Reputation
588
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
1 10 28
Impact
~71k people reached

  • 0 posts edited
  • 0 helpful flags
  • 68 votes cast
Jan
6
answered How can I use IIS administration commandlets on Windows Server 2012 R2?
Jan
5
accepted What's the risk of running a Domain Controller so that it is accessible from the internet?
Jan
5
comment How can I use IIS administration commandlets on Windows Server 2012 R2?
@jscott: that does indeed work (There's get-webserver instead of get-iis). Thanks for your help! However, now I'm confused. What is the difference between get-webserver and get-iis? it seems very similar.
Jan
5
revised How can I use IIS administration commandlets on Windows Server 2012 R2?
added 525 characters in body
Jan
4
asked How can I use IIS administration commandlets on Windows Server 2012 R2?
Oct
18
awarded  Notable Question
Oct
10
accepted Why does Chrome complain about “obsolete cryptography”?
Sep
11
comment Is it “OK” to use the windows firewall for a DC with a public ip?
Regarding point 1: Wouldn't I have plenty of time to deal with the problem due to Credential caching? Point 2: I would always keep local admin accounts available for each server just for this case. I'm not sure what you mean by Point 3, so I can't say anything about that. Don't get me wrong, I'm not trying to defend my concept, but I would really like to fully understand the risks involved.
Sep
11
comment Is it “OK” to use the windows firewall for a DC with a public ip?
Thanks for your reply! Point 2 in your post seems very critical to me. Could you elaborate on why the web servers would go down if the DC is DoS'ed? I thought that the web servers should keep on running just fine for some time because all credentials are still cached until the DC comes back up.
Sep
11
comment Is it “OK” to use the windows firewall for a DC with a public ip?
Thanks for your advice and the excellent link!
Sep
11
comment Is it “OK” to use the windows firewall for a DC with a public ip?
Thanks for your excellent advice! It made me think of virtualizing my webservers, giving them two virtual nics (one public, one private) and routing all traffic from private through some virtualized (linux-based) router appliance. This should be safe, but the only question remaining is how to make my hyper-v hosts for the web servers connect to the DC since the virtualized VPN appliance obviously starts only after the host system is up.
Sep
9
comment Is it “OK” to use the windows firewall for a DC with a public ip?
@joeqwerty: It seems like AD would make a lot of things easier and hopefully also more secure, for example I am thinking of enforcing firewall rules, setting up drive shares, setting up a VPN, SQL server authentication, easier SQL Server mirroring, consistent NTFS permissions, remote server administration via Server Manager and so on.
Sep
9
comment Is it “OK” to use the windows firewall for a DC with a public ip?
@Reaces: I'm not so sure it does. What more could I do with a halfway affordable appliance as opposed to a windows firewall? If you're hinting at IDS, I am not sure how much of a difference it makes.
Sep
9
revised Is it “OK” to use the windows firewall for a DC with a public ip?
some clarifications
Sep
9
comment Is it “OK” to use the windows firewall for a DC with a public ip?
@Reaces: That question seems vaguely related, but it's not really what I am asking for. I am looking for the cons of using the windows firewall instead of a separate firewall appliance.
Sep
9
comment DNS settings for domain controller with dual nics one facing internet directly and one to router
What if the DC is secured by it's own firewall, but only allows inbound traffic for my own static ip's? You could not ping to it, so IMO it should be secure. Why do I need a dedicated machine just as a firewall?
Sep
9
asked Is it “OK” to use the windows firewall for a DC with a public ip?
Aug
28
awarded  Popular Question
Jun
20
comment Why does Chrome complain about “obsolete cryptography”?
I just tested your fix for the script and it does indeed work better for Chrome, but It is inferior according to SSLabs: "This server supports weak Diffie-Hellman (DH) key exchange parameters. Grade capped to B."
Jun
20
revised Why does Chrome complain about “obsolete cryptography”?
added 119 characters in body