Generated by All in One SEO v5.0.0.1, this is an llms.txt file, used by LLMs to index the site.

# .matrixpost.net

Marcus Rath

## Sitemaps

- [XML Sitemap](https://blog.matrixpost.net/sitemap.xml): Contains all public & indexable URLs for this website.

## Posts

- [Cheat Sheet Microsoft Hyper-V](https://blog.matrixpost.net/cheat-sheet-microsoft-hyper-v/) - This cheat sheet provides a practical collection of useful Microsoft Hyper-V and Failover Clustering commands for day-to-day administration and troubleshooting. It covers common tasks around virtual machines, cluster resources, Cluster Shared Volumes (CSV), networking, storage, and other components of a Hyper-V environment. I will regularly update and extend this cheat sheet whenever I come across
- [Microsoft Hyper-V Networking Best Practices - Part 3 - Configuring iSCSI Storage, Cluster Shared Volumes, and Live Migration](https://blog.matrixpost.net/microsoft-hyper-v-networking-best-practices-part-3/) - In Part 2, we configured the Hyper-V networking using Switch Embedded Teaming (SET) and created our two-node Failover Cluster. In this part, we will extend the cluster with shared iSCSI storage, configure a Cluster Shared Volume (CSV), migrate our existing virtual machines to shared storage, make them highly available clustered VMs, and test Live Migration
- [Microsoft Hyper-V Networking Best Practices - Part 2 - Configuring Hyper-V Networking, SET, and Failover Clustering](https://blog.matrixpost.net/microsoft-hyper-v-networking-best-practices-part-2/) - In Part 1 of this series, we installed the Hyper-V role and prepared the lab environment by deploying a domain controller and a pfSense firewall appliance. In this second part, we will configure the final Hyper-V networking according to Microsoft best practices, including Switch Embedded Teaming (SET), redundant management and VM networks, and finally create
- [Microsoft Hyper-V Networking Best Practices - Part 1 - Installing Hyper-V and Preparing the Lab Environment](https://blog.matrixpost.net/microsoft-hyper-v-networking-best-practices-part-1/) - Hyper-V has become a mature enterprise virtualization platform that provides high availability, live migration, software-defined networking, and deep integration with the Microsoft ecosystem. Whether deployed in small environments or large datacenters, a well-designed network architecture is essential for building a reliable, secure, and high-performing Hyper-V infrastructure. In this article series, we will explore Microsoft's recommended
- [Mastering Hyper-V Clusters with Storage Spaces Direct (S2D)](https://blog.matrixpost.net/mastering-hyper-v-clusters-with-storage-spaces-direct-s2d/) - Storage Spaces Direct (S2D) transforms local disks into highly available, software-defined storage for Hyper-V clusters, without the need for a traditional SAN. In this post, we’ll walk through the architecture, requirements, and practical setup of a Hyper-V failover cluster using S2D as the underlying storage layer. About how to set up a Hyper-V Cluster you
- [Deploying pfSense in Azure – A Step-by-Step Guide to Your Own Cloud Firewall](https://blog.matrixpost.net/deploying-pfsense-in-azure-a-step-by-step-guide-to-your-own-cloud-firewall/) - Spinning up a pfSense firewall in Azure can be done in two ways, out of the box or DIY style. If we just want a ready-to-run appliance, Netgate offers pfSense directly in the Azure Marketplace, complete with support and updates, though it comes at a monthly cost starting around €70 per month. For lab environments
- [Understanding Remote Procedure Calls (RPC) on Linux – Building an ONC RPC Client and Server and Analyzing the Network Traffic](https://blog.matrixpost.net/understanding-remote-procedure-calls-rpc-on-linux-building-an-onc-rpc-client-and-server-and-analyzing-the-network-traffic/) - In my previous article, we explored Microsoft's implementation of Distributed Computing Environment / Remote Procedure Call (DCE/RPC) by building a simple C++ client and server application using the Microsoft Interface Definition Language (MIDL). We then deployed the applications to separate Windows Server virtual machines and analyzed the complete communication flow with Wireshark, from the initial
- [How to update/upgrade vCenter Server (VCSA) by using the vCenter Server Appliance Management Interface (VAMI)](https://blog.matrixpost.net/how-to-update-upgrade-vcenter-server-vcsa-by-using-the-vcenter-server-appliance-management-interface-vami/) - vCenter Server is the backbone of VMware’s virtualization management, providing centralized control over your vSphere environment. Keeping it updated is crucial for security, stability, and access to new features. Regular updates patch vulnerabilities, improve performance, and ensure compatibility with the latest hardware and software. In this post we will see step by step how we
- [Mastering vSphere Lifecycle Management (vLCM)](https://blog.matrixpost.net/mastering-vsphere-lifecycle-management-vlcm/) - The vSphere Lifecycle Management (vLCM), a powerful feature designed to simplify and streamline the lifecycle management of your vSphere environments. Whether you're managing a single cluster or a large-scale data center, vLCM provides a centralized, automated approach to handle firmware, driver, and software updates across your entire infrastructure. By integrating hardware and software management into
- [Understanding Remote Procedure Calls (RPC) on Windows – Building a Simple Client and Server and Analyzing the Network Traffic](https://blog.matrixpost.net/understanding-remote-procedure-calls-rpc-building-a-simple-client-and-server-and-analyzing-the-network-traffic/) - Remote Procedure Call (RPC) is a general communication paradigm used by many operating systems and distributed systems, including Windows, Linux, BSD, macOS, and countless modern frameworks such as gRPC. Although each implementation differs in its protocol details, they all share the same fundamental idea: enabling an application to invoke a procedure on a remote system
- [Infrastructure as Code (IaC) - Part 2 - Azure Resource Manager (ARM) templates](https://blog.matrixpost.net/infrastructure-as-code-iac-part-2-azure-resource-manager-arm-templates/) - In this post I want to summarize about what Azure Resource Manager templates (ARM templates) are and how you can use them to automize the deployment of Azure resources. This topic is well documented from Microsoft and I will use the following article to show how you can deploy a storage account by using them.
- [Modern Azure Deployments with Terraform & GitHub - Part 1 - Introduction to Terraform, GitHub, and Infrastructure as Code on Azure](https://blog.matrixpost.net/modern-azure-deployments-with-terraform-github-part-1/) - Modern cloud environments require deployments that are reproducible, scalable, and version controlled. While deploying resources manually through the Azure Portal or command-line tools like the Azure CL, may work for small environments, larger infrastructures quickly become difficult to maintain consistently. In this series, we will use Terraform together with GitHub to automate Azure infrastructure deployments
- [Modern Azure Deployments with Terraform & GitHub – Part 2 – Remote Backends and Multi-Environment Deployments](https://blog.matrixpost.net/modern-azure-deployments-with-terraform-github-part-2/) - In Part 1, we deployed our first Azure resources with Terraform and GitHub using a locally stored Terraform state In addition to the dedicated backend configuration files, we file. While this approach works well for labs and small environments, it quickly becomes problematic once multiple engineers, automation pipelines, or production workloads are involved. In this part, we
- [Modern Azure Deployments with Terraform & GitHub – Part 3 – Automating Terraform CI/CD Workflows with GitHub Actions](https://blog.matrixpost.net/modern-azure-deployments-with-terraform-github-part-3/) - After building a production-style multi-environment Terraform project with centralized remote state management and environment-specific deployment configurations in Part 2, the next logical step is automation. In this part of the series, we will integrate GitHub Actions to automatically validate, plan, and deploy Terraform-based Microsoft Azure infrastructure directly from GitHub repositories. We will configure authentication between
- [Active Directory Cheat Sheet essential Commands](https://blog.matrixpost.net/active-directory-cheat-sheet-essential-commands/) - Active Directory (AD) is the backbone of identity and access management in most enterprise Windows environments. Whether you're managing users, diagnosing authentication issues, or querying domain controllers, knowing the right commands can save valuable time. This cheat sheet provides a concise list of essential AD commands for system administrators, covering domain info, user and group
- [Sysinternals and its PsExec Tool](https://blog.matrixpost.net/sysinternals-and-its-psexec-tool/) - Recently, I had to troubleshoot a bare-metal server in a branch office that suddenly refused Remote Desktop (RDP) connections. Although the server responded to ICMP ping requests and I was confident that Remote Desktop was enabled, both Telnet and Nmap confirmed that TCP port 3389 was not listening. When traditional remote administration tools are unavailable,
- [Recovering a Windows Server Stuck at "Preparing to Configure Windows" After Windows Updates](https://blog.matrixpost.net/recovering_windows_server_stuck_preparing_to_configure_windows/) - Occasionally, Windows Server may become stuck during startup with the message Preparing to configure Windows, often after an interrupted or failed Windows Update installation. Instead of completing the servicing operation, the system repeatedly attempts to process pending update transactions and never reaches the logon screen. In this post, I'll demonstrate how to recover the server
- [Mastering Azure Update Manager - Part 1](https://blog.matrixpost.net/mastering-azure-update-manager-part-1/) - Today we will see how we can onboard machines to Azure Update Manger, a comprehensive, cloud-native service provided by Microsoft Azure to manage patching and updating operating systems across virtual machines (VMs) and physical servers in a centralized manner. It automates the discovery, deployment, and monitoring of updates for both, Windows and Linux systems, ensuring
- [Mastering Azure Update Manager - Part 2](https://blog.matrixpost.net/mastering-azure-update-manager-part-2/) - In Part 1 we saw how to onboard machines to Azure Update Manager on a per machine level or on demand which is fine for a small number of machines to deal with. In this part we will see how we can onboard machines at scale to Azure Update Manager by using Azure Policy. Azure
- [Mastering Azure Update Manager - Part 3](https://blog.matrixpost.net/mastering-azure-update-manager-part-3/) - In Part 2 we saw how we can onboard machines at scale to Azure Update Manager by using Azure Policy. Further we saw how we can create alerts for the update process. In this part I will focus on how to updating SUSE Linux Enterprise by using the Azure Update Manager. How Azure SLES VMs
- [Mastering Windows Updates & Microsoft Updates - Part 1](https://blog.matrixpost.net/mastering-windows-updates-microsoft-updates-part-1/) - Behind that simple “Check for updates” button lies a complex system of services, agents, stacks, and rules. In this post, we’ll explore how to master Windows Updates successfully, why they sometimes fail, and what we can do in case something went wrong. Further we will also see the difference between Windows and Microsoft Updates and
- [Mastering Windows Updates & Microsoft Updates - Part 2](https://blog.matrixpost.net/mastering-windows-updates-microsoft-updates-part-2/) - In Part 1 we will see how to master Windows Updates successfully, why they sometimes fail, and what we can do in case something went wrong. Further we will also see there the difference between Windows and Microsoft Updates and their different settings we need to understand. Now in this part will we will troubleshoot Azure virtual machines they will either
- [Mastering Azure Update Manager – Part 4](https://blog.matrixpost.net/mastering-azure-update-manager-part-4/) - In Part 3 we saw how to patch SUSE Linux Enterprise by using the Azure Update Manager and some troubleshooting. Now in this part we will see how to get notified about patch installation states (like e.g. Succeeded or Failed) per email by using Azure Monitor alerts. We will use queries to set up alerts for our
- [Mastering Windows Updates & Microsoft Updates – Part 3 - Controlling Automatic Updates in On-Prem and Cloud Environments](https://blog.matrixpost.net/mastering-windows-updates-microsoft-updates-part-3-controlling-automatic-updates-in-on-prem-and-cloud-environments/) - Keeping Windows servers properly patched can feel deceptively simple, until you realize that automatic updates don’t behave the same everywhere. Whether it’s an on-prem VM, an Azure instance managed by Update Manager, or a GCP VM under OS Patch Management, each environment has its own logic that decides if and when updates install automatically. In
- [Beyond the Clustershell: Troubleshooting ONTAP via VLOADER and Maintenance Mode](https://blog.matrixpost.net/beyond-the-clustershell-troubleshooting-ontap-via-vloader-and-maintenance-mode/) - For most NetApp administrators, daily operations happen entirely within the safety of the ONTAP clustershell. But when a severe hardware failure, ungraceful shutdown, or split-brain scenario occurs, a node may become completely inaccessible via traditional management paths. To recover a non-booting controller, whether it’s a physical FAS/AFF array or a software-defined ONTAP Select instance, you
- [VMware vSphere Networking Best Practices](https://blog.matrixpost.net/vmware-networking-best-practices/) - This post outlines VMware's recommended best practices for configuring network redundancy and NIC teaming in vSphere environments. It explains the different NIC teaming and link aggregation options, including EtherChannel and LACP, and discusses their advantages, limitations, and recommended use cases. Network outages or uplink misconfigurations can lead to host isolation, vSAN partition states, and virtual
- [Windows Secure Boot Certificates Expire in June and October 2026 – Readiness Checks, Troubleshooting, and VMware vSphere Fixes](https://blog.matrixpost.net/windows-secure-boot-certificates-expire-in-june-and-october-2026/) - Microsoft has announced that the original Secure Boot certificates introduced with Windows and UEFI Secure Boot in 2011 are approaching the end of their lifecycle and will begin expiring between June and October 2026. To maintain a trusted boot chain and continue receiving future boot-level security updates, Microsoft is rolling out a new generation of
- [Windows Cheat Sheet for essential Commands](https://blog.matrixpost.net/windows-cheat-sheet-for-essential-commands/) - Mastering a few key Windows commands can save you time, troubleshoot issues, and unlock hidden features. From speeding up tasks to fixing common problems, the Command Prompt and PowerShell are powerful tools to solve some of these issues. In this post, I will explore interesting and useful Windows commands and update this post regularly. About Active Directory
- [Behind the Scenes: How Cloud Volumes ONTAP Handles Azure Scheduled Maintenance](https://blog.matrixpost.net/behind-the-scenes-how-cloud-volumes-ontap-handles-azure-scheduled-maintenance/) - Although the official documentation explains that Cloud Volumes ONTAP in Azure performs a negotiated takeover before Azure Scheduled Maintenance begins, it does not describe what happens after Azure reboots the affected node. During an actual maintenance event, I captured the complete serial console output, revealing how Cloud Volumes ONTAP coordinates its startup with Azure. Rather
- [Deploying NetApp Cloud Volumes ONTAP (CVO) in Azure using NetApp Console (formerly BlueXP) – Part 8 - Disaster Recovery](https://blog.matrixpost.net/deploying-netapp-cloud-volumes-ontap-part-8/) - In this part of this series, we shift the focus to business continuity. Disaster Recovery (DR) is a critical component of any production-ready Cloud Volumes ONTAP (CVO) environment in Azure, ensuring data availability even in the event of regional failures, accidental deletions, or major outages. We focus on Disaster Recovery and explore how to protect
- [Infrastructure as Code (IaC) - Part 3 - Desired State Configuration (DSC)](https://blog.matrixpost.net/infrastructure-as-code-iacs-part-3-desired-state-configuration-dsc/) - Desired State Configuration (DSC) is a management platform in PowerShell that enables you to manage your IT and development infrastructure with configuration as code. It was first released in PowerShell version 4.0 and can be used to automate the configuration of Windows and Linux operating systems. No Active Directory and GPOs are needed. By using
- [Deploying NetApp Cloud Volumes ONTAP (CVO) in Azure using NetApp Console (formerly BlueXP) – Part 5 - Backup and Recovery](https://blog.matrixpost.net/deploying-netapp-cloud-volumes-ontap-part-5/) - In the previous parts of this series, we successfully stood up our Cloud Volumes ONTAP (CVO) environment and configured our data protocols. However, a storage solution is only as good as its last backup. In this part we dive into the deployment of NetApp Backup and Recovery (formerly Cloud Backup Service). In this part we
- [Protecting NetApp ONTAP Workloads with Autonomous Ransomware Protection (ARP) - Part 1 - Fundamentals](https://blog.matrixpost.net/protecting-netapp-ontap-workloads-with-autonomous-ransomware-protection-arp-part1/) - This post is Part 1 of a four-part series about NetApp ONTAP Autonomous Ransomware Protection (ARP). NetApp ONTAP provides built-in ransomware protection through Autonomous Ransomware Protection (ARP). Rather than relying solely on traditional antivirus software, ARP analyzes workload behavior, detects anomalies that may indicate ransomware attacks, and automatically creates dedicated recovery snapshots. ARP does not
- [Protecting NetApp ONTAP Workloads with Autonomous Ransomware Protection (ARP) – Part 4 – Detecting and Recovering SMB Workloads from Ransomware](https://blog.matrixpost.net/protecting-netapp-ontap-workloads-with-autonomous-ransomware-protection-arp-part4/) - In this part we cover the protection, detection, and recovery of SMB (CIFS) file workloads using NetApp Console Ransomware Resilience, demonstrating how it extends native ONTAP Autonomous Ransomware Protection (ARP) with centralized visibility, orchestration, and recovery capabilities. Protecting and Recovering SMB/CIFS Workloads Part 3 demonstrated how to recover a VMware SAN workload by replacing a
- [Protecting NetApp ONTAP Workloads with Autonomous Ransomware Protection (ARP) – Part 3 – Extending Protection with NetApp Console Ransomware Resilience](https://blog.matrixpost.net/protecting-netapp-ontap-workloads-with-autonomous-ransomware-protection-arp-part3/) - In Part 1 of this series, we explored the fundamentals of NetApp ONTAP Autonomous Ransomware Protection (ARP), including its architecture, licensing, configuration, and built-in protection mechanisms. In Part 2, we validated ARP in a VMware vSphere lab by simulating a ransomware attack against a VMFS datastore backed by an ONTAP iSCSI LUN and examined how
- [Protecting NetApp ONTAP Workloads with Autonomous Ransomware Protection (ARP) - Part 2 - Simulating Ransomware Attacks on VMware VMFS Datastores](https://blog.matrixpost.net/protecting-netapp-ontap-workloads-with-autonomous-ransomware-protection-arp-part2/) - In Part 1 of this series, we explored the fundamentals of NetApp ONTAP Autonomous Ransomware Protection (ARP), including its architecture, licensing, protection mechanisms, and how to enable ARP on supported volumes. In this second part, we'll build a complete VMware vSphere SAN environment from scratch to validate ARP in a realistic lab. Starting with a
- [Deploying NetApp Cloud Volumes ONTAP (CVO) in Azure using NetApp Console (formerly BlueXP) – Part 3 - Configuring Data Services](https://blog.matrixpost.net/deploying-netapp-cloud-volumes-ontap-part-3/) - In this part of the series, we move on to configuring the actual data services on the Cloud Volumes ONTAP system. By default, Cloud Volumes ONTAP deploys a preconfigured data SVM that serves as the foundation for CIFS, NFS, and other data protocols. This includes creating Storage Virtual Machines (SVMs), provisioning volumes, and enabling access
- [Step-by-Step Guide Part 3: How to build your own NetApp ONTAP 9 LAB - Using NetApp ONTAP as iSCSI Storage for vSphere](https://blog.matrixpost.net/step-by-step-guide-part-3-how-to-build-your-own-netapp-ontap-9-lab-using-netapp-ontap-as-iscsi-storage-for-vsphere/) - In part 1 we saw how to get the ONTAP Simulate appliance and how to deploy it in vSphere. Further we saw the initial cluster setup by using a 2-node cluster (virtual appliances). In part 2 we saw building the foundational storage setup: aggregates, Storage Virtual Machines (SVMs), logical interfaces (LIFs), and volumes. In this part, we will see step by step
- [File Locking in NetApp ONTAP: SMB, NFS and Troubleshooting Stale Locks](https://blog.matrixpost.net/file_locking_in_netapp_ontap/) - In both SMB and NFS environments, a file lock represents a coordination mechanism that governs how active clients can access shared files. While SMB (CIFS) uses mandatory locks and persistent sessions to enforce share modes and oplocks, NFS, especially v3, uses an advisory lock model via the Network Lock Manager (NLM). Understanding how ONTAP reports
- [Set up NIC Teaming in Windows Server](https://blog.matrixpost.net/set-up-nic-teaming-in-windows-server/) - NIC Teaming, or Network Interface Card Teaming, is a feature in Windows Server that combines multiple network adapters into a single logical interface. It enhances network performance, provides redundancy, and ensures high availability by aggregating bandwidth and enabling failover protection. Below we will see step by step how to set up NIC Teaming in Windows
- [Deploying NetApp Cloud Volumes ONTAP (CVO) in Azure using NetApp Console (formerly BlueXP) – Part 4 - Antivirus VSCAN Configuration](https://blog.matrixpost.net/deploying-netapp-cloud-volumes-ontap-part-4/) - In this part of the series, we shift the focus to security and take a closer look at how antivirus protection is implemented in Cloud Volumes ONTAP using ONTAP VSCAN. Unlike traditional file server antivirus solutions, ONTAP relies on an external scanning engine. In enterprise environments, this is commonly implemented using products such as Trend
- [How to Shrink a VMware vSphere Virtual Disk for Windows Server](https://blog.matrixpost.net/how-to-shrink-a-vmware-vsphere-virtual-disk-for-windows-server/) - Shrinking a virtual disk in VMware vSphere is considerably more challenging than extending one. While Windows allows you to reduce the size of partitions by using Disk Management or diskpart, VMware does not support shrinking an existing virtual disk. As a result, reducing the size of a VMDK requires migrating the operating system and its
- [How to Shrink a Linux VMware vSphere Virtual Disk (VMDK) and Its Associated Logical Volume](https://blog.matrixpost.net/how-to-reduce-a-vmdk-and-its-associated-logical-volume-in-vmware-vsphere/) - Allocating additional storage to a virtual machine in VMware vSphere is straightforward, you simply increase the size of the virtual disk and extend the guest operating system's partition or logical volume. More about extending disks and logical volumes in Linux in my following post. Reducing storage, however, is a completely different story. VMware does not
- [vSphere Linux Virtual Machines - Extend Disks, LVM Logical Volumes and the File System](https://blog.matrixpost.net/vsphere-linux-virtual-machines-extend-disks-logical-volumes-and-the-file-system/) - In this post I want to show how you can extend the virtual hard disks for a virtual machine running in vSphere, then extend the LVM volume groups (VGs) stored on these virtual hard disks and finally also resize the file system for these logical volume groups. For this post I will use a SUSE
- [Deploying NetApp Cloud Volumes ONTAP (CVO) in Azure using NetApp Console (formerly BlueXP) – Part 9 – Azure Key Vault as an External Key Manager: Encryption, Outage Recovery, and Worst-Case HA Testing](https://blog.matrixpost.net/deploying-netapp-cloud-volumes-ontap-part-9/) - In previous parts of this series, we deployed, managed, protected, and replicated Cloud Volumes ONTAP systems in Microsoft Azure. While Azure Storage encryption is enabled by default, many organizations require additional control over their encryption keys to meet compliance, security, and governance requirements. Cloud Volumes ONTAP data is automatically encrypted in Azure using Azure Storage Service
- [Cheat Sheet NetApp ONTAP -  Commands used in day-to-day operations](https://blog.matrixpost.net/cheat-sheet-netapp-ontap-commands-used-in-day-to-day-operations/) - Working with NetApp ONTAP often means jumping between clusters, SVMs, LIFs, and shares while keeping an eye on performance and troubleshooting access. Over time, certain commands become part of the daily routine, whether you're checking CIFS configurations, verifying volume security, or confirming network failover groups. To save time and avoid digging through documentation, I’ve pulled
- [How Multicast Traffic Works in VMware vSphere – Testing VSS (Basic Multicast Filtering) vs VDS (IGMP/MLD Snooping) with Video Streaming - Part 1](https://blog.matrixpost.net/vmware-multicast-traffic-handling-part1/) - Multicast traffic is commonly used for IPTV, video surveillance systems, financial market data feeds, software deployment solutions, and other applications that need to efficiently distribute the same data stream to multiple receivers. Unlike unicast traffic, where the sender must transmit a separate stream to each client, multicast allows a single stream to be replicated by
- [How Multicast Traffic Works in VMware vSphere – Testing VSS (Basic Multicast Filtering) vs VDS (IGMP/MLD Snooping) with Video Streaming - Part 2](https://blog.matrixpost.net/vmware-multicast-traffic-handling-part2/) - In Part 1, we built the multicast lab environment and explored multicast communication within a single VLAN, including IGMP, IGMP Snooping, and multicast filtering on both physical and virtual switches. In this part, we'll extend the lab by configuring multicast routing across VLANs with pfSense, allowing multicast streams to traverse Layer 3 boundaries while maintaining
- [NetApp ONTAP Disk Replacement Fails: Troubleshooting a Disk with Unknown Status](https://blog.matrixpost.net/netapp-ontap-disk-replacement-fails-troubleshooting-a-disk-with-unknown-status/) - Replacing failed disks in ONTAP is usually a straightforward process. The replacement drive is inserted, ownership is assigned automatically, and the disk becomes available as a spare or immediately participates in RAID reconstruction. In one of my environments, however, one replacement disk behaved differently. Although the cluster remained healthy and all aggregates were online, the
- [NetApp Backup & Recovery Ad-Hoc Backups Demystified – What Really Happens Behind the Scenes?](https://blog.matrixpost.net/netapp-backup-recovery-ad-hoc-backups-demystified-what-really-happens-behind-the-scenes/) - NetApp Backup & Recovery makes it easy to create ad-hoc backups directly from the NetApp Console, but what actually happens behind the scenes is not always obvious. When a manual backup is triggered, ONTAP creates a Snapshot copy, assigns a SnapMirror label, transfers the backup data to object storage, and registers the recovery point in
- [Protecting On-Prem ONTAP with NetApp Console Backup and Recovery](https://blog.matrixpost.net/protecting-on-prem-ontap-with-netapp-console-backup-and-recovery/) - Once an on-premises ONTAP system is connected to the NetApp Console, additional cloud services can be enabled for the cluster. One of these services is Backup and Recovery, which allows ONTAP volumes to be backed up to object storage for long-term protection and disaster recovery. In my case, the backups are stored in Azure object
- [Step-by-Step Guide Part 6: How to build your own NetApp ONTAP 9 LAB – NFSv4 Pitfalls](https://blog.matrixpost.net/step-by-step-guide-part-6-how-to-build-your-own-netapp-ontap-9-lab-nfsv4-pitfalls/) - When you switch from NFSv3 to NFSv4, things definitely change under the hood, and suddenly your permissions or ownership mappings may break, even if everything looks perfect on paper. Why NFSv4 behaves differently, why it breaks UID/GID-based access, and how to solve it specifically for NetApp ONTAP environments we will see in this post. Introduction
- [Linux Cheat Sheet for essential Network Commands](https://blog.matrixpost.net/linux-cheat-sheet-for-essential-network-commands/) - Whether troubleshooting connectivity issues, analyzing network traffic, verifying DNS resolution, or checking listening services, Linux provides a powerful set of built-in networking tools for day-to-day administration and debugging. In this cheat sheet, we will look at some of the most essential Linux network commands commonly used for diagnostics, monitoring, and troubleshooting in enterprise and lab
- [Mastering Netplan: Modern Network Configuration on Ubuntu](https://blog.matrixpost.net/mastering-netplan-modern-network-configuration-on-ubuntu/) - Modern Ubuntu Server releases (17.10 and later) use Netplan as the default network configuration system. Instead of editing /etc/network/interfaces, the network settings are now defined in declarative YAML files and applied through systemd-networkd or NetworkManager. In this post, we’ll walk through the essential Netplan concepts and show how to configure common setups like static IPs,
- [How to mount SMB Shares on Linux](https://blog.matrixpost.net/how-to-mount-smb-shares-on-linux/) - Linux systems can easily connect to Windows shared folders or other SMB (Server Message Block) network shares using the SMB/CIFS protocol. This allows seamless file sharing between Linux and Windows machines on a network. In this post we will see how we can mount SMB shares on Linux. Mount SMB Share on Linux On SLES
- [Mastering Packet Monitor (Pktmon) on Windows](https://blog.matrixpost.net/mastering-packet-monitor-pktmon-on-windows/) - For years, troubleshooting network traffic on Windows servers often meant installing third-party tools like Wireshark or Npcap directly on production systems, something many administrators and security teams prefer to avoid. What many IT professionals still do not realize is that modern versions of Windows Server (Windows 10 and Windows Server 2019 (Version 1809 and later))
- [How to Migrate from vSphere Standard Switch (VSS) to vSphere Distributed Switch (VDS) – and Back Again](https://blog.matrixpost.net/how-to-migrate-from-vsphere-standard-switch-vss-to-vsphere-distributed-switch-vds-and-back-again/) - The vSphere Distributed Switch (VDS) provides centralized network management across multiple ESXi hosts and offers advanced features such as Network I/O Control (NIOC), LACP, NetFlow, Port Mirroring, and centralized port group management. However, many environments still operate successfully with traditional vSphere Standard Switches (VSS), especially in smaller deployments. Migrating from a VSS to a VDS
- [How to renew/regenerate the vCenter Server Certificate](https://blog.matrixpost.net/how-to-renew-regenerate-the-vcenter-server-certificate/) - Certificates play a vital role in securing communications between your vCenter Server and its connected components, such as ESXi hosts, vSphere clients, and other management tools. However, certificate management can often be a daunting task, especially when it comes to renewal. In this post, we will see step-by-step the process of renewing our vCenter Server
- [How to deploy a vSphere Distributed Switch in vCenter](https://blog.matrixpost.net/how-to-deploy-a-vsphere-distributed-switch-in-vcenter/) - In this post I want to show step by step how we can deploy a vSphere Distributed Switch in vCenter. In vSphere you can choose between standard vSwitches and distributed vSwitches. Without vCenter you are just able to configure and maintain standard vSwitches individually on each ESXi Host by hand. The distributed vSwitches is a
- [Microsoft Oscdimg: Quickly Creating ISO Files from the Command Line](https://blog.matrixpost.net/microsoft-oscdimg-quickly-creating-iso-files-from-the-command-line/) - Oscdimg is a command-line utility from Microsoft that can create ISO 9660 and UDF image files from a folder structure. ISO 9660 is the standard filesystem format used by ISO images and optical media. It defines how files and directories are stored within the image, ensuring compatibility across different operating systems and devices. While it
- [Cheat Sheet pfSense](https://blog.matrixpost.net/cheat-sheet-pfsense/) - pfSense provides a powerful web-based management interface, but many troubleshooting and recovery tasks can be performed directly from the console or shell. This cheat sheet summarizes some of the most useful pfSense shell and console commands, including examples for managing firewall rules, WebGUI access and other day-to-day administration tasks. I will update the post on
- [Deploying NetApp Cloud Volumes ONTAP (CVO) in Azure using NetApp Console (formerly BlueXP) – Part 2 - Deployment in Microsoft Azure](https://blog.matrixpost.net/deploying-netapp-cloud-volumes-ontap-part-2/) - In Part 1 of this series, we completed the initial preparation and onboarding within the NetApp Console (formerly BlueXP), including Azure subscription setup, feature registration, and account associations. With the foundation in place, it’s now time to move on to the actual deployment of a Cloud Volumes ONTAP HA pair in Microsoft Azure directly from
- [How to change VMware Disk Provisioning (Thick/Thin) afterwards](https://blog.matrixpost.net/how-to-change-disk-provisioning-thick-thin-afterwards/) - In VMware vSphere, disk provisioning is a critical aspect of virtual machine storage management, impacting both performance and storage efficiency. Two primary disk provisioning methods are available: Thick Provisioning and Thin Provisioning. Thick provisioning allocates the entire disk space upfront, ensuring reserved capacity but potentially leading to underutilized storage. Thin provisioning, on the other hand, allocates storage on-demand,
- [Azure AD - App Registrations vs. Enterprise Applications](https://blog.matrixpost.net/azure-ad-app-registrations-vs-enterprise-applications/) - Azure Active Directory (Azure AD) is Microsoft’s cloud-based identity and access management (IAM) service and an identity provider (IdP). Azure AD is the backbone for authentication in Microsoft 365 (Office 365) and also for other cloud based services like thousands of other SaaS applications. To learn the difference between Azure AD and Active Directory Domain
- [Infrastructure as Code (IaC) – Part 6 - Terraform](https://blog.matrixpost.net/infrastructure-as-code-iac-part-6-terraform/) - In this post we will see the basics we need to know to provision resources in Azure by using Terraform. This is well documented by Terraform and Microsoft and I will refer to their articles in this post. Terraform's primary function is to create, modify, and destroy infrastructure resources to match the desired state described
- [How to monitor Windows Clients in Checkmk](https://blog.matrixpost.net/how-to-monitor-windows-clients-in-checkmk/) - In my last post we saw how we can monitor VMware vSphere environments in Checkmk. In this post we will see how we can monitor Windows Clients in Checkmk. Checkmk can monitor Windows clients effectively. It provides comprehensive monitoring capabilities for Windows servers and workstations, allowing administrators to track system health, performance, and availability in
- [Deploying and Operating Azure Kubernetes Service (AKS) – A Practical Guide – Part 5 – Ingress & Application Routing (L7)](https://blog.matrixpost.net/deploying-and-operating-azure-kubernetes-service-aks-a-practical-guide-part-5-ingress-application-routing-l7/) - In Part 4, we exposed our application using Kubernetes Services backed by Azure Load Balancers, providing basic Layer 4 connectivity. In this part, we take the next step and introduce Ingress to enable Layer 7 routing, allowing multiple applications to be exposed through a single entry point using hostnames and URL paths. By deploying an
