- Видео 133
- Просмотров 1 893 935
Danny Moran
Великобритания
Добавлен 1 янв 2022
I’m Danny Moran, an IT consultant based in England, United Kingdom.
This is where you will find step-by-step guides relating to Windows Server, Active Directory, Group Policy, and Microsoft Azure.
This is where you will find step-by-step guides relating to Windows Server, Active Directory, Group Policy, and Microsoft Azure.
How to add static routes to Windows servers
Learn how to add and remove static routes to Windows server. In this example, I show you how to use command prompt and PowerShell to create and remove static routes.
Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran.com
Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran.com
Просмотров: 327
Видео
How to use Effective Access to check Active Directory permissions
Просмотров 495День назад
Learn how to use the Effective Access feature to check Active Directory permissions. In this example, I show you how to use the Effective Access tool to see which users and groups have permissions over Active Directory objects and organisational units. Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran.com
How to use Effective Access to check Windows file share permissions
Просмотров 52014 дней назад
Learn how to use the Effective Access feature to check Windows file share permissions. In this example, I show you how to use the Effective Access tool to see which users and groups have permissions over Windows file share files and folders, as well as how to do what-if testing to see what permissions users would have if they were added to specific security groups. Hi, I’m Danny, a London based...
How to setup DNS Forwarders on a Windows Server DNS Server
Просмотров 77321 день назад
Learn how to setup and modify DNS forwarders on a Windows DNS server. In this example, I show you how to use the DNS Management Console and PowerShell to manage local and remote DNS server forwarders, as well as how to use PowerShell to modify all DNS server forwarders at the same time. Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran.com
How to setup Software RAID on Windows Server using Disk Management
Просмотров 711Месяц назад
Learn how to setup software RAID on Windows Servers. In this example, I show you how to use the Disk Management console to create either a RAID, RAID1, or RAID 5 storage array. Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran.com
How to authorize and unauthorize Windows DHCP servers
Просмотров 533Месяц назад
Learn how to authorize and unauthorize Windows DHCP servers. In this example, I show you how to use the DHCP Management Console as well as PowerShell to authorize and unauthorize Windows DHCP servers so they are able to distribute IP addresses to the Active Directory network. Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran.com
How to set DHCP Options on Windows Server DHCP Scopes
Просмотров 720Месяц назад
Learn how to DHCP Options on a Windows DHCP server. In this example, I show you how to use the DHCP Management Console as well as PowerShell to setup DHCP options within a DHCP scope. Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran.com
How to enable Advanced Features in Active Directory Users and Computers
Просмотров 747Месяц назад
Learn how to enable Advanced Features within the Active Directory Users and Computers management console. In this example, I show you how to enable the Advanced Features options with Active Directory Users and Computers. Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran.com
How to change the Windows Event Viewer log file size
Просмотров 501Месяц назад
Learn how to change the log file size for the Windows Event Viewer to enable longer log retention. In this example, I show you how to change the maximum file size for the Windows Event Viewer log files, and how to enable archiving. Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran.com
How to enable PING responses on Windows devices (ICMP Echo Requests)
Просмотров 9072 месяца назад
Learn how to enable PING (ICMP echo request) responses for Windows devices. In this example, I show you how to use the Windows Firewall to enable responses to ping requests as well as how to create the same rule using PowerShell. Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran.com
How to set a VLAN ID for a Windows Network Adapter
Просмотров 4,2 тыс.2 месяца назад
Learn how to set a VLAN ID for a Windows network adapter. In this example, I show you how to use the network connections control panel to set a VLAN ID as well as how to use PowerShell to set a VLAN ID for a network adapter. Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran.com
How to remove roles and features from Windows Servers
Просмотров 6562 месяца назад
Learn how to uninstall and remove roles and features from Windows Servers. In this example, I show you how to use the Server Manager as well as PowerShell to uninstall roles and features from a Windows Server. Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran.com
How to uninstall a Windows Update on Windows Server or Windows Workstations
Просмотров 1,6 тыс.2 месяца назад
Learn how to uninstall and roll back a Windows Updates on Windows Server or Windows Workstations. In this example, I show you how to use the control panel, command prompt, and PowerShell to uninstall a Windows Update as well as how this can be done silently in case this needs to be scripted. Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymor...
