Active Directory - David Buhlman

Sign in Subscribe

Active Directory

A collection of 19 posts

Homebox

I'm going to give Homebox a go since SnipeIt is just a bit too powerful and I'd spend too much time just fussing and administering it. Create Virtual Machine Steps performed on HV-03 via Windows Admin Center * I navigate to Virtual Machines * I click on Add

Bookstack Integration with Authentik, Part Two

Bookstack Integration with Authentik, Part Two

So the issue ended up being that Active Directory and Authentik were using the email address [email protected] for the administrative account, and Bookstack's administrative account, named david was also associated with the email address [email protected], which was trying to sync to my Active Directory/

Authentik Security, Part Twelve

Authentik Security, Part Twelve

Configure Authentik Enable LDAPS Part 3. Install and Configure Active Directory Federation Service (ADFS) Today I am going to pick up where I left off yesterday. I am hoping I can finish up part 3 today. Steps performed from desktop * From a browser go to https://fs-01.domain.local/adfs/

Authentik Security, Part Eleven

Authentik Security, Part Eleven

Configure Authentik Enable LDAPS Part 3. Install and Configure Active Directory Federation Service (ADFS) Steps performed on fileserver via mmc.exe * Click on File then Add/Remove Snap In * Select Certificates then click Add * Select Computer Account then click Finish, then OK * Right click on Personal * Navigate to All Tasks

Authentik Security, Part Ten

Authentik Security, Part Ten

Configure Authentik Enable LDAPS Part 2. Configure Secure LDAPs on Domain Controller I made some progress the past few days so hopefully now I can make some progress and finish up part two. Steps performed on desktop via Server Manager * Right click on DC-04 and select Certificate Templates * Click on

Authentik Security, Part Nine

Authentik Security, Part Nine

Configure Authentik Enable LDAPS Part 2. Configure Secure LDAPs on Domain Controller Well I don't have much time for this today but I was able to confirm that the RSAT tools were all installed successfully. The great news is that Certificate Authority is available now in Server Manager.

Authentik Security, Part Eight

Authentik Security, Part Eight

Configure Authentik Enable LDAPS Part 2. Configure Secure LDAPs on Domain Controller I'm coming back to this today. Let's get part 2 completed. It looks like I may have missed that the role Certificate Enrollment Web Services needs to be installed. So I install it to

Authentik Security, Part Three

Authentik Security, Part Three

Configure Authentik So I'd like to connect my lab's Active Directory to Authentik. It would be great to use the accounts already set up there, and I'll need to know that's working first before I connect my other applications right? So this

TubeArchivist, Part Two

TubeArchivist, Part Two

Configure TubeArchivist So I want to store the files TubeArchivist downloads on my fileserver. So I'll need to mount a network drive to accommodate the change. Steps performed on DC-02 via Windows Admin Center * Navigate to Active Directory * Navigate to Browse * Navigate to Managed Service Accounts * Click on

Build Domain Controller DC-03, Part Four

Build Domain Controller DC-03, Part Four

This project got away from me through the holidays. I've had DC-01 powered off for the last month so I'm pretty sure it is more than safe to decommission it completely and finish this project. Configure DHCP Failover Between DC-03 and DC-02 * On DC-03 I open

Build Domain Controller DC-03, Part Three

Build Domain Controller DC-03, Part Three

I don't have much time to dedicate to this again today, but I was able to uninstall the DHCP and DNS services on DC-01.

Build Domain Controller DC-03, Part Two

Build Domain Controller DC-03, Part Two

On DC-01 and DC-02 I disable the DHCP failover configuration. Next I make a backup of the DHCP configuration on DC-01 and copy the backup file to DC-03. I then restore the backup from DC-01 on DC-03. Then I authorized DC-03 and de-authorized DC-01. I test to verify that DC-03

Build Domain Controller DC-03

Build Domain Controller DC-03

Continuing from yesterday's debacle Veeam Backup of DC-01 Failed. With DC-01's failure I've migrated FSMO roles from DC-01 to DC-02 and then started working on bringing DC-03 online but brought all my virtual machines on HV-03 to a dead stop. I was confused and

Veeam Backup of DC-01 Failed

Veeam Backup of DC-01 Failed

So I was checking on some backups I have running in Veeam Community Edition and noticed the backups for DC-01 have been failing for the past week with the following error: 12/6/2022 1:09:34 PM :: Processing DC-01 Error: Data error (cyclic redundancy check). Failed to read data

PhotoPrism, Part Four

PhotoPrism, Part Four

When I go to use PhotoPrism today I'm having trouble logging in with the password I saved in my password manager. Strange. After checking online I find in PhotoPrism's documentation a command to help resolve this issue: * docker exec -ti <container_name> photoprism passwd

PhotoPrism

One thing that I have been interested in a while is a way to manage my photos myself. Amazon and Google have nice solutions but it scares me what they're doing with our personal photographs. It's also always abundantly clear that they offer all this free

Pi-Hole, Part Two

Pi-Hole, Part Two

So after DHCP propagated my new Pi-Hole servers I've realized that my test domain is unable to authenticate. This makes sense to me now because PH-01 and PH-02 have no way of finding my test domain do they? So in this scenario I have two sets of DNS