- [Cheat Sheet Kubernetes - Commands used in Day-to-Day Operations](https://blog.matrixpost.net/cheat-sheet-kubernetes-commands-used-in-day-to-day-operations/) - This Kubernetes cheat sheet provides a practical collection of commonly used kubectl commands and concepts for day-to-day administration, troubleshooting, and application management. It covers essential operations such as working with Pods, Deployments, Services, Ingress, networking, and cluster troubleshooting in real-world Kubernetes environments. I will update this post on a regular basis. Azure CLI Authentication and
- [ONTAP EMS Notifications: Configuring Email Alerts via SMTP Relay](https://blog.matrixpost.net/ontap-ems-notifications-configuring-email-alerts-via-smtp-relay/) - Configuring email notifications in ONTAP is essential to ensure operational visibility, especially for critical EMS events and AutoSupport alerts. In NetApp ONTAP, the EMS (Event Management System) and AutoSupport serve different purposes, even though both can trigger email notifications. EMS messages are real-time event logs generated by ONTAP (e.g. errors, warnings, state changes) and are
- [Linux LVM - Create a new Volume Group and Logical Volumes](https://blog.matrixpost.net/linux-lvm-create-a-new-volume-group-and-logical-volumes/) - In this post I want to show how we can create a new LVM Volume Group (VG) and Logical Volumes (LVs) in Linux. Initialize physical Volumes (PVs) Creating a new volume group requires to add disks (block devices) to the volume group as storage. Disks in LVM terminology are so called physical volumes (PVs). In
- [Bypass spam filtering in Exchange Online (Office 365) for specific Sender Domain](https://blog.matrixpost.net/bypass-spam-filtering-in-exchange-online-office-365-for-specific-sender-domain/) - If you want to exclude specific domains from scanned by spam filtering, you can add a rule under mail flow with the EAC in Exchange Online as follows. Use the EAC to create a mail flow rule that sets the SCL of a messagehttps://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/use-mail-flow-rules-to-set-the-spam-confidence-level-scl-in-messages?view=o365-worldwide#use-the-eac-to-create-a-mail-flow-rule-that-sets-the-scl-of-a-messageBe very careful about allowing messages to skip spam filtering. Attackers can
- [Bringing ONTAP On-Prem into NetApp Console – Managing a vSphere ONTAP System from the Cloud](https://blog.matrixpost.net/bringing-ontap-on-prem-into-netapp-console-managing-a-vsphere-ontap-system-from-the-cloud/) - NetApp Console is not limited to managing Cloud Volumes ONTAP in Azure, AWS, or GCP. It can also act as a centralized control plane for on-premises ONTAP systems. In my lab, I’m running an ONTAP simulator on vSphere, I’ll walk through how to onboard that simulator into NetApp Console to build a true hybrid management
- [Deploying and Operating Azure Kubernetes Service (AKS) – A Practical Guide – Part 4 – Working with Pods, Deployments, and Services](https://blog.matrixpost.net/deploying-and-operating-azure-kubernetes-part4/) - After deploying and configuring our AKS cluster in the previous parts, we now start working with actual workloads. In this section, we will deploy our first application, manage it using deployments, and expose it externally using Kubernetes services. The kubectl run command creates a single, temporary pod that is typically used for testing or troubleshooting
- [Deploying and Operating Azure Kubernetes Service (AKS) – A Practical Guide – Part 3 – Deploying our First AKS Cluster](https://blog.matrixpost.net/deploying-and-operating-azure-kubernetes-part3/) - After covering the fundamentals and architecture in the previous parts, it’s now time to get hands-on and deploy our first Azure Kubernetes Service (AKS) cluster. In this part, we will walk through the deployment of an AKS cluster using both the Azure Portal and the Azure CLI. The focus is on a practical, reproducible setup
- [Deploying and Operating Azure Kubernetes Service (AKS) – A Practical Guide – Part 2 – AKS Architecture and Components in Azure](https://blog.matrixpost.net/deploying-and-operating-azure-kubernetes-part2/) - After covering the core Kubernetes concepts in Part 1, we now take a closer look at how Kubernetes is implemented in Microsoft Azure using Azure Kubernetes Service (AKS). While Kubernetes itself is platform-agnostic, each cloud provider introduces its own architecture, integrations, and operational model. Understanding these Azure-specific components is essential for designing, deploying, and operating
- [Deploying and Operating Azure Kubernetes Service (AKS) – A Practical Guide – Part 1 – Fundamentals and Core Concepts](https://blog.matrixpost.net/deploying-and-operating-azure-kubernetes-part1/) - With the increasing adoption of containerized applications, Kubernetes has established itself as the standard platform for container orchestration. However, its architecture and terminology can be complex, especially for those new to the ecosystem. In this multi-part series, I’ll walk through the fundamentals of Kubernetes using Azure Kubernetes Service (AKS), focusing on a practical, hands-on approach
- [Cheat Sheet Azure CLI and Azure PowerShell](https://blog.matrixpost.net/cheat-sheet-azure-cli-and-azure-powershell/) - When it comes to managing your resources in Microsoft Azure by using the command line, we can use therefore mainly the Azure PowerShell or Azure CLI. Azure PowerShell is tailored for users who are familiar with PowerShell scripting and Windows environments, while Azure CLI offers a more cross-platform, Bash-like experience that works seamlessly across Linux,
- [Step-by-Step Guide Part 2: How to build your own NetApp ONTAP 9 LAB](https://blog.matrixpost.net/step-by-step-guide-part-2-how-to-build-your-own-netapp-ontap-9-lab/) - In part 1 we saw how to get the ONTAP Simulate appliance and how to deploy it in vSphere. Further we saw the initial cluster setup by using a 2-node cluster (virtual appliances). Now in this second part we will building the foundational storage setup: aggregates, Storage Virtual Machines (SVMs), logical interfaces (LIFs), and volumes. Once a volume is created on a
- [Deploying NetApp ONTAP Select in VMware vSphere – Running ONTAP as a Virtual Storage Appliance - Part 1](https://blog.matrixpost.net/deploying-netapp-ontap-select-in-vmware-vsphere-part1/) - NetApp ONTAP is traditionally deployed on dedicated NetApp storage hardware. With ONTAP Select, however, the same storage operating system can run as a virtual appliance on a standard hypervisor such as VMware vSphere. It complements the suite of mainstream FAS, AFF, and ASA ONTAP offerings as well as other software-only options such as Cloud Volumes
- [Deploying NetApp ONTAP Select in VMware vSphere – Running ONTAP as a Virtual Storage Appliance - Part 2](https://blog.matrixpost.net/deploying-netapp-ontap-select-in-vmware-vsphere-part2/) - In part 1 of this series, we saw how to deploy a two-node ONTAP Select cluster in a VMware vSphere environment using the ONTAP Select Deploy appliance. The focus was on the initial setup, including the deployment of the Deploy utility and the automated provisioning of the ONTAP Select nodes. In this part, we prepare
- [IPSec dynamic route-based S2S VPN Tunnel between pfSense and an Azure VNet](https://blog.matrixpost.net/ipsec-dynamic-route-based-s2s-vpn-tunnel-between-pfsense-and-an-azure-vnet/) - Today I want to go over the steps to establish a Site-to-Site IPSec route-based vpn tunnel between an onPremise network and a virtual network (VNet) in Azure. For the onPremise site I will use a pfSense appliance as VPN device.   Create a VNet and Subnets First we have to create a virtual network
- [Understanding NetApp ONTAP Logging – Exploring EMS Events and the ONTAP Event Log](https://blog.matrixpost.net/understanding-netapp-ontap-logging-exploring-ems-events-and-the-ontap-event-log/) - NetApp ONTAP continuously records what is happening inside the storage system. Hardware events, cluster operations, protocol activities, and even cloud provider actions for Cloud Volume ONTAP (CVO) systems are all captured through the Event Management System (EMS). Overview of ONTAP Logs NetApp ONTAP records a wide range of system activities through different logging mechanisms that
- [Deploying NetApp Cloud Volumes ONTAP (CVO) in Azure using NetApp Console (formerly BlueXP) – Part 7 - AutoSupport & Active IQ (Digital Advisor)](https://blog.matrixpost.net/deploying-netapp-cloud-volumes-ontap-part-7/) - In the previous installments of this series, we focused on the architecture and deployment of Cloud Volumes ONTAP (CVO) within the Azure ecosystem. However, a successful deployment isn't just about getting the storage "up and running", it's about ensuring it stays healthy and supported throughout its lifecycle. In this part, we dive into NetApp AutoSupport,
- [Understanding Identity Mapping in NetApp ONTAP – Windows, UNIX, and Kerberos Users](https://blog.matrixpost.net/understanding-identity-mapping-in-netapp-ontap-windows-unix-and-kerberos-users/) - In environments where both SMB/CIFS and NFS are used, NetApp ONTAP must translate user identities between different authentication systems. Windows clients typically authenticate using Active Directory accounts, while UNIX or Linux systems rely on UID/GID based identities. To allow consistent file access across these environments, ONTAP provides a name mapping mechanism that translates identities between
- [Hybrid Replication with SnapMirror: From On-Prem ONTAP to Azure Cloud Volumes ONTAP](https://blog.matrixpost.net/hybrid-replication-with-snapmirror-from-on-prem-ontap-to-azure-cloud-volumes-ontap/) - This guide demonstrates how to configure SnapMirror replication from an on-premises ONTAP system running in a vSphere lab to Azure Cloud Volumes ONTAP (CVO). The result is a fully functional hybrid replication setup that enables cross-site disaster recovery and seamless data mobility between datacenter and cloud. About How to build your own NetApp ONTAP 9
- [Deploying NetApp Cloud Volumes ONTAP (CVO) in Azure using NetApp Console (formerly BlueXP) – Part 1 - NetApp Onboarding](https://blog.matrixpost.net/deploying-netapp-cloud-volumes-ontap-part-1/) - In this multi-part guide, we walk through the complete setup of NetApp Cloud Volumes ONTAP (CVO) in Microsoft Azure, from initial deployment to secure management using the NetApp® Console (formerly BlueXP).In the email you will get click on Configure account. The NetApp® Console provides unified management for your data across cloud, on-premises, and hybrid environments. NetApp Cloud Volumes
- [Offboarding NetApp Cloud Volumes ONTAP in Azure – A Clean Decommissioning Guide](https://blog.matrixpost.net/offboarding-netapp-cloud-volumes-ontap-in-azure-a-clean-decommissioning-guide/) - After completing a deployment or lab scenario, properly decommissioning Cloud Volumes ONTAP is just as important as setting it up. To see how to deploy NetApp Cloud Volumes ONTAP (CVO) in Azure, you can read my following multi-part guide. In this post, I’ll walk through the correct procedure to offboard and delete a CVO system
- [Deploying NetApp Cloud Volumes ONTAP (CVO) in Azure using NetApp Console (formerly BlueXP) – Part 6 - Upgrade Cloud Volumes ONTAP](https://blog.matrixpost.net/deploying-netapp-cloud-volumes-ontap-part-6/) - In this part of this series, we walk through the process of performing a Non-Disruptive Upgrade (NDU) of a NetApp Cloud Volumes ONTAP (CVO) HA pair in Microsoft Azure. Keeping your storage environment up to date is not just about compliance and security, it is about leveraging the latest storage efficiencies and cloud integrations provided
- [Step-by-Step Guide: Monitor Scheduled Events for Azure Windows Virtual Machines](https://blog.matrixpost.net/step-by-step-guide-monitor-scheduled-events-for-windows-virtual-machines/) - In this post we will see how we can monitor scheduled events to get notified per Email about upcoming maintenance events that could affect our virtual machines running in Azure and how to build some basic automation that can help with monitoring and analysis. Scheduled Events is available as part of the Azure Instance Metadata Service
- [Step-by-Step Guide Part 4: How to build your own NetApp ONTAP 9 LAB - Day-to-Day Operations](https://blog.matrixpost.net/step-by-step-guide-part-4-how-to-build-your-own-netapp-ontap-9-lab-day-to-day-operations/) - In part 1 we saw how toWe can run the following command to show the currently existing CIFS shares on our SVM. get the ONTAP Simulate appliance and how to deploy it in vSphere. Further we saw the initial cluster setup by using a 2-node cluster (virtual appliances). In part 2 we saw building the foundational storage setup: aggregates, Storage Virtual Machines (SVMs), logical interfaces
- [Why VMware vMotion doesn't break your Network: Understanding RARP and MAC Table Updates](https://blog.matrixpost.net/why-vmware-vmotion-doesnt-break-your-network-understanding-rarp-and-mac-table-updates/) - We’ve all watched the vSphere progress bar hit 100% and seen the 'Migration Successful' toast, marveling at the fact that not even a single network packet, not even a simple ICMP ping, is lost during the move. But have you ever wondered how the physical network fabric, the switches and routers that have no idea
- [Mastering Nested Junction Paths: Qtrees and Export Policies in NetApp Cloud Volumes ONTAP (CVO)](https://blog.matrixpost.net/mastering-nested-junction-paths-qtrees-and-export-policies-in-netapp-cloud-volumes-ontap-cvo/) - When managing complex enterprise workloads in Azure, a one-size-fits-all approach to storage permissions rarely cuts it. While volumes are the primary unit of storage in Cloud Volumes ONTAP, Qtrees provide a secondary layer of granularity that is essential for both organization and security. It is important to note that while we are exploring this within
- [How to Set up a Microsoft Hyper-V Cluster](https://blog.matrixpost.net/how-to-set-up-a-microsoft-hyper-v-cluster/) - Today I want to go through the separate steps to set up a two-node Hyper-V cluster. A failover cluster is a group of independent computers that work together to increase the availability and scalability of clustered roles (formerly called clustered applications and services). The clustered servers (called nodes) are connected by physical cables and by
- [How to enable Microsoft Entra ID Authentication by manually publishing Users into the vCenter Identity Broker (vIDB) and not by SCIM](https://blog.matrixpost.net/how-to-enable-microsoft-entra-id-authentication-by-manually-publishing-users-into-the-vcenter-identity-broker-vidb-and-not-by-scim/) - In my two previous posts we saw how we can enable Microsoft Entra ID Authentication for vCenter Server and performing User Provisioning by using System for Cross-domain Identity Management (SCIM). Now this time we will also enable Microsoft Entra ID Authentication for vCenter Server but without using SCIM for User Provisioning and just by adding
- [Mastering Hyper-V Clusters with iSCSI and Multipath I/O (CSV)](https://blog.matrixpost.net/mastering-hyper-v-clusters-with-iscsi-and-multipath-i-o-csv/) - While Storage Spaces Direct leverages local disks for software-defined storage as shown in my last post here, many Hyper-V clusters are still built on shared storage provided via iSCSI. In this post, I’ll walk through building a Hyper-V failover cluster using iSCSI-attached disks as Cluster Shared Volumes (CSV), including a multipath I/O (MPIO) setup to
- [Linux Cheat Sheet for essential Commands](https://blog.matrixpost.net/linux-cheat-sheet-for-essential-commands/) - Linux is a versatile operating system, packed with powerful tools and commands to streamline tasks, troubleshoot issues, and manage systems efficiently. Whether you're a seasoned sysadmin or a curious beginner, having a handy cheatsheet can save time and make your Linux experience more productive. In this post, I will explore interesting and useful Linux commands
- [Set up the Squid Proxy Server on SUSE Linux Enterprise](https://blog.matrixpost.net/set-up-the-squid-proxy-server-on-suse-linux-enterprise/) - Squid is a powerful, open-source caching and forwarding web proxy server that can significantly enhance network performance, improve security, and control internet access within an organization. Squid supports two subtypes of forward proxies, the explicit (aka non-transparent proxy) and implicit (aka transparent proxy), and two ways of proxy SSL/TLS traffic, intercepting and non-intercepting. In this
- [Virtual Local Area Networks (VLANs) - Basics about Network Segmentation, inter-VLAN Routing & VLAN ACLs](https://blog.matrixpost.net/virtual-local-area-networks-vlans-basics-about-network-segmentation-inter-vlan-routing-vlan-acls/) - The main aim of this post is to give you a comprehensive guide and introduction about the basics how VLANs, inter-VLAN routing and VLAN Access control lists (ACLs) will work and how you can configure those VLANs on managed layer 3 switches. For this post to demonstrate the use of VLANs, I will use a
- [Set up Azure Site Recovery for On-Premise VMware Virtual Machines (Modernized) - Part 4](https://blog.matrixpost.net/set-up-azure-site-recovery-for-on-premise-vmware-virtual-machines-modernized-part-4/) - In Part 3 of this blog post series we saw how we can enable the replication of virtual machines in on-premise (vSphere) which we want to protect and replicate to Azure. Further we saw how to perform a failover from on-premise to Azure and how to re-protect the virtual machine to on-premise back after the failover to Azure. In this part we will determine and checking which traffic between the ASR Appliance and our protected virtual machines will occur and we finally need to
- [Set up Azure Site Recovery for On-Premise VMware Virtual Machines (Modernized) - Part 1](https://blog.matrixpost.net/set-up-azure-site-recovery-for-on-premise-vmware-virtual-machines-modernized-part-1/) - This blog post series (in 4 parts) will walk you through each step of setting up Azure Site Recovery (ASR) for VMware. Azure Site Recovery (ASR) for VMware is a disaster recovery service that enables businesses to protect and replicate their VMware-based virtual machines (VMs) to Microsoft Azure. ASR ensures business continuity by providing failover and failback capabilities, allowing
- [How to Migrate to Microsoft Entra’s New Unified MFA and SSPR Policies](https://blog.matrixpost.net/how-to-migrate-to-microsoft-entras-new-unified-mfa-and-sspr-policies/) - Starting September 30, 2025, Microsoft will retire the legacy per-user MFA and SSPR settings in Entra ID. From then on, all authentication methods are managed centrally through the new Unified Authentication Methods policy. The Authentication methods policy is the recommended way to manage authentication methods, including modern methods like passwordless authentication. Authentication Policy Administrators can
- [Mastering Azure Load Balancer](https://blog.matrixpost.net/mastering-azure-load-balancer/) - The Azure Load Balancer plays a central role in distributing network traffic efficiently and ensuring high availability for applications. Whether balancing web traffic across IIS servers, directing packets to network appliances, or enabling regional failover, it’s an essential component in many Azure network designs. In this post, we’ll explore its architecture, tiers, rules, probes, and
- [Updating VMware Tools to 13.0.5 manually on Ubuntu 24.04 (Headless Build - without GUI)](https://blog.matrixpost.net/updating-vmware-tools-to-13-0-5-manually-on-ubuntu-24-04-headless-build-without-gui/) - Ubuntu’s packaged version of open-vm-tools often lags behind VMware’s latest release. If you want to upgrade manually or build a version optimized for servers without X11 or container dependencies, here’s how to compile and install open-vm-tools 13.0.5 directly from source. Ubuntu 24.04.3 LTS e.g. is shipped with open-vm-tools version 12.5.0 as shown below. To check
- [Build a Site-to-Site VPN between Azure and On-Prem by using pfSense on both Sites - No Azure VPN Gateway Required](https://blog.matrixpost.net/build-a-site-to-site-vpn-between-azure-and-on-prem-by-using-pfsense-on-both-sites-no-azure-vpn-gateway-required/) - Running pfSense on both ends of your hybrid network, in Azure and on-premises, gives you full control over IPSec connectivity without relying on Azure’s managed VPN Gateway service. This approach is ideal for labs and cost-conscious setups, since you won’t pay for an always-on Azure VPN tunnel when testing or experimenting. With pfSense handling both
- [Default outbound access for VMs in Azure will be retired on 30 September 2025 - How to transition to an explicit method of public connectivity](https://blog.matrixpost.net/default-outbound-access-for-vms-in-azure-will-be-retired-on-30-september-2025/) - Because default outbound access for VMs in Azure will be retired on 30 September 2025, I want to take a look how this works at all and how we can transition to an explicit method of public connectivity and disable default outbound access that's already recommended by Microsoft. How default outbound access for VMs in
- [Understanding pfSense IPsec Identifiers: When Public IPs Aren’t Enough](https://blog.matrixpost.net/understanding-pfsense-ipsec-identifiers-when-public-ips-arent-enough/) - When setting up an IPsec VPN between peers that aren’t both directly reachable by static public IPs, for example, when one side sits behind NAT and uses a dynamic DNS hostname like shown in my post here, pfSense’s “My Identifier” and “Peer Identifier” settings become critical. These fields determine how each peer identifies itself during
- [Using Google Service Accounts in C#: Secure API Access Explained](https://blog.matrixpost.net/using-google-service-accounts-in-c-secure-api-access-explained/) - When building applications that interact with Google Cloud services, authentication is the first challenge to solve. The most secure and flexible way to access Google Cloud APIs programmatically is by using Service Accounts, special identities designed for applications, automation, and backend workloads. In this post, we’ll walk through how to authenticate our C# application with
- [Deploying pfSense in Google Cloud – A Step-by-Step Guide to Your Own Cloud Firewall](https://blog.matrixpost.net/deploying-pfsense-in-google-cloud-a-step-by-step-guide-to-your-own-cloud-firewall/) - Running pfSense in Google Cloud Platform (GCP) is a powerful way to build your own fully controllable network gateway, firewall, or NAT appliance, far beyond what GCP’s managed load balancers or Cloud NAT can offer. Unlike commercial NGFW appliances such as Fortinet, Check Point, or Palo Alto, which are available in the GCP Marketplace but
- [Set up an Azure Hub-Spoke Network Architecture by using Azure Firewall and S2S IPSec VPN Cross-premises Network Connection](https://blog.matrixpost.net/set-up-an-azure-hub-spoke-network-by-using-azure-firewall-and-s2s-ipsec-vpn-cross-premises-network-connection/) - A hub-spoke network architecture in Azure provides a scalable and secure way to centralize shared services (like Azure Firewall) in a hub virtual network (VNet) while connecting multiple spoke virtual networks for workloads like e.g. virtual machines. By integrating Site-to-Site (S2S) IPSec VPN, you can extend this model to cross-premises networks, enabling secure hybrid connectivity between on-premises data centers and Azure. In this
- [Mastering GCP Virtual Machines - Part 2 (Connect to Linux VMs)](https://blog.matrixpost.net/mastering-gcp-virtual-machines-part-2/) - In Part 1 we saw how to create a new virtual machine instance (Linux Ubuntu), checking if the google guest environment (VM agent) is installed and what instance schedules are and how to configure them. Now in this part we will explorer the different access methods we can use to connect to our Linux virtual
- [Step-by-Step Guide: Setting up Route Based S2S VPN between Azure and on-prem by using pfSense - Part 1](https://blog.matrixpost.net/step-by-step-guide-setting-up-route-based-s2s-vpn-between-azure-and-on-prem-by-using-pfsense-part-1/) - Establishing a secure and reliable VPN tunnel between your on-premises network and Azure is a critical step in enabling hybrid cloud scenarios. In this two-part guide, we will see step by step setting up a site-to-site IPsec VPN using pfSense on the on-prem side and Azure VPN Gateway in the cloud. The first part covers
- [Upgrade Windows Server from Standard to Datacenter on the fly](https://blog.matrixpost.net/upgrade-windows-server-from-standard-to-datacenter-on-the-fly/) - In case you have installed the Windows Server Standard Edition and now want to upgrade to the Datacenter Edition, you can do this without reinstalling Windows on the fly. To convert the Standard edition of Windows Server to the Datacenter edition, you have to execute the following commands by using the CMD or Windows Powershell.
- [Mastering GCP Virtual Machines – Part 4 (Disk Encryption and Export)](https://blog.matrixpost.net/mastering-gcp-virtual-machines-part-4/) - In Part 3 we saw how to create a new Windows virtual machine instance (Windows Server 2025) and how to connect to by using RDP and SSH. Further we saw how to connect to the serial console. Now in this part we will see how GCP will encrypt the virtual disks of virtual machine instances. By
- [Cross-Hub Connectivity in Google Cloud using HA VPN and NGFW Appliances](https://blog.matrixpost.net/cross-hub-connectivity-in-google-cloud-using-ha-vpn-and-ngfw-appliances/) - In multi-hub Google Cloud environments, teams often need full connectivity between workloads that sit behind different Network Connectivity Center (NCC) hubs or even across projects. In this post, we will see how to interconnect two hubs using HA VPN, Cloud Router (BGP control-plane), and optional a NGFW appliance (pfSense in my case) to route and
- [Cheat Sheet Google Cloud gcloud CLI ](https://blog.matrixpost.net/cheat-sheet-google-cloud-gcloud-cli/) - The gcloud command-line interface is the Swiss Army knife for managing Google Cloud resources. Whether you’re spinning up VM instances, inspecting IAM roles, deploying networks, or automating configurations, gcloud lets you do it all directly from your terminal. It’s built on top of the same APIs as the Cloud Console, giving you full control, repeatability,
- [Mastering GCP Virtual Machines – Part 8 (Networking Best Practices)](https://blog.matrixpost.net/mastering-gcp-virtual-machines-part-8-networking-best-practices/) - Google Cloud Platform (GCP) provides a powerful and flexible networking foundation that can scale from simple projects to complex, global architectures. But with that flexibility comes complexity: designing networks that are secure, cost-efficient, and easy to manage requires careful planning. In this post, we will explore basic key best practices for building and operating networks
- [Mastering GCP Virtual Machines – Part 9 (Outbound Internet Access)](https://blog.matrixpost.net/mastering-gcp-virtual-machines-part-9-outbound-internet-access/) - If your VMs need general outbound internet (patching, repo downloads, external APIs), and you don’t want public IPs → Cloud NAT is the way to go. Cloud VPN does not support routing public internet traffic through on-premises like in Azure, it is designed for secure communication between private networks. If you need centralized inspection in GCP, you’d typically deploy firewall/inspection appliances inside a hub VPC like
- [pfSense and APIPA (169.254/16): Enabling Link-Local Transit Networks for IPsec VTI and BGP](https://blog.matrixpost.net/pfsense-and-apipa-169-254-16-enabling-link-local-transit-networks-for-ipsec-vti-and-bgp/) - Using APIPA (169.254.x.x) addresses as a transit network for IPsec IKEv2 VTI tunnels is a common best practice in major cloud environments such as AWS, Azure, and Google Cloud Platform, where these link-local ranges are reserved for internal VPN and BGP peer connections. On pfSense, however, this setup doesn’t work out of the box, the
- [Set up an IPSec route-based Site-to-Site VPN Tunnel between Azure and On-Premise (Home Network) where the VPN Gateway sits behind a NAT Router](https://blog.matrixpost.net/azure-ipsec-vpn-tunnel-onpremise/) - Today I want to show how we can set up an IPSec route based site-to-site VPN tunnel between Azure and on-premise (home network). For this home network scenario the on-prem VPN device (in my case a pfSense virtual machine in vSphere) is usually placed behind a NAT router which itself is connected to the ISP
- [Step-by-Step Guide: Setting up Route Based S2S VPN between Azure and on-prem by using pfSense - Part 2](https://blog.matrixpost.net/step-by-step-guide-setting-up-route-based-s2s-vpn-between-azure-and-on-prem-by-using-pfsense-part-2/) - Part 1 covers the setup by using static routes, ideal for simpler environments or when dynamic routing isn’t required. Now this second part explores the BGP (Border Gateway Protocol) to enable dynamic route exchange, which is better suited for larger or more complex networks. Set up the Tunnel in Azure About how to set up the tunnel in Azure step by step you can read in one of my previous posts here,
- [Mastering Azure File Sync](https://blog.matrixpost.net/mastering_azure_file_sync/) - Azure File Sync extends the power of Azure Files to on-premises environments by transforming your existing file servers into intelligent caches for cloud-hosted data. Instead of maintaining large local storage volumes, you can centralize all files in an Azure Storage Account (File Share) while your on-prem file server keeps only the most recently accessed files
- [Mastering Azure DNS](https://blog.matrixpost.net/mastering-azure-dns/) - Azure DNS provides a reliable, scalable, and secure way to host and manage your domain name system (DNS) records directly in Azure. It supports both public DNS zones, used to resolve names over the internet, and private DNS zones, used for name resolution within your virtual networks. By integrating DNS management into the Azure platform,
- [Mastering GCP Virtual Machines – Part 6 (Patching)](https://blog.matrixpost.net/mastering-gcp-virtual-machines-part-6/) - In Part 5 we take a look at some key networking tools that help you secure and troubleshoot our environment. Now in this part we will see how to use the VM Manager in Google Cloud to orchestrate patching for our VM instances. Finally this is Google's counterpart to Microsoft's Azure Update Manager. VM Manager is a
- [Building a Centralized Egress and Hybrid Connectivity Hub with Network Connectivity Center (NCC), HA VPN, and a Router Appliance in Google Cloud](https://blog.matrixpost.net/building-a-centralized-egress-and-hybrid-connectivity-hub-with-network-connectivity-center-ncc-ha-vpn-and-a-router-appliance-in-gcp/) - In my previous posts I was configuring a hub-and-spoke architecture to support cross-VPC routing and hybrid connectivity. About setting up a a hub-and-spoke architecture by using either VPC Network Peering or the Network Connectivity Center (NCC) shown here. About outbound internet access for VM instances and especially by Deploying a centralized Next-Generation Firewall (NGFW) in
- [Set up IPSec route-based S2S VPN between pfSense and Google Cloud VPC](https://blog.matrixpost.net/set-up-ipsec-route-based-s2s-vpn-between-pfsense-and-google-cloud-vpc/) - In this post I want to show how you can set up an IPSec route-based S2S VPN between your Google Cloud VPC and your on-premise network by using pfSense. On Google's site we can use therefore Cloud VPN which offers two types of Cloud VPN gateways: HA VPN and Classic VPN as described below. As Classic VPN is partial deprecated, I
- [Step-by-Step Guide: Setting up HA VPN with BGP between Google Cloud and On-Prem by using Juniper vSRX3](https://blog.matrixpost.net/step-by-step-guide-setting-up-a-ha-vpn-bgp-google-gcp-juniper-on-prem/) - In this post we will see step by step how to set up HA VPN and BGP between our Google Cloud VPC and our on-premise network by using the Juniper vSRX3 Appliance as VPN device. I wrote already a post in 2022 about how to set up this with pfSense as on-premise VPN device. GCP Cloud VPN offers two types of
- [Mastering GCP Virtual Machines – Part 7 (Backup and DR)](https://blog.matrixpost.net/mastering-gcp-virtual-machines-part-7/) - In Part 6 we saw how to use the VM Manager in Google Cloud to orchestrate patching for our VM instances. Finally this is Google’s counterpart to Microsoft’s Azure Update Manager. Now in this part we will see how to protect and backup VM instances by using the Google Cloud Backup and DR service and Management Console (appliance). Google Cloud offers two ways to protect your
- [Mastering GCP Virtual Machines - Part 3 (Connect to Windows VMs)](https://blog.matrixpost.net/mastering-gcp-virtual-machines-part-3/) - In Part 2 we saw the different access methods we can use to connect to our Linux virtual machine instances. Further we saw what exactly the so called Cloud Shell Instance is. Now in this part we will see how to create a new Windows virtual machine instance (Windows Server 2025) and how to connect to by using RDP and SSH.
- [Mastering GCP Virtual Machines – Part 5 (Network Analyzing)](https://blog.matrixpost.net/mastering-gcp-virtual-machines-part-5/) - In Part 4 we saw how GCP will encrypt the virtual disks of virtual machine instances. Further we saw how to export a disk from Google Cloud Platform (GCP) which lets us move VM data into on-premises environments like VMware vSphere. Now in this part we will take a look at some key networking tools that help you secure and troubleshoot our environment When running workloads in
- [How to Check if the Firewall Is Active on Linux (Across Different Distributions)](https://blog.matrixpost.net/how-to-check-if-the-firewall-is-active-on-linux-across-different-distributions/) - On Linux systems the active firewall service depends on the distribution. On Ubuntu or Debian you often check with ufw status or systemctl status nftables/iptables, while SUSE Linux Enterprise and openSUSE typically use SuSEfirewall2 (older) or firewalld like Red Hat–based systems (systemctl status firewalld). CentOS the standard check is also systemctl status firewalld. By default,
- [Step-by-Step Guide: Setting up Classic VPN with Static Routes between Google Cloud and On-Prem by using Juniper vSRX3](https://blog.matrixpost.net/step-by-step-guide-setting-up-classic-vpn-with-static-routes-between-google-cloud-and-on-prem-by-using-juniper-vsrx3/) - In this post, we will see step by step how to configure a Classic VPN with static routes between Google Cloud Platform (GCP) and an on-premises Juniper vSRX3 firewall. While GCP’s HA VPN relies on dynamic routing with BGP and shown in last post, Classic VPN with static routes offers a simpler approach for environments
- [Set up Ubuntu's Built-In Firewall](https://blog.matrixpost.net/set-up-ubuntus-built-in-firewall/) - Ubuntu's built-in firewall is named ufw (uncomplicated firewall). Actually Ufw is just an utility which makes it easier to configure the complex IP packet filter rules for the Linux kernel firewall which is since Linux kernel 2.4.x and later Netfilter. Netfilter who was written by Rusty Russel was merged in March 2000 into the Linux
- [Mastering the Firewall on SUSE Linux Enterprise Server](https://blog.matrixpost.net/mastering-the-firewall-on-sles/) - Whenever Linux is used in a network environment, you can use the kernel functions that allow the manipulation of network packets to maintain a separation between internal and external network areas. The Linux netfilter framework provides the means to establish an effective firewall that keeps different networks apart. Using iptables—a generic table structure for the
- [Legacy Linux VMs and the udev NIC Trap: Why VMware Clones and OVF Exports Lose Networking](https://blog.matrixpost.net/udev_nic_trap/) - Whether you clone a legacy Linux VM (e.g. SLES11) in vSphere or export it as an OVF template and redeploy, you may end up with the same issue: the guest shows two NICs, one with the old IP but no device, and another one without any configuration. The culprit is udev’s persistent net rules, which
- [Mastering GCP Virtual Machines - Part 1](https://blog.matrixpost.net/mastering-gcp-virtual-machines-part-1/) - Even with all the fancy managed services, plain old virtual machines are still the backbone of a lot of real-world builds. We will keep it hands-on: choosing machine families and images, regions/zones, disks and snapshots, VPC basics and firewalls, access (SSH/IAP & service accounts), startup scripts/metadata, and a few gotchas around pricing (Spot vs. on-demand)
- [Mastering Azure Monitor (Log Analytics) and Azure Resource Graph](https://blog.matrixpost.net/mastering-azure-monitor-log-analytics-and-azure-resource-graph/) - In this post, we will see how Azure Monitor’s Log Analytics tool can be used to query different signals, from telemetry logs to Azure Resource Graph (ARG) inventory data. In Azure Monitor, a signal is simply a stream of data that can trigger insights or alerts, such as metrics, logs, activity events, or health information.
