WhiteWinterWolf Practical IT security, *nix systems & networking

Latest articles in ‘Windows’

9. ---

   

   • windows
   • microsoft
   • cisco
   • lab

   How to configure Windows as a NTP server & enable IOS NTP client

   NTP allows to synchronize the clock of various devices to a common reference.

   In this how-to, we will configure a Windows Server as a NTP server and a Cisco IOS-based router to act as a NTP client. We will also see how to configure the router so it can itself serve as server to other devices, thus acting as an NTP relay.

   

   Windows (NTP server)

   Windows does not ship with any NTP server by default. In fact, Windows’ W32Time service implements SNTP instead, which is not compatible with NTP clients (see here).

   Meinberg NTP is a commonly used alternative to get a proper NTP server on Windows, and is the one we will use in this how-to.

   Before installing it, check that the following settings are correct:

   • The IP configuration (192.168.0.100 in my case)
   • Check the current time (08h15 in my case, but who cares?)

   Once …

   Continue

10. ---

    

    • windows
    • microsoft
    • cisco
    • lab

    How to configure Windows as a SCEP server & Cisco ASA enrollment

    SCEP is a protocol supported by several manufacturers, including Microsoft and Cisco, and designed to make certificate issuance easier in particular in large-scale environments.

    It proceeds in a few steps:

    1. The SCEP server issues a one-time password (the “challenge password”), transmitted out-of-band to the client.
    2. The client generates a key pair, and sends the certificate signing request to the SCEP server along with the one-time password.
    3. The SCEP server validates the client certificate data (in this how-to the validation will be manual), signs it and makes the signed certificate available to the client.
    4. The client regularly pull the SCEP server until its signed certificate becomes available. The client can then fetch the signed certificate and install it.

    Here we will setup a Windows Server as SCEP server, and use a Cisco ASA as SCEP client.

    

    The topology above mentions Windows 2016, but any other Windows server will do. This how-to …

    Continue

11. ---

    

    • windows
    • microsoft
    • lab

    How to create an Active Directory domain

    Setting-up a basic Windows Active Directory Domains allowing to centrally manage users account can be done painlessly. This guide is mainly based on Peter Kim’s guide written for his book The Hacker Playbook

    In this guide I use a minimal topology, with on one side a Windows server acting as the domain controller and on the other Windows client systems. This guide should work the same no matter the exact versions of the Windows server and clients you are using or if you are using a more complex and realistic topology.

    

    Note

    The Domain Controller must be a Windows Server edition, and for the clients to be able to join the domain they must be at least Windows Professional editions.

    See how to choose a Windows edition.

    Configure the network

    Set IP addresses

    First you need to set static IP addresses to each host.

    The quickest way to access …

    Continue

12. ---

    

    • windows
    • microsoft
    • lab

    Which Windows edition should I choose?

    Windows editions follow a naming convention which may not be the clearest and, to make things worse, change with Windows versions and cover both technical and non-technical differences (meaning that two different editions may actually be the same with just a different EULA).

    Here is a short post on main Windows editions with a focus on the version you may prefer for your lab.

    Windows client editions

    • Windows Home or Core edition is the low-budget, consumer grade version of Windows. It is enough for home uses, but is missing features necessary for corporate environments such as the ability to join an Active Directory domain.

    • Windows Professional or Business edition adds more functionalities, such as the ability to join an Active Directory domain and disk encryption (limited to the Enterprise edition and above until Windows 7 included).

    • Windows Enterprise, Education and Ultimate editions are the most complete editions. There is little …

    Continue