardens Kerberos, using AES encryption instead of RC4. 00:00 Introduction 00:16 Initial Steps 04:15 Inform account's responsibles 09:23 Pre-hardening 13:43 Progressive hardening 18:35 End of video

A