- [Simple UDP Messaging in PowerShell or Ncat: Build your own Listener and Sender](https://blog.matrixpost.net/simple-udp-messaging-in-powershell-or-ncat-build-your-own-listener-and-sender/) - Ever needed to test simple UDP communication without reaching for Wireshark or Netcat? In this post we will see how to implement a lightweight UDP listener and sender by using pure PowerShell and .NET libraries, perfect for quick lab setups, testing firewalls, or learning about datagram communication. The .NET UdpClient class provides simple methods for sending and
- [VMware vSphere boot loop when trying to boot from Windows Server 2025 ISO](https://blog.matrixpost.net/vmware-vsphere-boot-loop-when-trying-to-boot-from-windows-server-2025-iso/) - When trying to install Windows Server 2025 on vSphere, I was running into an known issue which actually requires a minimum CPU generation in order to successful boot and install. The issue and solution is shown here https://knowledge.broadcom.com/external/article/396832/unable-to-create-a-vm-and-deploy-windows.html. To say it in advance, in my case I was encounter the same issue on different vSphere
- [Installing and running Windows 11 on VMware vSphere](https://blog.matrixpost.net/installing-and-running-windows-11-on-vmware-vsphere/) - Before we can create a new Windows 11 virtual machine in vSphere, we first need to enable the vSphere Native Key Provider (NKP). Otherwise we will run into the following error. Microsoft Windows 11 (64-bit) requires a Virtual TPM device, which cannot be added to this virtual machine because the vSphere environment is not configured
- [Azure Automation - Virtual Machine Start/Stop Schedule](https://blog.matrixpost.net/azure-virtual-machine-start-stop-schedule/) - Azure has a feature similar to GCP's Schedule Instance, though it's implemented a bit differently. Azure provides “Start/Stop VMs during off-hours” using Azure Automation. This allows you to schedule when VMs should start or stop, which is useful for cost savings. Azure Automation with Runbooks You can create a Runbook that starts or stops VMs
- [Set up Azure Bastion](https://blog.matrixpost.net/set-up-azure-bastion/) - In this post I want to show how we can set up Azure Bastion to provide a secure way to connect to our Azure virtual machines without exposing them to the public internet. The same you can achieve when using an IPSec Site-to-Site VPN tunnel to connect our on-premise network to Azure as shown in
- [Using Azure Key Vault for Passwords in Azure Bastion](https://blog.matrixpost.net/using-azure-key-vault-for-passwords-in-azure-bastion/) - Managing virtual machine access securely is a critical part of any Azure deployment. Azure Bastion provides a secure, browser-based RDP and SSH connection to your VMs without exposing them to the public internet. By integrating Azure Key Vault, you can store and manage your VM passwords centrally, allowing Bastion to retrieve credentials on-demand. This approach
- [Join Ubuntu to an Active Directory Domain using SSSD (System Security Services Daemon)](https://blog.matrixpost.net/join-ubuntu-to-an-active-directory-domain-using-sssd-system-security-services-daemon/) - In this post I want to set up the sssd daemon on Ubuntu to join an AD domain and authenticate users against a Active Directory Domain Controller by using the AD provider from sssd. In previous versions of sssd, it was possible to authenticate using the ldap provider. Nevertheless for authenticating against a Microsoft Windows
- [How to use the Serial Console and Special Administration Console (SAC) for VMware vSphere Windows Virtual Machines](https://blog.matrixpost.net/how-to-use-the-serial-console-and-special-administration-console-sac-for-vmware-vsphere-windows-virtual-machines/) - When managing Windows virtual machines in VMware vSphere, mostly we can rely on RDP or vSphere Console for access. But what happens if the network stack isn’t available or the VM is stuck during boot? In these cases, having a low-level management channel can make all the difference like when you think the virtual machine
- [How to run Azure VMs in Safe Mode - RDP Service not available in Safe Mode - Using the Serial Console and Special Administration Console (SAC) for Azure VMs](https://blog.matrixpost.net/how-to-run-azure-vms-in-safe-mode-rdp-service-not-available-in-safe-mode-using-the-serial-console-in-azure/) - For Azure virtual machines you doesn't have a real GUI console like for Hyper-V or vSphere in on-premises environments. In case you need to boot a Windows virtual machine in safe mode for whatever reason like performing some tasks you are just able to do in safe mode, you are not able to connect to
- [What is the Azure Instance Metadata Service (IMDS)?](https://blog.matrixpost.net/what-is-the-azure-instance-metadata-service-imds/) - When you run workloads in Azure, your virtual machines often need to know details about themselves, like which region they’re running in, their network configuration, or even how to request access tokens for managed identities. That’s where the Azure Instance Metadata Service (IMDS) comes in. IMDS is a RESTful endpoint available to every Azure VM
- [Step-by-Step Guide Part 1: How to build your own NetApp ONTAP 9 LAB](https://blog.matrixpost.net/step-by-step-guide-part-1-how-to-build-your-own-netapp-ontap-9-lab/) - Setting up your own NetApp ONTAP 9 lab is one of the best ways to gain hands-on experience with enterprise-grade storage technology, whether you are preparing for certification, testing disaster recovery, or just learning ONTAP's core features. In this step-by-step guide, we will set up and explorer a fully functional ONTAP 9 lab environment by
- [Set up Red Hat Enterprise Linux 9.4 Server](https://blog.matrixpost.net/set-up-red-hat-enterprise-linux-9-4-server/) - In this post I will go through the separate steps to set up a Red Hat Enterprise Linux 9.4 Server which was published on 8th November 2022. Red Hat® Enterprise Linux® Server is the most popular variant of Red Hat Enterprise Linux. Red Hat Enterprise Linux Server is the operating system: incredibly simple to control, easy to administer,
- [Step-by-Step Guide Part 5: How to build your own NetApp ONTAP 9 LAB - Root Squashing](https://blog.matrixpost.net/step-by-step-guide-part-5-how-to-build-your-own-netapp-ontap-9-lab-root-squashing/) - If you've ever tried as root to chown, chmod, or just create a file on an NFS-mounted share and were slapped with a “Permission denied” or “Read-only file system” error, welcome to the wonderful world of root squashing. Originally designed as a security measure in NFS to prevent root users on clients from having root
- [Mastering NFS Protocol Versions and analyze required Traffic](https://blog.matrixpost.net/mastering-the-different-nfs-protocol-versions-and-its-traffic/) - When firewalls are in place between NFS clients and servers, it can be complex when providing NFS version 3 and lower. Each NFS version introduces new features and changes in how the client and server communicate, the ports used, and how security and performance are handled. Whether it's the reliance on RPC calls and dynamic
- [Register SUSE Linux Enterprise Server with SUSEConnect to the SUSE Customer Center (SCC)](https://blog.matrixpost.net/register-suse-linux-enterprise-server-with-suseconnect/) - To be able to receive updates and getting immediate access to the update repository, you need to register (activating) SUSE Linux Enterprise Server with the SUSE Customer Center (SCC). The SUSE Customer Center (SCC) is an online tool designed to make it easy for you to manage your business and technical interactions with SUSE. SUSE Customer Center brings together customer information to provide an overview of
- [Cheat Sheet - User Management Commands in Linux](https://blog.matrixpost.net/cheat-sheet-user-management-commands-in-linux/) - In the world of Linux and Unix-based systems, user roles and permissions are the foundation of security and system integrity. In this post I want to list some useful commands about how to manage user access and permissions on Linux. I will update this post on a regular basis. List all local users on a Linux system To list
- [How to elevate a Linux User Account with Sudo Rights](https://blog.matrixpost.net/how-to-elevate-a-linux-user-account-with-sudo-rights/) - In the world of Linux and Unix-based systems, user roles and permissions are the foundation of security and system integrity. By default, regular user accounts have limited access to prevent accidental or malicious system wide changes. However, there are times when granting administrative privileges becomes necessary for managing software, configuring system settings, or handling critical
- [Set up and Deploy a VMware ESXi Host Cluster and Datastore Cluster](https://blog.matrixpost.net/set-up-and-deploy-a-vmware-esxi-host-cluster-and-datastore-cluster/) - In this post we will see step by step how we can set up and deploy a new cluster of two ESXi hosts (2-node cluster). At the end we will also create and adding a datastore cluster to our newly created ESXi host cluster to provide shared storage for. This cluster architecture provides high availability
- [Cheat Sheet - File System Commands in Linux](https://blog.matrixpost.net/cheat-sheet-file-system-commands-in-linux/) - In this post I want to list some useful commands to determine specific file system information you sometimes need to manipulate disks, partitions or the file system. I will update this post on a regular basis. About extending disk, LVM Logical Volumes and the File System you can also read my following post. Determine mounted
- [Mastering Expert Partitioning on SUSE Linux Enterprise Server 15](https://blog.matrixpost.net/mastering-expert-partitioning-on-suse-linux-enterprise-server-15/) - When installing SUSE Linux Enterprise Server (SLES), the installer usually suggests an automatic partitioning layout. While this works for most standard deployments, advanced scenarios often require more control over how storage is organized. That’s where Expert Partitioner comes in. With Expert Partitioner, you can set up custom partitioning schemes, whether it’s separating /home, /var, or
- [Upgrade VMware Tools across vSphere by using the Offline Bundle](https://blog.matrixpost.net/upgrade-vmware-tools-across-vsphere-by-using-the-offline-bundle/) - Keeping VMware Tools up to date is essential for ensuring VM performance, compatibility, and guest OS integration in a vSphere environment. While many environments rely on vCenter or Lifecycle Manager to manage Tools versions, it's also possible, and sometimes necessary, to update VMware Tools manually at the ESXi host level. In this post, we will
- [Mastering BGP between Check Point and Azure](https://blog.matrixpost.net/enable-and-configure-bgp-for-a-route-based-s2s-ipsec-vpn-between-check-point-and-azure/) - Enabling BGP (Border Gateway Protocol) on a Check Point Security Gateway running GAiA allows the device to dynamically exchange routing information with external or internal peers, such as cloud providers (e.g., Microsoft Azure) or neighboring routers. BGP is especially useful in route-based IPSec VPN deployments, where static routes are insufficient or difficult to manage. To
- [Step-by-Step Guide: Setting up a route-based S2S IPSec VPN Tunnel between Azure and On-Premise by using the Check Point GAiA Security Gateway for the on-premise VPN Device](https://blog.matrixpost.net/azure-on-premise-ipsec-route-based-vpn-check-point/) - In one of my last posts we saw how to set up the Check Point GAiA as Security Gateway appliance to provide outbound internet access and to publish internal services to the internet. This time we will see step by step how we can set up an IPSec route-based site-to-site VPN tunnel between Azure and
- [Set up Dynamic Routing with FRR (Free Range Routing) in pfSense - OpenBGPD now Depricated](https://blog.matrixpost.net/set-up-dynamic-routing-with-frr-free-range-routing-in-pfsense-openbgpd-now-depricated/) - Today I want to show how to set up the FRR package in pfSense. In the past I used for Routed IPsec (VTI) also the OpenBGPD package to advertise the routes automatically to other connected peers. OpenBGPD is now depricated in pfSense since version 2.5.0 and only available till version 2.4.5. If you upgrade from
- [Step-by-Step Guide: Setting up a route-based S2S IPSec VPN Tunnel between Azure and On-Premise by using the Juniper vSRX3 Appliance for the on-premise VPN Device](https://blog.matrixpost.net/step-by-step-guide-setting-up-a-route-based-s2s-ipsec-vpn-tunnel-between-azure-and-on-premise-by-using-the-juniper-vsrx3-appliance-for-the-on-premise-vpn-device/) - Setting up a site-to-site VPN tunnel between an on-premises Juniper vSRX firewall and Microsoft Azure can feel a bit like piecing together a puzzle, especially when dealing with dynamic DNS, NAT traversal, and vendor-specific quirks. Whether you're deploying for production, lab testing (as in my case), or just expanding your hybrid networking skills, this guide
- [Mastering BGP between Juniper and Azure](https://blog.matrixpost.net/mastering-bgp-between-juniper-vsrx3-and-azure/) - Establishing seamless hybrid connectivity between on-premises networks and the cloud is a cornerstone of modern IT infrastructure. While IPsec tunnels can provide the transport layer, dynamic routing with BGP (Border Gateway Protocol) ensures scalable and resilient route management, especially in environments where subnets change or grow over time. This post shows step by step setting
- [IPSec dynamic route-based S2S VPN Tunnel between two pfSense Appliances](https://blog.matrixpost.net/ipsec-dynamic-route-based-s2s-vpn-tunnel-between-two-pfsense-appliances/) - In the last post we setup a Site-to-Site (S2S) IPSec dynamic route-based vpn tunnel between pfSense and Azure. Today we will setup an IPSec dynamic route-based vpn tunnel between two onPremises sites with pfSense as gateway on both sites. The Internet Key Exchange protocol (IKE, IKEv1 or IKEv2), which is used to set up a
- [Google Cloud - Connect to Linux VMs using SSH OS Login](https://blog.matrixpost.net/google-cloud-connect-to-linux-vm-using-ssh-os-login/) - In my last post I was showing how to create a new Linux VM instance in Google Cloud and connect to using SSH Metadata. In this post we will see how to connect to by using SSH OS Login. Google will recommend in most scenarios using the OS Login. Access to VMs through OS Login You can also use for OS
- [Analyzing VMware Storage Performance: From Latency to IOPS](https://blog.matrixpost.net/analyzing-vmware-storage-performance-from-latency-to-iops/) - In virtualized environments, storage is often the hidden bottleneck behind sluggish VM performance. While CPU and memory are easy to observe, disk latency, throughput, and IOPS require a deeper dive to diagnose correctly. Whether you're running workloads on vSAN, Fibre Channel, iSCSI, or traditional local storage, understanding how to interpret VMware's performance metrics is essential
- [Step-by-Step Guide: Setting Up Check Point GAiA as Security Gateway](https://blog.matrixpost.net/step-by-step-guide-setting-up-check-point-gaia-as-security-gateway/) - Gaia is the Check Point next generation operating system for security applications. In Greek mythology, Gaia is the mother of all, which represents closely integrated parts to form one efficient system. The Gaia Operating System supports the full portfolio of Check Point Software Blades, Gateway and Security Management products. Gaia is a unified security Operating System that combines the best of Check Point original operating systems, and IPSO, the operating system from appliance security products. Gaia is available for
- [Step-by-Step Guide: Setting Up Juniper vSRX3 Appliance](https://blog.matrixpost.net/step-by-step-guide-setting-up-juniper-vsrx3-appliance/) - The Juniper vSRX3 is a virtual firewall appliance that delivers next-generation security services in virtualized and cloud environments. It runs Juniper's Junos OS and offers the same rich feature set as physical SRX firewalls, including routing, VPN, firewall policies, NAT, IPS, and advanced threat protection but in a lightweight, virtualized form factor. Juniper SRX Series
- [resize2fs Superblock Checksum Error – What It Means and How to Fix It](https://blog.matrixpost.net/resize2fs-superblock-checksum-error-what-it-means-and-how-to-fix-it/) - After extending a logical volume (e.g., using LVM), it’s common to resize the filesystem to make use of the newly allocated space. However, in some cases, the resize operation fails with an error like: Superblock checksum does not match superblock while trying to open /dev/sdXCouldn't find valid filesystem superblock. This indicates that the filesystem’s primary
- [VMware Public Patch Repository URLs were deprecated as of April 23, 2025](https://blog.matrixpost.net/vmware-public-patch-repository-urls-were-deprecated-as-of-april-23-2025/) - As of April 23, 2025, VMware's public patch and update repository URLs have been officially deprecated following the transition to Broadcom's entitlement-based distribution model. This change affects how vCenter Server, ESXi, and Lifecycle Manager (vLCM) retrieve software updates and component metadata. Public facing repository URLs and authentication mechanisms are changing in VMware. The Download URLs
- [How to extend LVM Logical Volumes stored on extended Disk Partitions instead on whole initialized Disks by using Growpart](https://blog.matrixpost.net/how-to-extend-lvm-logical-volumes-stored-on-extended-disk-partitions-instead-on-whole-initialized-disks-by-using-growpart/) - You can create physical volumes (PVs) out of whole disks or disk partitions by using LVM. Red Hat recommends that you create a single partition that covers the whole disk to label as an LVM physical volume. In this post I want to show how we can extend this disk partition our physical volumes (PVs) are
- [Set up Azure Site Recovery for On-Premise VMware Virtual Machines (Modernized) - Part 2](https://blog.matrixpost.net/set-up-azure-site-recovery-for-on-premise-vmware-virtual-machines-modernized-part-2/) - In Part 1 of this blog post series we saw all prerequisites and how to create them to set up Azure Site Recovery for On-Premise VMware Virtual Machines (Modernized). This part will show how to prepare the infrastructure which is finally setting up the ASR appliance in on-premise (vSphere). We will see how to deploy
- [How to set up Dante SOCKS5 Proxy on SUSE Linux Enterprise Server](https://blog.matrixpost.net/howt-to-set-up-dante-socks5-proxy-on-suse-linux-enterprise-server/) - In this post I will show step by step how we can set up the Dante SOCKS5 Proxy on SUSE Linux Enterprise Server and finally check if it works. Dante is an implementation of the following proxy protocols: SOCKS version 4, SOCKS version 5 (RFC 1928), and msproxy. It is a stable and popular open-source
- [VMware ESXi/vCenter change /etc/hosts by using the ESXCLI](https://blog.matrixpost.net/vmware-esxi-change-etc-hosts-by-using-the-esxcli/) - Because of changing the IP addresses of my ESXi Hosts and the vCenter appliance, I also wanted to adjust the local /etc/hosts file on all of them to be sure they can resolve the FQDNs of my vSphere lab environment without a DNS server. When opening the /etc/hosts file as usual for Linux you will
- [Set up a VMware vSphere Environment - Part 1](https://blog.matrixpost.net/set-up-a-vmware-vsphere-environment-part-1/) - The main aim of this post is to give you a comprehensive guide and introduction about VMware's vSphere environment. In this first part we will see how to deploy the vCenter server appliance (VCSA) on an ESXi host in our on-premise data center. Up to vSphere version 6.7 you could also install the vCenter Server
- [Register SQL Server Installation with Azure and using Azure Update Manager for Patching](https://blog.matrixpost.net/register-sql-server-installation-with-azure-and-patching/) - To register a SQL Server installation with Azure, you typically use the SQL IaaS Agent extension for Azure Virtual Machines. The SQL Server IaaS Agent extension allows for integration with the Azure portal, and unlocks a number of benefits for SQL Server on Azure VMs: Feature benefits: The extension unlocks a number of automation feature
- [Install PowerShell Modules offline](https://blog.matrixpost.net/install-powershell-modules-offline/) - Installing PowerShell modules offline is essential in environments with limited or no internet access, such as secure datacenters or isolated networks. This process involves downloading the required module and its dependencies on an internet-connected system, then manually transferring and installing them on the target machine. This ensures you can still extend PowerShell’s functionality while adhering
- [Set up SUSE Linux Enterprise Server 12](https://blog.matrixpost.net/set-up-suse-linux-enterprise-server-12/) - In this post I will go through the separate steps to set up a SUSE Linux Enterprise Server 12 which was released on 27th October 2014. The SLES 13 and SLES 14 version numbers were skipped due to superstitions associated with those numbers in certain cultures. Source: https://en.wikipedia.org/wiki/SUSE_Linux_Enterprise In my following post was I was already shown how to set up SUSE
- [Set up a Central Log Server with syslog-ng daemon on SUSE Linux Enterprise Server](https://blog.matrixpost.net/set-up-a-central-log-server-with-syslog-ng-daemon-on-suse-linux-enterprise-server/) - Centralized logging is essential for monitoring, troubleshooting, and securing enterprise systems. On SUSE Linux Enterprise Server (SLES), the syslog-ng daemon offers a flexible and powerful way to collect, filter, and forward log messages from various sources. In this post, we will see step by step how to set up syslog-ng on SLES, configuring it for
- [Azure Migrate – How to migrate on-premises VMware vSphere Virtual Machines to Azure - Part 2](https://blog.matrixpost.net/azure-migrate-how-to-migrate-on-premises-vmware-vsphere-virtual-machines-to-azure-part-2/) - In Part 1 we saw the prerequisites for our on-premise vSphere environment, how to create a new Azure Migrate project and set up the Azure Migrate Appliance in Azure which we now need to deploy in our on-premise vSphere environment. This part will show how to deploy this Azure Migrate Appliance in our on-premise vSphere
- [Azure Migrate – How to migrate on-premises VMware vSphere Virtual Machines to Azure - Part 1](https://blog.matrixpost.net/azure-migrate-how-to-migrate-on-premises-vmware-vsphere-virtual-machines-to-azure-part-1/) - This blog post series (in 5 parts) will walk you through each step of migrating VMware VMs to Azure, including preparing your environment, using Azure Migrate to assess your current workloads, and executing a seamless migration. We will use here the Migration and modernization tool with the agentless migration method. Azure Migrate, Microsoft’s dedicated migration service, streamlines
- [Mastering Azure Firewall Forced Tunneling Configuration](https://blog.matrixpost.net/mastering-azure-firewall-forced-tunneling-configuration/) - In my previous post we saw how to set up an Azure Hub-Spoke Network Architecture by using Azure Firewall and S2S IPSec VPN Cross-premises Network Connection. The Azure Firewall we can also configure in forced tunneling mode which we will see in this post step by step. Forced Tunneling Introduction By default, Internet-bound traffic from
- [Introduction to Azure Service Principals - How to create and how to use them](https://blog.matrixpost.net/introduction-to-azure-service-principals/) - In Azure, secure access to resources is a top priority. Two essential tools for achieving this are Service Principals and Managed Identities. Service Principals act as application identities that can be granted specific permissions in Azure Entra ID. They are often used when applications, scripts, or services need to authenticate and interact with Azure resources.
- [Mastering Azure Managed Identities](https://blog.matrixpost.net/mastering-azure-managed-identities/) - Managing credentials securely is a crucial aspect of building applications in the cloud. Azure Managed Identities simplify this process by providing an automatically managed identity for workloads running in Azure, enabling seamless authentication to Azure services without the need for storing or managing secrets. Managed identities are not designed for authenticating to services outside the
- [How to install Azure CLI on Linux](https://blog.matrixpost.net/how-to-install-azure-cli-on-linux/) - To install Azure CLI on SUSE/OpenSUSE, choose one of the following methods: Use the Enterprise package provided by SUSE in the SUSE/OpenSUSE repositories and shown in this post below Use the installation method described in the “Install script (any)” tab. Install from Microsoft repositories For other distributions you will find in the following article by Microsoft
- [How to install Azure PowerShell on Linux](https://blog.matrixpost.net/how-to-install-azure-powershell-on-linux/) - To install Azure PowerShell on Linux we first need install PowerShell Core (PowerShell 7 or later) and then install the Az module. The Az module provides the Azure-specific cmdlets. Below I will show this for SUSE Linux Enterprise (SLES 15). Install .NET Core on SLES 15 First we need to install the Microsoft RPM repository package,
- [Set up SUSE Linux Enterprise Server 15](https://blog.matrixpost.net/set-up-suse-linux-enterprise-server/) - In this post I will go through the separate steps to set up a SUSE Linux Enterprise Server 15, SLES 15 was published on 13th December 2023. I want to show some basic configurations for Linux operating systems and how they will differ in SUSE Linux Enterprise Server. SUSE Linux Enterprise (SLE) is a Linux-based operating system developed
- [Set up an NFS Server in Windows Server 2022](https://blog.matrixpost.net/set-up-a-nfs-server-in-windows-server-2022/) - In this post I want to show how easily you can set up an NFS server in Windows Server 2022 (2012 and later). Further we will see how Windows Server can also connect to UNIX or Linux NFS shares that allows anonymous access by installing the Client for NFS on Windows Server. Network File System
- [Mastering TShark (WireShark) in SUSE Linux Enterprise](https://blog.matrixpost.net/mastering-tshark-wireshark-in-suse-linux-enterprise/) - TShark, the command-line version of Wireshark, is a powerful tool for capturing and analyzing network traffic on Linux. TShark offers a lightweight, scriptable alternative to graphical tools, perfect for automation and remote troubleshooting. In this post, I will cover the basics of using TShark, including installation on SUSE Linux Enterprise, packet capture, filtering, and exporting
- [How to request a Certificate from an internal PKI (AD CS) by using the Certreq Command without relying on the Web Enrollment service](https://blog.matrixpost.net/how-to-request-a-certificate-from-an-internal-pki-ad-cs-by-using-the-certreq-command-without-relying-on-the-web-enrollment-service/) - The Certification Authority (CA) Web Enrollment role service provides a set of web pages that allow users to perform certificate tasks. For example, requesting and renewing certificates, retrieving certificate revocations lists (CRLs) and enrolling for smart card certificates. These web pages are located at https:///certsrv, where is the name of the server that hosts the CA Web
- [Azure Virtual Machines Stopped vs. Stopped (Deallocated)](https://blog.matrixpost.net/azure-virtual-machines-stopped-vs-stopped-deallocated/) - When managing Azure Virtual Machines (VMs), the terms Deallocated and Stopped refer to different VM states, each with distinct implications for billing and resource allocation. OS-level shutdown When you trigger a command directly on the OS to shutdown the virtual machine, the virtual machine will stop all processes and shutdown but its compute resources like
- [Set up the Squid Proxy Server as a Transparent Proxy on SUSE Linux Enterprise](https://blog.matrixpost.net/set-up-the-squid-proxy-server-as-transparent-proxy-on-suse-linux-enterprise/) - In my previous post we saw the basics about how to setup Squid on SUSE Linux Enterprise (SLES 15 SP5). Now in this post we will see step by step how to configure the Squid proxy as a transparent proxy and how to intercept SSL/TLS traffic which is required in transparent mode. A Squid transparent proxy (also known
- [How to use a SubCA Certificate issued by our internal AD CS PKI for the Squid Forward Proxy to generate dynamic Host  Certificates](https://blog.matrixpost.net/how-to-use-a-subca-certificate-issued-by-our-internal-ad-cs-pki-for-the-squid-forward-proxy-to-generate-dynamic-host-certificates/) - In this post we will see how to create and configure a subordinate CA certificate issued by our Active Directory Certificate Services (AD CS) PKI for the dynamic host certificate generation when running Squid as a forward proxy. For Squid’s SSL interception (SSL Bump) which will generate dynamic host certificates for the requested destinations of the clients, we we need to configure a
- [Set up Azure Site Recovery for On-Premise VMware Virtual Machines (Modernized) - Part 3](https://blog.matrixpost.net/set-up-azure-site-recovery-for-on-premise-vmware-virtual-machines-modernized-part-3/) - In Part 2 of this blog post series we saw how to prepare the infrastructure which is finally setting up the ASR appliance in on-premise (vSphere). Further we saw how to deploy the ASR appliance in vSphere and how to configure it in order to later orchestrate the connection and replication between on-premise (vSphere) and Azure. This part will show how we can enable the replication of virtual machines in on-premise
- [Azure Migrate – How to migrate on-premises VMware vSphere Virtual Machines to Azure - Part 3](https://blog.matrixpost.net/azure-migrate-how-to-migrate-on-premises-vmware-vsphere-virtual-machines-to-azure-part-3/) - In Part 2 we saw how to deploy the Azure Migrate Appliance in our on-premise vSphere environment. We also already configured the Azure Migrate appliance by using its configuration manager. This part will show how to first assess VMware VMs for migration to Azure VMs and then replicate and migrate them to Azure. Assess VMware
- [VMware Virtual Machine using dedicated EFI System Partition Disk boots directly into GRUB2 Command Shell instead of booting the OS](https://blog.matrixpost.net/vmware-virtual-machine-using-dedicated-efi-system-partition-disk-boots-directly-into-grub2-command-shell-instead-booting-the-os/) - A few weeks ago I encountered an issue on VMware's vSphere environment with SUSE Linux Enterprise Server (SLES) virtual machines they will use a dedicated disk for the EFI System Partition on which the GRUB2 boot loader is located. When using a dedicated disk for the EFI System Partition and placing the root filesystem on another
- [Azure Migrate – How to migrate on-premises VMware vSphere Virtual Machines to Azure (agent-based) – Part 5](https://blog.matrixpost.net/azure-migrate-how-to-migrate-on-premises-vmware-vsphere-virtual-machines-to-azure-agent-based-part-5/) - In Azure the Migration and modernization tool offers agentless and agent-based migration to migrate your source servers and virtual machines (VMs) to Azure. Azure Migrate and often called the Azure Migration and Modernization Program (AMMP) offers companies tools to migrate their IT infrastructure from on-premise (VMware, Hyper-V, physical or other hyperscaler like AWS or GCP) to Azure.
- [Azure Migrate – How to migrate on-premises VMware vSphere Virtual Machines to Azure - Part 4](https://blog.matrixpost.net/azure-migrate-how-to-migrate-on-premises-vmware-vsphere-virtual-machines-to-azure-part-4/) - In Part 3 we saw how to first assess VMware VMs for migration to Azure VMs , then replicate them to Azure and finally how to migrate them to Azure. This part will show some troubleshooting in case something doesn’t work as expected. Troubleshooting The vCenter Server account configured on the Azure Migrate appliance does not have sufficient permissions to perform the operation. I was first running into
- [Set up pfSense as a Forward Proxy with Squid and configure access for Linux and Windows Clients](https://blog.matrixpost.net/set-up-pfsense-as-a-forward-proxy-with-squid-and-configure-access-for-linux-and-windows-clients/) - In this post you will see how to set up pfSense to function as a Forward Proxy using the squid package. Squid is a caching and forwarding HTTP web proxyhttp://www.squid-cache.org/https://en.wikipedia.org/wiki/Squid_(software)Although primarily used for HTTP and FTP, Squid includes limited support for several other protocols including Internet Gopher, SSL, TLS and HTTPSSquid was originally designed to
- [How to onboard on-premise Server (Azure Arc) and native Azure Server (VMs) to Microsoft Defender for Servers](https://blog.matrixpost.net/how-to-onboard-on-premise-servers-to-microsoft-defender-for-servers/) - In this post we will see step by step how we can onboard our Azure Arc-enabled on-premise Windows and Linux Servers (bare-metal or virtual machines) and Azure Server (VMs) to Microsoft Defender for Servers. In order to onboard our on-premise machines to Microsoft Defender for Servers, we first need to onboard and connect them to
- [How to onboard on-premise Server to Azure Arc](https://blog.matrixpost.net/how-to-connect-windows-server-machines-to-azure-by-using-azure-arc/) - Managing diverse infrastructure across on-premises data centers, edge locations, and multiple cloud providers can be complex. This is where Azure Arc comes in. Microsoft Azure Arc extends the power of Azure management and security to any infrastructure, whether it's running on-premises, in AWS, Google Cloud, or at the edge. With Azure Arc, businesses can centrally
- [Set up an Azure Storage Account and Blob Storage for NFS Access by using a Private Endpoint](https://blog.matrixpost.net/set-up-an-azure-storage-account-and-blob-storage-for-nfs-access-by-using-a-private-endpoint/) - Azure Blob Storage now supports NFS 3.0, allowing organizations to use Azure Storage accounts as a scalable, cloud-based file system accessible through the Network File System (NFS) protocol. Windows client for NFS isn't yet supported. However, there's a workaround available that uses the Windows Subsystem for Linux (WSL 2) to mount storage by using the
- [How to boot Linux from an Installation/Live CD to either repair a broken System or just to reset the Root Password](https://blog.matrixpost.net/how-to-boot-linux-from-an-installation-live-cd-to-either-repair-a-broken-system-or-just-to-reset-the-root-password/) - When your Linux system fails to boot or you’ve forgotten the root password, a Live CD, USB or ISO for virtual machines can be a lifesaver. Whether you need to repair critical system files, recover data, or reset passwords, booting into a live Linux environment gives you the tools to fix your system without requiring a full
- [How to reset a forgotten or not knowing Root Password for Linux by using the GRUB Boot Loader](https://blog.matrixpost.net/how-to-reset-forgotten-or-not-knowing-root-password-for-linux-by-using-the-grub-boot-loader/) - In this post I want show how easily you can reset the root user password by using the GRUB 2 Boot Loader. There are several ways how you can reset a forgotten or not knowing root password in case you have directly access to the computer or in case of a virtual machine like below,
- [How to Create a Custom ESXi Boot ISO Image with VMware Flings USB Network Drivers injected](https://blog.matrixpost.net/how-to-create-a-custom-esxi-boot-iso-image-with-vmware-flings-usb-network-drivers-injected/) - Are you struggling to get your USB network adapter recognized during an ESXi installation? VMware's native support for USB NICs is limited, but thanks to the VMware Flings community, you can now integrate the USB Network Native Driver into your ESXi installation media. In this post, we will see step by step how we can create a
- [Set up an NFS Server on SUSE Linux Enterprise Server 15](https://blog.matrixpost.net/set-up-an-nfs-server-on-suse-linux-enterprise-server-15/) - Today I want to show step by step how to set up an NFS Server under SUSE Linux Enterprise Server 15. Further we will also see how to access (aka importing) the exported file system (so called exports or shares) by the NFS Server on NFS Clients like Linux, Windows or also vSphere environments. An NFS
- [Set up an Azure Storage Account and Blob Storage for SFTP Access](https://blog.matrixpost.net/set-up-an-azure-storage-account-and-blob-storage-for-sftp-access/) - Blob storage now supports the SSH File Transfer Protocol (SFTP). This support lets you securely connect to Blob Storage by using an SFTP client, allowing you to use SFTP for file access, file transfer, and file management. Below I will go through the separate steps to set up a new storage account and blob storage
- [Mastering Linux DM Multipathing and iSCSI Block Storage on SUSE Linux Enterprise Server](https://blog.matrixpost.net/mastering-linux-dm-multipathing-and-iscsi-block-storage-suse/) - Linux Device Mapper Multipath (DM Multipath) is a feature used in enterprise storage environments to provide redundancy and improved performance by allowing a system to access storage devices over multiple physical paths. For this post I will use iSCSI block storage provided by a Microsoft iSCSI Target server to show how we can set up
- [Set up an Azure Storage Account and Blob Storage for SFTP Access by using a Private Endpoint](https://blog.matrixpost.net/set-up-an-azure-storage-account-and-blob-storage-for-sftp-access-and-using-a-private-endpoint/) - In one of my previous posts we already saw how to setup up an Azure storage account and blob storage for SFTP Access. The storage account we configured then with public access through the internet as shown on the screenshot below. Now this time we will see how we can restrict access by using private
- [How to onboard on-premise Server to Azure Arc by using a Site-to-Site IPSec VPN and Azure Arc Private Link Scope](https://blog.matrixpost.net/how-to-onboard-on-premise-server-to-azure-arc-by-using-a-site-to-site-ipsec-vpn-and-azure-arc-private-link-scope/) - Azure Arc Private Link Scope is a powerful feature that allows organizations to securely connect on-premises or multi-cloud resources to Azure services, leveraging private endpoints to ensure that traffic flows securely over private networks. By extending Azure’s management and governance capabilities to resources outside the Azure environment, Azure Arc enables centralized control while keeping data
- [Mastering Linux DM Multipathing and iSCSI Block Storage on Red Hat Enterprise Linux](https://blog.matrixpost.net/mastering-linux-dm-multipathing-and-iscsi-block-storage-on-red-hat-enterprise-linux/) - Linux Device Mapper Multipath (DM Multipath) is a feature used in enterprise storage environments to provide redundancy and improved performance by allowing a system to access storage devices over multiple physical paths. For this post I will use iSCSI block storage provided by a Microsoft iSCSI Target server to show how we can set up DM multipath on Red Hat Enterprise Linux. Finally we connect an iSCSI target (virtuell disk) to Red
- [Back up VMware VMs with Azure Backup Server](https://blog.matrixpost.net/back-up-vmware-vms-with-azure-backup-server/) - Microsoft Azure Backup Server (MABS) provides enterprise-level data protection for VMware environments, ensuring reliable backup and recovery of virtual machines in hybrid and cloud scenarios. As VMware workloads grow in complexity, businesses need a secure, scalable, and cost-efficient backup solution. MABS delivers just that with deep integration into Azure Backup and support for VMware vSphere. With MABS, organizations can:
- [A fatal error occurred while creating a TLS client credential. The internal error state is 10013](https://blog.matrixpost.net/a-fatal-error-occurred-while-creating-a-tls-client-credential-the-internal-error-state-is-10013/) - If you have disabled the deprecated server and client protocols TLS 1.0 and TLS 1.1 on your Windows Server as further down for security reasons. https://www.chromestatus.com/feature/5759116003770368TLS 1.2 was published ten years ago to address weaknesses in TLS 1.0 and 1.1 and has enjoyed wide adoption since then. These old versions of TLS rely on MD5
- [Using Custom CSS in MediaWiki from Version 1.35 and newer](https://blog.matrixpost.net/using-custom-css-in-mediawiki-from-version-1-35-and-newer/) - In newer MediaWiki versions (1.35+), the process for adding custom CSS has changed from older versions. There are now several options to use custom css styles for MediaWiki, below I want to show how to use your own custom stylesheet file by adding a new line in the LocalSettings.php configuration file which refers to your
- [How to install Checkmk Extension Packages (MKPs)](https://blog.matrixpost.net/how-to-install-checkmk-extension-packages-mkps/) - Checkmk's flexibility is one of its greatest strengths, allowing users to enhance monitoring with custom extensions and integrations. MKP extension packages make this possible, they bundle plugins, checks, agents, and other add-ons into easily installable modules. Whether you're adding new monitoring checks, integrating third-party tools, or applying custom configurations, MKP extension packages streamline the process. There
- [How to set up a Custom Certificate on the Dell PowerVault ME5024 Storage Array](https://blog.matrixpost.net/how-to-set-up-a-custom-certificate-on-dell-powervault-me5024/) - By default, the Dell PowerVault ME5024 storage comes with a self-signed certificate assigned to its both Management Controller (MC). Management Controller (MC) and Storage Controller (SC) are separate subsystems on ME series arrays. The Management Controller (MC) handles management and monitoring of the storage system and the Storage Controller (SC) handles data processing, RAID operations, and
- [Set up Checkmk on SUSE Linux Enterprise Server (SLES)](https://blog.matrixpost.net/set-up-checkmk-on-suse-linux-enterprise-server-sles/) - In this post we will see how to set up Checkmk on SLES 15 SP5 and how to secure the web interface (GUI) with HTTPS. Checkmk is a robust and versatile IT monitoring platform that helps organizations keep track of their entire IT infrastructure in real time. Originally developed as an open-source project, Checkmk has
- [Azure Stack Hub, HCI and Edge](https://blog.matrixpost.net/azure-stack-hub-hci-and-edge/) - In this post I want to summarize some information about the Azure Stack family. This is well documented from Microsoft. To get familiar with the terminology of integrated systems in general, you can also read my following post. Azure Stack is a family of products and solutions that extend Azure to your datacenter or the
- [Mastering iPerf on Linux and Windows](https://blog.matrixpost.net/mastering-iperf-on-linux-and-windows/) - Ever wondered if your network is delivering the speed it promises? Whether you're troubleshooting slow connections, optimizing a data center, or just verifying your ISP's claims, iPerf is the go-to tool for measuring network performance with precision. This lightweight yet powerful utility lets you test bandwidth, latency, and throughput between two endpoints—supporting TCP, UDP, and even multi-threaded traffic simulations. System
- [How to check for new Updates on Windows Server without automatically installing them](https://blog.matrixpost.net/how-to-check-for-new-updates-on-windows-server-without-automatically-installing-them/) - To check for Windows updates on a server without automatically installing them, we can use the sconfig utility like shown below. SConfig (Server Configuration Tool) is a menu-driven command-line utility available in Windows Server (2012, 2016, 2019, 2022) that simplifies common administrative tasks. Open Windows PowerShell on the desired server and run. PS> Sconfig The SConfig (Server Configuration Tool) will be
- [Set up Microsoft Entra Connect](https://blog.matrixpost.net/set-up-microsoft-entra-connect/) - Managing user identities across on-premises and cloud environments is critical for ensuring secure access and a smooth user experience. Integrating your on-premises directories with Microsoft Entra ID makes your users more productive by providing a common identity for accessing both cloud and on-premises resources. Microsoft Entra Connect, formerly known as Azure AD Connect, is a
- [How to change the vmxnet3 link speed of a Virtual Machine running in VMware vSphere](https://blog.matrixpost.net/vmware-vsphere-load-balancing-and-network-speed-options/) - The default link speed of a vmxnet3 adapter is 10Gbps as shown on the screenshot below. In this post I want to show how we can change the vmxnet3 link speed of a virtual machine. VMXNET 3 is a paravirtualized NIC designed for performance. VMXNET 3 offers all the features available in VMXNET 2 and
- [Cheat Sheet Vi & Vim Editor](https://blog.matrixpost.net/cheat-sheet-vi-vim-editor/) - Below I want to summarize some useful commands to deal with the iconic vi (pronounced vee-eye) and vim (Vi Improved) editor. I will add content here from time to time. Vi was released in 1976. Nowadays Vi is often a symbolic link to Vim or an alias to Vim, an enhanced version of Vi. Below for example
- [How to expand the Windows OS Partition when there is a Recovery Partition directly placed behind](https://blog.matrixpost.net/how-to-expand-the-windows-os-partition-when-there-is-a-recovery-partition-directly-placed-behind/) - If your Windows recovery partition is located after the OS partition, it may cause issues when attempting to extend the OS partition or perform certain recovery tasks. Windows Recovery Environment (WinRE) is a recovery environment that can repair common causes of unbootable operating systems. WinRE is based on Windows Preinstallation Environment (Windows PE), and can
- [Troubleshooting Erros during the Execution of Java Applets using the Java Network Launch Protocol (JNLP)](https://blog.matrixpost.net/troubleshooting-erros-during-the-execution-of-java-applets-using-the-java-network-launch-protocol-jnlp/) - Below I want to show how we can solve some errors which can come up when trying to run some Java applets. An applet is a program written in the Java programming language that can be included in an HTML page, much in the same way an image is included in a page. When you
- [How to enable Remote Desktop by using Group Policies](https://blog.matrixpost.net/how-to-enable-remote-desktop-by-using-group-policies/) - In enterprise environments, enabling Remote Desktop manually on multiple machines can be time-consuming. Instead, Group Policies (GPOs) provides a centralized way to enable and configure Remote Desktop across multiple computers efficiently. In this post, we will see step by step how to enable Remote Desktop by using Group Policies, configure firewall rules, and ensure secure
- [How to enable Microsoft Entra ID Authentication for vCenter Server by using the VMware Identity Service (Entra ID App)](https://blog.matrixpost.net/how-to-enable-microsoft-entra-id-authentication-for-vcenter-server-by-using-the-vmware-identity-service-entra-id-app/) - In my previous post below we saw how to enable Microsoft Entra ID Authentication for vCenter Server by using the on-premises SCIM App by Microsoft. This on-premises SCIM App by Microsoft will also provide the Microsoft Entra Provisioning Agent which we need to install in our internal on-premises network. By using this agent we doesn't
- [How to enable Microsoft Entra ID Authentication for vCenter Server by using the on-premises SCIM App by Microsoft](https://blog.matrixpost.net/how-to-enable-microsoft-entra-id-authentication-for-vcenter-server-by-using-the-on-premises-scim-app/) - Enabling Microsoft Entra ID (formerly Azure Active Directory) authentication for VMware vCenter Server allows organizations to integrate their on-premises or cloud-based vCenter environments with Microsoft Entra ID for centralized identity and access management (IAM). This integration simplifies user authentication by leveraging Microsoft Entra ID's robust security features, such as multi-factor authentication (MFA), conditional access policies,
- [Preventing Powered-Off Virtual Machines from Auto-Starting in vSphere HA](https://blog.matrixpost.net/preventing-powered-off-virtual-machines-from-auto-starting-in-vsphere-ha/) - In a vSphere High Availability (HA) cluster, virtual machines automatically restart on another host if a hardware failure occurs. However, there are cases where you may want to prevent a powered-off VM from starting automatically, for example, when managing test environments, preventing unnecessary resource usage, or ensuring specific VMs remain off until manually started. In
- [Set up a VMware vSphere Environment - Part 2](https://blog.matrixpost.net/set-up-a-vmware-vsphere-environment-part-2/) - In part 1 we saw how to deploy the vCenter server appliance (VCSA) on an ESXi host in our on-premise data center. In this part we will now configure the vCenter server appliance to finally set up and run our vSphere environment. vSphere Installation and Setup Workflow Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vcenter.install.doc/GUID-B64AA6D3-40A1-4E3E-B03C-94AD2E95C9F5.html vCenter Server Host Configuration For the configuration
- [Check TLS Version on VMware vCenter Server](https://blog.matrixpost.net/check-tls-version-on-vcenter/) - We can use the TLS Configuration utility to view which TLS version is enabled enabled on vCenter. Login to the vCenter Server by using SSH and change to the shell root@vCenter [ / ]# cd /usr/lib/vmware-TlsReconfigurator/VcTlsReconfigurator root@vCenter [ /usr/lib/vmware-TlsReconfigurator/VcTlsReconfigurator ]# ./reconfigureVc scan This command will display which services have TLS enabled, the version and the
- [Adding Windows Display Language for Windows Server without Internet Access](https://blog.matrixpost.net/add-windows-display-language-for-windows-server-without-internet-access/) - In environments where Windows Server operates without internet access, adding a new display language requires manual installation of language packs. This process involves downloading the necessary language pack files (e.g., .cab files) from an external source, transferring them to the server, and using tools like DISM (Deployment Imaging Service and Management Tool) to install the language pack offline. This post provides
- [Cheat Sheet Windows Control Panel Tool Commands (*.cpl)](https://blog.matrixpost.net/cheat-sheet-windows-control-panel-tool-commands-cpl/) - Windows has built-in utilities and control panels that can be accessed quickly and easily. One of the most powerful yet underrated ways to do this is by using the *.cpl command. Control Panel files, with the *.cpl extension, are small but mighty tools that let you manage everything from network settings to system properties In this post I
- [How to replace the ESXi Certificate with a Custom Certificate](https://blog.matrixpost.net/how-to-replace-the-esxi-certificate-with-a-custom-certificate/) - By default, ESXi hosts use certificates issued by the VMware Certificate Authority (VMCA), which are self-signed and trusted within the vSphere environment. However, in many cases, organizations may need to replace these default certificates with custom certificates signed by a trusted external Certificate Authority (CA) or a trusted internal CA to meet compliance requirements, enhance
- [Set up a Microsoft iSCSI Target Server](https://blog.matrixpost.net/set-up-a-microsoft-iscsi-target-server/) - In this post we will see how we can set up the Microsoft iSCSI Target Server to provide a network-accessible block storage device at low cost. This is a great and affordable solution for development, test, demonstration and lab environments. Internet Small Computer Systems Interface or iSCSI is an Internet Protocol-based storage networking standard for linking data storage
- [Advanced Cross vCenter Server vMotion (XVM) Capability](https://blog.matrixpost.net/advanced-cross-vcenter-server-vmotion-xvm-capability/) - With vCenter Server 7.0 Update 1c, in the vSphere Client, you can use the Advanced Cross vCenter vMotion (XVM) feature to manage the bulk migration of workloads across vCenter Server systems in different vCenter Single Sign-On domains. XVM helps to migrate virtual workloads between vCenter Server instances, without the requirement for Enhanced Linked Mode (ELM)
- [Set Up iSCSI Virtual Disks as Shared Storage for an ESXi Host Cluster](https://blog.matrixpost.net/set-up-scsi-virtual-disks-as-shared-storage-for-an-esxi-host-cluster/) - In order to provide shared storage to my vSphere lab environment and later creating a vSphere ESXi host cluster, I will configure a new iSCSI virtual disk on my iSCSI Target Server and specify as access servers (so called iSCSI initiator(s)) both of my ESXi hosts. More about the Microsoft iSCSI Target Server you can
- [Installing AudioCodes Mediant VE SBC on Hyper-V](https://blog.matrixpost.net/installing-audiocodes-mediant-ve-sbc-on-hyper-v/) - In the following post ... I had set up the AudioCodes Mediant VE SBC in Azure. Now I want to do the same but at on-premise in my own network with an virtual Hyper-V VM placed inside the perimeter network. Installation Manualhttps://www.audiocodes.com/media/13255/mediant-virtual-edition-sbc-installation-manual-ver-72.pdf I will install the Mediant VE SBC on an Dell PowerEdge R740 Hyper-V
- [Mastering icacls and takeown](https://blog.matrixpost.net/mastering-icacls-and-takeown/) - Managing file permissions and ownership in Windows can sometimes feel like navigating a maze, especially when dealing with restricted files or folders. Whether you're troubleshooting access issues, cleaning up system files, or managing user permissions, two powerful command-line tools can make your life easier: Takeown and ICACLS. These commands allow you to take ownership of
- [Deleting Windows Folder recursive will failed with Access Denied](https://blog.matrixpost.net/deleting-windows-folder-recursive-will-failed-with-access-denied/) - Sometimes you encounter problems when trying to delete a folder and its subfolders in Windows (NTFS) and getting the Access Denied error even if your user is member of the local administrators group and you tried to take over ownership by using the file explorer. In that case you can execute the first or both
- [Configure Hybrid Azure AD join for managed domains](https://blog.matrixpost.net/configure-hybrid-azure-ad-join/) - Like a user in your organization, a device is a core identity you want to protect. You can use a device's identity to protect your resources at any time and from any location. You can accomplish this goal by managing device identities in Azure AD. Use one of the following methods: Azure AD join Hybrid
- [Set up a SFTP Server on SUSE Linux Enterprise Server](https://blog.matrixpost.net/set-up-a-sftp-server-on-suse-linux-enterprise-server/) - In this post we will see step by step how we can set up a SFTP Server on SLES 15 SP6. I already wrote a post below about how to set up a SFTP Server on Ubuntu 20.04.3 by using a chroot jail to lock the users in their home directory from which they can't
- [Linux Execute Shell Scripts - Source script.sh vs ./script.sh vs exec ./script.sh vs. bash script.sh](https://blog.matrixpost.net/linux-executing-shell-scripts-different-ways/) - In Linux executing ./my_script.sh and source my_script.sh are two different ways to run a shell script, but they behave differently in terms of scope and how the script is executed. To show the different ways we can use in Linux to run a shell script, I will use the following simple Hello World script named
- [Domain Controller Protection via BitLocker Drive Encryption](https://blog.matrixpost.net/domain-controller-protection-via-bitlocker-drive-encryption/) - If privileged access to a domain controller is obtained by a malicious user, it is also possible that the user will get access to other accounts and credentials. Therefore the user (attacker) can get access to other server systems or the complete network. Because domain controllers can read from and write to anything in the
- [How to enroll already Microsoft Entra joined (former Azure AD joined) Devices to Microsoft Intune?](https://blog.matrixpost.net/how-to-enroll-already-microsoft-entra-joined-former-azure-ad-joined-devices-to-microsoft-intune/) - Enroll devices to Microsoft Intune which are already Microsoft Entra joined by firing up a little PowerShell script.