How to enable account lockout for the built-in local Administrator account
Просмотров 1,2 тыс.3 месяца назад
Learn how to turn on account lockout for the built-in local Administrator account. In this example, I show you how to use Group Policy to push a policy to all workstations and servers, which will enable account lockout for the built-in local Administrator account. Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran.com
How to enable and view the Windows Defender Firewall log
Просмотров 1,4 тыс.3 месяца назад
Learn how to enable and view the Windows Defender Firewall log. In this example, I show you how to enable the Windows Defender Firewall log using the management console, and how to set it up to log the dropped packets, where you can find the Windows Defender Firewall log, how you can view the contents of the log file. Hi, I’m Danny, a London based IT consultant and blogger. You can view all my ...
How to view and clear the Windows Server DNS Server cache
Просмотров 1,8 тыс.3 месяца назад
How to view and clear the Windows Server DNS Server cache
How to reset the Windows Defender Firewall
Просмотров 7483 месяца назад
How to reset the Windows Defender Firewall
How to backup and restore the Windows Defender Firewall
Просмотров 1 тыс.4 месяца назад
How to backup and restore the Windows Defender Firewall
How to fix the trust relationship between a workstation and an Active Directory domain
Просмотров 15 тыс.4 месяца назад
How to fix the trust relationship between a workstation and an Active Directory domain
How to restrict Active Directory security groups and block membership modifications
Просмотров 1,8 тыс.4 месяца назад
How to restrict Active Directory security groups and block membership modifications
How to enable new storage disks on Windows Server
Просмотров 1,5 тыс.4 месяца назад
How to enable new storage disks on Windows Server
How to enable Remote Desktop using Group Policy
Просмотров 6 тыс.4 месяца назад
How to enable Remote Desktop using Group Policy
How to set User Account Logon Hours in Active Directory
Просмотров 1,7 тыс.5 месяцев назад
How to set User Account Logon Hours in Active Directory
How to check what Group Policy Objects are being applied using gpresult
Просмотров 4 тыс.5 месяцев назад
How to check what Group Policy Objects are being applied using gpresult
How to reset the Default Domain Policy and Default Domain Controllers Policy
Просмотров 2,9 тыс.5 месяцев назад
How to reset the Default Domain Policy and Default Domain Controllers Policy
How to add a UPN suffix to Active Directory
Просмотров 1,8 тыс.5 месяцев назад
How to add a UPN suffix to Active Directory
How to use Active Directory Saved Queries
Просмотров 1,4 тыс.6 месяцев назад
How to use Active Directory Saved Queries
How to restrict Active Directory user logons to specific named devices
Просмотров 3 тыс.6 месяцев назад
How to restrict Active Directory user logons to specific named devices
How to deploy PowerShell 7 using Group Policy
Просмотров 1 тыс.6 месяцев назад
How to deploy PowerShell 7 using Group Policy
Sysprep failed for me, do I have to install the OS from MDT for it to work?
No, you can capture images based off installs done using an iso/usb. Thanks for watching!
Would be nice to see MS give us the ability to filter out certain words that people might use like "password" etc.
You can actually do this now if you're also using Entra and password sync. You can create custom ban lists and also use Microsoft's global password ban list of common words and phrases. learn.microsoft.com/en-us/entra/identity/authentication/tutorial-configure-custom-password-protection Thanks for watching!
Good video but I have a question, how to give some enough rights to administer a server without them having full on domain admin? Or is there anyway to deny a group from connecting to a server or workstation?
This is a tough one. Usually, people just end up with local administrator permissions on the servers they need to manage. This removes the need for them to have domain admin accounts. This method is still overkill as most things don't require full local administrator access. The problem with just trying to use the principle of least privilege is that it's quite hard to manage and also takes a lot of time and effort to get correct. This doesn't really answer your question as it really depends on each network, what your risk tolerance is, how secure accounts are, and mainly, how likely the user is to destroy the network if they're given too much access. Thanks for watching!
the MS LAPS download link no longer works, there is an internal server error.
The download link still seems to work for me: www.microsoft.com/en-us/download/details.aspx?id=46899 Thanks for watching!
Hey Danny, at 1:46 you tap the Advanced button. This button doesn't seem to be there for me. I only see Add, Remove and Properties (properties doesn't do the same as advanced). Any idea? I'm using Windows Server 2016
Oh nevermind I was looking at the policy object placed in the domain, and not in the folder for all objects. I'll leave my comment so people can learn from my mistake haha
Glad you've figured it out. Thanks for watching!
Kind Sr., You are the shit. Thank you!
