Brian Wolters

Windows August 2024 updates destroy GPO target group addressing 🥶🥶 The series of broken Microsoft updates just won't stop, and I really wonder how long they will continue to act so irresponsibly towards their customers. It really leaves me stunned. This gizmo is used in almost every company, and Microsoft apparently no longer considers it necessary to test updates extensively before they go into the field. Instead, the customer gets to play beta tester.🤬🤬🤬 reddit.com post titled KB5041578 Breaks new Item-Level Targeting in GPOs mentions an update that is causing problems: Looks like this breaks the ability to select "Users in Groups" for Security Groups Item Level targeting for GPOs. Have two domains, one was patched last night, no domain controllers with KB5041578 installed can select "Users in Groups", it's greyed out. Domain that wasn't patched still had the option available. Uninstalled KB5041578 on one of the domain controllers, able to select "Users in Groups" again. Existing GPOs are fine, hasn't broken those, only creation of new ones. If you already have an object listed with a user group selected, you can change it, it's still selected, but greyed out. Be wary patching this if you need to make more of these. Edit: GPP, any option, was noticed first for Printer mapping, but tried other GPPs and couldn't do User in Groups for any. Windows Server 2019. Haven't tried Powershelling yet. The workaround of the day for all interested, affected and clueless people 👊😉 - select computer in group - select group so that the sid is entered - save - drag item from the desktop - correct with notepad - integrate item via copy paste, delete the other one

6

I want everyone to think about this, all the companies that don't focus the correct amount of energy and resources on cyber security are getting breached more and more often. Please stop doing the following to avoid these kinds of issues: 1. Get the cheapest product. You will always end up spending more time and resources trying to bridge the gaps in protection and reacting to breaches that happen because the security platform or products you bought are not just not protecting you, but is actually making you more vulnerable. 2. Treat cyber security as a second or even third hand eye sore. 3. Assuming that threat actors don't want what you have. I can guarantee you have over 80% of things that they want. 4. Thinking that there is not a single vendor that can cover everything you need in one full platform. 5. Thinking cloud services can't be protected to the same level as your on prem devices. Please do the following: 1. research how often a company has had breaches and/or vulnerabilities in their products/services. 2. consider how long does it take that company to resolve those cyber security issues. 3. Find software providers that actually follow best practices for creating safe and easily securable either by your own policies or implementing a security vendor that can work with your software providers. 4. If you can't a good software provider and you have to use a specific product, put pressure on them to resolve their issues. Only their customers are going to get them to take things like this seriously. #CheckPoint #EndpointProtection #ZoneAlarm #CheckPointHarmony #CheckPointCloudGuard #CheckPointQuantum #CheckPointXPR #XDR

9

Trying out to bypass the Windows Defender with latest security updates using a customized .NET assembly loader to pop a meterpreter shell.

20

The latest edition of my Windows Server textbook is available soon! https://lnkd.in/gwmPgd-T #technology #technologyeducation #informationtechnology #windowsadministration #windowsserver #windowsserver2022

61

5 Comments

anyone following what I am posting and reposting, you're going to notice a common theme. I am going to call out any cyber security issues due to bad coding processes, as the world would be safer if everyone did this one simple thing, "follow coding best practices"!

3

BLOB Backdoor Use the stagger to attract the attention of the defense, leaving X2 on an island 🏝️ Free Playbook!! 51 backdoor sets diagrammed, most with video https://lnkd.in/gvRfsz3e

7

1 Comment

BLOB Backdoor Use the stagger to attract the attention of the defense, leaving X2 on an island 🏝️ Free Playbook!! 51 backdoor sets diagrammed, most with video https://lnkd.in/gvRfsz3e

9

1 Comment

🌐 Delving into the SMB (Server Message Block) Protocol 🌐 I’ve compiled a detailed document about SMB (Server Message Block), a pivotal network file-sharing protocol that plays a significant role in file and printer sharing across networks. This document provides insights into the evolution of SMB, its common uses, security considerations, and more. 🔑 Key Questions Addressed: What is SMB and what are its primary functions? What improvements were made in SMB2? Why is SMB1 considered insecure? What features does SMB3 offer? Common uses of SMB protocol. Operating systems that commonly use SMB. Other network file sharing protocols. The role of encryption in SMB3. How SMB facilitates network communication. Notable cyber attacks exploiting SMB vulnerabilities. This document aims to offer a clear and concise understanding of SMB for IT professionals, network administrators, and anyone interested in network protocols. #Networking #IT #SMBProtocol #FileSharing #NetworkSecurity 😉

2

We are seeing rapid growth in agentic systems as well. Soon, threat actors will start leveraging these tools to not just find vulnerabilities but exploit them autonomously. Cybersecurity is more important than ever before.

1

I need some help with a Windows Server Licensing Audit. If you're good at this, please leave a comment here and I will DM you.

4

1 Comment

Azure Virtual Desktop (AVD) formerly Windows Virtual Desktop (WVD) is not Hyper-V or a rehabilitated version Windows Virtual PC. It doesn’t even install on your local machine like VMware Workstation or VMplayer. Rather, AVD lets you deploy and scale virtualized Windows desktops and apps on Azure Windows Virtual Desktops. If you’re looking for more information about Azure Virtual Desktop, you’ve come to the right place. I hope this link helps you as it helped me! https://lnkd.in/eknhHsU7

1

For my fellow Microsoft Access developers out there, we have another MAJOR bug that has surfaced in which Access can crash and/or doesn't shutdown properly leaving hung msaccess.exe processes running in the background. Here's what we know thus far, including a couple workarounds: https://lnkd.in/gmiqV5R3

1

8 Comments

Windows 10 going away & Windows 12 on the way Windows 10 won't be going away immediately, but Microsoft will stop supporting it with security updates on October 14, 2025. This means using Windows 10 after that date is not recommended for security reasons. Windows 12 is Microsoft's next major operating system update, expected to be released in late 2024 or early 2025. It will build on the foundation of Windows 11, while introducing new features and enhancements. Some say that Windows 12 could include an even bigger push of Copilot, Microsoft's AI-powered operating system feature that includes the "Recall" feature. Recall tracks everything a user does on their PC, and can find any misplaced files or apps.

6