- [Mastering Linux NetworkManager and its nmcli](https://blog.matrixpost.net/mastering-network-manager/) - In this post I want to summarize some commands you can use in your daily work to configure the network on Linux by using the NetworkManager and its nmcli. NetworkManager is the standard Linux network configuration tool suite. It supports large range of networking setups, from desktop to servers and mobile and integrates well with
- [Using a Jump Host (Bastion Host) for SSH (Secure Shell)](https://blog.matrixpost.net/using-a-jump-host-bastion-host-for-ssh-secure-shell/) - When managing remote servers, SSH (Secure Shell) is the go-to protocol for secure, encrypted connections. However, in enterprise environments, direct SSH access to critical systems is often restricted for security reasons. This is where a Jump Host (Bastion Host) comes in, a dedicated server that acts as an intermediary, allowing controlled access to internal systems.
- [Mastering the mitmproxy (MITM interactive HTTPS Proxy) on Linux](https://blog.matrixpost.net/mastering-the-mitmproxy-mitm-interactive-https-proxy-on-linux/) - In this post I want to show step by step how we can install the mitmproxy on different Linux distributions and how to start examine and monitoring HTTP/HTTPS traffic with. mitmproxy is a set of tools that provide an interactive, SSL/TLS-capable intercepting proxy for HTTP/1, HTTP/2, and WebSockets. mitmproxy is a console tool that allows interactive
- [How to install Root Certificates on Linux](https://blog.matrixpost.net/how-to-install-root-certificates-on-suse-linux-enterprise-and-ubuntu/) - In this post, I will walk you through the process of installing root certificates on Linux. From placing the certificate in the appropriate directory to finally updating the trusted certificate store. Whether you're adding a corporate certificate or a third-party CA, these steps are straightforward and essential for maintaining a reliable Linux environment. Install Root
- [Mastering Oracle Linux Updates and Repos](https://blog.matrixpost.net/mastering-oracle-linux-updates-and-repos/) - In this post I want to show how we can manage updates and repositories in Oracle Linux, to demonstrate this I will use an Oracle Linux 8.10 virtual machine running in Azure. Oracle Linux is a high-performance, enterprise-class Linux distribution developed and maintained by Oracle Corporation. Based on the open-source Red Hat Enterprise Linux (RHEL)
- [Veeam Backup & Replication - Permanent failover failed - Error: There is no oib with id](https://blog.matrixpost.net/veeam-backup-replication-permanent-failover-failed-error-there-is-no-oib-with-id/) - In case you will run into the following error in Veeam Backup & Replication, when triggering a Permanent Failover for a virtual machine, probably the reason for is, that the corresponding active snapshot which was created by Veeam during the normal first failover in vSphere or Hyper-V, was for what ever reason deleted by hand
- [How to elevate access to an Azure Subscription when you have assigned the Global Administrator Role in Microsoft Entra ID](https://blog.matrixpost.net/how-to-elevate-access-to-an-azure-subscription-when-you-have-assigned-the-global-administrator-role-in-microsoft-entra-id/) - As a Global Administrator in Microsoft Entra ID, you might not have access to all subscriptions and management groups in your tenant. Below I will show how we can elevate access to all subscriptions and management groups in our tenants where we are Global Administrator. Microsoft Entra ID and Azure resources are secured independently from
- [How to rename Azure Arc-enabled Server](https://blog.matrixpost.net/how-to-rename-azure-arc-enabled-server/) - When you change the name of a Linux or Windows machine connected to Azure Arc-enabled servers, the new name isn't recognized automatically because the resource name in Azure is immutable. As with other Azure resources, you must delete the resource and re-create it in order to use the new name. For Azure Arc-enabled servers, before
- [The Utilman.exe Hack combined with Windows Safe Mode to bypass XDR Solutions like CrowdStrike's Falcon Sensor or Microsoft Defender for Servers](https://blog.matrixpost.net/the-utilman-exe-hack-combined-with-windows-safe-mode-to-bypass-xdr-solutions-like-crowdstrikes-falcon-sens/) - In this post I will show step by step the Utilman.exe hack on Windows Servers they protected by either CrowdStrike's Falcon Sensor or Microsoft's Defender for Servers. This content is for educational purposes only and aims to raise awareness about system vulnerabilities. Law #3: If a bad guy has unrestricted physical access to your computer,
- [How to repair an Azure VM offline](https://blog.matrixpost.net/how-to-repair-an-azure-vm-offline/) - In my previous post below we saw how we can run Azure VMs in safe mode by using the Azure serial console and the Special Administration Console (SAC) which is provided by the Emergency Management Services (EMS) if enabled for the VM. In case the Emergency Management Services (EMS) are not enabled and also couldn't
- [Linux handles SSH and SFTP Port Specification different](https://blog.matrixpost.net/linux-handles-ssh-and-sftp-port-specification-different/) - When working with SSH and SFTP, you may have noticed a curious difference in how ports are specified: SSH uses the lowercase -p option, while SFTP uses the uppercase -P. Although it might seem inconsistent, this design choice has practical reasons rooted in how these tools are built and their respective option sets. SSH Command
- [Perform a clean Deinstallation of VMware Tools manually in Windows Guest OS](https://blog.matrixpost.net/perform-a-clean-deinstallation-of-vmware-tools-manually-in-windows-guest-os/) - Upgrading/Installing the VMware tools or uninstallation of VMware Tools sometimes fails with the following errors The feature you are trying to use is on a network resource that is unavailable. Click OK to try again, or enter an alternate path to a folder containing the installation package "VMware Tools64.msi VGAuthservice and Alias Manager cannot be
- [How to determine which Uplink (physical NIC) a Virtual Machine is using finally to send Uplink Traffic in vSphere](https://blog.matrixpost.net/how-to-determine-which-uplink-physical-nic-a-virtual-machine-is-using-finally-to-send-uplink-traffic-in-vsphere/) - In order to troubleshoot network issues for a specific virtual machine running in vSphere, it is crucial to first determine which physical NIC (Uplink) on the ESXi Host the VM finally is using for sending uplink traffic. In vSphere, uplink traffic refers to the network traffic sent from virtual machines (VMs), VMkernel ports, or other
- [Secure WordPress with fail2ban](https://blog.matrixpost.net/secure-wordpress-with-fail2ban/) - In a previously post I showed how to set up fail2ban on Ubuntu to prevent several services from brute-force attacks. To secure also your WordPress site from them you will first need to set up fail2ban itself on your server as follows for Ubuntu. fail2ban supports out of the box several services like SSH, HTTP
- [Set up Fail2ban on Ubuntu 20.04.3 LTS](https://blog.matrixpost.net/set-up-fail2ban-on-ubuntu-20-04-3-lts/) - In this post I want to show how to install and use Fail2Ban on Ubuntu. Fail2Ban is an intrusion prevention software framework that protects computer servers from brute-force attacks. Written in the Python programming language, it is able to run on POSIX systems that have an interface to a packet-control system or firewall installed locally,
- [Mastering Microsoft Entra Application Proxy](https://blog.matrixpost.net/mastering-microsoft-entra-application-proxy/) - This post will walk you through each step of setting up the Microsoft Entra Application Proxy to publish on-premise web applications and Remote Desktop which doesn't requires you to open any inbound connections through your firewall. The only cost for Application Proxy is the Microsoft Entra ID P1 licence, there are no other costs. Source: https://learn.microsoft.com/en-us/entra/identity/app-proxy/overview-what-is-app-proxy#overview-of-how-application-proxy-works Microsoft Entra application
- [Set up Microsoft Entra Application Proxy to publish Remote Desktop (RDS)](https://blog.matrixpost.net/set-up-microsoft-entra-application-proxy-to-publish-remote-desktop-rds/) - Remote Desktop Service and Microsoft Entra application proxy works together to improve the productivity of workers who are away from the corporate network. In my previous post I was walking through each step of setting up the Microsoft Entra Application Proxy to publish on-premise web applications which doesn't requires you to open any inbound connections through your firewall.
- [Remote Desktop Services (RDS) - Published RDP Icon is gone after publishing further Remote Apps later](https://blog.matrixpost.net/remote-desktop-services-rds-published-rdp-icon-is-gone-after-publishing-remote-apps/) - It seems that there is a bug in Remote Desktop Services (RDS) regarding the published Remote Desktop Connection (RDP) app. When you had initial published the Remote Desktop Connection as remote app in RDS, and later publish another remote app, the icon from the first published RDP app is now gone and missing. I know
- [Mastering Azure Application Gateway](https://blog.matrixpost.net/mastering-azure-application-gateway/) - This post will walk you through each step of setting up the Microsoft Azure Application Gateway to finally publish two different web app's to the internet. Both web app's are running on two different virtual machines in Azure. Azure Application Gateway is a web traffic (OSI layer 7) load balancer that enables you to manage traffic to
- [The vMotion interface is not configured (or is misconfigured) on the Source Host](https://blog.matrixpost.net/the-vmotion-interface-is-not-configured-or-is-misconfigured-on-the-source-host/) - I was running into this error when trying to migrate a running virtual machine to another ESXi host and datastore. To get straight to it, in my lab environment the vMotion traffic wasn't enabled on my ESXi hosts after a new setup. We have now two options to enable vMotion traffic, either we can enable
- [How to Retrieve a Previous Hostname in Windows: A Quick Guide](https://blog.matrixpost.net/retrieve-previous-old-hostname-windows/) - When managing or troubleshooting Windows systems, there may be instances where you need to find the previous hostname of a computer, especially after a recent rename. To find the initial original hostname in Windows, we can use a registry value for and to track all renamings, we can use the event viewer and event ID
- [Azure Migrate - How to migrate on-premises Hyper-V Virtual Machines to Azure](https://blog.matrixpost.net/moving-migrate-hyper-v-vms-to-azure/) - In this post we will see how to migrate on-premises Hyper-V VMs to Azure by using Azure Migrate and the Migration and modernization tool. This process is well documented by Microsoft in the following article on which I will refer in this post. Migrate Hyper-V VMs to Azurehttps://learn.microsoft.com/en-us/azure/migrate/tutorial-migrate-hyper-v Introduction Azure Migrate provides a simplified migration, modernization,
- [Azure - Create a new Linux VM and connect to using SSH](https://blog.matrixpost.net/azure_linux_vm/) - In this post I want to show the separate steps to create a new Linux VM in Azure and later connect to using SSH private/public keys. If you are interested in how the same works in Google Cloud and AWS, you can read my following posts. Creating the Linux Virtual Machine In the Azure portal
- [How to delete an Inaccessible Datastore in vSphere?](https://blog.matrixpost.net/how-to-delete-an-inaccessible-datastore-in-vsphere/) - In this post I want to show how we can finally remove a datastore which is for whatever reason not accessible anymore and therefore couldn't be deleted by using the vSphere client. In my case I was removing the storage device (direct attached disk) on which the datastore was created before deleting the datastore itself.
- [WordPress Draft Page not showing - There has been a critical error on this website.](https://blog.matrixpost.net/wordpress-draft-page-not-showing-there-has-been-a-critical-error-on-this-website/) - In case you will see a generic error message like shown below when opening a page or post in WordPress, in most cases this issue is related to PHP or a database corruption. There has been a critical error on your website. To see whats the reason for this issue you should enable debugging in
- [Using USB Hard Disk Drives for Datastores in vSphere](https://blog.matrixpost.net/using-usb-hard-disk-drives-for-datastores-in-vsphere/) - Because I am running out of storage in my vSphere lab environment, I wanted to extend the storage quickly and cost effective. So the most cost effective option here is to just use simple USB hard disk drives and connect them to the ESXi Hosts, in my case for my lab environment, these are just
- [Linux LVM - Remove Volume Groups and Logical Volumes](https://blog.matrixpost.net/linux-lvm-remove-volume-groups-and-logical-volumes/) - In this post I want to show how we can remove LVM Volume Groups (VGs) and Logical Volumes (LVs) in Linux. Remove Logical Volumes In order to remove a volume group, we first need to remove its associated logical volumes. If the logical volume is still mounted, we first need to unmount the volume before we can remove the logical volume.
- [.Bashrc vs .bash_profile (or just .profile)](https://blog.matrixpost.net/bashrc-vs-bash_profile-or-just-profile/) - First of all both, the ~/.bashrc and the ~/.bash_profile file or like in SUSE Linux just ~/.profile, are configuration files used by the Bash shell to initialize environments for different types of shell sessions. While both files serve a similar purpose, they are used in different contexts depending on the type of session you are
- [Install VMWare Tools for pfSense in vSphere](https://blog.matrixpost.net/install-vmware-tools-for-pfsense-in-vsphere/) - For pfSense we can't install the VMware Tools as usual in vSphere and the link below will not work. Fortunately there is an open source implementation of VMware Tools for pfSense by the open-vm-tools project, which will provide with open-vm-tools a set of services and modules, that enable several features in VMware products for better management
- [Set up a lean Branch Office Network without any Servers and DCs inside by using an IPSec S2S VPN Tunnel connected with the Headquarters Network](https://blog.matrixpost.net/set-up-a-lean-branch-office-network-without-any-servers-and-dcs-inside-by-using-an-ipsec-dynamic-route-based-s2s-vpn-tunnel-connected-with-the-headquarters-network/) - If you want to set up a network in a branch office and don't want to deploy any servers inside this network, even no domain controller, for several reasons like: minimize hardware costs no maintenance enhance security -> no risk regarding access to the physical servers, especially writeable domain controllers no place to install the
- [Numbering the IPv4 and IPv6 WAN Link between ISP and Customer](https://blog.matrixpost.net/numbering-the-ipv4-and-ipv6-wan-link-between-isp-and-customer/) - In this post I want to show the different alternatives Internet Service Provider (ISP) can use to numbering their IPv4 and IPv6 point-to-point WAN link for their customers. IPv4 In most cases small Offices will get a /29 subnet (IPv4 address pool) which leaves less the network, broadcast and gateway address, 5 public IPs for free
- [Azure VNet Routing](https://blog.matrixpost.net/azure-vnet-routing/) - In this post I want to summarize some information about how routing in Azure works. This topic is well documented from Microsoft. Virtual network traffic routingLearn about how Azure routes traffic between Azure, on-premises, and Internet resources. Azure automatically creates a route table for each subnet within an Azure virtual network and adds system default
- [AWS VPC Routing](https://blog.matrixpost.net/aws-vpc-routing/) - In this post I want to summarize some information about how routing in AWS works. This topic is well documented from AWS. Virtual Private Cloud (VPC) A virtual private cloud (VPC) is a virtual network dedicated to your AWS account. It is logically isolated from other virtual networks in the AWS Cloud. You can launch your AWS
- [Google Cloud VPC Routing](https://blog.matrixpost.net/google-cloud-vpc-routing/) - In this post I want to summarize some information about how routing in Google Cloud works. This topic is well documented from Google. Google Cloud VPC networks A Virtual Private Cloud (VPC) network is a virtual version of a physical network, implemented inside of Google's production network, using Andromeda. A VPC network provides the following: Provides
- [UDP hole punching, ICE, STUN & TURN](https://blog.matrixpost.net/udp-hole-punching-stun-turn/) - Today I want to take a closer look about what UDP hole punching is and how it works. Commonly it is used by peer-to-peer software where clients homed in the internal network and sitting behind a NAT firewall, needs to communicate directly with other remote clients also sitting behind a NAT firewall. By default these
- [IPSec policy-based  S2S VPN Tunnel between pfSense and an Azure VNet](https://blog.matrixpost.net/ipsec-policy-based-s2s-vpn-tunnel-between-pfsense-and-an-azure-vnet/) - In a previous post we configured an IPSec route-based S2S VPN Tunnel between pfSense and an Azure VNet. Now we do the same but instead route-based we set up a policy-based IPSec S2S VPN Tunnel between pfSense and an Azure VNet. For this post I use a new Azure Directory so I have to create
- [pfSense | Site-to-Site IPSec VPN | Subnets on each Site are identical](https://blog.matrixpost.net/pfsense-site-to-site-ipsec-vpn-same-subnet-on-each-site/) - If you want to connect subnets from two sites over an IPSec Site-to-Site VPN and both subnets on each site are identical, you have to use 1:1 NAT aka BINAT (Bidirectional NAT) to overcome this pitfall. Imagine the following situation. You want to connect Site A over an IPSec Site-to-Site VPN Tunnel with Site B.
- [Set up a Perimeter Network with public IPv4 Addresses and pfSense](https://blog.matrixpost.net/set-up-a-perimeter-network-with-public-ipv4-addresses-and-pfsense/) - In this post we will see how to set up a perimeter network with public IPv4 Addresses and pfSense. The configuration and routing for the back firewall which separates the perimeter network with the internal LAN, I will not go through and is not a topic of this post. For IPv6 you can read my
- [Set up an internal LAN and Perimeter Network with public IPv6 Addresses and pfSense](https://blog.matrixpost.net/set-up-your-internal-lan-and-perimeter-network-with-public-ipv6-addresses-and-pfsense/) - In this post we will see how to set up an internal LAN and perimeter network with public IPv6 addresses, so called IPv6 global unicast addresses. This is nearly the same as in one of my last posts about to set up your internal perimeter network with public IPv4 addresses. But this time we also
- [Convert pfSense into a Routing Only Platform](https://blog.matrixpost.net/convert-pfsense-into-a-routing-only-platform/) - If you want to use pfSense just as a router to connect for example two different internal subnets, you need to disable all packet filtering as follows. Go to System --> Advanced --> Firewall & NAT and scroll down to the Advanced options. Check Disable Firewall This converts pfSense into a routing only platform!This will
- [Set up IPSec  route-based S2S VPN between pfSense and AWS VPC](https://blog.matrixpost.net/ipsec-route-based-s2s-vpn-between-pfsense-and-aws-vpc/) - In this post I want to show how you can set up an IPSec route-based S2S VPN between your AWS VPC and your on-premise network by using pfSense. A Site-to-Site VPN connection on Amazon side is either an AWS Classic VPN connection or an AWS VPN connection. Any new Site-to-Site VPN connection that you create
- [Set up WireGuard Point-to-Site VPN on pfSense](https://blog.matrixpost.net/set-up-wireguard-point-to-site-vpn-on-pfsense/) - Today I want to show how to set up a Point-to-Site VPN (P2S) by using WireGuard on pfSense. In my post below I will also show how to set up a Site-to-Site VPN (S2S) by using WireGuard on pfSense. Actually WireGuard doesn't have a classic Point-to-Site VPN or Client and Server concept, all participants (peers)
- [Set up WireGuard Site-to-Site VPN on pfSense](https://blog.matrixpost.net/set-up-wireguard-site-to-site-vpn-on-pfsense/) - In my last post I was showing how to set up a Point-to-Site VPN (P2S) by using WireGuard on pfSense. Now in this post I want to show how to set up a Site-to-Site VPN (S2S) by using WireGuard on pfSense. Please note that the WireGuard pfSense add-on package is still under EXPERIMENTAL state as
- [Set up OpenVPN (pfSense) Point-to-Site (P2S) with RADIUS/Active Directory Authentification](https://blog.matrixpost.net/openvpn-point-to-site-p2s-connection-over-radius-active-directory-authentification/) - Because of the annoying Windows 10 DNS LEAK problem in combination with the native windows vpn, I decided to setup an OpenVPN Applicance with pfSense to provide an alternative VPN Dial-In Gateway which addressed already the problem. You will find many articles on how to avoid this by set a couple of group policy settings
- [Set up a RADIUS Server on Windows Server 2019 for 802.1X Wireless Connections](https://blog.matrixpost.net/set-up-a-radius-server-on-windows-server-2019-for-802-1x-wireless-connections/) - In this post I will show how to set up a RADIUS server on Windows Server 2019 to provide 802.1X Wireless Connections through wireless access points. Actually I want to set up a RADIUS server for IEEE 802.11 wireless networks, but its nearly the same as for wired (Ethernet) networks besides the NAS Port Type
- [Wireless 802.11 RADIUS Authentication over Site-to-Site IPSec VPN Tunnel failed](https://blog.matrixpost.net/wireless-802-11-radius-authentication-over-site-to-site-ipsec-vpn-tunnel-failed/) - In my post below I will show how to set up a lean branch office network without any servers and DCs inside, by using an IPSec S2S VPN tunnel connected with the headquarters network. In order to provide a WPA2/3-Enterprise WLAN by using the RADIUS server from the headquarters network, over an IPSec S2S route-based
- [How to reveal hidden WLANs (Hidden SSID)](https://blog.matrixpost.net/how-to-reveal-hidden-wlans-hidden-ssid/) - By default all WLAN access points send out their SSIDs in beacon frames as shown below in the screenshot. These beacon frames belonging to the 802.11 Management Frames and will announce the presence of a wireless LAN and to synchronize the members with the access point. The access point here is operating in infrastructure mode
- [What is Azure Arc-enabled servers?](https://blog.matrixpost.net/what-is-azure-arc-enabled-servers/) - By using Azure Arc-enabled servers you can manage Windows and Linux on-premises servers (virtual machines or physical servers) and virtual machines hosted by other cloud providers directly in Azure. These machines in context of Azure Arc are so called hybrid machines. The management of these hybrid machines in Azure Arc is by design the same as
- [What is PowerShell Dot Sourcing?](https://blog.matrixpost.net/what-is-powershell-dot-sourcing/) - Dot sourcing in PowerShell is a method used to execute a script or a function in the current scope rather than in a new, separate scope (which is the default behavior). This allows the variables, functions, and aliases defined in the script to persist in the current session after the script finishes execution. Normally, when
- [What's the Difference in Linux between the Commands SU - vs. SU without the Dash](https://blog.matrixpost.net/whats-the-difference-in-linux-between-the-commands-su-vs-su-without-the-dash/) - The difference between su - and su in Linux is primarily related to how they handle the user environment after switching users. su - (with a dash)This command switches to the specified user and loads the target user's full login environment, similar to how it would be if the user logged in directly.
- [Changing SSH Port on SELinux - Error: Bind to port failed: Permission denied](https://blog.matrixpost.net/changing-ssh-port-on-selinux-error-bind-to-port-failed-permission-denied/) - In case you want to change the default SSH port 22 on your system and you are running into the following error: Error: Bind to port failed: Permission denied You will probably using a Linux distribution on which SELinux (Security-Enhanced Linux) is enabled. Security-Enhanced Linux (SELinux) is a Linux kernel security module that provides a mechanism for supporting access control security
- [Using Match Directives in SSH (Secure Shell)](https://blog.matrixpost.net/using-match-directives-in-ssh/) - The Match directive in SSH (Secure Shell) configuration files is used to apply specific settings conditionally based on criteria such as user, group, host, or address. It provides more flexibility by allowing different SSH behaviors depending on the context of the connection. There are two main SSH configuration files where the Match directive is used:
- [Setup Postfix Mailserver with Dovecot and MySQL on Ubuntu 18.04.4 LTS Step by Step](https://blog.matrixpost.net/setup-postfix-mailserver-with-dovecot-and-mysql-on-ubuntu-18-04-4-lts-step-by-step/) - Because of changing my hosting provider for my virtual machine and domains, I had to setup my postfix mailserver on a new Ubuntu 18.04.4 LTS virtual machine. So I thought, I could document the the whole setup process in a step by step guide. Installing and configuring Postfix First we need to install postfix which
- [Set up a Central Log Server with Rsyslog on Ubuntu](https://blog.matrixpost.net/set-up-a-central-log-server-with-rsyslog-on-ubuntu/) - In another post, I described how to set up a central log server with the syslog-ng daemon on FreeBSD, this time I want to do the same but now using the rsyslog daemon on Ubuntu. The rocket-fast Syslog Serverhttps://www.rsyslog.com/RSyslog Documentationhttps://www.rsyslog.com/doc/master/index.html Determine if Rsyslog is installed and enabled already be default Because I am using here
- [Upgrade PostgreSQL from version 9 to 10 on Ubuntu](https://blog.matrixpost.net/upgrade-postgresql-from-version-9-to-10-on-ubuntu/) - Determine actual version$ sudo -u postgres psqlExit withpostgres=# q First install new version To install the new version, I want especially version 10, I will first add the PosgreSQL Apt Repository to my Ubuntu installation as follows. https://www.postgresql.org/download/linux/ubuntu/ # Create the file repository configuration: sudo sh -c 'echo "deb http://apt.postgresql.org/pub/repos/apt $(lsb_release -cs)-pgdg main" > /etc/apt/sources.list.d/pgdg.list'
- [Set up Apache Superset on Ubuntu using Docker Compose](https://blog.matrixpost.net/set-up-apache-superset-on-ubuntu-using-docker-compose/) - In this post I will set up an Ubuntu 20.04.1 LTS VM in order to install Docker and Compose to deploy a superset container image. I will use the following documentation to set up the VM. This is already well documented but I want to bring all documentation in one post together. Installing Superset Locally
- [Set up MediaWiki on Ubuntu 20.04.3 LTS](https://blog.matrixpost.net/set-up-mediawiki-on-ubuntu-20-04-3-lts/) - In this post I want to go through the separate steps to set up the open source software MediaWiki on Ubuntu 20.04.3 LTS. The steps we need to do are: install and configure the Apache web server install and configure the MySQL server install PHP 8.0 download and extract MediaWiki to the web root folder
- [Set up ModSecurity (Libmodsecurity | ModSecurity v3 project) for Apache on Ubuntu](https://blog.matrixpost.net/set-up-modsecurity-libmodsecurity-modsecurity-v3-project-for-apache-on-ubuntu/) - In this post I will install and configure Libmodsecurity which is a complete rewrite of the ModSecurity platform (aka ModSecurity v2.x) and functions as an Open Source Web Application Firewall (WAF). Libmodsecurity is a complete rewrite of the ModSecurity platform. When it was first devised the ModSecurity project started as just an Apache module. Over
- [Set up a SFTP Chroot Jail on Ubuntu](https://blog.matrixpost.net/set-up-a-sftp-chroot-jail/) - If you want to lock user's they want to upload, download and edit files from a web root directory, so that they cannot access folders outside from that, you can set up a SFTP Chroot Environment on your Linux server. For this post I will use Ubuntu 20.04.3 LTS with OpenSSH version 8.2p1. OpenSSH supports
- [Install Ubuntu as Hyper-V Generation 2 Virtual Machine](https://blog.matrixpost.net/install-ubuntu-as-hyper-v-generation-2-virtual-machine/) - In order to install Ubuntu as a Generation 2 Hyper-V virtual machine, you have to switch the Secure Boot Template to Microsoft UEFI Certificate Authority as follows. Ubuntu guest operating system supportGeneration 2 is supported for:Ubuntu 20.04Ubuntu 18.04Ubuntu 16.04Ubuntu 14.04Source: https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/plan/should-i-create-a-generation-1-or-2-virtual-machine-in-hyper-v#ubuntu-guest-operating-system-support What are the advantages of using generation 2 virtual machines?- Secure Boot- Larger boot
- [Enable TLS for Postfix on Ubuntu](https://blog.matrixpost.net/enable-tls-for-postfix-on-ubuntu/) - Regarding the Postfix documentation, TLS support is turned off by default, so you can start using Postfix as soon as it is installed. On newer Ubuntu versions TLS is enabled by default and these lines:(You can check your version by using the command postconf mail_version)Besides checking directly the main.cf file, you can also check the
- [Set up SPF and DKIM for Postfix on Ubuntu](https://blog.matrixpost.net/set-up-spf-and-dkim-for-postfix-on-ubuntu/) - In this post I want to show how to set up the SPF (Sender Policy Framework) and DomainKeys Identified Mail (DKIM) for postfix running on Ubuntu. Both of them are used in combination with DMARC (Domain-based Message Authentication, Reporting and Conformance) to combat against E-Mail spoofing and phishing. DMARC itself is just a DNS TXT record which
- [Set up ownCloud on Ubuntu](https://blog.matrixpost.net/set-up-owncloud-on-ubuntu/) - Today I wanna show how to set up ownCloud (release 10.11) on Ubuntu 22.04.1 LTS. ownCloud is an open-source file sync, share and content collaboration software that lets teams work on data easily from anywhere, on any device.https://owncloud.com/product/ I will use for this post a new minimal Ubuntu 22.04.1 LTS installation, so I have to install
- [Set up DMARC (verification) for Postfix on Ubuntu](https://blog.matrixpost.net/set-up-dmarc-for-postfix-on-ubuntu/) - Last week I wrote a post about how to set up SPF and DKIM for Postfix on Ubuntu, today I want to show how to set up DMARC for Postfix on Ubuntu. DMARC extends two existing email authentication mechanisms, Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM). Therefore if not already done, in order
- [Manage Systemd Services with Systemctl on Ubuntu](https://blog.matrixpost.net/manage-systemd-services-with-systemctl-on-ubuntu/) - Systemd is primarily an init system for Linux operating systems. It's main task is to initialize the components that must be started after the Linux kernel is booted. An init system start system services, load drivers, bring up network interfaces and more at startup, allowing for the system to reach a usable state. These components
- [Set up Redis Object Cache on Ubuntu for WordPress and the LiteSpeed Cache Plugin](https://blog.matrixpost.net/set-up-redis-object-cache-on-ubuntu-for-wordpress-and-the-litespeed-cache-plugin/) - In this post I want to show how to set up a persistent object cache on a virtual machine (Ubuntu) for WordPress by using the Redis Object Cache and the LiteSpeed Cache WordPress plugin. A persistent object cache are server daemons like Redis or Memcached and they provide an in-memory data structure store to cache
- [Run a .NET Core C# Console App on Ubuntu](https://blog.matrixpost.net/run-a-net-core-console-app-on-ubuntu/) - In this post we will see how we can run a .NET Core Console App on Ubuntu. Therefore I will use a little C# console app which will just create a TCP/IP socket and waiting for incoming TCP/IP connections. Introduction In order to run .NET Core applications on Ubuntu, we first need to install the
- [Run your App as Unix Daemon in Ubuntu](https://blog.matrixpost.net/run-your-app-as-unix-daemon-in-ubuntu/) - In this post we will see how we can run a custom app (executable) as daemon (service) on Ubuntu. To manage these daemons, Ubuntu will using Systemd as init system since Ubuntu 15.04 beta. More about Systemd you will find in my following post. For the app (command), I will use a little C# console
- [Prefer IPv4 over IPv6 in Windows Networks](https://blog.matrixpost.net/prefer-ipv4-over-ipv6-in-windows-networks/) - By default Windows will prefer IPv6 over IPv4. Below you will see how you can change this behavior to prefer IPv4 over IPv6 in Windows. Default Address Selection for Internet Protocol version 6 (IPv6)In dual stack implementations, the destination address selection algorithm can consider both IPv4 and IPv6 addresses - depending on the available source
- [Mastering Network Configuration in SUSE Linux Enterprise Server](https://blog.matrixpost.net/master-network-configuration-in-sles/) - Configuring the network in SUSE Linux Enterprise Server (SLES) can be done using various methods, including through the command line, using YaST (Yet another Setup Tool), or by manually editing network configuration files. Below we will see each of them and how to do. Configuring the Network by using YaST To configure the hosts network
- [Install Skype for Business Server 2019 Step by Step](https://blog.matrixpost.net/step-by-step-how-to-install-a-skype-for-business-2019-environment-from-the-scratch/) - In this post I want to show step by step how you can set up Skype for Business Server 2019 in your on-premise network. Both Server Roles, Front End and Edge, are installed on Windows Server 2019 but you can also use Windows Server 2016. Install Skype for Business Prerequisites Front End Server Add-WindowsFeature RSAT-ADDS,
- [Linux Hard Link vs. Soft Link (Symlink, Symbolic Link)](https://blog.matrixpost.net/linux-hard-link-vs-soft-link-symlink/) - In order to understand the differences between a hard link and soft link in linux or in general Unix-like operating systems, we first have to understand the concept of Inodes and what a File exactly is. First a file in Unix-like operating systems is basically a link to an Inode. An Inode however is a
- [Enable Timestamps for Linux History Command](https://blog.matrixpost.net/enable-timestamps-for-linux-history-command/) - To show timestamps besides the listed commands when using the Linux history command, we first need to export the HISTTIMEFORMAT environment variable in Linux. The history command in Linux is a powerful utility that allows users to view and manage the command history of their terminal sessions. Every command executed in the terminal is stored
- [How to monitor VMware vSphere Environments in Checkmk](https://blog.matrixpost.net/how-to-monitor-vmware-vsphere-environments-in-checkmk/) - In my last post we saw how to set up Checkmk on SUSE Linux Enterprise Server 15 SP5, now in this post we will see how we can monitor VMware vSphere environments and Windows Clients in Checkmk. Checkmk includes built-in support for monitoring VMware vSphere environments. This integration allows Checkmk to gather data from VMware
- [Restore/Register a VM or VM Template in vSphere](https://blog.matrixpost.net/restore-register-a-vm-or-vm-template-in-vsphere/) - In case you lost a VM or VM template in vSphere when rebuilding the vCenter server from the scratch or when you removed them but they still exist on the disk and datastore, you can easily bring them back by register them in vSphere like shown below. Restore/Register a VM Template Navigate to the datastore
- [Regenerate Self-Signed ESXi Host Certificates after changing Hostname](https://blog.matrixpost.net/regenerate-self-signed-esxi-host-certificates-after-changing-hostname/) - By default the self-signed certificates on your ESXi hosts will have a common name of localhost.localdomain. So after changing the hostname of the ESXi hosts, you have to regenerate the self-signed certificates to ensure the correct common name is defined. This can be done by executing the following commands directly on the ESXi hosts SSH
- [Set up Split-Brain DNS in Active Directory](https://blog.matrixpost.net/set-up-split-brain-dns-in-active-directory/) - In this post we will see how we can set up split-brain DNS for Active Directory integrated DNS server and zones by using zone scopes and DNS Policy. In past this scenario required to maintain two different DNS servers, each providing services to each set of users, internal and external. Another configuration scenario for split-brain deployment is Selective Recursion Control for DNS name resolution. Split-brain
- [Automatically enroll Client Computer Certificates by using a GPO](https://blog.matrixpost.net/automatically-enroll-client-computer-certificates-by-using-a-gpo/) - To automatically enroll client computer certificates and deploy them to domain workstations and servers on the network, we can use a group policy as shown below. Before we create the group policy and deploy it to our workstations and servers in the network, we first need to configure the computer certificate template on our PKI
- [How Azure AD Privileged Identity Management works?](https://blog.matrixpost.net/how-azure-ad-privileged-identity-management-works/) - Privileged Identity Management (PIM) is a service in Azure Active Directory (Azure AD) which you can use to control and monitor access to Azure and Microsoft 365 resources. In a nutshell you can use Privileged Identity Management (PIM) to minimize high priviliged access to these resources. Privileged Identity Management provides time-based and approval-based role activation
- [Deleting Azure Recovery Services Vault failed](https://blog.matrixpost.net/deleting-azure-recovery-services-vault-failed/) - Azure Backup now provides security features to help protect backup data even after deletion. Therefore you can't just easily delete a recovery services vault and will run into an error when trying like shown below. In my case actually I wanted to delete a resource group and its resources which one of them was a
- [Linux LVM - Rename Logical Volumes](https://blog.matrixpost.net/linux-lvm-rename-logical-volumes/) - We can rename LVM logical volumes by using the lvrename command. Below I will rename the logical volume named data1 within my volume group named data_vg into data_1 for example. # lvrename /dev// /dev// # lvrename /dev/data_vg/data1 /dev/data_vg/data_1 So far the change is not reflected to the device mapper
- [Impact of DNS Primary Suffix and DNS Suffix Search List on the DNS Name Resolution](https://blog.matrixpost.net/impact-of-dns-primary-suffix-and-dns-suffix-search-list-on-the-dns-name-resolution/) - In this post I want to show what impact the DNS primary suffix and the DNS suffix search list had on the DNS name resolution. Introduction In order to show this and because I will use therefore a Windows Server 2022 server, I will first need to disable some alternative name resolution methods which is
- [What is Multicast DNS (mDNS) and how does it work?](https://blog.matrixpost.net/what-is-multicast-dns-mdns-and-how-it-works/) - Multicast DNS (mDNS) is a protocol used in network environments to resolve hostnames to IP addresses within small networks without the need for a dedicated DNS server. It is particularly useful in local area networks (LANs), such as home or office networks, where devices need to discover and communicate with each other dynamically. mDNS operates
- [Restore On-Premise Virtual Machines to Microsoft Azure by using Veeam Backup and Replication](https://blog.matrixpost.net/restore-on-premise-vms-to-microsoft-azure-by-using-veeam-backup-and-replication/) - In this post I want to show step by step how we can restore an on-premise virtual machine (Hyper-V or vSphere finally the same steps) to Microsoft Azure by using Veeam Backup and Replication. Veeam Backup and Replication offers seamless integration with Microsoft Azure, enabling organizations to extend their backup and recovery capabilities to the
- [Enroll Windows Computer into Microsoft Intune](https://blog.matrixpost.net/enroll-windows-computer-into-microsoft-intune/) - Microsoft Intune is a cloud-based endpoint management solution. It manages user access and simplifies app and device management across your many devices, including mobile devices, desktop computers, and virtual endpoints. You can manage users and devices, including devices owned by your organization and personally owned devices (BYOD). Microsoft Intune supports Android, Android Open Source Project (AOSP),
- [Set up and deploy BgInfo from Sysinternals in your Network](https://blog.matrixpost.net/set-up-and-deploy-bginfo-from-sysinternals-in-your-network/) - In this post we will see how we can set up and deploy BgInfo on the servers located in our on-premise network by using a group policy. BgInfo runs on Windows client system Windows 8.1 and higher and on Windows server system Windows Server 2012 and higher. About how to deploy BgInfo by using Microsoft
- [Set up and deploy BgInfo from Sysinternals by using Microsoft Intune](https://blog.matrixpost.net/set-up-and-deploy-bginfo-from-sysinternals-by-using-microsoft-intune/) - In this post we will see how we can set up and deploy BgInfo from Sysinternals on Windows devices by using Microsoft Intune. BgInfo runs on Windows client system Windows 8.1 and higher and on Windows server system Windows Server 2012 and higher. About how to deploy BgInfo in on-premise Active Directory networks by using a group policy, you can read my following
- [Veeam Backup and Replication v9.5 Installation on Windows Server 2022 - Error occurred during certificate processing](https://blog.matrixpost.net/veeam-backup-and-replication-installation-error-occurred-during-certificate-processing/) - In case you will also run into the following error about the Veeam Backup Server Certificate when installing Veeam Backup and Replication, you can use the following workaround to finally complete the installation successfully. So far I encountered this issue just when using the old version 9.5 on Windows Server 2022. When you configure the
- [Set up a 2-tier PKI in Active Directory Certificate Services (AD CS) - Part 2](https://blog.matrixpost.net/set-up-a-2-tier-pki-in-active-directory-certificate-services-ad-cs-part-2/) - In this part of my blog post series we will set up the standalone offline Root CA which is not domain joined. In the event that a subordinate CA is compromised, having an offline root CA provides a mechanism for mitigating the impact. The offline root CA can be used to revoke the compromised subordinate
- [Set up a 2-tier PKI in Active Directory Certificate Services (AD CS) - Part 3](https://blog.matrixpost.net/set-up-a-2-tier-pki-in-active-directory-certificate-services-ad-cs-part-3/) - In this part of my blog post series we will set up the Subordinate CA (Intermediate CA) which will be domain joined. Subordinate CAs are responsible for issuing certificates directly to end-entities such as users, computers, and devices. Subordinate CAs are cryptographically signed by a parent CA, which is often the root CA. As a result, systems that
- [Set up Windows Hello for Business Hybrid Azure AD joined Devices](https://blog.matrixpost.net/set-up-windows-hello-for-business-hybrid-azure-ad-joined-devices/) - In one of my last posts you will see how to disable the mandatory Windows Hello for Business Prompt (provisioning) on Azure AD joined devices and also get detailed information about what's the difference between Windows Hello (convenient sign-in) and Windows Hello for Business. Introduction In this post we will see, how to set up Windows
- [Set up Microsoft Defender for Endpoint](https://blog.matrixpost.net/set-up-microsoft-defender-for-endpoint/) - In this post I will show what Microsoft Defender for Endpoint is, how we can integrate it with Microsoft Intune as a Mobile Threat Defense solution and how we can onboard devices either from Intune or directly to Microsoft Defender for Endpoint When you integrate Intune with Microsoft Defender for Endpoint, you can take advantage
- [SFTP / SSH Server unter Windows einrichten mit Cygwin | Step by Step](https://blog.matrixpost.net/sftp-ssh-server-unter-windows-einrichten-mit-cygwin-step-by-step/) - Als erstes müssen wir Cygwin herunterladen und auf dem Windows System installieren. Quelle: https://cygwin.com/setup.exe INFOs über Cygwin Mit Cygwin [ˈsɪɡwɪn] lassen sich Programme, die üblicherweise unter POSIX-Systemen wie GNU/Linux, BSD und Unix laufen, auf Microsoft Windows portieren. Es ist eine Kompatibilitätsschicht, die die Unix-API für verschiedene Versionen von Microsoft Windows zur Verfügung stellt, auf deren
- [Configure Skype for Business Enterprise Voice with a SIP-Trunk (DeutschlandLAN SIP Trunk) and the Office Master Gate from Ferrari electronic AG | Step by Step](https://blog.matrixpost.net/configure-skype-for-business-enterprise-voice-with-a-sip-trunk-deutschlandlan-sip-trunk/) - Today I want go through the steps to activate enterprise voice on Skype for Business Server with a SIP Trunk from Telekom, DeutschlandLAN SIP-Trunk. Add a Mediation Server to your Deployment First we had to add a Mediation Server in the Toplogy Builder from Skype for Business, in this case we add to the single
- [Skype for Business Call Forwarding and Unified Messaging with Exchange 2013 | Step by Step](https://blog.matrixpost.net/skype-for-business-call-forwarding-and-unified-messaging-with-exchange-2013-step-by-step/) - If you want to forward calls you can set this in the options of the SFB Client. So far we are not able to forward calls to our Voicemail in Exchange. First we had to configure unified messaging on the Exchange Server and then had to activate our exchange account for unified messaging.
