27 October 2025
Kerberos FAST (Armoring) : Strengthening Active Directory Authentication
Learn how Kerberos FAST (Armoring) secures Active Directory authentication and how to configure it safely using GPOs.
Category: Active Directory
10 October 2025
CAExpiryMonitor — Free Active Directory Certificate Expiration Monitor
CAExpiryMonitor helps administrators stay ahead of certificate expirations.
With an intuitive interface, automated service and detailed reports, it keeps your PKI healthy and your Windows infrastructure secure — all for free.
31 August 2025
AD Forest Recovery Plan (with 3-2-1 Compliance)
Comprehensive AD Forest Recovery Plan with 3-2-1 strategy. Includes System State backup, VM-aware snapshots, Azure Backup, and authoritative restore.
31 August 2025
NTLM Migration to Kerberos
Comprehensive guide to migrate from NTLM to Kerberos in Active Directory. Learn how to audit, analyze dependencies, apply GPOs, and ensure a smooth transition.
28 August 2025
Migrating a Domain Controller
I migrate a DC step by step: preparation (name/IP/DNS), promotion of NEWDC (DNS+GC), FSMO transfers, PDC NTP, SYSVOL migration to DFSR, then decommissioning of OLDDC. We prioritize the GUI and validate each step with repadmin/dcdiag and DNS SRV checks.
2 September 2021
Export and import (GPO)
There are two ways to export and import GPOs: you can use the Group Policy Management Console (GPMC) or you can use PowerShell.
Save, Export, Create & Import GPOs in PowerShell will no longer hold any secrets for you
14 December 2020
GPO: Folder Redirection via OneDrive
If you want to redirect My Documents, Pictures, Favorites, Desktop to OneDrive, this article will guide you through setting up the GPO.
Migration of users from one domain to another with data recovery, Data recovery in case of replacement of workstation. A user with several workstations, who wishes to have access to his data without having a roaming profile. Or simply as a user data backup solution.
10 December 2020
Active Directory: Transfer of FSMO (Flexible Single Master Operations) roles
There are 5 Flexible Single Master Operation roles, two roles are unique in the forest and the other three are unique in a domain.
A domain controller can have zero or more FSMO roles.
To view FSMO roles, the following command must be run on a Domain Controller.
7 December 2020
GPO: Disable telemetry
Microsoft collects a lot of data about your system through telemetry . And contrary to popular belief, Windows 10 is not the only Microsoft operating system to use this technology: on Windows 7 and Windows 8.1, telemetry is also present.