Thanks for watching!
gonna save this video hoping for improvements cuz I have ryzen 7 5800H and i get 120+ fps on valorant but I want to get more than that just to make sure it doesnt drop to 60 lol
Thanks for watching!
Great video!
Thanks for watching!
Works love it sir.
Thanks for watching!
So how is it that the DC01 is on lab-switch-lan and can still reach the internet?
The internet traffic goes through the LAN side of the pfSense firewall and then out of the WAN side of the pfSense firewall to reach the internet. Thanks for watching!
Hey dude i have a question for me i cant enable network acces in windows sandbox even if i use ethernet could you help me?
I have a guide on configuring the Windows Sandbox. One of the options covers enabling and disabling network access: ruclips.net/video/n1caXD2WLC0/видео.html Thanks for watching!
What's the purpose of adding static routes?
That's exactly what I was about to ask!.
When you try and connect to another network from your internal network, the connection will go through your default gateway. In some cases, you might have more than one router on the internal network. Creating a static route will enable you to direct traffic for specific ip addresses or subnets through a different router than your default gateway. Thanks for watching!
TYVM for this all the other tutorials are the hard way sifting through and creating directories in regedit and done that on about 50+ rigs now and my plex server it didn't work on for some reason sure it's my fault OE as they say but this worked like a charm thanks again.
Thanks for watching!
cheers bud!
Thanks for watching!
Great job done!
Thanks for watching!
Hello! great vid, but I don't have permissions tab in folder's propeties... any idea?
The security tab is missing? I don't think I've ever seen it not be there.
Hi can you also make an RDS or remote app video?
These are on my list, however, I don't have a timeframe for when they will be done. Thanks for watching!
Thanks, it works.
Thanks for watching!
worked like a charm, big thanks from France !
Thanks for watching!
Thank you sir!
Thanks for watching!
Please how do I join/authenticate a PC that is outside the SERVER 2022 DC network? Like a PC over the internet. Thanks
You don't. You need to have some kind of link between the sites or the workstation and the site. Something like a VPN or SD-WAN. Thanks for watching!
Thanks Danny; One question; I started to deploy Win11 on new computers there is a sign-in issue in>Network & Internet> Ethernet that I have to sign in/pass to get the DOMAIN; and because of this- most new computers are not receiving GPO ; do we have something to do with it before I downgrade all win11 machines to win10 ?
I'm not sure I fully understand what you mean. Are you getting any error messages? Are the new computers in the correct organisational unit within Active Directory?
@@danny_moran yes; all computers are in Active Directory; issue begin when I start deploying Win 11 there is sign-in to domain so you have to click on it-problem is the end users they didn't know how to or where to click on.
Thanks, mate, the new style drove me nuts. Do not fix it if ain't broken Microsoft.
Thanks for watching!
Perfect, just what I needed.
Thanks for watching!
The original share names e.g. Accounts and after you created a folder as Accounts too. If the name of folder is different from shares name is their any impact?
No, the link names can be different from the share names. I try and keep them the same as it's easier to manage this way. Thanks for watching!
Thank you for making this video on AD shares. Makes a lot of sense now seeing how you modify the permissions. Thank you!!
Thanks for watching!
I have been system admin for more than decade unfortunately a few have done the best practice like you explained. Good job
There have definitely been times when I've not followed best practices, and then the future me has been annoyed with the past me. Thanks for watching!
the link to PF sense has changed and it downloads netgate-installer-amd64.iso.gz but not sure it doesn't get extracted to the ISO
Interesting. It looks like you now have to register to download the file. You should be able to extract the iso file out of the .gz file. Thanks for watching!
Thanks a lot😊 But can you please briefly explain about how VM takes the PXE mode. Where you have enabled this?
In the settings for the client virtual machine, you can set the boot order. Just set the network adapter to boot before the hard drive. This will tell the virtual machine to boot into the PXE environment. Thanks for watching!
Hi, my computer, a Lenovo yoga 13 inch laptop, is set to default scaling of 300%, which looks great on most apps. However, some things, such as some remote desktops, become very blurry. I tried this solution and unfortunately, when I sign out and back in, any changes I make are reset. Even the search bar I had to turn on for my taskbar to search up the registry editor gets removed. Do you have any suggestions other than changing my computer's scaling to 100%? Although changing the scaling to 100% in my laptop's settings fixes the resolution of the remote desktop, everything is far too small to work with and takes far too long to move around the screen. Any help would be much appreciated. Thank you.