- [Skype for Business Conferencing | Step by Step](https://blog.matrixpost.net/skype-for-business-conferencing-step-by-step/) - In the menu Conferencing you can configure conferencing rooms. Here for testing I only configured the menu Dial-In Access Number. For basic function that is enough. The other menus gives you more options for fine tuning. I think these settings are self-explaining, you had to set a free number of your phone number block and a
- [What is the WoW64 (Windows 32-bit on Windows 64-bit) Subsystem?](https://blog.matrixpost.net/wow64-windows-32-bit-on-windows-64-bit-subsystem/) - Have you ever wondered about the System32 and SysWOW64 folder on Windows 64-bit operating systems? To get straight to the point, the System32 folder will contain the 64-bit library and executable files. WoW64 (Windows 32-bit on Windows 64-bit) is a subsystem of the Windows operating system to run 32-bit applications on 64-bit Windows. The reason why the name for this
- [Troubleshooting Skype for Business external sign-in issues and examine the client sign-in process](https://blog.matrixpost.net/troubleshooting-skype-for-business-external-sign-in-issues-and-examine-the-whole-client-sign-process/) - Recently I had to deal with sign-in issues a few external sfb desktop clients on a non-regular basis experience. So this is always an ungrateful situation and costs a lot of time digging into it, especially since the skype for business sign-in process is very complex. Internal the affected clients can sign-in without any issues.
- [Azure Active Directory Domain Services (AADDS) | Domain Join for external Windows Client Workstations with P2S VPN at Logon Screen established](https://blog.matrixpost.net/azure-active-directory-domain-services-aadds-domain-join-for-external-windows-client-workstations-with-p2s-vpn-at-logon-screen-established/) - First I must tell you, that even it is possible to join your windows client workstations to AADDS, Microsoft itself does not recommend this deployment! They recommend for windows 10 devices Azure AD Join Azure AD Join is better suited for mobile clients (e.g. tablets, laptops) Supports BYO devices Devices are managed using MDM (Intune)
- [Co-Management with System Center Configuration Manager  (SCCM 1910) and Microsoft Intune](https://blog.matrixpost.net/co-management-with-system-center-configuration-manager-sccm-1910-and-azure-intune/) - To be able to manage your clients not only with System Center Configuration Manager and internal, you can setup co-management in SCCM. You will find below a new post about the successor now named Microsoft Endpoint Configuration Manager. With co-management you can still manage your clients with SCCM but also with Micorosft Intune for Mobile
- [Replace the self-signed Remote Desktop Certificate with an PKI Certificate from your internal CA](https://blog.matrixpost.net/replace-self-signed-remote-destkop-certificate-with-an-e-g-pki-certficiate-from-your-internal-ca/) - Copy the Thumbprint of the Certificate you want to use for the RDP Connection and copy it to the $Hash variable. $TSGeneralSetting = Get-WmiObject "Win32_TSGeneralSetting" -ComputerName "" -Namespace rootcimv2terminalservices -Filter "TerminalName='RDP-tcp'" $Hash = "" $TSGeneralSetting.SSLCertificateSHA1Hash = $Hash $TSGeneralSetting.put() Or via command line wmic /namespace:\rootcimv2TerminalServices PATH Win32_TSGeneralSetting Set SSLCertificateSHA1Hash="" After fire off
- [SSO Single-Sign-On to your onPremise RDS Remote Desktop Services 2016/2019 Environment](https://blog.matrixpost.net/sso-single-sign-on-to-your-onpremise-rds-remote-desktop-services-2016-2019-environment/) - Normally, if you want to access a remote desktop services environement, first you have to logon to the RD Web Access Page, therefore you will be prompted with a logon dialog where you have to enter your username and password. After that logon, you will see depending on the deployment, more or less remoteapp programms.
- [RDS Remote Desktop Services HTML 5 Client Setup](https://blog.matrixpost.net/rds-remote-desktop-services-html-5-client-setup/) - If you want to allow users to access your remote apps of your RDS Deployment without the need of an compatible RDP client, then you can setup the Remote Desktop web client for your users.The following prerequisites must match: RD Gateway, an RD Connection Broker, and RD Web Access running on Windows Server 2016 or
- [Move Azure AD Connect to another Server](https://blog.matrixpost.net/move-azure-ad-connect-to-another-server/) - In this post we will move an existing Azure AD Connect Installation to a new Windows Server 2019 which will be dedicated only for the synchronisation between our onPrem Active Directory and Azure Active Directory. Therefore we only install SQL Server 2019 and Azure AD Connect on it.By default a SQL Server 2012 Express LocalDB
- [Local user accounts in Windows](https://blog.matrixpost.net/local-user-accounts-in-windows/) - In this post I want to summarize an overview from Microsoft about local accounts in windows. Local Accountshttps://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/local-accounts Local user accounts are stored locally on the server. These accounts can be assigned rights and permissions on a particular server, but on that server only. Local user accounts are security principals that are used to secure
- [Set up Group Managed Service Accounts (gMSA) vs. Standalone Managed Service Accounts (sMSA)](https://blog.matrixpost.net/set-up-group-managed-service-accounts-gmsa/) - Today we want to set up and pay attention to Group Managed Service Accounts (gMSA) who was introduced in Windows Server 2012 and Windows 8. gMSA's are specific user accounts in Active Directory and extends the successor Standalone Managed Service Accounts (sMSA). A great documentation with technical background and details about sMSA you will find
- [Configure Windows Service Accounts and Permissions exemplary on SQL Server 2019](https://blog.matrixpost.net/configure-windows-service-accounts-and-permissions-exemplary-on-sql-server-2019/) - Current windows operating systems provide a wide choice of accounts you can use to run local services. Today I want to pay attention to the individual accounts you can use as service accounts to run the different SQL Server 2019 services. Detailed documentation about local user accounts in Windows you will also find in my
- [msiexec - Uninstall broken Installations](https://blog.matrixpost.net/msiexec-uninstall-broken-installations/) - Sometimes you encounter some trouble regarding uninstalling broken programs and components. In this case we can try to use the msiexec tool. msiexec.exehttps://docs.microsoft.com/en-us/windows-server/administration/windows-commands/msiexec Provides the means to install, modify, and perform operations on Windows Installer from the command line. msiexec.exe [/i][/a][/j{u|m|/g|/t}][/x] To install a package named example.msi from the C: drive, using a normal installation process, type:
- [Deploy WordPress in Azure App Service (Web App) with staging slots for the production and development environment](https://blog.matrixpost.net/deploy-wordpress-in-azure-app-service-with-staging-slots-for-the-production-and-development-environment/) - In this post you will see how to setup an Azure App Service plan with an Azure App Service (Web App) consisting of two deployment slots to change the production and development instance of your WordPress site. For this setup we also use an Azure Database for MySQL Server and there we create two databases,
- [Configuring a Syslog Server on pfSense with the syslog-ng Package](https://blog.matrixpost.net/configuring-a-syslog-server-on-pfsense-with-the-syslog-ng-package/) - pfSense by default logs data from different components running on it. These files are a fixed size and never grow. As a consequence of this, the log will only hold a certain amount of entries and the old entries are continually pushed out of the log as new entries are added. If you need log
- [Set up an Azure SQL Managed Instance and connect over a S2S IPSec VPN from onPrem network](https://blog.matrixpost.net/set-up-an-azure-sql-managed-instance-and-connect-to-it-over-a-s2s-ipsec-vpn-from-the-onprem-network/) - In this post you will see how to set up an Azure SQL Managed Instance and connect to over your onPrem network without a public endpoint published in Azure. Install Azure SQL Managed Instance (PaaS) In the Databases category select Azure SQL Managed Instance For this LAB environment I throttel the controller for vCores and
- [Microsoft Windows SDK](https://blog.matrixpost.net/microsoft-windows-sdk/) - Microsoft Windows SDK, and its predecessors Platform SDK, and .NET Framework SDK, are software development kits (SDKs) from Microsoft. Windows SDK provides tools, compilers, headers, libraries, code samples, and a new help system that developers can use to create applications that run on Microsoft Windows. You can use the Windows SDK to write applications using
- [.NET - How the Runtime Locates Assemblies](https://blog.matrixpost.net/net-how-the-runtime-locates-assemblies/) - This topic is well documented from Microsoft and I only want to summarize the key points. You will find the complete documentation under How the Runtime Locates Assemblieshttps://docs.microsoft.com/en-us/dotnet/framework/deployment/how-the-runtime-locates-assemblies To successfully deploy your .NET Framework application, you must understand how the common language runtime locates and binds to the assemblies that make up your application. By
- [Set up a Central Log Server with syslog-ng daemon on FreeBSD](https://blog.matrixpost.net/set-up-a-central-monitoring-server-with-syslog-ng-on-freebsd/) - In this post I want to show how you can set up a central log server in your network by using the syslog-ng on FreeBSD. Install syslog-ng daemon First we need to install the syslog-ng package on FreeBSD. # pkg install syslog-ng Next we have to shutdown the default FreeBSD syslogd daemon and disable the
- [Migration from onPremise to Office 365 - Step by Step - Part 1 - Azure AD Connect](https://blog.matrixpost.net/migration-from-exchange-and-skype-for-business-onpremise-to-office-365-exchange-hybrid-classic-full-step-by-step/) - You will find many blogs in web describing how to migrate from on-premise to Office 365, but most of them focused either on Exchange or Skype for Business. Therefore I want to go through all necessary steps to migrate Exchange and Skype for Business onPrem to Office 365, futher we will see how to migrate
- [pfSense enable Logging for Firewall Rules to  log internal Client IPs](https://blog.matrixpost.net/pfsense-enable-logging-for-firewall-rules-to-log-internal-client-ips/) - By default for outbound internet traffic with NAT you won't see the internal client ip addresses in the firewall logs of pfSense. pfSense by default only will log the NAT address and destination address. So if you want to check and see which internal client was connected to a specific internet destination, you have to
- [Migration from onPremise to Office 365 - Step by Step - Part 2- Exchange onPrem to Exchange Online (Exchange Hybrid Classic Full)](https://blog.matrixpost.net/migration-from-exchange-and-skype-for-business-onpremise-to-office-365-exchange-online-and-teams-step-by-step-part-2/) - In Part 2 we will see how to migrate from Exchange onPrem to Exchange Online. This Blog Post Series consists of 6 parts. So if you missed one check them out as follows. This post is split into multiple partsPart 1 ... will cover the prerequisites like synchronize your onPrem users to Office 365 with
- [Migration from onPremise to Office 365 - Step by Step - Part 3- Move Users from Exchange onPrem to Exchange Online](https://blog.matrixpost.net/migration-from-exchange-and-skype-for-business-onpremise-to-office-365-exchange-online-and-teams-step-by-step-part-3/) - In Part 3 we will see how to move users from Exchange onPrem to Exchange Online. This Blog Post Series consists of 6 parts. So if you missed one check them out as follows. This post is split into multiple partsPart 1 ... will cover the prerequisites like synchronize your onPrem users to Office 365
- [Migration from onPremise to Office 365 - Part 4 -Troubleshoot Exchange Hybrid](https://blog.matrixpost.net/migration-from-exchange-and-skype-for-business-onpremise-to-office-365-exchange-online-and-teams-step-by-step-part-4/) - In Part 4 we will see how to troubleshoot Exchange Hybrid. This Blog Post Series consists of 6 parts. So if you missed one check them out as follows. If you encounter the error HCW8064 or HCW8110 after finishing the Hybrid Configuration Wizard (HCW), you can also check out my following post. This post is
- [External Identities in Azure Active Directory](https://blog.matrixpost.net/external-identities-in-azure-active-directory/) - In this post I want to accumulate all necessary informations I found about External Identities in Azure AD for B2B and B2C collaboration.Microsoft has well documented this topic, so I only want to summarize and point out the key functions. External Identities documentation https://docs.microsoft.com/en-us/azure/active-directory/external-identities/ External Identities is a set of capabilities that enables organizations to
- [Migration from onPremise to Office 365 - Step by Step - Part 5 - Skype for Business onPrem to Skype for Business Online and Teams](https://blog.matrixpost.net/migration-from-onpremise-to-office-365-step-by-step-part-5-skype-for-business-onprem-to-skype-for-business-online-and-teams/) - In Part 5 we will migrate our Skype for Business onPrem user to Skype for Business Online and Teams. This Blog Post Series consists of 6 parts. So if you missed one check them out as follows.. This post is split into multiple partsPart 1 ... will cover the prerequisites like synchronize your onPrem users
- [Manage Azure and Microsoft 365 services with PowerShell and CLI](https://blog.matrixpost.net/manage-azure-and-office-365-with-powershell/) - Most of the points in Azure and Office 365 you can administrate with their management web portals, but for some stuff and details you had to use the PowerShell or CLI, not to mention if you want to automate some processes. Azure PowerShell documentationhttps://docs.microsoft.com/en-us/powershell/azure/?view=azps-5.5.0Azure PowerShell is a set of cmdlets for managing Azure resources directly
- [SQL Server Integration Services (SSIS) Basics - Installation](https://blog.matrixpost.net/sql-server-integration-services-ssis-basics-installation/) - Today I want to go through the steps to install the SQL Server Data Tools (SSDT) and SQL Server Integrations Services Projects. Download SQL Server Data Tools (SSDT) for Visual Studiohttps://docs.microsoft.com/en-us/sql/ssdt/download-sql-server-data-tools-ssdtChanges in SSDT for Visual Studio 2019The core SSDT functionality to create database projects has remained integral to Visual Studio.With Visual Studio 2019, the required
- [SQL Server Integration Services (SSIS) Basics - Script Task](https://blog.matrixpost.net/sql-server-integration-services-ssis-basics-script-task/) - I will using SQL Server 2019 and Visual Studio 2019 with SQL Server Integrations Services Projects installed to demonstrate the SSIS Basics - Script Task. Create first a simple Hello World SSIS Project with a Script Task Drag a Script Task to the Control Flow. Double-click on the Script Task and optional rename it to
- [SQL Server Integration Services (SSIS) Basics - Load Data from a MySQL Database into SQL Server](https://blog.matrixpost.net/sql-server-integration-services-ssis-basics-load-data-from-a-mysql-database-into-sql-server/) - I will using SQL Server 2019 and Visual Studio 2019 with SQL Server Integrations Services Projects installed to demonstrate SSIS Basics - Load Data from a MySQL Database into SQL Server. To load data from a remote MySQL Database source into a Microsoft SQL Server Database and SSIS, first you need to install the MySQL
- [Create a C# Console App (.NET Framework) to export Mail Attachments from an Exchange Mailbox](https://blog.matrixpost.net/create-a-c-console-app-net-framework-to-export-mail-attachments-from-an-exchange-mailbox/) - First we need to install two Exchange Assemblies with the NuGet Package Manager, in order to have an API to access the Exchange Web Services (EWS) and therefore have access to an Exchange Mailbox. So right-click on your Project and from the context menu click on Manage NuGet Packages ... Search for Exchange Web Services
- [Accessing Azure Storage Account File Shares from C# Applications](https://blog.matrixpost.net/accessing-azure-storage-account-file-share-from-c-applications/) - Azure Storage File Shares client library for .NET - Version 12.4.0https://docs.microsoft.com/en-us/dotnet/api/overview/azure/storage.files.shares-readmeAzure File Shares offers fully managed file shares in the cloud that are accessible via the industry standard Server Message Block (SMB) protocol. Azure file shares can be mounted concurrently by cloud or on-premises deployments of Windows, Linux, and macOS. Additionally, Azure file shares can
- [Using List Tuples in C#](https://blog.matrixpost.net/using-list-tuples-in-c/) - In most cases for storing data using a generic List over an array is more suitable and lists offers more functionality than an array. Also you can store different data types in a list in contrast to an array where all data should have the same data type. If you want replace multi-dimensional arrays you
- [Using an array with a custom data type in C#](https://blog.matrixpost.net/using-a-custom-array-in-c/) - Generally an array cannot store data from different types like int and string as in contrast to lists. Therefore in most cases you should prefer to use a generic List described in my following post In case you want to use an array to store data from different types, you first need to create a
- [Using a generic List with a custom data type in C#](https://blog.matrixpost.net/using-a-generic-list-with-a-custom-data-type-in-c/) - In my previous post I described how to create an array with a custom data type we declared in a separate dedicated class. In this post we will do the same and also using the same custom class, but this time instead of creating an array, we will use a generic List for. class Program
- [Asynchronous Programming in C#](https://blog.matrixpost.net/asynchronous-programming-in-c/) - In this post I want to summarize and collect some informations about Asynchronous Programming in C#. This topic is well documented from Microsoft.A synchronous method call can result in a stucking program execution. An asynchronous method call in contrast, will return control back to the caller of the method and so the program can execute
- [Azurite emulator - emulating Azure Blob, Queue and Table services in your local environment](https://blog.matrixpost.net/azurite-emulator-emulating-azure-blob-queue-and-table-services-in-your-local-environment/) - The Azurite emulator for local Azure Storage development is well documented from Microsoft. Use the Azurite emulator for local Azure Storage developmenthttps://docs.microsoft.com/en-us/azure/storage/common/storage-use-azurite The predecessor is the Azure Storage Emulator and is no longer being actively developed. Azurite is the Storage Emulator platform going forward. Azurite supersedes the Azure Storage Emulator. Azurite will continue to be updated
- [Azure AD B2B (Business-to-business) Federation and Collaboration](https://blog.matrixpost.net/azure-ad-b2b-business-to-business-federation-and-collaboration/) - In on-permises environments with Active Directory to enable Federation with external companies you have two options, both require specific skills to configure it and additional costs for set up. Active Directory Trust Relationships Active Directory Federation Services Now with Azure AD B2B (Business-to-business), federation and collaborattion with external companies and partner organizations became much easier
- [Global Assembly Cache (GAC) and .NET Framework Insights](https://blog.matrixpost.net/global-assembly-cache-gac-and-net-framework-insights/) - In this post I want to collect from several sources about what exactly is the GAC and how to manage it. Further we will focussing on the .NET Framework and its components, where the GAC is only one of them. Global Assembly Cache (GAC) Each computer where the Common Language Runtime (CLR) is installed has
- [Load a custom Assembly in SQL Server Integration Services (SSIS) Script Task that is not or cannot be stored in the GAC](https://blog.matrixpost.net/load-an-custom-assembly-in-sql-server-integration-services-ssis-script-task-that-is-not-or-cannot-be-stored-in-the-gac/) - If you need to reference a custom assembly from a SSIS Script Task, the recommended and easiest way is to install the custom assembly in the Global Assembly Cache (GAC). But what if we do not have access and permissions to install the custom assembly in the GAC? Therefore we can use a simple workaround
- [Restrict Access to Azure and Office 365 by Country](https://blog.matrixpost.net/restrict-access-to-azure-and-office-365-by-country-level/) - To limit the risk of compromising your Office 365 Tenant, you can limit access by blocked or allowed countries. Also you can limit access by IP ranges. Below I will show you the steps to configure conditional access by country. Therefore search for Azure AD Conditional Access. As you can see, you need an Azure
- [Accessing Azure Storage Account Blobs from C# Applications](https://blog.matrixpost.net/accessing-azure-storage-account-blobs-from-c-applications/) - In a previous post we went through accessing Azure File Shares with C#, today we will do the same with Azure Blob storage. Azure Storage Blobs client library for .NET - Version 12.6.0https://docs.microsoft.com/en-us/dotnet/api/overview/azure/storage.blobs-readmeAzure Blob storage is Microsoft's object storage solution for the cloud. Blob storage is optimized for storing massive amounts of unstructured data. Unstructured
- [Set and Change the PowerShell default Working Directory](https://blog.matrixpost.net/set-powershells-default-working-directory/) - By default when you start a new PowerShell session, you will get directly to your user directory stored in the environment variables. By default it is located in C:Users. %HOMEDRIVE%%HOMEPATH% There are several ways to change this, one is to set a shortcut and change the Start in path in the properties. Another method which
- [Set up Office Master Gate 5.0 with Microsoft Teams Direct Routing and DTAG's SIP Trunk](https://blog.matrixpost.net/set-up-office-master-gate-5-0-and-microsoft-teams-direct-routing-and-dtags-sip-trunk/) - I will go through the steps to install the Office Master Gate 5.0 (Session Border Controller) from Ferrari electronic AG which supports since this version Microsoft Teams Direct Routing. OfficeMaster Gatehttps://www.ferrari-electronic.com/products/officemaster-gate.html I will set up a Hyper-V virtual machine with an ISO image from Ferrari electronic. Installationsimage for OfficeMaster Gate Firmware 5.0(Image for installation of
- [Migration from onPremise to Office 365 - Step by Step - Part 6 - Route your onPrem SIP Trunk to Skype for Business and Teams (Hybrid Voice Connectivity | Direct Routing)](https://blog.matrixpost.net/migration-from-onpremise-to-office-365-step-by-step-part-6-route-your-onprem-sip-trunk-to-skype-for-business-and-teams-hybrid-voice-connectivity-vs-direct-routing/) - In Part 6 we route our onPrem SIP Trunk to Skype for Business Online and Teams using Hybrid Voice Connectivity and Direct Routing. To be clear, we can't and will use both the same time. Hybrid Voice Connectivity is only supported by Skype for Business Online and Teams in contrast only supports Direct routing. For
- [Set up AudioCodes Virtual Edition (VE) SBC in Azure for  Microsoft Teams Direct Routing with DTAG's SIP Trunk](https://blog.matrixpost.net/set-up-audiocodes-virtual-edition-ve-sbc-in-azure-for-microsoft-teams-direct-routing-with-dtags-sip-trunk/) - I will go through the steps to set up the AudioCodes Mediant VE SBC in Azure in order to provide Enterprise Voice (now called Phone System in Online) to Teams with Direct Routing. The SBC can be offered as a Virtualized SBC, supporting the following platforms: Hyper-V, AWS, AZURE, AWP, KVM and VMWare. AudioCodes SBCs
- [Troubleshoot AudioCodes Configuration Wizard wrong settings for DTAG and Teams](https://blog.matrixpost.net/troubleshoot-audiocodes-configuration-wizard-wrong-settings-for-dtag-and-teams/) - In the following post ... I documented how to set up AudioCodes with Teams Direct Routing and the DTAG SIP Trunk. You have the choice between setup up the config by hand which is very cumbersome as you have to config a massive amount of parameters and settings. So the first try was to use
- [Let's Encrypt certbot-auto depricated](https://blog.matrixpost.net/lets-encrypt-certbot-auto-depricated/) - In December 2020 and release 1.10.0, Let's Encrypt had deprecated certbot-auto on Debian based systems including Ubuntu. In their release 1.11.0, they also deprecate the script on every OS. It is only certbot-auto that they deprecated. Our other distribution methods or Certbot more generally was not deprecated on Debian. The behavior you can expect from
- [HCW8064 - HCW has completed, but was not able to perform the OAuth error when running Hybrid Configuration](https://blog.matrixpost.net/hcw8064-hcw-has-completed-but-was-not-able-to-perform-the-oauth-error-when-running-hybrid-configuration/) - To get more details about the above warnings and error messages, you can check the log files from the HCW located at the following path. C:UsersAppDataRoamingMicrosoftExchange Hybrid Configuration PowerShell failed to invoke 'New-AuthServer': Cannot acquire auth metadata document from 'https://accounts.accesscontrol.windows.net ............. Trying to create it by myself and the on-premise Exchange Management Shell will result
- [Migration from onPremise to Office 365 – Part 7 -Troubleshoot Skype for Business Hybrid](https://blog.matrixpost.net/migration-from-onpremise-to-office-365-part-7-troubleshoot-skype-for-business-hybrid/) - In Part 7 we will see how to troubleshoot Skype for Business Hybrid. This Blog Post Series consists of 7 parts. So if you missed one check them out as follows. This post is split into multiple partPart 1 ... will cover the prerequisites like synchronize your onPrem users to Office 365 with Azure AD
- [Office 365 / Exchange Online Block Sender Domain](https://blog.matrixpost.net/office-365-exchange-online-block-sender-domain/) - The procedure is the same whether you use the Classic Exchange admin center or the new Exchange admin center. Go to Mail flow - Rules - Create a new rule Give the new rule a name and click on More options ... Click on Apply this rule if ... and select The sender ... and
- [Set up AudioCodes Fax Server and Mediant VE SBC with DTAG SIP Trunk](https://blog.matrixpost.net/set-up-audiocodes-fax-server-and-mediant-ve-sbc-with-dtag-sip-trunk/) - This post will show how to install and configure the AudioCodes Fax Server (Ver. 2.6.104.000) utilizing the AudioCodes Mediant VE SBC (Ver. 7.20A.258.119) with an DTAG SIP Trunk. (Deutsche Telekom AG) Installation GuideAudioCodes One Voice for Microsoft® Skype for BusinessFax Server & Auto Attendant IVRhttps://www.audiocodes.com/media/14443/fax-server-and-auto-attendant-ivr-installation-guide-ver-26.pdfAdministrator's Guidehttps://www.audiocodes.com/media/13601/fax-server-and-auto-attendant-administrators-guide-ver-25x.pdfConfiguring Rerouting of Calls to Fax DestinationsMediant Software SBC Virtual
- [ACL , ACE , DACL, SACL, MAC and RBAC](https://blog.matrixpost.net/acl-vs-ace-vs-dacl-vs-sacl/) - In this post I want to summarize in a nutshell the terminologies which exist for controlling permissions on securable objects in operating systems . This topic is well documented from Microsoft and on Wikipedia. First there is an access control entry (ACE) which is an element in an access control list (ACL). An ACL can
- [Dell iDRAC RAC0225: Sending the test mail failed](https://blog.matrixpost.net/dell-idrac-rac0225-sending-the-test-mail-failed/) - If you configure Alerts on your Dell iDRAC over SMTP and get the following error on iDRAC 4.x versions and above: RAC0225: Sending the test mail failed ... there is a good chance, that this error is related to your configured internal SMTP Relay and the TLS configuration from it. The configuration is done with
- [Set up GFI FaxMaker with XCAPI and AudioCodes Mediant VE SBC with DTAG SIP Trunk](https://blog.matrixpost.net/set-up-gfi-faxmaker-with-xcapi-and-audiocodes-mediant-ve-sbc-with-dtag-sip-trunk/) - This post will show how to install and configure the GFI FaxMaker with XCAPI utilizing the AudioCodes Mediant VE SBC (Ver. 7.20A.258.119) with an DTAG SIP Trunk. (Deutsche Telekom AG). Documentation - GFI FaxMakerhttps://www.gfi.com/products-and-solutions/email-and-messaging-solutions/gfi-faxmaker/resources/documentations Installation GFI FaxMaker on Windows Server 2019 The GFI FaxMaker supports the installation on an Hyper-V VM with Windows Server 2019. Supported operating systemshttps://manuals.gfi.com/en/fax20/Content/GSG/System_Requirements.htm As
- [Call Forwarding Teams Direct Routing with AudioCodes Mediant VE SBC and DTAG SIP Trunk - from external to external - no audio](https://blog.matrixpost.net/call-forwarding-teams-direct-routing-with-audiocodes-mediant-ve-sbc-and-dtag-sip-trunk-from-external-to-external-no-audio/) - Recently I run into an issue, where a Teams user forwarded incoming calls to his external mobile number. If the call comes from internal all works fine as expected by the way. In case the call comes from the external PSTN, the call is routed correctly to the users mobile number and it is ringing.
