MS16-072 and the impact it really has on your GPOs

Greetings all,

It took a while to write a next blogpost but this one promises to be a goodie.

Last week, June 14 2016, Microsoft has released a security bulleting called MS16-072 that basically changes the behaviour of Group Policy Processing. Link to the bulletin is here Continue reading


Password not required, wait, what??

Edit September 4 2015, added link to useraccountcontrol explanation. Thanks Richard Stebbings for the URL!

Every once in a while we take a look at out Active Directory and do checks, a lot checks. One of these checks consists of investigating the UserAccountControl attribute value on the user accounts. As it turns out you can get some unexpected results when running these checks.

First of all, let’s take a look at the UserAccountControl attribute itself. Many of you probably know UserAccountControl as the pop-up screen on windows that was introduced with Windows Vista. Well, this is something different. Continue reading