A new vulnerability that affects Exchange on-premise servers has been discovered recently (https://dirkjanm.io/abusing-exchange-one-api-call-away-from-domain-admin/). By making use of the high privileges Exchange servers have by default, the attacker would be able to escalate from any user with a mailbox to Domain Admin access.
According to Dirk-jan Mollema (see upper link), the vulnerability has been tested against …
… Read more
In June 2018 Microsoft released Cumulative Update 21 (build 15.00.1395.004) which is the last planned quarterly update for Exchange 2013 (https://blogs.technet.microsoft.com/rmilne/2018/06/19/exchange-2013-cu21-released/)
I was not sure about updating my Exchange 2013 directly from CU12 to CU21. It is supposed to be supported by Microsoft. Maybe I could install an intermediate CU before but, anyway, I decided to move on.… Read more
I needed to install .NET 4.7.1 to allow updating Exchange 2013 to CU 21.
This is the installer I downloaded and tried to install: https://www.microsoft.com/en-us/download/details.aspx?id=56116
But the installation never ends. It remains stuck without progressing in the “Installation progress” bar. Tested both with offline and online installation:
To install .NET Framework 4.7.1 download the msu package from the following link:… Read more
This time a simple as well as important post. Have you tried to run a scheduled task every minute?
When editing the trigger of a task schedule, there is a section in which the “Repeat task every” parameter can be set, and you have probably noticed that by default only the values “5 minutes, 10 minutes, 15 minutes, 30 … Read more
Today, just when starting the working day we have realized that there were somes servers offline (still powered on but without network connection). It seemed that the network adapters were incorrectly configured without the static IPs.
After some research, a job partner discovered that some days ago (March 13th) Microsoft released some security updates that generates issues to Windows 2008 … Read more
For certain application, a job partner asked me to send him certain certificate with private key in PEM format. Normally I’m using PFX format, but with a little help of the openssl toolkit converting PFX to PEM is quite easy.
openssl for windows can be downloaded here: http://gnuwin32.sourceforge.net/packages/openssl.htm
After extracting the contents, inside the bin subfolder the openssl … Read more
Last week I came across a situation where I needed to copy Active Directory groups (including members) as new groups.
Suppose we want to clone the “SG-Test1” and “SG-Test2” groups
We need two groups (“SG-NewTest1” and “SG-NewTest2”) to be created with the same members included
Using this powershell scripts you can either clone a single group a list … Read more
When renewing a certificate it is not necessary to generate a new csr. This is possible by maintaining the same private key.
When received the renewed certificate from the 3rd party certification authority, we can try to import it and assign the private key from the management console (mmc -> certificates).
One of the options that are shown when … Read more
Sometimes it is neccesary to configure a network interface to listen on more than one IP (for example, web servers containing multiple SSL certificates…)
After adding the new secondary IPs, If not explicitly avoided, outgoing traffic can be generated also by these instead of only by the primary. These can lead to connection errors (for example firewall receiving unexpected … Read more
I finally received my new Dell Inspiron 15 Serie 5000 with a 1TB hard disk!
I would like (maybe very shortly) to move the system and applications to a new SSD drive (perhaps 120GB or 240GB size). So, given that the C: (system) partition has only 30 GB used (~896 GB of total size), one of the first configurations … Read more