- [Microsoft Teams Direct Routing - Call Forwarding - AudioCodes Mediant VE SBC with DTAG SIP Trunk - Message Manipulation - Change displayed number from forwarded Calls](https://blog.matrixpost.net/microsoft-teams-direct-routing-call-forwarding-audiocodes-mediant-ve-sbc-with-dtag-sip-trunk-message-manipulation-change-displayed-number-from-forwarded-calls/) - In case you forward inbound calls from Teams to an external phone number like your mobile phone, by default you will see the origin caller number if CLIP no screening is enabled for your DTAG SIP Trunk. How does CLIP (calling line identification presentation) no screening work?https://wiki.innovaphone.com/index.php?title=Howto:How_does_CLIP_no_screening_work Imagine you have a dedicated phone number like a
- [SCCM (System Center Configuration Manager) slow or stucking Console/GUI](https://blog.matrixpost.net/sccm-system-center-configuration-manager-slow-or-stucking-console-gui/) - If you encounter issues with a permanent slow or stucking SCCM console, there is a good chance the reason for is a defragmented underlaying SQL Server database. Therefore you should rebuild the indexes which can be done in various ways and different tools. The best result I get with Ola Hallengren's SQL Server Maintenance Solution
- [Microsoft Teams Meeting - Start recording is greyed out](https://blog.matrixpost.net/microsoft-teams-meeting-start-recording-greyed-out/) - Assuming that you fulfil all of the following prerequisites for Micrsoft Teams cloud meeting recording, and Start recording is still greyed out, supposedly your Microsoft Teams tenant is in an different data center location as Microsoft Stream is. Meeting recordings are stored in Microsoft Stream cloud storage. Currently, the meeting recording feature is turned off
- [pfSense - webConfigurator default Certificate expiring](https://blog.matrixpost.net/pfsense-webconfigurator-default-certificate-expiring/) - In case your default webConfigurator certificate is expiring soon or as below still expired some time ago, this is not really an critical issue and will not affect pfSense from functioning as before. This certificate is "only" used for accessing the WebGUI secure using TLS and is still secure if expired. The only downside is,
- [error - The connection to the server could not be completed | MRS Proxy Server](https://blog.matrixpost.net/error-the-connection-to-the-server-could-not-be-completed-mrs-proxy-server/) - If you change the password of an Exchange administrator account, which is associated to the Hybrid Migration Endpoint (MRS Proxy Server), and forget to change the password within the migration endpoint configuration in Exchange Online, you will run into the error as follows, when trying to move a mailbox from on-premise to Exchange Online. error
- [pfSense 2.5.0 Bug - Router Advertisements Server is active by default on internal LAN Interface - Multiple Errors like - Renaming of LAN Interface or setting up OpenVPN Server runs into an error regarding IPv6 Configuration](https://blog.matrixpost.net/pfsense-2-5-0-bug-renaming-of-lan-interface-runs-into-an-error-regarding-router-advertisements-server-is-active/) - Today I run into a strange error message at renaming the LAN interface from pfSense v. 2.5.0 with the following message. The Router Advertisements Server is active on this interface and it can be used only with a static IPv6 configuration. Please disable the Router Advertisements Server service on this interface first, then change the
- [Exchange Server 2019 - Database Copy Component (HighAvailability) State is offline](https://blog.matrixpost.net/exchange-server-2019-database-copy-component-highavailability-state-is-offline/) - After removing and re-adding an Exchange Server to a Database Availability Group (DAG), I wanted to activate a database copy from this Exchange Server and run into the following error. An Active Manager operation failed. Error: The database action failed. Error: An error occurred while trying to validate the specified database copy for possible activation.Error:
- [Microsoft Teams exploratory License](https://blog.matrixpost.net/microsoft-teams-exploratory-license/) - The Microsoft Teams Exploratory experience lets users in your organization who have Azure Active Directory (Azure AD) and aren't licensed for Teams initiate an exploratory experience of Teams. Admins can switch this feature on or off for users in their organization. The earlier Microsoft Commercial Cloud Trial is now replaced by the Teams Exploratory experience. Source: https://docs.microsoft.com/en-us/microsoftteams/teams-exploratory
- [pfSense - enable the Thermal Sensors to display the CPU Temperature on the Dashboard](https://blog.matrixpost.net/pfsense-enable-the-thermal-sensors-to-display-the-cpu-temperature-on-the-dashboard/) - By default in pfSense only ACPI-compliant motherboard sensors are enabled. Advanced Configuration and Power Interface (ACPI)https://en.wikipedia.org/wiki/Advanced_Configuration_and_Power_Interface If the actual temperature from the pfSense appliances CPU is not shown up in the dashboard from pfSense, you have to go to the following menu to change this to a supported sensor. System -> Advanced -> Miscellaneous -> Cryptographic
- [Move-CsUser : HostedMigration fault: Error=(201), Description=(Cannot find user in Active Directory with the following SIP URI](https://blog.matrixpost.net/move-csuser-hostedmigration-fault-error201-descriptioncannot-find-user-in-active-directory-with-the-following-sip-uri/) - Last week I run into the following error message when trying to move an on-premise Skype for Business user to Teams. Move-CsUser : HostedMigration fault: Error=(201), Description=(Cannot find user in Active Directory with the following SIP URI: “sip:John.Nokes@braintesting.net”) Normally this error occurs, if the msRTCSIP-PrimaryUserAddress Active Directory attribute was not synchronized to your Azure AD, or if you
- [Exchange Online -  We are preparing a mailbox for the user - Accounts still have an on-premise Mailbox and ExchangeGUID is synced successfully to Office 365](https://blog.matrixpost.net/exchange-online-we-are-preparing-a-mailbox-for-the-user-accounts-still-have-an-on-premise-mailbox-and-exchangeguid-is-synced-successfully-to-office-365/) - Recently I noticed a strange behavior with Exchange Classic Full Hybrid for users who synced to Office 365 and have their mailbox still in exchange on-premises.In past, when you assign an Office 365 license which includes an Exchange Online plan, like E3 or E5, to an user which already had an on-premises mailbox where the
- [Set up Active Directory Federation Services (AD FS 5.0) - Internal ADFS Server - Part 1](https://blog.matrixpost.net/set-up-active-directory-federation-services-ad-fs-5-0-internal-adfs-server-part-1/) - In this post we will see how to set up an AD FS environment with an AD FS server in the internal network and an AD FS Reverse Proxy provided by the Web Application Proxy (WAP) and Remote Access server role in the perimeter network. What's new in Active Directory Federation Services for Windows Server 2019https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/overview/whats-new-active-directory-federation-services-windows-server#whats-new-in-active-directory-federation-services-for-windows-server-2019
- [Set up Active Directory Federation Services (AD FS 5.0) - Certificate Requirements - Part 3](https://blog.matrixpost.net/adfs-certificate-requirements/) - In an ADFS environment, certificates are one of the most critical and important parts, therefore I want to document this in a separate post, besides the vast amount of information about it. This post is split into multiple partsPart 1 ... will cover the installation from the internal ADFS ServerPart 2 ... will cover the
- [Set up Active Directory Federation Services (AD FS 5.0) - ADFS Reverse Proxy - Part 2](https://blog.matrixpost.net/set-up-active-directory-federation-services-ad-fs-5-0-adfs-reverse-proxy-part-2/) - In Part 1 we installed the internal AD FS Server, to publish these federation services to the internet, now we also need to install an AD FS Reverse Proxy server in our perimeter network. Therefore we have to install the Web Application Proxy (WAP) and Remote Access server role on a Windows Server 2019 in
- [Set up Active Directory Federation Services (AD FS 5.0) - Create an ASP.NET Web Application (.NET Framework - Web Forms) using WS-FED - Part 4](https://blog.matrixpost.net/set-up-active-directory-federation-services-ad-fs-5-0-claim-aware-web-application-part-4/) - In this post I want to show you, how you can create a claim aware ASP.NET web application (.NET Framework - Web Forms) with C# in Visual Studio, in order to authenticate users through an AD FS server and WS-FED. This post is split into multiple partsPart 1 ... will cover the installation from the
- [Configure SAML SSO for Atlassian Confluence on-premises with ADFS](https://blog.matrixpost.net/configure-saml-sso-for-atlassian-confluence-on-premises-with-adfs/) - Today I want to show you, how you can configure your on-premises confluence site to support single sign-on (SSO) with Active Directory Federation Services (AD FS). How to set up Active Directory Federation Services you can see in my following post. First we will configure confluence to use SAML SSO 2.0, therefore in confluence we
- [Set up an AD FS Federation Trust between two Organizations](https://blog.matrixpost.net/creating-an-ad-fs-federation-trust-between-two-organizations/) - In this post we will configure an AD FS trust with an partner organization, in order to allow users to access resources from the partner organization. In an AD FS Partner Trust, you have two organization roles from which one is the Account Partner and the other is the Resource Partner. About account partner organizationsAn
- [SAML single sign-on for Atlassian Cloud with Azure AD](https://blog.matrixpost.net/saml-single-sign-on-for-atlassian-cloud-with-azure-ad/) - In this post I want to go through the separate steps to integrate your Atlassian Cloud with your Azure Active Directory (Azure AD). After that you can: Control in Azure AD who has access to Atlassian Cloud. Enable your users to be automatically signed-in to Atlassian Cloud with their Azure AD accounts. Manage your accounts
- [Microsoft 365 Admin Center - Annoying Warning and Status Messages you can ignore](https://blog.matrixpost.net/microsoft-365-admin-center-annoying-warning-and-status-messages-you-can-ignore/) - In this post I want to collect some annoying warning and status messages in the Microsoft 365 Admin Center, you will face to in some scenarios and can be ignored. Some of them are also not true and can be very ambiguous. Possible service issues In an Exchange Classic Full Hybrid scenario you will have
- [Exchange Classic Full Hybrid - Not all Mailbox Permissions fully supported and Automapping](https://blog.matrixpost.net/exchange-classic-full-hybrid-not-all-mailbox-permissions-fully-supported/) - If you want to add Mailbox Folder Permissions for an on-premises Mailbox to an User in Exchange Online, you will run into the following error. The user was found in Active Directory but isn't valid to use for permissions.Try an SMTP address instead. Here I will try to grant Editor Access Rights, for the on-premises
- [Analyse AD FS SAML Claims with Fiddler](https://blog.matrixpost.net/analyse-ad-fs-saml-claims-with-fiddler/) - In this post we want analyze the SAML assertion (Claims) from our AD FS server for several web applications. Therefore we first need to configure Fiddler in order to capture successful the SAML assertion issued from the federation server. Configure Fiddler Configure the Fiddler SSL certificatehttps://docs.microsoft.com/en-us/windows-server/identity/ad-fs/troubleshooting/ad-fs-tshoot-fiddler#configure-the-fiddler-ssl-certificate Use the following procedure to setup Fiddler to decrypt
- [Redirect from HTTP to HTTPS using the IIS URL Rewrite module](https://blog.matrixpost.net/redirect-from-http-to-https-using-the-iis-url-rewrite-module/) - In order to redirect HTTP requests to HTTPS in IIS, you can use the URL Rewrite or HTTP Redirect module. In the screenshot below you can see both modules in the IIS Manager. HTTP Redirect module vs URL Rewrite module with Action type: RedirectTechnically there is no difference to the HTTP Redirect module when using
- [Microsoft SQL Server LocalDB](https://blog.matrixpost.net/microsoft-sql-server-localdb/) - Usually you can install the Microsoft SQL Server LocalDB as a feature within SQL Server Express. The Visual Studio Installer will also install the LocalDB as part of the Data Storage and Processing workload. LocalDB installation copies a minimal set of files necessary to start the SQL Server Database Engine. Once LocalDB is installed, you
- [The current .NET SDK does not support targeting .NET Core.](https://blog.matrixpost.net/the-current-net-sdk-does-not-support-targeting-net-core/) - If you run into an .NET Core compiling error regarding targeting .NET Core version not supported in Visual Studio like this one: The current .NET SDK does not support targeting .NET Core 3.1. Either target .NET Core 2.1 or lower, or use a version of the .NET SDK that supports .NET Core 3.1. First check
- [Modern Authentication Office 365](https://blog.matrixpost.net/modern-authentication-office-365/) - Modern authentication is an umbrella term for a combination of authentication and authorization methods between a client (for example, your laptop or your phone) and a server, as well as some security measures that rely on access policies that you may already be familiar with. It includes: Authentication methods: Multi-factor authentication (MFA); smart card authentication;
- [List of Authentication Protocols](https://blog.matrixpost.net/overview-of-existing-sign-in-and-authentication-protocols/) - In this post I want to list the most common and used authentication protocols and frameworks today. LDAP LDAP, the Lightweight Directory Access Protocol, is a mature, flexible, and well supported standards-based mechanism for interacting with directory servers. It’s often used for authentication and storing information about users, groups, and applications, but an LDAP directory
- [Set up Active Directory Federation Services (AD FS 5.0) - Identity Protocols used in AD FS - Part 8](https://blog.matrixpost.net/set-up-active-directory-federation-services-ad-fs-5-0-identity-protocols-part-8/) - In this post I want to list all identity protocols AD FS supports. This post is split into multiple partsPart 1 ... will cover the installation from the internal ADFS Server Part 2 ... will cover the installation from the ADFS Reverse Proxy Server in the perimeter networkPart 3 ... will cover all about certificates
- [Set up Active Directory Federation Services (AD FS 5.0) - Create an ASP.NET Web Application (.NET Framework - MVC) by using OAuth 2.0 & OpenID Connect - Part 6](https://blog.matrixpost.net/set-up-active-directory-federation-services-ad-fs-5-0-claim-aware-web-applications-create-an-asp-net-web-application-net-framework-mvc-using-openid-connect-part-6/) - In this post I want to show you, how you can create a claim aware ASP.NET web application (.NET Framework) with C# in Visual Studio, in order to authenticate users with OpenID Connect through an AD FS server. This post is split into multiple partsPart 1 ... will cover the installation from the internal ADFS ServerPart 2 ...
- [Set up Active Directory Federation Services (AD FS 5.0) - Create an ASP.NET Core Web App (Model-View-Controller) by using OAuth 2.0 & OpenID Connect - Part 7](https://blog.matrixpost.net/set-up-active-directory-federation-services-ad-fs-5-0-claim-aware-web-applications-create-an-asp-net-core-web-app-model-view-controller-using-openid-connect-part-7/) - In this post I want to show you, how you can create a claim aware ASP.NET Core Web App (Model-View-Controller) with C# in Visual Studio, in order to authenticate users with OpenID Connect through an AD FS server. This post is split into multiple partsPart 1 ... will cover the installation from the internal ADFS ServerPart 2 ...
- [Set up Active Directory Federation Services (AD FS 5.0) - Create an ASP.NET Core Web Application (MVC) using WS-FED - Part 5](https://blog.matrixpost.net/set-up-active-directory-federation-services-ad-fs-5-0-claim-aware-web-applications-create-an-asp-net-core-web-application-mvc-part-5/) - In this post I want to show you, how you can create a claim aware ASP.NET Core Web Application (MVC) with C# in Visual Studio, in order to authenticate users through an AD FS server and WS-FED. This post is split into multiple partsPart 1 ... will cover the installation from the internal ADFS ServerPart 2 ...
- [Providing SSO in Azure AD and Microsoft 365](https://blog.matrixpost.net/azure-active-directory-seamless-single-sign-on-and-primary-refresh-token-prt/) - With Azure AD Connect, you can synchronize on-premises Active Directory objects to Office 365 and Azure AD. Therefore users can use their on-premises credentials to authenticate against Office 365 and Azure. If you also want to support single sign-on to those users, so that they don't need to enter their credentials each time when accessing
- [Enable Hybrid Modern Authentication for on-premises Skype for Business and Exchange servers - Part 1 Exchange Server](https://blog.matrixpost.net/enable-hybrid-modern-authentication-for-on-premises-skype-for-business-and-exchange-servers-part-1-exchange-server/) - In this post we will configure Hybrid Modern Authentication (HMA) on our on-premises Exchange Server. This post is split into two parts, in part 1 we configure HMA for Exchange and in part 2 for Skype for Business. About modern authentication and HMA you will find in my following post all necessary information. Turn on
- [Enable Hybrid Modern Authentication for on-premises Skype for Business and Exchange servers - Part 2 SFB](https://blog.matrixpost.net/enable-hybrid-modern-authentication-for-on-premises-skype-for-business-and-exchange-servers-part-2-sfb/) - In this post we will configure Hybrid Modern Authentication (HMA) on our on-premises Skype for Business Server. This post is split into two parts, in part 1 we configure HMA for Exchange and in part 2 for Skype for Business. About modern authentication and HMA you will find in my following post all necessary information.
- [Exchange Online - Plus Addressing](https://blog.matrixpost.net/exchange-online-plus-addressing/) - For Exchange Online you can use since September 2020 Plus Addressing. With Plus Addressing your users can create own custom e-mail addresses by adding a suffix to their existing default or alias e-mail addresses. An SMTP email address uses the basic syntax: @. For example, sean@contoso.com.Plus addressing uses the syntax: +@. For example, sean+newsletter@contoso.com.The original
- [Install Windows Subsystem for Linux (WSL)](https://blog.matrixpost.net/install-windows-subsystem-for-linux-wsl/) - Microsoft introduced in Windows 10 1609 a subsystem for Linux and later also for Windows Server 2019. The Windows Subsystem for Linux lets developers run a GNU/Linux environment -- including most command-line tools, utilities, and applications -- directly on Windows, unmodified, without the overhead of a traditional virtual machine or dualboot setup. What is WSL
- [Primary Refresh Token (PRT) in Azure and Microsoft 365](https://blog.matrixpost.net/azure-active-directory-primary-refresh-token-prt-single-sign-on-to-azure-and-office-365/) - In a nutshell, the Primary Refresh Token (PRT) is a special high privileged refresh token where you can request access tokens for any registered application in Azure and Microsoft 365 to authenticate against it.
- [Azure AD - Federated Domain vs. Managed Domain](https://blog.matrixpost.net/federated_domain_vs_managed_domain/) - When it comes to Azure AD Authentication in an Hybrid environment, where we have an on-premises and cloud environment, we can easy lose track regarding the different options and terms for authentication in Azure AD. We firstly need to distinguish between two fundamental different models to authenticate users in Azure/Microsoft 365, these are managed vs.
- [MiB and GiB vs. MB and GB momory size notation - What's the Difference?](https://blog.matrixpost.net/mib-and-gib-vs-mb-and-gb-momory-size-notation-whats-the-difference/) - Surely you know the circumstance that if you format your hard disk drive (HDD), its size allegedly will be shrunk in contrast to the manufacturer information labeled on the drive itself. The reason for is that manufacturer labeled their products using the SI prefixes (kilo, mega, giga, ...) and their corresponding symbols (k, M, G, ...)
- [Set up Windows Autopilot - Part 1](https://blog.matrixpost.net/set-up-windows-autopilot/) - In this post I want to show, how you can enroll step by step windows 10 devices using Windows Autopilot. I will set up a VM in my lab environment which will be enrolled to Azure AD (Azure AD joined) and without any further applications or policies applied to. In Part 2 I will also
- [Set up Windows Autopilot - Production Environment from external - Part 2](https://blog.matrixpost.net/set-up-windows-autopilot-production-environment-part-2/) - In this part I want to enroll a Windows 10 device (also VM) into the production environment as Hybrid Azure AD joined with pre-installed apps like Notepad++ and a configured VPN connection for onboarding the device outside the corporate network. In Part 1 you will see the basics how you can enroll step by step windows
- [Assign Microsoft 365 Licenses to a Group instead to each user by hand](https://blog.matrixpost.net/assign-microsoft-365-licenses-to-a-group/) - In case you purchase a bunch of Office 365 or Microsoft 365 licenses for your tenant, fortunately you do not have to assign them to each user separately. You can assign licenses to a group in Azure AD. Therefore go to the desired group, click on Licenses and Assignments to assign a new license to
- [Create an ASP.NET Web Application (.NET Framework - Web Forms or MVC) using Azure AD Authentication](https://blog.matrixpost.net/create-an-asp-net-web-application-net-framework-web-forms-or-mvc-using-azure-ad-authentication/) - In this post I want to show, how you can create a claim aware ASP.NET web application (.NET Framework - Web Forms or MVC) with C# in Visual Studio, in order to authenticate users against Azure AD. A few weeks ago, I also wrote a post with multiple parts about the Active Directory Federation Services
- [Create an ASP.NET Core Web App using Azure AD Authentication](https://blog.matrixpost.net/create-an-asp-net-core-web-app-model-view-controller-using-azure-ad-authentication/) - In this post I want to show, how you can create a claim aware ASP.NET Core Web App with C# in Visual Studio, in order to authenticate users against Azure AD. In this post you will see how to authenticate against Azure AD using an ASP.NET web application (.NET Framework - Web Forms or MVC). A few weeks
- [Azure Hybrid Cloud - Enable Azure AD Password Writeback and self-service Password Reset](https://blog.matrixpost.net/azure-hybrid-cloud-enable-azure-ad-password-writeback-and-self-service-password-reset/) - In this post we will enable password writeback and self-service password reset in Azure AD. If enabled, users can update their synced on-premises password or unlock their synced on-premises account using a web browser and the Azure portal. Password writeback can be used to synchronize password changes in Azure AD back to your on-premises AD
- [Window 10 Activity History - How to View and Delete](https://blog.matrixpost.net/window-10-activity-history-how-to-view-and-delete/) - In this post I want to show in a nutshell how to view and delete your activity history on Windows 10 devices. Activity history helps keep track of the things you do on your device, such as the apps and services you use, the files you open, and the websites you browse. Your activity history
- [Azure AD Connect Sync Architecture -  Simplified](https://blog.matrixpost.net/azure-ad-connect-sync-architecture-simplified/) - In this post I want take a closer look about Azure AD Connect and how it works exactly under the hood. If you have to troubleshoot sync errors it is important to understand how Azure AD Connect works. The following article from Microsoft describes very detailed how the Azure Azure AD Connect Sync Architecture works.
- [Exchange/Outlook Download Offline Address Book Error 0x80190194](https://blog.matrixpost.net/exchange-outlook-download-offline-address-book-error-0x80190194/) - In case you will get during an attempt to download the offline address book from Exchange Server the following error in Outlook: Task 'John.Doe@braintesting.de' reported error (0x80190194): 'The operation failed.' you probably doesn't have enabled the public folder distribution or web distribution for the offline address book. To check if enabled please run the following
- [Longest Prefix Match aka Maximum prefix length match](https://blog.matrixpost.net/longest-prefix-match-aka-maximum-prefix-length-match/) - In case a router (or host) wants to forward an IP packet to its destination IP address and this address matches with multiple entries in the routing table from the router, the most specific table entry with the longest subnet mask will be used for. This is called longest prefix match For example, consider this IPv4 forwarding
- [Azure AD Connect Sync Errors Detected - Large Attribute - Extension thumbnailPhoto](https://blog.matrixpost.net/azure-ad-connect-sync-errors-detected-large-attribute-extension-thumbnailphoto/) - The on-premises Active Directory attribute thumbnailPhoto can store the users photo. This photo can then be used by applications like Outlook, Skype for Business and SharePoint. Exchange/Outlook and Skype for Business both will use by default the thumbnailPhoto attribute to display the users photo. The maximum size in on-premise Active Directory and Azure AD for
- [Task Scheduler Task returns 0x1 for Batch File](https://blog.matrixpost.net/task-scheduler-task-returns-0x1-for-batch-file/) - In case you run a batch script by using a scheduled task in windows and the script itself returns an error which can be ignored, you can manipulate the returned error level (code) from that script by hand. The following clear IIS Logs batch file will clear all IIS logs older than 14 days. @echo
- [Appendix - Azure AD Connect Sync Errors Detected - Large Attribute - Extension thumbnailPhoto](https://blog.matrixpost.net/appendix-azure-ad-connect-sync-errors-detected-large-attribute-extension-thumbnailphoto/) - First I want to mention and warn that this post will not show how to resolve the issue with the sync errors regarding too large extension attributes. This post here resp. the steps were originally from my post below about how to resolve that issue and is now outsourced here. The reason for outsourcing these
- [Microsoft Bookings](https://blog.matrixpost.net/microsoft-bookings/) - In this post I have carried together the main points you should know to start easily with Microsoft Bookings. Microsoft Bookings is a scheduling tool and is part of the Microsoft Office family of products. Generally released by Microsoft in March 2017, Bookings allows customers of small businesses and companies to book appointments with the
- [Microsoft 365 Groups vs. Microsoft Teams Team](https://blog.matrixpost.net/microsoft-365-groups-vs-microsoft-teams-team/) - Microsoft 365 Groups (formerly known as Office 365 Groups) are used by Microsoft 365 for collaboration between users, both inside and outside your company. Introduction Microsoft 365 Groups is the cross-application membership service in Microsoft 365. At a basic level, a Microsoft 365 Group is an object in Azure Active Directory with a list of
- [Microsoft SQL Server - FCB::Open failed: Could not open file mastlog.ldf for file number 2.  OS error: 5(Access is denied.)](https://blog.matrixpost.net/microsoft-sql-server-fcbopen-failed-could-not-open-file-mastlog-ldf-for-file-number-2-os-error-5access-is-denied/) - In case you couldn't start your SQL Server Instance and getting the following error message in your windows application logs, you should verify that the account running that instance have full control to the path where the files of that instance are located. FCB::Open failed: Could not open file Microsoft SQL ServerMSSQL11.MSSQLSERVERMSSQLDATAmastlog.ldf
- [PetitPotam NTLM Relay Attack - Mitigating NTLM Relay Attacks on Active Directory Certificate Services (AD CS)](https://blog.matrixpost.net/petitpotam-ntlm-relay-attack-mitigating-ntlm-relay-attacks-on-active-directory-certificate-services-ad-cs/) - On actual occasion, I want to share some information about the newly uncovered security flaw in Windows operating systems named PetitPotam, which is based on NTLM Relay Attacks, and how you can prevent successful attacks. Below you will find an Microsoft article to determine if your environment is potentially vulnerable to this attack and how
- [Using Google's OAuth 2.0 API for an ASP.NET Core Web App](https://blog.matrixpost.net/using-googles-oauth-2-0-api-for-an-asp-net-core-web-app/) - In this post I want to show how you can enable users to sign-in into a web app by using their Google accounts and leverage the Google's OAuth 2.0 API. About OAuth and OpenID Connect more in depth you can read in my following post. Configure the Google OAuth 2.0 API I will first need
- [How OAuth 2.0 and OpenID Connect works](https://blog.matrixpost.net/oauth-2-0-and-openid-connect-deep-dive/) - OAuth which stands for Open Authorization is the de facto industry standard for online authorization. By using OAuth you can grant a 3rd party application limited access to an HTTP service either on behalf of a user or directly. 3rd party applications in this context can be browser-based applications like classic dynamic server-side web applications,
- [Disable Mandatory Windows Hello for Business Prompt on Azure AD joined Devices](https://blog.matrixpost.net/disable-windows-hello-for-business-prompt-on-azure-ad-joined-devices/) - If you join your device to Azure AD by using the Access work or school settings, the device by default will be automatically registered with Windows Hello for Business support aka Windows Hello for Business provisioning. Windows Hello for Business provisioning begins immediately after the user has signed in, after the user profile is loaded,
- [How SAML 2.0 works](https://blog.matrixpost.net/how-saml-2-0-works/) - SAML 2.0 works similar like OAuth 2.0 with OpenID Connect (OIDC) on top as described in my following post. SAML primarily is designed to authenticate a user and provide the identity data in form of an identity token named SAML assertion or SAML token to an HTTP service named service provider (SP) or relying party
- [Non Converged vs. Converged vs. Hyperconverged Infrastructure](https://blog.matrixpost.net/non-converged-converged-and-hyperconverged-infrastructure/) - A Hyperconverged Infrastructure (HCI) is an architectural design to combine pools of server and storage resources into a 100% software-defined solution (single SKU).
