Lorky

Microsoft Authenticator Backup / Restore

September 7, 2023, 3:27 pm technology

Hi everyone !

Today with the venue of more secure authentification method I still see user that does not configurer 2FA's method, or loose their identity inside the authentificator app way to easily..

I wanted to share the small tip to configure a simple backup of your credential, so if you wipe your phone it's really easy to come back from that in the auth app.

As such the key point if to select to create a backup copy;

In the Android app;

image-1.png?w=369

In the Apple app;

image.png?w=366

The key point to remember is when you reinstall the application, it must be empty of account, and you need to select the restore option !

image-2.png?w=371

Thanks everyone, it's all, it's just a small tip, and as you can see it's really easy to recover.

So reference text; Change your two-step verification method and settings and Back up and recover account credentials in the Authenticator app

Microsoft Azure AD rebrand !

July 14, 2023, 8:06 pm technology

Hi everyone

This week a lot of news got talked, but one major's one was the rebrand of Microsoft Azure AD.

The new name is Microsoft Entra.

image.png?w=1024

As we can see in the graphics (took from here) the change is only in the name, as the feature stay the same, and what is included in what tier stay the same !

KrbtgtFullPacSignature Enforcement

June 26, 2023, 9:48 pm technology

Hi everyone

Today I wanted to warn you guys that if you have a Domain at the functionnal level of \< 2008, please be aware you might have difficulty next month because of AES key needed for krbtgt account will be requiered. (new link). (In a domain's functional level 2008 >= you are OK)

For the Signature enforcement you can get the timing table for the default setting;

11/08/22 - New signatures are added, but not verified. (Default setting)

12/13/22 - Audit mode. New signatures are added and verified if present. If the signature is either missing or invalid, authentication is allowed and audit logs are created.

04/11/23 - Disabled via registry is no longer possible

07/11/23 - Defaults to Enforcement mode. New signatures are added, and verified if present. If the signature is either missing or invalid, authentication is denied and audit logs are created. but Audit mode is still possible

10/10/23 - Full Enforcement mode

Make sure your Domain is ready for those defaults settings before next month is my tip :)

Group Policy - Windows 10 - Push Zoom

May 17, 2023, 3:36 pm technology

Hi everyone !

Today I wanted to share a small topic if you got yourseft a park of Windows 10 computer and they are managed.

Zoom unlike Teams don't allow a user to update the software easilly if the user isn't an local admin by default.

To bypass that problem we can get the Zoom admin pack, and the admx to allow the software to update itself.

First go to the download site of zoom (https://zoom.us/download), and click Download for IT.

Click to download the MSI

image-3.png?w=985

Next we go download the Zoom ADMX , there

https://support.zoom.us/hc/en-us/articles/360039100051-Mass-deploying-with-Group-Policy-Objects

image-7.png?w=897

We now put the ADMX files inside our policies folder of our Domain Controller;

image-8.png?w=954

image-9.png?w=642

From there we can now create a new GPO !

We click Computer -> Software Installation -> Add package...

image-4.png?w=400

Click on the .MSI you got in the previous step

image-5.png?w=493

The software should be listed correctly at that point;

image-6.png?w=449

Now go inside the Zoom Meeting section in the computer section too, and make sure the Enable the AutUpdate feature.

image-10.png?w=962

And voila, you are ready to deploy :)

Edited 2023-06-26: those settings are the best one to use for autoupdate;

image-3.png?w=993

Active Directory Replication Tool

May 15, 2023, 2:33 pm technology

Hi

Today I wanted to share a nice project that was done by someone I know to test for AD Replication status.

The feature is really nice and it allow to diagnostic any replication error, or to see if it's working correctly.

To see how it look; (images took from the github reposterie)

image.png?w=792

image-1.png?w=660

image-2.png?w=1024

To quote github, the reason behind the tool are;

The old version of the tool had a time bomb in it - an expiring SSL certificate - that rendered the app unusable sometime around September 2022. Only through great effort internally were we able to periodically renew this certificate and republish the app, and the app was architected in such a way that excising the signing certificate check was more work than just rewriting the whole thing. (I know about the Sirona DLL hack, but still.)
The old tool had no active maintainers and no one who was still around was familiar with the app's internals or source code.
The old tool was showing its age... I mean, that Office-style ribbon was straight out of the Windows Vista era, was it not? Plus it contained a bunch of outdated TechNet links. You might argue that WinForms is similarly old-fashioned, but I just so happen to think WinForms is and always was PEAK Windows UI.
Now we can maintain and improve this tool together. The Active Directory community.

If you want to get it, see the GitHub link there : ADReplStatus - https://github.com/ryanries/ADReplStatus

Lorky`s Blog - Techno ressources and general informations for everyone !

Microsoft Authenticator Backup / Restore

Microsoft Azure AD rebrand !

KrbtgtFullPacSignature Enforcement

Group Policy - Windows 10 - Push Zoom

Active Directory Replication Tool

Popular Tags

Archives