Option 5: Download and install the cumulative update to a running Nano Server: If you have a running Nano Server VM or physical host, you can use the Windows Update WMI provider to download and install the update while the operating system is online. With this method, you don't need to download the .msu file separately from the Microsoft Update Catalog. The WMI provider will detect, download, and install all available updates at once. After installing an update from Windows Update, you can find the log files at %ProgramData%\SoftwareDistribution\Logs\WindowsUpdate.
Over the years my command line habits have improved and I often search for smarter tools for the jobs I commonly do. With that said, here's my current list of improved CLI tools.
commandline toolsRecently, I am learning how Elliptic Curve Cryptography works. I searched around the internet, found so many articles and videos explaining it. Most of them are covering only a portion of it, some of them skip many critical steps how you get from here to there. In the end, I didnât find an article that really explains it from end-to-end in an intuitive way. With that in mind, I would like to write a post explaining Elliptic Curve Cryptography, cover from the basics to key exchange, encryption, and decryption.
encryption security read laterEvery preference item applied is processed under the local SYSTEM account. This applies to preference items created under both the Computer and User Configuration nodes. When you select  âRun in Logged on Userâs Security Contextâ, the security context is changed from SYSTEM to the current logged-in User. This is a huge distinction when you are creating preferences for Files, Shortcuts, or Drive Mappings.
windows group policyOwnership of files and directories is based on the uid (user-id) and gid (group-id) of the user who created them. The same thing happens when a process is launched: it runs with the effective uid and gid of the user who started it, and with the corresponding privileges.
The setuid bit modifies this behaviour so that an executable runs with the privileges of the executable fileâs owner. This can be identified by an s in the executable bit for the fileâs owner, eg:
ls -l /bin/passwd
-rwsr-xr-x. 1 root root 27768 Feb 11 2017 /bin/passwd
The setgid bit can be identified by an s in the executable bit of the file or directoryâs group, eg:
drwxrwsr-x. 2 egdoc egdoc 4096 Nov 1 17:25 test
When set on an executable, the setgid bit causes it to run with the privileges of the executableâs group.
When set on a directory, the setgid bit causes the group of files created inside the directory to be the group of the directory, not the user who created them.
When used on a directory, the sticky bit causes all files to be modifiable only by their owner, eg:
ls -ld /private/tmp
drwxrwxrwt 11 root wheel 352 26 Sep 09:04 /private/tmp
A module is a reusable, standalone script that Ansible runs on your behalf, either locally or remotely. Modules interact with your local machine, an API, or a remote system to perform specific tasks like changing a database password or spinning up a cloud instance. Each module can be used by the Ansible API, or by the ansible or ansible-playbook programs. A module provides a defined interface, accepting arguments and returning information to Ansible by printing a JSON string to stdout before exiting. Ansible ships with thousands of modules, and you can easily write your own. If youâre writing a module for local use, you can choose any programming language and follow your own rules. This tutorial illustrates how to get started developing an Ansible module in Python.
tutorial ansible pythonOne of possible use cases for custom modules is a wrapper for shell command. If there is a task you do with cli command on different remote hosts and in differen parts of your playbook/project, you may want to wrap it into idempotent module with check-mode support to make your playbooksâ code clean and easy to read.
tutorial ansibleOpenSSL is an open-source command line tool that is commonly used to generate private keys, create CSRs, install your SSL/TLS certificate, and identify certificate information. We designed this quick reference guide to help you understand the most common OpenSSL commands and how to use them.
certificates security documentationTo enable LDAP over SSL (LDAPS) all you need to do is "install" an SSL certificate on the Active Directory server. Most enterprises will opt to purchase an SSL certificate from a 3rd Party like Verisign. In my case, I created my own certificate using OpenSSL. Here are the steps I used to secure my Active Directory server using a self signed certificate.
certificates ldap windows securityThis step-by-step guide will help you set up a public key certification authority (CA) in a network with servers running Microsoft Windows Server 2003 operating systems.
certificates security windows windows server 2003sp_whoisactive is a comprehensive activity monitoring stored procedure that works for all versions of SQL Server
Here is a small tutorial on how to get OSMC / linux self-updating.
tutorial linux documentationThere are three hooks you can use for this:
DPkg::Pre-Invoke is run once, before all the package manipulation sequences in one apt invocationDPkg::Pre-Install-Pkgs is also run once, before the package manipulation sequences, after the Pre-Invoke hook, and with a list of all the packages which will be installedDPkg::Post-Invoke is run once, after the package manipulation sequences./etc/apt/apt.conf is the main configuration file shared by all the tools in the APT suite of tools, though it is by no means the only place options can be set. The suite also shares a common command line parser to provide a uniform environment.
Setting up an Enterprise Root Certificate Authority isnât a task that youâll complete on a regular basis and something I think Iâve done twice, maybe 3 times, ever. Each time I forget what I did previously and you can guarantee Iâm using a different version of Windows Server each time.
security windowsIn the Admin UI under âAuthentication" it is possible to select one of 4 methods for authenticating user credentials; LOCAL, PAM, RADIUS or RADIUS. This can be done by changing the configuration key auth.module.type. This configuration key is not optional and is by default set to PAM. With LDAP and RADIUS additional settings are required to be able to authenticate users, for example which server to contact and any required shared secret code to be able to access the external authentication backend.
This document provides background on what LDAP authentication is, what specific LDAP authentication methods and mechanisms Active Directory and more specifically the NETID domain supports, and finally gives some guidance on which method and mechanism you should use.
ldap security windowsToday, many applications and devices connect to Active Directory over LDAP. Many of those are still performing insecure LDAP âsimple bindsâ where credentials are transferred in clear text over the network. Those exposed credentials typically include the âservice accountâ used to connect to LDAP, but also include the user credentials used during the application login.
Also note that the terms âLDAP over SSLâ and âLDAP over TLSâ are used interchangeably. By default, LDAP communications between client and server applications are not encrypted. This is especially problematic when an LDAP simple bind is used.
ldap security windows