- [Change Owner for Azure AD joined Windows 10 Devices](https://blog.matrixpost.net/change-owner-for-azure-ad-joined-windows-10-devices/) - Under Azure Active Directory - Devices - All devices you will get a list of all devices which are Azure AD registered, Azure AD joined or Hybrid Azure AD joined. Also you can see the owner of the devices, which is the user who joined the device to Azure AD. Device owners are granted local
- [Move Home Directory to another dedicated Drive/Partition in Linux](https://blog.matrixpost.net/move-home-directory-to-another-dedicated-drive-partition-in-linux/) - By default the home directory will be installed within the OS hard drive and root partition. Below you will see how to outsource the home directory to a dedicated separate mounted disk. This topic is well documented in the following article and I will refer to it. Partitioning/Home/Movinghttps://help.ubuntu.com/community/Partitioning/Home/Moving Part 1 will show how to create
- [Apache HTTP Server and .htaccess](https://blog.matrixpost.net/apache-and-htaccess/) - In this post I want to summarize some information about securing your Apache websites. This topic is well documented from the Apache Software Foundation. By default we do not really need .htaccess to secure our Apache websites, in fact we should avoid to use it, you should prefer to configure all of these settings directly
- [Nikto Web Server Scanner](https://blog.matrixpost.net/nikto/) - In this post I want to show how to install and using the nikto command-line vulnerability scanner. Introduction Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6700 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific problems
- [SSH Session Timeout - TCP Keepalive](https://blog.matrixpost.net/ssh-session-timeout-tcp-keepalive/) - In case your ssh connection is permanently disconnected in idle state, you can enable TCP-Keepalive either on the ssh server or the client or on both. To enable TCP-Keepalive on the ssh server, you can comment out the following line in /etc/ssh/sshd_config TCPKeepAlive yes To enable TCP-Keepalive on the Linux client system wide, you can
- [pfSense Boot Loop after Power Outage](https://blog.matrixpost.net/pfsense-boot-loop-after-power-outage/) - A few weeks ago I installed pfSense 2.5.2 on a kettop Mi4005L Mini PC. This Mini PC uses an Aptio BIOS UEFI Firmware from American Megatrends Inc. (AMI) and settings for Restore From AC Power Loss was by default set to Power Off. So if a power loss happens, pfSense won't restart automatically and you have to
- [Using HTTP Strict Transport Security (HSTS) with Apache2](https://blog.matrixpost.net/using-http-strict-transport-security-hsts-with-apache2/) - Securing the connection to a website by using a HTTP 301 Moved Permanently response status, to notify the user's browser to request the page by using the HTTPS protocol instead HTTP, will not prevent man-in-the-middle attacks such as protocol downgrade attacks and cookie hijacking. The 301 redirect is considered a best practice for upgrading users from HTTP to HTTPS. Introduction
- [Bypass Exchange Room Mailbox Delegation for specific Users](https://blog.matrixpost.net/bypass-exchange-room-mailbox-delegation-for-specific-users/) - You can enable in Exchange delegation for booking requests against room mailboxes as follows. In this case each time a user sends a booking request to the room mailbox (calendar), it will only be accepted tentative until a delegate approved it. If you want to specify specific users to bypass the delegation and approval process
- [Configure certificate auto-enrollment](https://blog.matrixpost.net/configure-certificate-auto-enrollment/) - In this post I want to show how to configure certificate auto-enrollment. This topic is well documented from Microsoft. I will use certificate auto-enrollment among other things to deploy computer certificates to all computers in the network, they should be able to process computer authentication against a RADIUS server (NPS server role), in order to
- [Set up a Key Recovery Server for the Microsoft certification authority (CA)](https://blog.matrixpost.net/set-up-a-key-recovery-server-for-ad-cs/) - In this post I want tho show how to setup a key recovery server for your internal Windows CA (AD CS server role). A Microsoft certification authority (CA) can be configured to archive and recover the private key associated with the public key submitted in the certificate request. Recovery is useful if a key is
- [Active Directory Certificate Mapping - Implicit vs. Explicit](https://blog.matrixpost.net/active-directory-certificate-mapping-implicit-vs-explicit/) - In Active Directory you can use certificate mapping to bind an identity to a X.509 certificate, which then can be used to authenticate against services from Microsoft. Implicit vs. Explicit For certificate mapping we need to distinguish between the implicit and explicit mapping. Implicit is what in most cases if using certificates from the internal
- [Enable External Users for booking and adding Exchange Room Calendars](https://blog.matrixpost.net/enable-external-users-for-booking-and-adding-exchange-room-calendars/) - If you want to allow external users for booking and adding your Exchange room calendars in Outlook, you have to do the following two steps for the specified Room Mailbox. It doesn't matter if the Room Mailbox is homed in Exchange Online or On-Premises, the cmdlets are available in on-premises Exchange and in the cloud-based
- [Upgrade Windows Server 2016 Domain Controllers and AD Schema to Windows Server 2019 | Raise Active Directory domain and forest functional levels](https://blog.matrixpost.net/upgrade-domain-controllers-and-ad-schema-to-windows-server-2019/) - To update a domain controller, best practice is to install a server with the newer version of Windows Server and promote it to a domain controller, then demote the older domain controller. Another way is to do an in-place upgrade from Windows Server to a newer version. Below I will go through the separate steps
- [Adjust a Date from Past or Future on Windows Server permanently](https://blog.matrixpost.net/adjust-a-date-from-past-or-in-future-on-windows-server-permanently/) - In case you need to adjust on your Windows Server a date different from the actual date and time, for whatever reason, like testing annual closure or genereal behaviour for some systems after a specific date, you need to configure the following steps in order to prevent automatic date and time synchronisation back to the
- [Force rebuild Active Directory Replication Topology across Site Links](https://blog.matrixpost.net/force-rebuild-active-directory-replication-topology-across-site-links/) - To force the rebuild of the topology within one site, run the Knowledge Consistency Checker (KCC) on any domain controller within that site. You can run the KCC by selecting the desired site in the Active Directory Sites and Services console, expand the Servers folder from this site, expand the server node and click on
- [DFS Domain-based Namespace Folders are missing after replacing Domain Controllers](https://blog.matrixpost.net/dfs-domain-based-namespace-folders-are-missing-after-replacing-domain-controllers/) - After replacing this weekend all domain controllers from Windows Server 2016 to Windows Server 2019, the clients wasn't able to access the DFS domain-based namespace and folders anymore. So as I simply forgot to install the DFS domain-based namespace server role on the new domain controllers, I thought installing the role on the servers would
- [Renew Edge Subscription in Exchange Server after Cumulative Update](https://blog.matrixpost.net/renew-edge-subscription-in-exchange-server-after-cumulative-update/) - Last weekend I was updating my on-premises Exchange Servers with the new cumulative update and therefore had to renew the Edge Subscription in order the new version and build number of the Edge Server in the perimeter network will be displayed in the Exchange admin center (EAC) from the internal servers. In this post I
- [Licensing mode for the Remote Desktop Session Host is not configured.](https://blog.matrixpost.net/licensing-mode-for-the-remote-desktop-session-host-is-not-configured/) - If you configure the Remote Desktop Services (RDS) and getting the following warning message Licensing mode for the Remote Desktop Session Host is not configured. even everything is looking fine in the server manager as follows. You have set the licencing mode directly in the registry as follows. HKLMSYSTEMCurrentControlSetControlTerminal ServerRCMLicensing CoreChange the default value from
- [Restore deleted Microsoft 365 Hybrid User](https://blog.matrixpost.net/restore-deleted-microsoft-365-hybrid-user/) - If you need to restore a Microsoft 365 hybrid user account which was synced from on-premises Active Directory to Azure AD and Microsoft 365, you need to perform the following steps: A soft-deleted user mailbox is a mailbox that has been deleted using the Microsoft 365 admin center or the Remove-Mailbox cmdlet in Exchange Online PowerShell, and
- [Update Firmware and UEFI for IBM x3650 M4 Server by using the Lenovo XClarity Essentials Bootable Media Creator](https://blog.matrixpost.net/update-ibm-x3650-m4-server-by-using-the-lenovo-xclarity-essentials-bootable-media-creator/) - You can use the Lenovo XClarity Essentials Bootable Media Creator (BoMC) to update your IBM X3650 M4 servers firmware and BIOS/UEFI, Device drivers are not included in the bootable image and must be updated separately. Technical overviewUsers can use Lenovo XClarity Essentials Bootable Media Creator (hereinafter referred to as BoMC) to create bootable media suitable
- [Update Firmware, UEFI and Device drivers for IBM x3650 M5 (5462) Server by using the Lenovo XClarity Essentials UpdateXpress](https://blog.matrixpost.net/update-firmware-uefi-and-device-drivers-for-ibm-x3650-m5-5462-server-by-using-the-lenovo-xclarity-essentials-updatexpress/) - In one of my last posts, I described how to update firmware and UEFI for an IBM X3650 M4 Server by using the Lenovo XClarity Essentials Bootable Media Creator (BoMC) tool. Unfortunately the BoMC tool will not update device drivers for the installed OS on the server. In this post I want to show how
- [Update Firmware, UEFI and Device Drivers for Dell PowerEdge Servers by using the Dell iDRAC Lifecycle Controller](https://blog.matrixpost.net/update-firmware-uefi-and-device-drivers-for-dell-poweredge-servers-by-using-the-dell-idrac-lifecycle-controller/) - In my last posts shown below, I described how to update firmware, UEFI and device drivers for IBM X3650 M4 and M5 servers, now I want to do the same but this time for a Dell PowerEdge Server R730. Integrated Dell Remote Access Controller (iDRAC) In order to do so you can use the Integrated
- [Prevent Branch Office Domain Controllers from registering generic DNS Records and Netmask Ordering](https://blog.matrixpost.net/prevent-branch-office-domain-controller-from-registering-generic-dns-records-and-netmask-ordering/) - In networks with several sites, like branch office sites and a headquartes site, by default domain controllers in each site will publish DNS SRV resource records for the site (site-specific) in which the domain controller resides and further in a generic (non-site-specific) portion in the DNS namespace. In the figure below you will see marked in
- [Teams PowerShell several Cmdlets doesn't work - ErroUnable to cast object of type 'System.Management.Automation.PSListModifier' to type 'System.String'](https://blog.matrixpost.net/teams-powershell-several-cmdlet-doesnt-work-errounable-to-cast-object-of-type-system-management-automation-pslistmodifier-to-type-system-string/) - This week I created a new Microsoft Teams Direct Routing Setup for our branch office in Switzerland by using the Sunrise Business Voice Cloud Connect as SIP Trunk. The setup I did on a new installed Windows 10 computer. Therefore I first had to install the latest version from the Microsoft Teams cmdlets module for
- [Azure AD Connect - Unable to validate credentials due to an unexpected error.](https://blog.matrixpost.net/azure-ad-connect-unable-to-validate-credentials-due-to-an-unexpected-error/) - In case you will get the following error message at connecting to Azure AD, there will be a good chance that only the password for your Azure AD global administrator is expired. So try to login Azure AD Connect by using the interactive authentication. Therefore change to the directory where Azure AD Connect binary is
- [Installing SAP Data Intelligence on Azure Kubernetes Service - Part 1](https://blog.matrixpost.net/installing-sap-data-intelligence-on-azure-kubernetes-service/) - In this post I want to show how to set up SAP Data Intelligence on Azure Kubernetes Service (AKS). SAP Data Intelligence is a comprehensive data management solution that connects, discovers, enriches, and orchestrates disjointed data assets into actionable business insights at enterprise scale.It enables the creation of data warehouses from heterogeneous enterprise data, simplifies
- [Installing SAP Data Intelligence on Azure Kubernetes Service - Part 2](https://blog.matrixpost.net/installing-sap-data-intelligence-on-azure-kubernetes-service-part-2/) - In Part 2 we will first install and configure the tools including the Software Lifecycle Container Bridge 1.0 on the Jumphost, in order to deploy SAP Data Intelligence to our Kubernetes Cluster. We also use in this part the SAP Maintenance Planner to set up container based stack on Azure Kubernetes Service. We will first install
- [Installing SAP Data Intelligence on Azure Kubernetes Service - Part 3](https://blog.matrixpost.net/installing-sap-data-intelligence-on-azure-kubernetes-service-part-3/) - In Part 3 we will install and configure the ingress controller to expose SAP Data Intelligence to the internet. Expose SAP Data Intelligence System Management Externally through an Ingress Below you will find the original SAP Installation Guide about how to expose SAP Data Intelligence through Ingress. Expose SAP Data Intelligence System Management Externally through an IngressSource: https://help.sap.com/viewer/a8d90a56d61a49718ebcb5f65014bbe7/3.2.3/en-US/43951922bae74636bd057cc4b8ae088c.html I
- [Prevent Members from Domain Users Group to Logon by default to any Domain joined Computers](https://blog.matrixpost.net/prevent-members-from-domain-users-group-to-logon-by-default-to-domain-joined-computers/) - In this post I want to show how you can prevent that domain users can logon by default to each domain joined computer in your Active Directory network. In Active Directory when you create a new user, by default this user is a member in the Domain Users group as shown below. The AD group
- [pfSense 2.6.0 Upgrade results on Hyper-VMs in very slow network speed](https://blog.matrixpost.net/pfsense-2-6-0-upgrade-results-on-hyper-vms-in-very-slow-network-speed/) - Last weekend I upgraded our pfSense 2.5.2-RELEASE Hyper-V VM appliances to the new pfSense version 2.6.0-RELEASE. One VM was configured with OpenVPN for external clients and one VM was to establish an IPsec VPN Tunnel between our datacenter network and the headquarter network. On both VMs the VPN tunnel performance after the upgrade was terrible
- [MySQL - Access denied for user 'root'@'localhost'](https://blog.matrixpost.net/mysql-access-denied-for-user-rootlocalhost/) - In case you want to connect to your local MySQL Database by using the root user and you encounter one of the the following error messages ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)orERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO) You can solve this issue as follows. Open
- [Installing or Updating the latest Version of the AWS CLI](https://blog.matrixpost.net/installing-or-updating-the-latest-version-of-the-aws-cli/) - To install the AWS Command Line Interface (AWS CLI) for Windows you have to download the latest MSI installer below. Download and run the AWS CLI MSI installer for Windows (64-bit)https://awscli.amazonaws.com/AWSCLIV2.msiAlternatively, you can run the msiexec command to run the MSI installer.msiexec.exe /i https://awscli.amazonaws.com/AWSCLIV2.msi To confirm the installation, open the Start menu, search for cmd to open a command prompt window, and at
- [Code Signing in Visual Studio](https://blog.matrixpost.net/sign-visual-studio-applications/) - In this post I want to show how you can sign your Visual Studio application by using a X.509 code sign certificate. At the end I will also show how you can sign your assembly with a strong name. By using a X.509 code sign certificate to sign your application, you can avoid warning messages
- [Set up Exchange on-premise to relay outbound Emails to the Internet via Exchange Online Protection (EOP)](https://blog.matrixpost.net/set-up-exchange-on-premise-to-relay-mails-to-the-internet-via-exchange-online-protection-eop/) - If you had an Exchange Hybrid configuration, you can route also outbound email messages from your on-premise mailboxes through Exchange Online Protection (EOP). Therefore you just had to create a new send connector on your Exchange on-premises Server and in each of your AD sites if more than one for the address space *, which
- [Set up DomainKeys Identified Mail (DKIM) on Exchange on-premise](https://blog.matrixpost.net/set-up-domainkeys-identified-mail-dkim-on-exchange-on-premise/) - Out of the box on-premise Exchange Server doesn't support DKIM signing. To deploy DKIM for your on-premises Exchange Servers you can now use the Exchange DKIM Signer which is a free open source tool you can download from GitHub. The tool will install a further Transport Agent on your Exchange Server which will sign the
- [How to reject Emails in Office 365 they fail DMARC](https://blog.matrixpost.net/how-to-reject-emails-in-office-365-they-fail-dmarc/) - EASYDMARC had an interesting blog post about DMARC handling with Microsoft 365. DMARC and Microsoft : What is Happening?https://easydmarc.com/blog/dmarc-and-microsoft/ You will also find an article from Microsoft itself how they handle inbound email that fails DMARC. How Microsoft 365 handles inbound email that fails DMARChttps://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/use-dmarc-to-validate-email?view=o365-worldwide#how-microsoft-365-handles-inbound-email-that-fails-dmarc The main point is, that if the DMARC policy for
- [Outlook 2016/2019 Click to run - Adding multiple Office 365 E-Mail Profiles - Sorry, another account from your organization is already signed in on this computer](https://blog.matrixpost.net/outlook-2016-2019-click-to-run-adding-multiple-office-365-e-mail-profiles-sorry-another-account-from-your-organization-is-already-signed-in-on-this-computer/) - Recently I wanted to configure two E-Mail profiles on a Windows 10 computer, each of them should include an Office 365 mailbox. In past configuring multiple E-Mail profiles on one computer was never a problem, but in these cases never more than one was configured with an Office 365 mailbox, the other mailboxes where hosted
- [ZeroConfigExchange & ZeroConfigExchangeOnce](https://blog.matrixpost.net/zeroconfigexchange-and-zeroconfigexchangeonce/) - Creating an Outlook profile is very easy and a wizard will guide you throughout the process. The wizard therefore uses the Autodiscover service from Exchange. Autodiscover service in Exchange Serverhttps://learn.microsoft.com/en-us/exchange/architecture/client-access/autodiscover?view=exchserver-2019 The Autodiscover service allows Outlook to discover the Exchange mailbox settings so that users don't have to deal with manually configuring advanced settings. Despite of
- [Set up SSH private/public Key Pair without using Password Authentication on Linux](https://blog.matrixpost.net/set-up-ssh-private-public-key-without-using-password-authentication-on-linux/) - SSH keys are not only more convenient but also improve the security in contrast to the password authentication, provided the private key is managed, stored and secured properly. As I set up a new virtual Ubuntu machine for my lab environment, the first thing I will always do is to set up SSH for private/public
- [Configure Postfix to block and reject Unsolicited Messages or Spam](https://blog.matrixpost.net/configure-postfix-to-block-and-reject-unsolicited-messages-or-spam/) - Below I want to show how to configure the built-in options for Postfix to prevent unsolicited commercial emails (UCE) or spam will be sent to your inbox and instead will get rejected. Introduction First we will see what Postfix out of the box supports to block and reject UCE and spam. Postfix can block such
- [Email Authentication by using DMARC, DKIM and SPF](https://blog.matrixpost.net/email-authentication-by-using-dmarc-dkim-and-spf/) - In this post I want to show how you can prevent that your email domain is abused for email spoofing (forged sender addresses) and phishing. The original SMTP protocol out of box is not designed to provide and proof the origin of email messages. Therefore we can use techniques like DMARC, DKIM and SPF. Before
- [Set up DomainKeys Identified Mail (DKIM) for Exchange Online](https://blog.matrixpost.net/set-up-domainkeys-identified-mail-dkim-in-office-365/) - Either you can set up DKIM by using the Microsoft 365 Defender portal or manually by using PowerShell. First I will show how to set up DKIM in the Microsoft 365 Defender portal. Microsoft 365 automatically sets up DKIM for onmicrosoft.com domains. No steps are needed to use DKIM for any initial domain names (like litware.onmicrosoft.com). For
- [Windows Local Administrators Group Membership on Azure AD joined Devices](https://blog.matrixpost.net/windows-local-administrators-group-membership-on-azure-ad-joined-devices/) - What actually happens to the local administrators group membership when you join a windows device to Azure AD? Below to check the modifications to the local administrator group membership will occur during an Azure AD join, I will using a new installation from Windows 10 on a virtual machine. Here I will sign in with
- [Cloud Computing - Hyperscaler](https://blog.matrixpost.net/cloud-computing-hyperscaler/) - What is a Hyperscaler? In short --> Scalable cloud computing systems in a data center like Amazon (AWS), Microsoft (Azure), Google (GCP) and Oracle Cloud Infrastructure (OCI). One of the first hyperscaler was Amazon with Amazon Web Services (AWS) founded in the year 2006. Then in 2010 Microsoft came with its cloud platform Azure and
- [Control automatic external email forwarding in Microsoft 365](https://blog.matrixpost.net/control-automatic-external-email-forwarding-in-microsoft-365/) - Microsoft recently changed its default outbound spam filter policy (Automatic - System-controlled) in Exchange Online to block per default external email forwarding. Automatic - System-controlled: This is the default setting. This setting is now the same as Off. When this setting was originally introduced, it was equivalent to On. Over time, thanks to the principles of secure by
- [Determine Data Location from your Microsoft 365 Tenant](https://blog.matrixpost.net/determine-data-location-from-your-micrsoft-365-tenant/) - To determine where your Microsoft 365 tenant is storing its data, you can sign-in to the Microsoft 365 portal and check the location as follows. https://portal.office.comAdmin --> Home --> Settings --> Org settings --> Organization profile The data location for this tenant is Germany. Links Where your Microsoft 365 customer data is storedhttps://learn.microsoft.com/en-us/microsoft-365/enterprise/o365-data-locations?view=o365-worldwide
- [AWS - Organizations and Control Tower](https://blog.matrixpost.net/aws-organizations-and-control-tower/) - In this post I just want to summarize some information about what is an organization and control tower in AWS. These topics are well documented in AWS. First we will see what are AWS organizations? AWS Organizations AWS Organizations is an account management service that lets you consolidate multiple AWS accounts into an organization that
- [Office 365 Cross-Tenant Mailbox Migration (Corporate Merger Scenario)](https://blog.matrixpost.net/office-cross-tenant-mailbox-migration/) - Because of a corporate merger from the parent company of a subsidiary, I need to move the user mailboxes from the subsidiary, homed in the Office 365 tenant or on-premise Exchange from the parent company, into a brand-new cloud only Office 365 tenant. Some of the user mailboxes I had to move are still on
- [AWS Command Line Interface (AWS CLI)](https://blog.matrixpost.net/aws-command-line-interface-aws-cli/) - In this post I want to summarize some basic information you need to know to start using the AWS CLI to manage your resources in AWS. To access AWS services with the AWS CLI, you need an AWS account, IAM credentials, and an IAM access key pair. When running AWS CLI commands, the AWS CLI
- [Set up AD Connector in AWS](https://blog.matrixpost.net/set-up-ad-connector-in-aws/) - In this post I want to show how to set up the AD Connector in AWS. AD Connector is a directory gateway with which you can redirect directory requests to your on-premises Microsoft Active Directory without caching any information in the cloud. AD Connector comes in two sizes, small and large. You can spread application
- [AWS - IAM vs. IAM Identity Center vs. Directory Service](https://blog.matrixpost.net/aws-iam-vs-iam-identity-center-vs-directory-service/) - In this post I want to summarize some information about the different account types you can use in AWS. This topic is well documented from AWS. You can use different account types in AWS to manage resources from AWS. When you create an AWS account, you begin with one sign-in identity that has complete access
- [AWS AD Connector Directory - Domain Join](https://blog.matrixpost.net/aws-ad-connector-directory-domain-join/) - In my last post I showed how to set up the AD Connector to redirect directory requests to your on-premises Microsoft Active Directory without caching any information in the cloud. In this post we will see how we can join computers from our AWS VPC to our on-premise network and domain by using the AD
- [Create a new Device Collection in System Center Configuration Manger (SCCM) for Windows Server 2022](https://blog.matrixpost.net/create-a-new-device-collection-in-system-center-configuration-manger-sccm-for-windows-server-2022/) - In order to create a new device collection in SCCM, we first need the OS Version of the computers we want to be added automatically to this collection. For Windows Server 2022 the OS version is 10.0.20348 and can be determined by running the systeminfo command as shown below. OS versionsWindows Server 2012 --> 6.2.9200Windows
- [Set up your Organization for Google Cloud](https://blog.matrixpost.net/set-up-your-organization-for-google-cloud/) - In this post I want to go through the separate steps to set up your organization for the Google Cloud. First I want to distinguish between the term Google Cloud and Google Cloud Platform (GCP), in the web they are often used interchangeably and when you heard about Google Cloud, mostly GCP is actually meant.
- [Google Cloud - Admin Console vs. GCP Console](https://blog.matrixpost.net/google-cloud-admin-console-vs-gcp-console/) - To manage the Google Cloud you have access to two consoles. Admin Consolehttps://admin.google.com/Allows you to manage people, groups, access controls, and Google Workspace domains. Cloud Console (Google Cloud Platform GCP)https://console.cloud.google.com/Allows you to implement granular access controls via Identity and Access Management (IAM), enable APIs and services, create and manage infrastructure and resources like virtual machines,
- [Google Cloud Identity](https://blog.matrixpost.net/google-cloud-identity/) - Cloud Identity is Google's identity and access management (IAM) solution. Cloud Identity is the backbone of Google Workspace (formerly Google Apps for Business or G Suite). So Cloud Identity is the counterpart from Google to Microsoft's Azure AD. Cloud Identity is an Identity as a Service (IDaaS) and enterprise mobility management (EMM) product. It offers
- [Google Cloud CLI (gcloud)](https://blog.matrixpost.net/google-cloud-cli/) - The Google Cloud CLI is a set of tools to create and manage Google Cloud resources. You can use these tools to perform many common platform tasks from the command line or through scripts and other automation. For example, you can use the gcloud CLI to create and manage the following: Compute Engine virtual machine
- [Microsoft Azure Management Groups](https://blog.matrixpost.net/microsoft-azure-management-groups/) - In this post I want to summarize some information about Azure Management Groups to organize and manage multiple subscriptions in your Azure AD directory (tenant). Each directory (tenant) is given a single top-level management group called the root management group. Azure Management Groups are frequently compared and mentioned as counterpart in the web to Google Cloud's organization
- [Google Cloud Organization vs. AWS Organizations vs. Microsoft Azure Management Groups](https://blog.matrixpost.net/google-cloud-organization-vs-aws-organizations-vs-microsoft-azure-management-groups/) - In this post I want to summarize the differences about how the three top cloud providers: Amazon AWS, Microsoft Azure and Google Cloud will provide multiple account/project management and billing consolidation. AWS provides therefore the Organization service and in Google Cloud you can set up an Organization resource. Microsoft Azure and its Azure Management Groups
- [Working Basics with the Google Cloud Platform (GCP)](https://blog.matrixpost.net/working-basics-with-google-cloud/) - In this post I want to show some basics good to know when working with the Google Cloud Platform (GCP). Creating a Google project To use Cloud APIs, you also need to have a Google project. A project is equivalent to a developer account. It serves as a resource container for your Google Cloud resources.
- [Set up your Organization for Google Cloud Part II](https://blog.matrixpost.net/set-up-your-organization-for-google-cloud-part-ii/) - In part I we saw how to create a new Cloud Identity account and create an organization in Google Cloud. This was the first task about to set up an organization for Google Cloud as shown below. To set up an organization in Google Cloud, you finally need to configure several tasks to build the
- [Google Cloud - Create and Connect to a new Windows VM Instance](https://blog.matrixpost.net/google-cloud-create-and-connect-to-a-new-windows-vm-instance/) - Below we will see how to create in Google Cloud a new Windows VM instance and connect to it by using RDP. Create a new Windows VM Instance To create a new Windows VM instance I will first have to select a project where I want to deploy it to. So below I will create
- [Google Cloud - Create  a new Linux VM Instance and Connect to using SSH Metadata](https://blog.matrixpost.net/google-cloud-create-and-connect-to-a-new-linux-vm-instance/) - In my last post I was showing how to create and connect to a new Windows VM instance in Google Cloud. In this post we will see how to create a new Linux VM instance and later how to connect to using SSH Metadata. For Linux and SSH you will have different methods and clients
- [Linux Sudoers (sudo command) File](https://blog.matrixpost.net/linux-sudoers-sudo-command-files/) - Below I will summarize some information about the Linux sudoers file. The file will grant priviliges to users and groups what commands they allowed to execute by using the sudo command on the system. sudo is a program for Unix-like computer operating systems that enables users to run programs with the security privileges of another
- [Google Cloud - Connect to Linux VMs directly without Metadata or OS Login](https://blog.matrixpost.net/access-to-vms-directly-without-metadata-or-os-login/) - In my previous two posts below we saw how we can connect to a Linux VM instance in Google Cloud using SSH Metadata or SSH OS Login. In this post I want to show how you can connect to the instance directly with password or private/public SSH Key managed by yourself. Connecting by using SSH
- [AWS - Create a new Linux VM Instance and connect to using SSH](https://blog.matrixpost.net/aws-create-a-new-linux-vm-instance-and-connect-to-using-ssh/) - Below we will see how to create a new Linux VM instance in AWS and connect to by using SSH. To see how to create a new Windows VM instance you can read my post about AWS AD Connector Directory - Domain Join where I will also create a new Windows VM instance to demonstrate
- [RDP to Azure Active Directory joined Windows 10 Computer](https://blog.matrixpost.net/rdp-to-azure-active-directory-joined-windows-10-computer/) - In case you have trouble to connect to an Azure AD joined Windows 10 Computer by using the Remote Desktop Protocol (RDP) and your Azure AD credentials like shown below, you first need to adjust some settings in the RDP file. Here I wanted to connect to a virtual Windows 10 computer which is running
- [IBM x3650 M4 - RAID5 HDDs fail with preserved cache retained](https://blog.matrixpost.net/ibm-x3650-m4-raid5-hdds-fail-with-preserved-cache-retained/) - Recently one of my older IBM X3650 M4 servers had a failed hdd drive in a RAID5 Volume where Hyper-V hosts the virtual machines. RAID5 can tolerate one failed drive, a few days later the raid controller set another drive offline and the server was shutting down. Normally this can happen during a read intensive
- [Set up Google Cloud Directory Sync](https://blog.matrixpost.net/google-cloud-directory-sync/) - In this post I want to go through the separate steps to set up Google Cloud Directory Sync in order to sync your on-premise Active Directory users to Google Cloud. Google Cloud uses Google identities for authentication and access management. Manually maintaining Google identities for each employee can add unnecessary management overhead when all employees already have
- [Blazor Server - Basics Part 1](https://blog.matrixpost.net/blazor-server-basics-part-1/) - Nearly one year ago, at the end of 2021 I was starting my first Blazor Server project, a new version of our old time tracking and vacation planning system which in 2010 was written in ASP.Net Web Applications (.NET Framwork - Web Forms) and VB.Net. Before I started to create a new version, I first
- [Blazor Server - Basics Part 2](https://blog.matrixpost.net/blazor-server-basics-part-2/) - As mentioned in Part 1, in this post I will show how to create a new blazor server web app and some further basic information. To build your first web app with Blazor server I would also recommend to read the following intro from Microsoft which I was also using first. Blazor Tutorial – Build
- [Visual Studio Yellow Triangle NuGet Package Missing Dependencies](https://blog.matrixpost.net/visual-studio-yellow-triangle-nuget-package-missing-dependencies/) - In case your Visual Studio project had missing package dependencies indicating by a yellow triangle icon at the package like below, you can run the dotnet restore command to get more information about. Open the Package Manager Console under Tools --> NuGet Package Manager --> Package Manager Console Enter dotnet restore in the console. dotnet
- [The trust relationship between this workstation and the primary domain failed](https://blog.matrixpost.net/the-trust-relationship-between-this-workstation-and-the-primary-domain-failed/) - Today I needed to restore a virtual machine because the virtual hard disk was getting corrupt. I needed to restore an older backup because all newer were also corrupt. After the restore I couldn't log on to the virtual machine by using a domain user account and getting the following error message. The trust relationship
- [Blazor Server – Basics Part 3 - Custom Layout](https://blog.matrixpost.net/blazor-server-basics-part-3-custom-layout/) - In this part from my blazor server series, I want to show how you can apply a custom layout to your blazor server web app. So far we just set up the default blazor server web app with the default main layout from the MainLayout.razor template. I won't explain how to design a new layout
- [OwnCloud Files not showing up in the Browser](https://blog.matrixpost.net/owncloud-files-not-showing-up-in-the-browser/) - In case you have uploaded some files to your OwnCloud, no matter how, but they not showing up in the browser, check that you include the following config parameter in your /config/config.php file. 'filesystem_check_changes' => 1 You can also trigger a file scan by using the following commands. File scans can be performed per-user,
- [VNet Peering between different Azure Active Directory Tenants](https://blog.matrixpost.net/vnet-peering-between-different-azure-active-directory-tenants/) - In this post I want to show how to peer two VNets from different Azure Active Directory tenants. I will peer here the following two VNets: VNet-braincourt.de (production tenant braincourt.de) VNet-braintesting.de (lab tenant braintesting.de) The peering we need to set up in each tenant, therefore the user we use to set up the peering in
- [Hot Potato vs Cold Potato Routing](https://blog.matrixpost.net/hot-potato-vs-cold-potato-routing/) - Hot Potato and Cold Potato are two terms which describes how internet traffic is routed between different autonomous system (AS). An autonomous system (AS) is a collection of connected Internet Protocol (IP) routing prefixes under the control of one or more network operators on behalf of a single administrative entity or domain, that presents a common and clearly defined routing policy
- [Co-Management with Microsoft Endpoint Configuration Manager and Microsoft Intune](https://blog.matrixpost.net/co-management-with-microsoft-endpoint-configuration-manager-and-microsoft-intune/) - In my post below I was showing how to set up co-management with System Center Configuration Manager (SCCM 1910), now I want to do the same with its successor Microsoft Endpoint Configuration Manager (2211 as of today). Starting in version 1910, Configuration Manager current branch is now part of Microsoft Endpoint Manager. Version 1906 and
- [Re-Create ConfigMgr SQL Server Indentification Certificate](https://blog.matrixpost.net/re-create-configmgr-sql-server-indentification-certificate/) - Recently I encountered issues on my Microsoft Endpoint Configuration Manager (MECM) server and especially its management point role regarding some certificate issues. By accident I deleted the SQL Server Identification Certificate. After a restart from the computer the SQL Server won't start anymore and I encountered the following errors. Unable to load user-specific certificate [Cert
- [Configuration Manager - Management Point Critical Error](https://blog.matrixpost.net/__trashed/) - In my lab environment the Microsoft Endpoint Configuration Manager (MECM) formerly System Center Configuration Manager (SCCM) was showing a critical error in the Site Status for the Management Point as shown below. The error logs from the MECM Console was showing the following message. MP Control Manager detected MP is not responding to HTTP requests.
- [Removal of Exchange Certificate (New-,Renew-,Import-,Export-) Handling in Exchange Admin Center (EAC) Console](https://blog.matrixpost.net/removal-of-exchange-certificate-new-renew-import-export-handling-in-exchange-admin-center-console/) - Microsoft removed in its latest cumulative update releases for Exchange Server the following options from the Exchange Admin Center console. Import & Export Exchange Certificates Complete Exchange Certificate Request New Exchange Certificate Request from CA Renew Exchange Certficate Request For these options you now have to use PowerShell cmdlets. To prevent misuse of UNC paths
- [Export/Import PuTTY Settings and Sessions](https://blog.matrixpost.net/export-import-putty-settings-and-sessions/) - Below you will see how you can export and import PuTTY sessions in order to use them on another machine. You can either use the command prompt or PowerShell. Export Sessions Open a command prompt and execute the following command in order to export the sessions into a reg file stored on your Desktop. regedit
- [Network Security Groups (NSG) vs. Application Security Groups (ASG)](https://blog.matrixpost.net/network-security-groups-nsg-vs-application-security-groups-asg/) - In Azure you can use a network security group to filter network traffic between Azure resources in an Azure virtual network (VNet). These network security groups you can associate either to a virtual network subnet or directly to a network interface in a virtual machine. The same network security group can be associated to as
- [Configuring federated sharing (free/busy calendar information) between Exchange Hybrid Organizations](https://blog.matrixpost.net/configuring-federated-sharing-free-busy-calendar-information-between-exchange-hybrid-organizations/) - In my last post we saw, how to configure federated sharing between two on-premise Exchange organizations. Now in this post I want to do the same but for Exchange Hybrid Organizations where mailboxes hosted in both organizations, on-premise and Exchange Online. More about Exchange Hybrid Organizations and in specific Exchange classic full hybrid, you can read in my following post.
- [Configuring federated sharing (free/busy calendar information) between on-premise Exchange Organizations](https://blog.matrixpost.net/configuring-federated-sharing-free-busy-calendar-information-between-on-premise-exchange-organizations/) - In this post I want to show how you can set up federated sharing between two on-premise Exchange organizations. With federated sharing, users in your on-premises Exchange organization can share free/busy calendar information with recipients in other Exchange organizations that are also configured for federated sharing. Free/busy sharing can be enabled between two organizations running
- [Configure Free/Busy Cross Request (Exchange Online and Exchange on-premise) when both Organizations are Hybrid](https://blog.matrixpost.net/configure-free-busy-cross-request-exchange-online-and-exchange-on-premise-when-both-organizations-are-hybrid/) - In my post below I was showing how you can configure free/busy calendar information for hybrid organizations, but only to share it for Exchange Online mailbox users. In case both organizations are hybrid and you want to enable them to share free/busy calendar information between both organizations and environments, it gets really messy and you need to configure for
- [Enable Python for Apache Websites](https://blog.matrixpost.net/enable-python-for-apache-websites/) - Below I want to show how you can enable python for websites running on the apache webserver in Ubuntu. Install Python Python3 is by default installed on Ubuntu as required by system components. You can nevertheless install Python3 by using the following command. $ sudo apt install python3 # Determin the version$ python3 -V By
- [Blazor Server – Basics Part 4 - Program.cs File](https://blog.matrixpost.net/blazor-server-basics-part-4-program-cs-file/) - In this part from my blazor server series, I want take a look what happened at the start of the web app by invoking the program.cs file. The Blazor Server app's entry point is defined in the Program.cs file, as you would see in a Console app. ASP.NET Core web applications are configured in Program.cs, or through a
- [Blazor Server – Basics Part 5 - Authentication and Authorization](https://blog.matrixpost.net/blazor-server-basics-part-5-authentication-and-authorization/) - In this part I want to show how you can implement authentication and authorization in your Blazor Server app. In Part 6 I will show how you can query your on-premise Active Directory by using the user identity determined by the authentication below. Introduction to Authentication in Blazor Server ASP.NET Core Identity is designed to
- [Blazor Server – Basics Part 6 - Query the on-premise Active Directory](https://blog.matrixpost.net/blazor-server-basics-part-6-query-the-on-premise-active-directory/) - In Part 5 we saw how to authenticate and authorize users in Blazor Server, now in this post we use the user identity from the authenticated user to query our on-premise Active Directory to get more information about the user. First we need to create a new C# class which will handle accessing our on-premise
- [Blazor Server – Basics Part 7 - C# Events, Delegates and the EventCallback Class](https://blog.matrixpost.net/blazor-server-basics-part-7-c-events-and-delegates/) - As mentioned at the end of Part 6, in this post I want to show how you can use in your Blazor Server web app project C# events, delegates and the EventCallback class. More about C# events and delegates you can read in my following post. In Part 6 I was showing how you can
- [C# Events and Delegates](https://blog.matrixpost.net/c-events-and-delegates/) - In this post I want to take a closer look about what C# events and delegates are and what's the difference between both. Further we will see them in action in a little sample project. Delegates can be used without events, but events on the other side depends on a delegate and cannot be used
- [Blazor Server – Basics Part 8 – JavaScript interoperability (JS interop)](https://blog.matrixpost.net/blazor-server-basics-part-8-javascript-interoperability-js-interop/) - In this post I want to show how Blazor Server can interact with Java Script. A Blazor app can invoke JavaScript (JS) functions from .NET methods and .NET methods from JS functions. These scenarios are called JavaScript interoperability (JS interop). Source: https://learn.microsoft.com/en-us/aspnet/core/blazor/javascript-interoperability/?view=aspnetcore-7.0 Introduction As mentioned in the article below from Microsoft, you should prefer to modify or
- [Blazor Server – Basics Part 9 – Responsive Tags and Chips](https://blog.matrixpost.net/blazor-server-basics-part-9-responsive-tags-and-chips/) - In this part of my Blazor Server series, I want to show how you can easily create tags and chips for your web app. Chips (also sometimes called pills) and tags represent small blocks of information which are often used to filter data. One of the main reasons to use them, is to provide the
- [Blazor Server – Basics Part 10 – MS SQL Server Access and Data Binding](https://blog.matrixpost.net/blazor-server-basics-part-10-ms-sql-server-access-and-data-binding/) - In this post we will see how to bind data to Razor components and Document Object Model (DOM) elements in Blazor apps. Further I will show how to use a MS SQL Server database to store and request data for the web app. In the following article from Microsoft you will see the basics how
- [Offboarding Microsoft 365 Hybrid - Move to Cloud Only](https://blog.matrixpost.net/offboarding-microsoft-365-hybrid-move-to-cloud-only/) - In this post we will see how to move from a Microsoft 365 Hybrid environment to a Microsoft 365 cloud only environment. Introduction But first what is a Microsoft 365 Hybrid environment? In a Microsoft 365 Hybrid environment, your on-premise Active Directory is connected with your Azure AD in Microsoft Azure. Further we have Exchange
- [Blazor Server – Basics Part 11 – Create a Native Blazor UI Toggle Switch Component](https://blog.matrixpost.net/blazor-server-basics-part-11-native-blazor-toggle-switch-by-using-the-eventcallback-class-and-css/) - As already mentioned in Part 10 about data binding and accessing a MS SQL Server database, in this part we will see how we can create a toggle switch as native Blazor UI component in Blazor Server, by just using HTML, CSS, C# and the EventCallback class. In a nutshell, the EventCallback class is a
- [Blazor Server – Basics Part 12 – Create a Native Blazor UI Toggle Button Component](https://blog.matrixpost.net/blazor-server-basics-part-12-create-a-native-blazor-ui-toggle-button-component/) - In Part 11 I was showing how you can create a native Blazor UI Toggle Switch Component, now in this part we will see how we can create a native Blazor UI Toggle Button Component. As already mentioned in Part 10, below you will first see what are the differences between a toggle switch and
- [Running Blazor Server Web App on Linux and Apache](https://blog.matrixpost.net/host-and-publish-a-blazor-server-web-app-on-ubuntu-linux-and-apache/) - In this post we will see how to host and publish a blazor server web app on Ubuntu and apache. Therefore just a few steps are necessary to get your app up and running on Ubuntu and apache. Install the .NET SDK or .NET Runtime on Ubuntu First we need to install the .NET SDK or .NET Runtime on Ubuntu.
- [Using MySQL Database for Blazor Server Web App](https://blog.matrixpost.net/using-mysql-database-for-blazor-server-web-app/) - Today we will see how we can connect a blazor server web app to a MySQL database, both running on a Ubuntu virtual machine. About how to run a blazor server web app on Linux (Ubuntu) you can read my following post. Install the MySQL Employees Sample Database To show how we connect a blazor
- [Infrastructure as Code (IaC) – Part 1](https://blog.matrixpost.net/infrastructure-as-code-iac-part-1/) - This post is the beginning of a series about several tools and services for provisioning and managing on-premises and cloud infrastructures. The tools and services will describe, provision and finally ensure a desired state for our provisioned infrastructure (resources) by just using code. Below I will list all these tools and services with a short
- [Infrastructure as Code (IaC) - Part 4 - Azure Automation State](https://blog.matrixpost.net/infrastructure-as-code-iac-part-4-azure-automation-state/) - Azure Automation State Configuration is an Azure configuration management service that allows you to write, manage, and compile PowerShell Desired State Configuration (DSC) configurations for nodes in any cloud or on-premises datacenter. The service also imports DSC Resources, and assigns configurations to target nodes, all in the cloud. You can use Azure Automation State Configuration to manage a
- [Infrastructure as Code (IaC) - Part 5 - Azure Automanage Machine Configuration (formerly called Azure Policy Guest Configuration)](https://blog.matrixpost.net/infrastructure-as-code-iac-part-5-azure-automanage-machine-configuration-formerly-called-azure-policy-guest-configuration/) - Azure Automanage is a service which will automatically onboard virtual machines to several services as shown in the figure below when using the Best Practices Configuration Profiles Source: https://learn.microsoft.com/en-us/azure/automanage/overview-about#participating-services In this post I want to focus on Azure Automanage Machine configuration (formerly called Azure Policy Guest Configuration) and how we can use it to configure
- [Change Display Name in Azure for Azure AD joined Computers](https://blog.matrixpost.net/change-display-name-in-azure-for-azure-ad-joined-computers/) - If you rename your computer locally by using the Rename-Computer cmdlet or the Windows - System - settings page, after it was already joined to Microsoft Entra ID (formerly Azure Active Directory or Azure AD), unfortunately the display name will not get renamed/updated and reflected automatically in the Azure portal under the Microsoft Entra ID
- [Open Snipping Tool by default when pressing the Print Screen (PrtSC) Key in Windows 10/11](https://blog.matrixpost.net/open-snipping-tool-by-default-when-pressing-the-print-screen-prtsc-key-in-windows-10-11/) - To take snapshots of the screen by using the Windows Snipping Tool, one of my favorites tool for writing on this blog, you can set in Windows 10/11 within the settings page, that when you press the Print Screen (PrtSc) key, by default the snapshot will get opened in the Snipping Tool for further editing. To
- [New subscription structure for Microsoft 365 in Europe](https://blog.matrixpost.net/new-subscription-structure-for-microsoft-365-in-europe/) - Today I wanted to pick up a Microsoft 365 E3 trial license to work out a post about Microsoft Entra Global Secure Access. As usual I was searching for Microsoft 365 E3 within the Marketplace from the Microsoft 365 admin center. All I found here are these so called Microsoft 365 E3 EEA (no Teams)
- [What is Microsoft Entra Verified ID?](https://blog.matrixpost.net/microsoft-entra-verified-id/) - Microsoft Entra Verified ID is Microsoft's solution for Verifiable credentials (VCs). Verifiable credentials (VCs) are digital credentials which follow the relevant World Wide Web Consortium open standards. They can represent information found in physical credentials, such as a passport or license, as well as new things that have no physical equivalent, such as ownership of a bank account.
- [What is Microsoft Entra ID?](https://blog.matrixpost.net/what-is-microsoft-entra-id/) - This post is just for the sake of completeness about my blog post series dealing with the Microsoft Entra product family. Microsoft Entra ID is just a new name for Azure AD and there are no changes to any Azure AD capabilities.Source: https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/azure-ad-is-becoming-microsoft-entra-id/ba-p/2520436 Microsoft Entra ID is a cloud-based identity and access management service (IAM).
