Limit dynamic RPC port range on Windows Server

RPC by default can grab any dynamic port above 1024.  Security sometimes may ask you to limit that to a much narrower range.  A the minimum you should have about 100-200 ports available for RPC communication. Here is the registry setting: HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc Ports: REG_MULTI_SZ: 5000-5100 PortsInternetAvailable: REG_SZ: Y UseInternetPorts: REG_SZ: Y   Full MS KB

Integrated Windows Authentication with IIS and Winows Server 2008 R2

Need to turn on integrated Authentication in IIS?  Here are the steps to do it:   On the taskbar, click Start, point to Administrative Tools, and then click Server Manager. In the Server Manager hierarchy pane, expand Roles, and then click Web Server (IIS). In the Web Server (IIS) pane, scroll to the Role Services

Remove ghosted network adapter from windows

The IP address you have entered for this network adapter is already assigned to another adapter… From time to time you may encounter this error on a newly P2V system. In the past it was a registry fix but now Microsoft has a prefered GUI solution: Click Start, click Run, type cmd.exe Type set devmgr_show_nonpresent_devices=1

A quick way to verify ldap functionality over a domain trust

Assume a trust is setup between Domain Y and Domain X From the Domain Y DC issue the following command ldifde -f output.ldf -s {FQDN of DCx} -b {user account} {domain}  {password}   Connecting to “FQDN of DCx” Logging in as “user account” in domain “domain” using SSPI Exporting directory to file output.ldf Searching for entries…

Find out what ports your Windows box is listening on

One of the easiest ways to see what ports a windows system is listening on is to use netstat. To get a comprehensive list open a command prompt netstat -an Active Connections Proto Local Address Foreign Address State TCP 0.0.0.0:135 0.0.0.0:0 LISTENING TCP 0.0.0.0:445 0.0.0.0:0 LISTENING TCP 0.0.0.0:1494 0.0.0.0:0 LISTENING TCP 0.0.0.0:2598 0.0.0.0:0 LISTENING TCP

IPv6 will not disable properly

Do you want to disable IPv6 on all interfaces but find that doing so on the NIC properties in the GUI does not always work properly? The best way to truly disable it is via registry setting: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters] “DisabledComponents”=dword:000000ff This will disable it on all interfaces and force IPv4 preference…