I'm not sure why the change would keep being reverted. When I've done this, it's always kept the updated setting. I'm not sure of any other methods of resolving this issue, unfortunately. Thanks for watching!
The tutorials are nice, but could you explain the purpose of each service you show us? That could make learning more attractive.
Thanks for the feedback. Thanks for watching!
Awesome!
Thanks for watching!
Mine says staged and not installed how come?
Try running Windows Update and making sure that all of the updates are installed and then rebooting the workstation. Also, make sure that nothing else is currently being installed. Thanks for watching!
Dear Danny, I followed your steps but now I have the following issue: A connection to the deployment share could not be made. The following networking device did not have a driver installed . After I ran the litetouch.vbs script and the system rebooted and popped up this window, I assumed I missed the network driver for the model I'm trying to capture, which is LENOVO QTM650, do I need to import the driver to the MDT out of box folder directly, or I even need to create a selection profile then use this selection profile somehow in my DeploymentshareCapture? Please help to advise and thanks a lot for your time.
Yes, try importing the network card drivers for the workstation into the Out-of-box Drivers folder and then updating your deployment share. This should resolve the issue. Thanks for watching!
@@danny_moran thanks a lot Danny, it works after that!
Glad you got it working!
Hello Dany, appreciate your efforts preparing this detailed step-by-step guide. I am facing an issue with accessing the "\\PC-Name\DeploymentShareCapture$". It gives me a network error "Permission Denied" although it's on my local computer. I also can't find the folder anywhere on my pc. Would appreciate your help identifying what step did I drop. Thanks!
When you create the deployment share, it will ask you to select a location for the folder. It will be stored in whatever location was chosen. As for the permission issue, I'm not sure. Is it asking you to enter credentials? Thanks for watching!
Ok cool, what if you have 5 mapped drives in GPO with different letters and you would like to introduce all 5 mapped drives as DFS shortcuts. Can you label all the same name and 1 letter for each ie z in GPO?
I would add all of the share locations under one DFS Namespace, this will enable you to have one mapped drive which points to all of the shared folders. Thanks for watching!
excellent, thank you
Thanks for watching!
thank you!
Thanks for watching!
works like a charm, thanks
Thanks for watching!
Dear Danny, I followed your steps but after running litetouch.vbs it restarted the comptuer then nothing more happened, anything i was missing? I didn't see what is the ADK and WinPE version you have in your video, can you also advise? I was trying to capture a reference image for Windows 23H2.6
I'm not sure what the issue would be without any logs or error messages. I haven't personally seen this issue. This video shows how I setup my MDT instance, and what versions this guide uses: ruclips.net/video/wIp2YTNVjHk/видео.html Thanks for watching!
Holy damn it works! One question though, if the domain controller VM got infected with virus, it shouldn't be able to infect the main host right? Thanks for the video!
Technically, I think it might be able to. I wouldn't use this to test malware, I would use a dedicated sandbox solution. Thanks for watching!
I did the exact steps and then I restarted my PC but then I looked at Process Lasso and it still shows that some cores are parked :(
This method definitely still works using the latest version of Windows 11.
good, thx
Thanks for watching!
Excellent video. I applied these settings and it worked very well on machines joined to the domain, but after applying them, I am blocked in the Group policy manager. Would you know what it could be?
If you've removed the users from the domain/enterprise admins, then they won't have permissions to modify group policies. If you add the accounts to the Group Policy Creator Owners security group, then they should be able to modify group policies again. Thanks for watching!
You're wholesome......... This is everything I've been searching for in months...Please do more interesting ones.
Thanks for watching!
need help why is when i try to do that, access is denied???
Try running your terminal as an Administrator. Thanks for watching!
@@danny_moran still access denied, the problem start from where i cannot update windows then it says on Microsoft that i need to resize WinRE but when i try to get winRE its not found, and when i try to enable it with wim files, the access is denied.
wsl --install ubuntu not working. it is working with update command. wsl --install -d ubuntu
Thanks for providing this information. Thanks for watching!
appreciate it, now i feel satisfied by the old context menu.
Thanks for watching!
Danny, You're the man!
Thanks for watching!
I’d like to be able to attach test devices to the dev environment using a managed switch. Say vlan20 for the lab. Any good guides on doing that?
I don't have any guides on this, unfortunately. Thanks for watching!