[ KNOWLEDGE_BASE :: NET & AD ]

IT Knowledge, Straight From the Trenches_

Real-world guides on Active Directory, DNS, Firewalls, Kerberos, and more, written by engineers who live it daily.

$Browse Articles

>Watch Videos

Active DirectoryCLIDNSFirewallKerberosSecurity

itriedareboot -- bash

> Initializing network stack[OK]

> DNS resolver check[ACTIVE]

> Active Directory schema[LOADED]

> Kerberos KDC reachable[OK]

> Locale packs [en_US, es_ES][LOADED]

> Firewall ruleset v4.2.1[ARMED]

█

STATUS:OPERATIONAL//ARTICLES:11//VIDEOS:9//TOPICS:6//LOCALES:EN+ES//LAST_PUBLISH:20/09/2026//

[ 01 :: LATEST_ARTICLES ]

Latest Articles

View All

★ FeaturedDNS

DNSSEC Explained: How It Works, How to Set It Up, and How to Test It

DNS answers can be forged. DNSSEC adds signatures so resolvers can prove they are genuine. A beginner friendly but technically accurate guide to the chain of trust, current algorithm choices, and signing and testing a zone with BIND and Windows DNS Server.

R

ROY·20 September 2026

Read

~/articles/authentication-policies-an..

Active Directory

Authentication Policies and Authentication Policy Silos Deployment

Mitigate attacks like 'pass the hash' or 'pass the certificate' in Active Directory require advanced technologies

A

ADRIÁN·27 July 2026

Read

~/articles/how-to-identify-the-exact-..

Firewall

How to Identify the Exact Windows Firewall Rule Blocking Your Traffic in Windows Server 2022

Diagnosing blockages in the Windows Filtering Platform (WFP) used to require complex analysis. With the arrival of Windows Server 2022 and the Filter Origin property, it is now possible to link Event ID 5152 to the relevant firewall rule in four simple steps. See the step-by-step guide.

R

RICHARD·23 July 2026

Read

~/articles/seguridad-o-funcionalidad-..

Security

Security or Functionality: The Dilemma

Sometimes system administrators are asked to make security improvements in our environments, but is it always possible? We explore some practical cases.

A

ADRIÁN·23 July 2026

Read

[ 02 :: VIDEO_FEED ]

Latest Videos

View All

★ FeaturedSecurity

Rubeus & Mimikatz BLOCKED: Authentication Policy Silos in action

In this video I show how, despite carrying out Pass the Hash, Pass the Key, and Pass the Certificate attacks with Mimikatz and Rubeus, they are actually blocked.

A

ADRIÁN·31 August 2026

Watch

~/videos/authentication-policies-..▶ VIDEO

Active Directory

Authentication Policies and Authentication Policy Silos Deployment

In this video, I explain what authentication policies and authentication policy silos are, as well as other related concepts: tiering, FAST armoring, and Compound Authentication. Later on, I carry out a deployment of these authentication policies, showing pre-requisites, needed configurations, and how they restrict authentication.

A

ADRIÁN·24 July 2026

Watch

~/videos/60-useful-commands-for-w..▶ VIDEO

CLI

60 useful commands for Windows System Administrators

In this new video series, we review the most important PowerShell and CMD commands for a system administrator. In this first video, we cover some of the most common and useful general commands for both Windows Server and Windows client versions. In upcoming videos, we'll review other useful commands for Active Directory, networking, PKI, and WinRM, among others. Chapters 00:00 Introduction 00:12 Commands for future videos 02:09 Basic commands 02:55 Support commands 16:25 Informative commands 34:35 Console's access 39:56 Commands for registry keys and certificates 50:04 Other administrative commands 01:16:52 Ending

A

ADRIÁN·12 July 2026

Watch

~/videos/kb4520412-ldap-or-ldaps-..▶ VIDEO

Active Directory

KB4520412: LDAP or LDAPS? Harden your AD domain with LDAP Integrity - Practical Lesson

We can require LDAP Signing since March 2020 with KB4520412. In this video we describe the differences among LDAP, LDAPS and LDAP Secure. After that, we check the different policies that can be used to harden LDAP: either with LDAP signing, LDAP sealing or SSL encryption with Windows Server 2025 and older. Chapters: 00:00 Introduction 00:12 Practice requirements 02:33 LDAP, LDAPS and LDAP Secure differences 05:02 Policies for LDAP Secure 19:54 Testing without any hardening 37:14 Testing Domain Controller: LDAP Server Signing Requirements 43:59 Testing Domain Controller: LDAP Server Signing Requirements Enforcement 45:51 Testing Network Security: LDAP Client Signing Requirements 56:10 Testing Network Security: LDAP Client Encryption Requirements 01:03:18 Final thoughts

A

ADRIÁN·12 July 2026

Watch

[ 03 :: OPERATORS ]

Meet the Authors

// OPERATOR_01ONLINE

Roy Hagland

Networking

Roy is a networking specialist with expertise in DNS, firewalls, routing and network security.

// OPERATOR_02ONLINE

Adrián Míguez García

Active Directory

Adrián is an Active Directory specialist covering AD DS, GPO, Kerberos authentication, PKI and identity management.

// OPERATOR_03ONLINE

Richard Sessa Alcaraz

Networking

Richard is a network and infrastructure specialist with experience in VPNs, DNS, WFP, Firewalls, and routing.