Mastering IT
a few bytes at a time.
Blogging about Systems Administration
Featured Post
→ Collection
Let's Encrypt Certificates
Automating the deployment of certificates via Let’s Encrypt using Posh-ACME for windows and certbot for Linux.
→ Collection
Deploying Ansible
Implementing a multi-user Ansible environment to manage both Linux and Windows hosts for a security conscience enterprise.
Recent Posts
→ Collection Snippet | February 18, 2025
Administrative Rights
In this article, we’ll walk through the process of managing and controlling administrative rights across our infrastructure. This is a critical step in configuring a domain as it helps to prevent lateral movement if an administrative credential …
February 18, 2025
→ Blog Post
Monitor SSL Certificates w/ CheckMK's Agents
Let’s Encrypt recently sent out a notification indicating that they will be no longer sending email notifications when a certificate is near expiration. For most services this isn’t an issue as I’ve been using CheckMK’s SSL …
February 5, 2025
→ Collection Snippet | November 16, 2024
Compability Access Group
The Pre-Windows 2000 Compatible Access group is a security group introduced with Windows 2000 to maintain backwards compatibility for applications or services designed for Windows NT. In this article, we’ll walk through why the default settings …
November 16, 2024
→ Collection Snippet | November 5, 2024
Disable TLS 1.0 & 1.1
TLS (Transport Layer Security) is a cryptographic protocol used to secure communications over a channel or connection. It replaces the now deprecated SSL (Secure Socket Layer) standard. The IETF (Internet Engineering Task Force) is the group who …
November 5, 2024
→ Blog Post
Disable RSC (Receive Segment Coalescing)
Recently a number of SuperMicro servers operating as hypervisors were experiencing slow network throughout. After investigating it was determined that RSC (Receive Segment Coalescing) was the root cause of the slowdown. Disabling the feature on all …
November 2, 2024
→ Collection Snippet | November 2, 2024
Installation
In this article we’ll walk through the process of installing Active Directory Domain Service for a brand-new environment. Before we begin, know this article makes a few assumptions: That we’re setting up a brand-new environment and not …
November 2, 2024
→ Blog Post
Convert From Legacy Boot to UEFI
In this blog post, we’ll walk through the process of converting an existing Windows installation installed on an MBR partition scheme to use GPT. This will allow you to switch your PC from Legacy Boot to UEFI. As we’re making …
October 30, 2024
→ Collection Snippet | September 14, 2024
Managed Services Account
MSA accounts are a great option if you’re looking for a secure way to run process or scripts under a service account. In this article we’ll walk through the steps required to create an MSA account. Note, this article will only discuss MSA …
September 14, 2024
→ Collection Snippet | February 23, 2024