Category: Windows Server 2025
-
Leveraging KDC (Kerberos) Proxy in Active Directory for Secure Remote Access
The Kerberos Key Distribution Center (KDC) proxy service is designed to provide a secure way for remote clients to authenticate using Kerberos when they cannot access Active Directory domain controllers directly. Initially intended for services like DirectAccess and Remote Desktop Gateway, the KDC proxy becomes increasingly important as Microsoft phases out NTLM authentication protocols, necessitating…
-
Step-by-Step Guide to Manually Create and Install a Windows Service
In Windows, services operate in the background, allowing applications to run without user interaction and start automatically during boot. This guide walks you through the process of creating a new system service from an executable file using built-in tools available in Windows. To create a service, you can utilize the sc.exe command from the command…
-
Enabling or Disabling VBScript in Windows: A Guide Post-Deprecation
In 2024, Microsoft announced its intention to phase out support for VBScript, a scripting language previously favored for automation in Windows environments due to its simplicity and accessibility. VBScript garnered popularity because it included a built-in Windows runtime and access to a vast library of scripts. However, because of its legacy structure and associated vulnerabilities,…
-
Seamless File Sharing: How to Use SMB over QUIC on Windows Server 2025 Without a VPN
SMB over QUIC is a new feature in Windows Server 2025 that enables users to securely access Windows file shares over the internet without needing a VPN. This functionality, previously available only in the Windows Server 2022 Azure Edition, allows for direct access to SMB file servers from untrusted public networks. The protocol enhances security…
-
Optimizing Performance: Resource Fair Sharing in Windows Server Remote Desktop Services (RDS)
A prevalent challenge with terminal servers that accommodate multiple users is the potential for one user to initiate a resource-heavy process, which can severely impact the performance of others. For instance, when a single user launches a process consuming over 90% of the CPU, it can render the server nearly unusable for other users. To…
-
How to Block NTLM Connections on Windows 11 and Windows Server 2025
Microsoft has taken a significant step towards enhancing security by phasing out the deprecated NTLMv1 authentication protocol in Windows 11 version 24H2 and Windows Server 2025. The removal of support for NTLMv1 aims to encourage users to adopt more secure alternatives such as Kerberos. Additionally, Microsoft has indicated that NTLMv2 may also face deprecation in…
-
Seamlessly Share Host Directories with VMs in Proxmox Using VirtioFS
With the launch of Proxmox VE 8.4, users can now create host-level shared directories, giving virtual machines (VMs) access to files from the Proxmox host without utilizing network protocols like SMB or NFS. This feature utilizes the VirtIOFS file system, which facilitates direct connections to shared directories, similar to shared folders in VMware Workstation. Setting…
-
How to Identify and Resolve High Disk Usage Issues on Windows: A Step-by-Step Guide
In Windows, certain processes can significantly increase disk I/O, adversely affecting overall system performance. This guide outlines essential Windows tools for identifying these high-disk-load processes. To start, the Task Manager is the most straightforward tool to monitor disk usage. You can access it by pressing Ctrl + Shift + Esc. Navigate to the Performance tab…
-
How to Fix Microsoft Defender Not Updating Automatically in Windows
When Microsoft Defender Antivirus is not updating automatically, you need to follow some diagnostic and troubleshooting steps to resolve the issue. Windows 10 and 11 utilize two primary mechanisms for updating Microsoft Defender: through Windows Update and directly via the Defender engine. Mechanisms for Updates Windows Update: Updates are downloaded and installed through Windows Update.…
-
Secure Your Client-Server Application Traffic on Windows with Stunnel: A Comprehensive Guide
The Stunnel tool acts as a proxy service that enables the creation of a secure TLS tunnel for client-server applications lacking inherent encryption capabilities. It is often more efficient to use Stunnel for securing access to a specific application rather than deploying a comprehensive VPN solution. Stunnel can function in either server or client mode.…