- [What is Microsoft Entra ID Governance?](https://blog.matrixpost.net/what-is-microsoft-entra-id-governance/) - Microsoft Entra ID Governance allows you to balance your organization's need for security and employee productivity with the right processes and visibility. It provides you with capabilities to ensure that the right people have the right access to the right resources. These and related Microsoft Entra ID and Enterprise Mobility + Security features allows you
- [What is Microsoft Entra External ID (Azure AD External Identities)?](https://blog.matrixpost.net/what-is-microsoft-entra-external-id-azure-ad-external-identities/) - Microsoft Entra External ID (for customers) is Microsoft’s new customer identity and access management (CIAM) solution. Customer (or consumer) identity and access management (CIAM) is a subset of the larger concept of identity access management (IAM) that focuses on managing and controlling external parties access to a business applications, web portals and digital services. Source: https://en.wikipedia.org/wiki/Customer_identity_access_management Introduction For organizations and businesses
- [What is Microsoft Entra Permissions Management?](https://blog.matrixpost.net/what-is-microsoft-entra-permissions-management/) - Microsoft Entra Permissions Management is a cloud infrastructure entitlement management (CIEM pronounced kim) solution that provides comprehensive visibility into permissions assigned to all identities. For example, over-privileged workload and user identities, actions, and resources across multicloud infrastructures in Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). Permissions Management detects, automatically right-sizes, and continuously
- [What is Microsoft Entra?](https://blog.matrixpost.net/what-is-microsoft-entra/) - Microsoft in August 2023 started to replace the name for Azure Active Directory commonly known as Azure AD into Microsoft Entra ID. At least now it's time to deal with what Microsoft Entra is all about? Microsoft Entra is more than just rebranding the Azure AD, it's a new unifying brand and product family for
- [What is Microsoft Entra Workload ID?](https://blog.matrixpost.net/microsoft-entra-workload-id/) - In this post we will take a look at a further service from the Microsoft Entra product family called Microsoft Entra Workload Identities. A workload identity is an identity you assign to a software workload (such as an application, service, script, or container) to authenticate and access other services and resources. In a nutshell, most
- [What is Microsoft Entra Global Secure Access (Internet Access)?](https://blog.matrixpost.net/microsoft-entra-global-secure-access-internet-access-and-private-access/) - In this post I want to take a look at a new service in the Microsoft Entra product family named Microsoft Entra Global Secure Access. Microsoft Entra Global Secure Access is so far in preview state. What are preview featureshttps://learn.microsoft.com/en-us/dynamics365/sales/sales-previews-in-trial Microsoft Entra Global Secure Access is a unified location in the Microsoft Entra admin center
- [What is Microsoft Entra Global Secure Access (Private Access)?](https://blog.matrixpost.net/microsoft-entra-global-secure-access-private-access/) - In my last post I was introducing Global Secure Access in general and how to setup Microsoft Entra Internet Access to secure access to Microsoft 365, SaaS, and public internet apps. This post will show how you can setup Microsoft Entra Private Access to secure access to your private corporate resources whether from a corporate
- [Microsoft Graph PowerShell](https://blog.matrixpost.net/microsoft-graph-powershell/) - In this post I want to summarize some basics you need to know to use the Microsoft Graph PowerShell to manage your Microsoft Entra ID tenant (formerly Azure Active Directory or Azure AD). Microsoft Graph PowerShell is the replacement for the Azure AD PowerShell and MSOnline modules and is recommended for interacting with Microsoft Entra ID. Introduction The Microsoft Graph PowerShell
- [Set up Microsoft Defender for Identity](https://blog.matrixpost.net/set-up-microsoft-defender-for-identity/) - In this post I want to show what Microsoft Defender for Identity is and how you can set up and configure it. Microsoft Defender for Identity‎, formerly ‎Azure Advanced Threat Protection‎, is a cloud-based security solution. It uses your on-premises ‎Windows‎ Server ‎Active Directory‎ signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider
- [Set up Microsoft Defender for Office 365 ](https://blog.matrixpost.net/microsoft-defender-for-office-365/) - In this post I want to give you a summary about what Microsoft Defender for Office 365 is exactly and how you can quickly set up and configure it by using Microsoft's best practices. Microsoft Defender for Office 365 is a seamless integration into your Office 365 subscription that protects against threats in email, links (URLS),
- [Set up Microsoft Defender for Cloud](https://blog.matrixpost.net/set-up-microsoft-defender-for-cloud/) - In this post I want to give you a brief summary about: what Microsoft Defender for Cloud is exactly? what it will actually protect? and and how you can enable the available plans for your subscriptions resp. resources running within these subscription? This is well documented by Microsoft and I will refer to their articles in this
- [Explore the Microsoft Defender Family](https://blog.matrixpost.net/explore-the-microsoft-defender-family/) - In this post I want to give you a summary about what the Microsoft Defender family is exactly and what services and tools are included and covered by. Originally known as Windows Defender, the suite has evolved and expanded to address the evolving landscape of cyber threats. Microsoft Defender now extends its protective reach beyond
- [Software Defined Data Center (SDDC) vs. Private Cloud](https://blog.matrixpost.net/software-defined-data-center-sddc-vs-private-cloud/) - A SDDC is the foundation and techarchitecture behind through which cloud services (private or public) in the first place can be implemented most efficiently.
- [Configure Expires HTTP Headers and Cache-Control on Apache](https://blog.matrixpost.net/configure-expires-http-headers-and-cache-control-on-apache/) - One crucial method to speed up your page load time is to force your web server to send out the Cache-Control HTTP header in its response headers.
- [Microsoft Sentinel - a Cloud native SIEM Solution](https://blog.matrixpost.net/microsoft-sentinel-cloud-native-siem-solution/) - In this post we will see what Microsoft Sentinel actually is and learn some basics to start with and how to onboard. Microsoft Sentinel is Microsoft's cloud native Security information and event management (SIEM) solution. SIEM stands for Security Information and Event Management. It is a comprehensive approach to security management that combines the capabilities
- [How to Run and Launch a Java JNLP File on Windows](https://blog.matrixpost.net/how-to-run-and-launch-a-java-jnlp-file-on-windows/) - In order to run and launch a Java Network Launch Protocol (JNLP) file on Windows, you first need to install Java on Windows and finally if not done by default, set the Java(TM) Web Start Launcher (javaws.exe binary) as default app to open these files. The Java Network Launch Protocol (JNLP) enables an application to
- [Set up and Configure a VMware ESXi Host - Part 1](https://blog.matrixpost.net/vmware-esxi-installation-and-setup/) - In this post we will see how to install and set up VMware's ESXi hypervisor step by step on a bare metal server. I will go through each of the separate steps to install ESXi on a bare metal server, in my case just for demonstration purpose on an old IBM x3650 M4 server. In
- [Set up and Configure a VMware ESXi Host - Part 2](https://blog.matrixpost.net/set-up-and-configure-a-vmware-esxi-host-part-2/) - In part 1 we saw each of the separate steps to install ESXi on a bare metal server, in my case just for demonstration purpose on an old IBM x3650 M4 server. In this part we will now see all necessary steps we have to configure to run this ESXi host. Configure ESXi To sign in
- [Set up a new WordPress Site at Kinsta](https://blog.matrixpost.net/set-up-a-new-wordpress-site-at-kinsta/) - The main aim of this post is to give you a comprehensive guide and introduction about Kinsta's WordPress hosting services. In this post I will go through each separate steps to create and set up a new WordPress site at Kinsta. First of all Kinsta's entire infrastructure is built on the Google Cloud Platform which provides
- [Adding and Configuring a new ESXi Host in vSphere (vCenter server)](https://blog.matrixpost.net/adding-and-configuring-a-new-esxi-host-in-vsphere-vcenter-server/) - vCenter server is a service that acts as a central administrator for ESXi hosts connected in a network. vCenter Server lets you pool and manage the resources of multiple hosts. More about vSphere, which finally is just the brand name and umbrella term for VMware’s suite of virtualization products and features, basically the ESXi hypervisor and vCenter Server, you will find in my following post. In this post I want to show how you can use
- [How to disable Certificate Revocation Check for Windows SSTP VPN?](https://blog.matrixpost.net/disable-certicate-revocation-check-sstp/) - When using the native Windows SSTP VPN, which utilizes SSL/TLS certificates to authenticate the VPN server and to establish a secure channel between the client and host, Windows by default will first perform a CRL (certificate revocation list) check before finally establishing the connection with the VPN server. In case for whatever reason this check
- [Enable X11 Forwarding with PuTTY and the Xming X Server for Windows](https://blog.matrixpost.net/enable-x11-forwarding-with-putty-and-the-xming-x-server-for-windows/) - In this post I want to show how you can enable X11 forwarding by using PuTTY and the Xming X Server for Windows. In order to use X11 forwarding, an X11 server needs to be installed on the client (in my case Windows here). Therefore you can use several X11 servers available for Windows, I
- [Set up Azure Hyper-V Server 2022 for Nested Virtualization](https://blog.matrixpost.net/set-up-azure-hyper-v-server-2022-for-nested-virtualization/) - In order to demonstrate the replication of virtual machines between different data center as shown in my post below, I will create therefore in Azure a new Hyper-V server 2022 (virtual machine) for nested virtualization which then will act as a second data center besides my on-premise lab environment. Create an Azure Hyper-V 2022 Virtual
- [Migrate Virtual Machines between different Hypervisors by using Veeam Backup and Replication Instant VM Recovery](https://blog.matrixpost.net/migrate-virtual-machines-between-different-hypervisors-by-using-veeam-backup-and-replication-instant-vm-recovery/) - In order to migrate virtual machines between different hypervisor environments, we can use Instant VM Recovery by Veeam Backup and Replication as shown in this post. With Instant Recovery to VMware vSphere, you can immediately recover different workloads (VMs, EC2 instances, physical servers and so on) as VMware vSphere VMs. Instant Recovery to VMware vSphere can be helpful,
- [VMware vCenter Server Appliance - Failed to start file system check on /dev/disk...](https://blog.matrixpost.net/vmware-vcenter-server-appliance-failed-to-start-file-system-check-on-dev-disk/) - In case the vCenter appliance failed to start and you see the following error: Failed to start file system check on /dev/disk... [FAILED] Failed to start File System Check on /dev/dis...uuid/7986780-8987- See 'systemctl status systemd-fsck-root.service' for details. [DEPEND] Dependency failed for /sysroot. [DEPEND] Dependency failed for Initrd Root File System. [DEPEND] Dependency failed for Reload
- [Replicate Virtual Machines between different Data Center by using Veeam Backup and Replication](https://blog.matrixpost.net/replicate-virtual-machines-between-different-data-center-by-using-veeam-backup-replication/) - In this post I want to show step by step how we can replicate virtual machines from one Data Center, here my on-premise lab environment and running on Microsoft Hyper-V, to another Data Center resp. the Azure Cloud and Azure Hyper-V Server 2022 for nested virtualization. Finally the process is always the same, no matter
- [How to set up and provision Storage to Hosts by the IBM Storwize V3700 Storage System](https://blog.matrixpost.net/how-to-set-up-and-provision-storage-to-hosts-by-the-ibm-storwize-v3700-storage-system/) - In this post I want to show step by step how to provision storage to hosts by using the IBM Storwize V3700 storage system (disk system). Introduction IBM Storwize V3700 Storage System for Lenovo (Machine Type 6099) is a member of the IBM Storwize family of disk systems. Storwize V3700 delivers innovation and new levels
- [Set up a 2-tier PKI in Active Directory Certificate Services (AD CS) - Part 1](https://blog.matrixpost.net/set-up-a-2-tier-pki-in-active-directory-certificate-services-ad-cs-part-1/) - In this blog post series I want show step by step, how to setup a 2-tier PKI consisting of a standalone offline Root CA and one enterprise online subordinate CA (aka Intermediate CA). The subordinate CA (Intermediate CA) will finally issuing certificates directly to end-entities such as users, computers, and devices. A Subordinate CA that
- [Set up a 2-tier PKI in Active Directory Certificate Services (AD CS) - Part 4](https://blog.matrixpost.net/set-up-a-2-tier-pki-in-active-directory-certificate-services-ad-cs-part-4/) - In this part of my blog post series we will set up a Windows 11 client virtual machine and one Windows Server 2022 virtual machine to see the Active Directory Certificate Services (AD CS) in action. Installing a Windows 11 Client and Windows Server 2022 for PKI Testing In order to test my new PKI I will first
- [How to provision Storage to Linux Hosts by the IBM Storwize V3700 Storage System](https://blog.matrixpost.net/how-to-provision-storage-to-linux-hosts-by-the-ibm-storwize-v3700-storage-system/) - In my following post I was showing step by step how to provision storage to hosts (Windows Server 2019) by using the IBM Storwize V3700 storage system (disk system). Now in this post I want to provision the same storage but this time to a Linux Server (SUSE Linux Enterprise Server 15 SP5). Because I am using the same
- [Set up Windows DNS dynamic Updates](https://blog.matrixpost.net/set-up-windows-dns-dynamic-updates/) - Today I want to show how we can configure DNS dynamic updates in Windows. The DNS update functionality enables DNS client computers to register and to dynamically update their resource records with a DNS server whenever changes occur. If you use this functionality, you can reduce the requirement for manual administration of zone records, especially
- [Create Anchor (aka Jump) Links in WordPress](https://blog.matrixpost.net/create-anchor-aka-jump-links-in-wordpress/) - Today I want show step by step how we can create and use so called anchor or jump links in WordPress. Anchor links can enhance the user experience by providing easy navigation within a webpage. When users can quickly jump to specific sections of a page, they are more likely to stay longer on the
- [Export/Import Virtual Machines in VMware vSphere](https://blog.matrixpost.net/export-import-virtual-machines-in-vmware-vsphere/) - We can export and import virtual machines in vSphere by using either the vSphere client or we can also export and import virtual machines directly on the ESXi hosts by using their ESXi Host Client. Both ways will export the virtual machines or virtual appliances in Open Virtual Format (OVF) and Open Virtual Appliance (OVA).
- [Extend ESXi Host Trial (Evaluation) License Expiration](https://blog.matrixpost.net/extend-esxi-hosts-trial-evaluation-license-expiration/) - By default the ESXi host evaluation license is valid for 60 days. You can use evaluation mode to explore a set of features equal to the vSphere Enterprise Plus license. You can use evaluation mode to explore the entire set of features for ESXi hosts. The evaluation mode provides the set of features equal to a vSphere Enterprise
- [YaST (Yet another Setup Tool) Line Distortion on PuTTY Clients](https://blog.matrixpost.net/yast-yet-another-setup-tool-line-distortion-on-putty-clients/) - When using YaST in PuTTY other ssh emulators typically you encounter corrupted text which makes it difficult to navigate or understand the interface. This issue is often related to incorrect terminal settings or character encoding. In this post we will see how we can fix this. YaST is available with two graphical interfaces, one is
- [Turn off read receipts in Microsoft Teams](https://blog.matrixpost.net/turn-off-read-receipts-in-microsoft-teams/) - Below I want to show how you can turn off read receipts in Microsoft Teams. Read receipts in Microsoft Teams let people know when you’ve read their messages, and let you know when they’ve read yours. When a message is read, the following Seen notification icon So now John Doe will turn off its read receipts in
- [Best Practice for vCenter Server Version and ESXi Host Version](https://blog.matrixpost.net/best-practice-vcenter-server-version-and-esxi-host-version/) - In general the vCenter version should be always greater or equal to the ESXi Host version. Nevertheless connecting an ESXi Host using a greater version than the vCenter Server version will maybe technically work but is not recommended by VMware. Best practice for vSphere system upgrades is that the vCenter version is always greater than
- [How to set up Arc-enabled VMware vSphere](https://blog.matrixpost.net/how-to-set-up-arc-enabled-vmware-vsphere/) - In this post I want to show step by step how you can onboard your on-premise VMware vSphere infrastructure to Azure by using Azure Arc-enabled VMware vSphere. When onboarding the on-premise VMware vSphere infrastructure to Azure Arc-enabled VMware vSphere, you are able to install the Arc agent at scale and therefore to simplify onboarding the
- [Set up System Center 2022 Virtual Machine Manager (SCVMM)](https://blog.matrixpost.net/set-up-system-center-2022-virtual-machine-manager-scvmm/) - In this post I want to show step by step how we can install System Center 2022 Virtual Machine Manager (SCVMM). VMM is part of the System Center suite and supports both Hyper-V and VMware environments, allowing administrators to efficiently handle virtualization tasks across different platforms. It provides robust features for managing virtual machines, hosts,
- [Running System Center 2022 Virtual Machine Manager (SCVMM)](https://blog.matrixpost.net/running-system-center-2022-virtual-machine-manager-scvmm/) - In this post I want to show how we can use the System Center 2022 Virtual Machine Manager (SCVMM) to manage, create and running virtual machines on Microsoft Hyper-V. VMM is part of the System Center suite and supports both Hyper-V and VMware environments, allowing administrators to efficiently handle virtualization tasks across different platforms. It provides robust features for managing virtual machines, hosts, storage,
- [Set up VMware Server in VMM](https://blog.matrixpost.net/set-up-vmware-server-in-vmm/) - In this post I want to show how you can integrate an existing VMware vSphere environment into an VMM environment. VMM enables you to deploy and manage virtual machines and services across multiple hypervisor platforms, including VMware vSphere hosts and vCenter servers. More about System Center 2022 Virtual Machine Manager (SCVMM) you will also find
- [Upgrade the VMware vSphere Environment from Version 7 to 8 - Part 1 - Upgrade vCenter Server Appliance](https://blog.matrixpost.net/upgrade-the-vmware-vsphere-environment-from-version-7-to-8-part-1-upgrade-vcenter-server-appliance/) - In this post we will see how we can upgrade our vSphere environment (vCenter Server Appliance and ESXi Hosts) from version 7.0.3 to version 8.0.2. This part will cover upgrading the vCenter Server Appliance and in Part 2 we will see how to upgrade the ESXi Hosts. If you upgrade hosts managed by vCenter Server,
- [Upgrade the VMware vSphere Environment from Version 7 to 8 - Part 2 - Upgrade ESXi Hosts](https://blog.matrixpost.net/upgrade-the-vmware-vsphere-environment-from-version-7-to-8-part-2-upgrade-esxi-hosts/) - In this post we will see how we can upgrade our ESXi Hosts from version 7.0.3 to 8.0.2 by using the vSphere Lifecycle Manager (vLCM). In Part 1 we already upgraded our vCenter Server Appliance from version 7.0.3 to 8.0.2. Source: https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-esxi-80-upgrade-guide.pdf Upgrading ESXi Hosts After you upgrade vCenter Server, upgrade your ESXi hosts. You
- [Enable the Enhanced vMotion Compatibility (EVC) Mode for a vSphere Clustertest](https://blog.matrixpost.net/enable-the-enhanced-vmotion-compatibility-evc-mode-for-a-vsphere-cluster/) - In case you want to migrate running or suspended virtual machines from one ESXi host to another in vSphere, by using live migrations or so called vSphere vMotion, the target hosts processor should support the same CPU instructions to the virtual machine after migration that the processor of the source host provided before migration. When

## Pages

- [Blog](https://blog.matrixpost.net/) - Explore blog.matrixpost.net. I will post here about a wide range of IT topics and technologies I had to deal with in my daily work as an IT Architect.
- [About me](https://blog.matrixpost.net/https-blog-matrixpost-net-about-me/) - Marcus RathSteinstraße 4570794 FilderstadtGermany I work in enterprise IT infrastructure and spend most of my time designing, operating, and troubleshooting systems across on-premises, cloud, and hybrid environments. I hold Microsoft certifications including MCSE in Cloud Platform & Infrastructure and Productivity and was a Charter Member of the program. I’m also part of the Microsoft AI
- [Imprint | Privacy Policy](https://blog.matrixpost.net/privacy-policy/) - Information in accordance with Section 5 TMG BlogMarcus RathSteinstraße 4570794 FilderstadtGermany Contact Information Telephone: +49 711 220 571 19E-Mail: post@matrixpost.netWeb: https://blog.matrixpost.net Graphics and Image Sources https://unsplash.com/@kimileee https://unsplash.com/photos/Dsg--4yCqCI https://unsplash.com/photos/a-group-of-people-swimming-in-the-water-kLrBgMWvuBc https://images.unsplash.com/photo-1516368694098-47836cebec97?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&w=2560&fit=max&ixid=eyJhcHBfaWQiOjM1Nzl9 Disclaimer Liability for contents The contents of the webpages have been created with the greatest of care. We cannot however assume any liability for the accuracy
- [Sitemap](https://blog.matrixpost.net/sitemap/)
- [Privacy Settings Page](https://blog.matrixpost.net/privacy-settings-page/) - [njt_gdpr_privacy_settings]
- [Cookie Policy](https://blog.matrixpost.net/cookie-policy/) - a.cky-banner-element { padding: 8px 30px; background: #F8F9FA; color: #858A8F; border: 1px solid #DEE2E6; box-sizing: border-box; border-radius: 2px; cursor: pointer; } Effective Date: 07-Dec-2023 Last Updated: 07-Dec-2023 What are cookies? This Cookie Policy explains what cookies are and how we use them, the types of cookies we use i.e, the information we collect using cookies
- [Affiliate Disclosure](https://blog.matrixpost.net/affiliate-disclosure/) - [aal_disclosure]

## Affiliate Links

- [NordPass](https://blog.matrixpost.net/recommends/apps/nordpass/)
- [NordVPN](https://blog.matrixpost.net/recommends/vpn/nordvpn/)
- [Kinsta](https://blog.matrixpost.net/recommends/hosting/kinsta/)
- [CookieYes](https://blog.matrixpost.net/recommends/wp-plugins/cookieyes/)
- [GreenGeeksWordpress](https://blog.matrixpost.net/recommends/wordpress-hosting/greengeeks/)
- [RocketNetWordPressHostingMigration](https://blog.matrixpost.net/recommends/wordpress-hosting-migration/rocketnet-migration/)
- [RocketNetWordPressHosting](https://blog.matrixpost.net/recommends/wordpress-hosting/rocketnet/)

## Categories

- [General](https://blog.matrixpost.net/category/allgemein/)
- [Microsoft Azure](https://blog.matrixpost.net/category/microsoft-azure/)
- [pfSense](https://blog.matrixpost.net/category/pfsense/)
- [Microsoft 365 (Office 365)](https://blog.matrixpost.net/category/office-365/)
- [Windows](https://blog.matrixpost.net/category/windows/)
- [PowerShell](https://blog.matrixpost.net/category/powershell/)
- [SQL Server](https://blog.matrixpost.net/category/sql-server/)
- [.NET](https://blog.matrixpost.net/category/net/)
- [Visual Studio](https://blog.matrixpost.net/category/visual-studio/)
- [C#](https://blog.matrixpost.net/category/c/)
- [Linux](https://blog.matrixpost.net/category/linux/)
- [FreeBSD](https://blog.matrixpost.net/category/freebsd/)
- [Session Border Controller (SBC)](https://blog.matrixpost.net/category/session-border-controller/)
- [Microsoft Teams](https://blog.matrixpost.net/category/microsoft-teams/)
- [Let's Encrypt](https://blog.matrixpost.net/category/lets-encrypt/)
- [PostgreSQL](https://blog.matrixpost.net/category/postgresql/)
- [Fax Server](https://blog.matrixpost.net/category/faxserver/)
- [System Center](https://blog.matrixpost.net/category/system-center/)
- [IPv4 | IPv6](https://blog.matrixpost.net/category/ipv4-ipv6/)
- [VPN](https://blog.matrixpost.net/category/vpn/)
- [BGP](https://blog.matrixpost.net/category/bgp/)
- [TLS/SSL](https://blog.matrixpost.net/category/tls-ssl/)
- [Exchange](https://blog.matrixpost.net/category/exchange/)
- [AD FS](https://blog.matrixpost.net/category/ad-fs/)
- [Atlassian](https://blog.matrixpost.net/category/atlassian/)
- [OAuth2.0](https://blog.matrixpost.net/category/oauth2-0/)
- [OpenID Connect](https://blog.matrixpost.net/category/openid-connect/)
- [SAML 2.0](https://blog.matrixpost.net/category/saml-2-0/)
- [Hype-Jargon](https://blog.matrixpost.net/category/hype-jargon/)
- [Security](https://blog.matrixpost.net/category/security/)
- [Web server](https://blog.matrixpost.net/category/web-server/)
- [IEEE 802.11 WLAN](https://blog.matrixpost.net/category/ieee-802-11/)
- [X.509 PKI](https://blog.matrixpost.net/category/x-509-pki/)
- [AD DS](https://blog.matrixpost.net/category/ad-ds/)
- [IBM X3650](https://blog.matrixpost.net/category/ibm-x3650/)
- [Dell PowerEdge](https://blog.matrixpost.net/category/dell-poweredge/)
- [SAP](https://blog.matrixpost.net/category/sap/)
- [Kubernetes](https://blog.matrixpost.net/category/kubernetes/)
- [E-Mail](https://blog.matrixpost.net/category/e-mail/)
- [Postfix](https://blog.matrixpost.net/category/postfix/)
- [Amazon Web Services (AWS)](https://blog.matrixpost.net/category/aws/)
- [Google Cloud](https://blog.matrixpost.net/category/google-cloud/)
- [Blazor Server](https://blog.matrixpost.net/category/blazor-server/)
- [Python](https://blog.matrixpost.net/category/python/)
- [Infrastructure as Code (IaC)](https://blog.matrixpost.net/category/iac/)
- [DevOps](https://blog.matrixpost.net/category/devops/)
- [Microsoft Entra](https://blog.matrixpost.net/category/microsoft-entra/)
- [Microsoft Defender](https://blog.matrixpost.net/category/microsoft-defender/)
- [Microsoft Intune](https://blog.matrixpost.net/category/microsoft-intune/)
- [brief](https://blog.matrixpost.net/category/brief/)
- [VMware vSphere](https://blog.matrixpost.net/category/vmware-vsphere/)
- [Failover Clustering](https://blog.matrixpost.net/category/failoverclustering/)
- [Hyper-V](https://blog.matrixpost.net/category/hyper-v/)
- [Storage](https://blog.matrixpost.net/category/storage/)
- [Network File System (NFS)](https://blog.matrixpost.net/category/nfs/)
- [VEEAM](https://blog.matrixpost.net/category/veeam/)
- [SLES](https://blog.matrixpost.net/category/sles/)
- [AD CS](https://blog.matrixpost.net/category/adcs/)
- [PKI](https://blog.matrixpost.net/category/pki/)
- [Azure Arc](https://blog.matrixpost.net/category/azure-arc/)
- [Virtual Machine Manager (VMM)](https://blog.matrixpost.net/category/virtual-machine-manager-vmm/)
- [Sysinternals](https://blog.matrixpost.net/category/sysinternals/)
- [Logical Volume Manager (LVM)](https://blog.matrixpost.net/category/logical-volume-manager-lvm/)
- [Monitoring](https://blog.matrixpost.net/category/monitoring/)
- [Red Hat](https://blog.matrixpost.net/category/red-hat/)
- [Ubuntu](https://blog.matrixpost.net/category/ubuntu/)
- [Networks](https://blog.matrixpost.net/category/networks/)
- [Oracle Linux](https://blog.matrixpost.net/category/oracle-linux/)
- [Cheat Sheets](https://blog.matrixpost.net/category/cheat-sheets/)
- [Check Point](https://blog.matrixpost.net/category/check-point/)
- [Juniper](https://blog.matrixpost.net/category/juniper/)
- [NetApp](https://blog.matrixpost.net/category/netapp/)
- [Azure Monitor](https://blog.matrixpost.net/category/azure-monitor/)
- [Terraform](https://blog.matrixpost.net/category/terraform/)
- [GitHub](https://blog.matrixpost.net/category/github/)
- [GitLab](https://blog.matrixpost.net/category/gitlab/)
- [Windows Updates](https://blog.matrixpost.net/category/windows-updates/)
- [Linux Updates](https://blog.matrixpost.net/category/linux-updates/)
- [Visual Studio Code](https://blog.matrixpost.net/category/visual-studio-code/)

## Tags

- [Radius](https://blog.matrixpost.net/tag/radius/)
- [Windows Server 2012](https://blog.matrixpost.net/tag/windows-server-2012/)
- [PKI](https://blog.matrixpost.net/tag/pki/)
- [SSH](https://blog.matrixpost.net/tag/ssh/)
- [SFTP](https://blog.matrixpost.net/tag/sftp/)
- [Cygwin](https://blog.matrixpost.net/tag/cygwin/)
- [Windows](https://blog.matrixpost.net/tag/windows/)
- [S2S](https://blog.matrixpost.net/tag/s2s/)
- [VPN](https://blog.matrixpost.net/tag/vpn/)
- [Route-based](https://blog.matrixpost.net/tag/route-based/)
- [IPSec](https://blog.matrixpost.net/tag/ipsec/)
- [IKEv2](https://blog.matrixpost.net/tag/ikev2/)
- [pfSense](https://blog.matrixpost.net/tag/pfsense/)
- [BGP](https://blog.matrixpost.net/tag/bgp/)
- [OpenBGPD](https://blog.matrixpost.net/tag/openbgpd/)
- [policy-based](https://blog.matrixpost.net/tag/policy-based/)
- [site-to-site](https://blog.matrixpost.net/tag/site-to-site/)
- [Azure](https://blog.matrixpost.net/tag/azure/)
- [VNet](https://blog.matrixpost.net/tag/vnet/)
- [SFB](https://blog.matrixpost.net/tag/sfb/)
- [Skype for Business](https://blog.matrixpost.net/tag/skype-for-business/)
- [Lync](https://blog.matrixpost.net/tag/lync/)
- [Call Forwarding](https://blog.matrixpost.net/tag/call-forwarding/)
- [Unified Messaging](https://blog.matrixpost.net/tag/unified-messaging/)
- [Exchange](https://blog.matrixpost.net/tag/exchange/)
- [Enterprise Voice](https://blog.matrixpost.net/tag/enterprise-voice/)
- [Conferencing](https://blog.matrixpost.net/tag/conferencing/)
- [Meeting](https://blog.matrixpost.net/tag/meeting/)
- [SIP Trunk](https://blog.matrixpost.net/tag/sip-trunk/)
- [SIP](https://blog.matrixpost.net/tag/sip/)
- [Deutschland LAN](https://blog.matrixpost.net/tag/deutschland-lan/)
- [Office Master Gate](https://blog.matrixpost.net/tag/office-master-gate/)
- [Ferrari electronic](https://blog.matrixpost.net/tag/ferrari-electronic/)
- [CA](https://blog.matrixpost.net/tag/ca/)
- [NPS](https://blog.matrixpost.net/tag/nps/)
- [Network Policy Server](https://blog.matrixpost.net/tag/network-policy-server/)
- [Point-to-Site VPN](https://blog.matrixpost.net/tag/point-to-site-vpn/)
- [Active Directory](https://blog.matrixpost.net/tag/active-directory/)
- [sign-in](https://blog.matrixpost.net/tag/sign-in/)
- [Troubleshooting](https://blog.matrixpost.net/tag/troubleshooting/)
- [Troubleshooting external sign-in lync](https://blog.matrixpost.net/tag/troubleshooting-external-sign-in-lync/)
- [client sign-in process lync](https://blog.matrixpost.net/tag/client-sign-in-process-lync/)
- [TLS-DSK authentication](https://blog.matrixpost.net/tag/tls-dsk-authentication/)
- [P2S](https://blog.matrixpost.net/tag/p2s/)
- [Azure AD Domain Services](https://blog.matrixpost.net/tag/azure-ad-domain-services/)
- [AADDS](https://blog.matrixpost.net/tag/aadds/)
- [Domain join](https://blog.matrixpost.net/tag/domain-join/)
- [Azure AD](https://blog.matrixpost.net/tag/azure-ad/)
- [Postfix](https://blog.matrixpost.net/tag/postfix/)
- [Dovecot](https://blog.matrixpost.net/tag/dovecot/)
- [MySQL](https://blog.matrixpost.net/tag/mysql/)
- [IMAP](https://blog.matrixpost.net/tag/imap/)
- [SMTP](https://blog.matrixpost.net/tag/smtp/)
- [Mailserver](https://blog.matrixpost.net/tag/mailserver/)
- [Ubuntu](https://blog.matrixpost.net/tag/ubuntu/)
- [SCCM](https://blog.matrixpost.net/tag/sccm/)
- [Configuration Manager](https://blog.matrixpost.net/tag/configuration-manager/)
- [co-management](https://blog.matrixpost.net/tag/co-management/)
- [Intune](https://blog.matrixpost.net/tag/intune/)
- [Microsoft Endpoint Manager admin center](https://blog.matrixpost.net/tag/microsoft-endpoint-manager-admin-center/)
- [MDM](https://blog.matrixpost.net/tag/mdm/)
- [MAM](https://blog.matrixpost.net/tag/mam/)
- [SCCM 1910](https://blog.matrixpost.net/tag/sccm-1910/)
- [System Center Configuration Manager](https://blog.matrixpost.net/tag/system-center-configuration-manager/)
- [Cloud Management Gateway](https://blog.matrixpost.net/tag/cloud-management-gateway/)
- [CMG](https://blog.matrixpost.net/tag/cmg/)
- [Internet-based client management](https://blog.matrixpost.net/tag/internet-based-client-management/)
- [Windows 10](https://blog.matrixpost.net/tag/windows-10/)
- [Distribution Point](https://blog.matrixpost.net/tag/distribution-point/)
- [Azure Services](https://blog.matrixpost.net/tag/azure-services/)
- [Active Directory Graph](https://blog.matrixpost.net/tag/active-directory-graph/)
- [Directory.Read.All](https://blog.matrixpost.net/tag/directory-read-all/)
- [SMS Agent Host](https://blog.matrixpost.net/tag/sms-agent-host/)
- [Systems Management Server (SMS)](https://blog.matrixpost.net/tag/systems-management-server-sms/)
- [CMTrace.exe](https://blog.matrixpost.net/tag/cmtrace-exe/)
- [Management Point](https://blog.matrixpost.net/tag/management-point/)
- [SMS](https://blog.matrixpost.net/tag/sms/)
- [RDS](https://blog.matrixpost.net/tag/rds/)
- [Remote Desktop Services](https://blog.matrixpost.net/tag/remote-desktop-services/)
- [SSO](https://blog.matrixpost.net/tag/sso/)
- [Single-sign-on](https://blog.matrixpost.net/tag/single-sign-on/)
- [RD Connection Broker](https://blog.matrixpost.net/tag/rd-connection-broker/)
- [RD Gateway](https://blog.matrixpost.net/tag/rd-gateway/)
- [RD Session Host](https://blog.matrixpost.net/tag/rd-session-host/)
- [RD Licensing](https://blog.matrixpost.net/tag/rd-licensing/)
- [RD Web Access](https://blog.matrixpost.net/tag/rd-web-access/)
- [Remote Desktop Web Client](https://blog.matrixpost.net/tag/remote-desktop-web-client/)
- [HTML 5 Client](https://blog.matrixpost.net/tag/html-5-client/)
- [Remote Desktop Web Services](https://blog.matrixpost.net/tag/remote-desktop-web-services/)
- [single sign-on](https://blog.matrixpost.net/tag/single-sign-on-2/)
- [Skype for Business Server 2019](https://blog.matrixpost.net/tag/skype-for-business-server-2019/)
- [Skype for Business Front End Server](https://blog.matrixpost.net/tag/skype-for-business-front-end-server/)
- [Skype for Business Edge Server](https://blog.matrixpost.net/tag/skype-for-business-edge-server/)
- [Azure App Service plan](https://blog.matrixpost.net/tag/azure-app-service-plan/)
- [Azure App Service](https://blog.matrixpost.net/tag/azure-app-service/)
- [App Service](https://blog.matrixpost.net/tag/app-service/)
- [Web App](https://blog.matrixpost.net/tag/web-app/)
- [Staging Slots](https://blog.matrixpost.net/tag/staging-slots/)
- [Azure Database for MySQL server](https://blog.matrixpost.net/tag/azure-database-for-mysql-server/)
- [WordPress](https://blog.matrixpost.net/tag/wordpress/)
- [PaaS](https://blog.matrixpost.net/tag/paas/)
- [Syslog-ng](https://blog.matrixpost.net/tag/syslog-ng/)
- [Syslog Server](https://blog.matrixpost.net/tag/syslog-server/)
- [Syslog](https://blog.matrixpost.net/tag/syslog/)
- [Azure SQL managed instance](https://blog.matrixpost.net/tag/azure-sql-managed-instance/)
- [SQL](https://blog.matrixpost.net/tag/sql/)
- [SQL Management Studio](https://blog.matrixpost.net/tag/sql-management-studio/)
- [Database](https://blog.matrixpost.net/tag/database/)
- [IPSec S2S VPN](https://blog.matrixpost.net/tag/ipsec-s2s-vpn/)
- [policy-based vpn](https://blog.matrixpost.net/tag/policy-based-vpn/)
- [IKEv1](https://blog.matrixpost.net/tag/ikev1/)
- [Forward Proxy](https://blog.matrixpost.net/tag/forward-proxy/)
- [proxy](https://blog.matrixpost.net/tag/proxy/)
- [transparent proxy](https://blog.matrixpost.net/tag/transparent-proxy/)
- [explicit proxy](https://blog.matrixpost.net/tag/explicit-proxy/)
- [Squid](https://blog.matrixpost.net/tag/squid/)
- [squidGuard](https://blog.matrixpost.net/tag/squidguard/)
- [SOCKS](https://blog.matrixpost.net/tag/socks/)
- [Privoxy](https://blog.matrixpost.net/tag/privoxy/)
- [rsyslog](https://blog.matrixpost.net/tag/rsyslog/)
- [FreeBSD](https://blog.matrixpost.net/tag/freebsd/)
- [message logging](https://blog.matrixpost.net/tag/message-logging/)
- [remote logging](https://blog.matrixpost.net/tag/remote-logging/)
- [Performance](https://blog.matrixpost.net/tag/performance/)
- [Exchange Online](https://blog.matrixpost.net/tag/exchange-online/)
- [Exchange Hybrid Classic Full](https://blog.matrixpost.net/tag/exchange-hybrid-classic-full/)
- [Teams](https://blog.matrixpost.net/tag/teams/)
- [Migration](https://blog.matrixpost.net/tag/migration/)
- [Direct Routing](https://blog.matrixpost.net/tag/direct-routing/)
- [Azure AD Connect](https://blog.matrixpost.net/tag/azure-ad-connect/)
- [Office 365](https://blog.matrixpost.net/tag/office-365/)
- [PowerShell](https://blog.matrixpost.net/tag/powershell/)
- [External Identities](https://blog.matrixpost.net/tag/external-identities/)
- [B2B](https://blog.matrixpost.net/tag/b2b/)
- [B2C](https://blog.matrixpost.net/tag/b2c/)
- [logging](https://blog.matrixpost.net/tag/logging/)
- [Skype for Business Online](https://blog.matrixpost.net/tag/skype-for-business-online/)
- [gMSA](https://blog.matrixpost.net/tag/gmsa/)
- [sMSA](https://blog.matrixpost.net/tag/smsa/)
- [Group Managed Service Account](https://blog.matrixpost.net/tag/group-managed-service-account/)
- [Standalone Managed Service Account](https://blog.matrixpost.net/tag/standalone-managed-service-account/)
- [Managed Service Accounts](https://blog.matrixpost.net/tag/managed-service-accounts/)
- [Local System](https://blog.matrixpost.net/tag/local-system/)
- [Local Service](https://blog.matrixpost.net/tag/local-service/)
- [Network Service](https://blog.matrixpost.net/tag/network-service/)
- [NT Service](https://blog.matrixpost.net/tag/nt-service/)
- [SQL Server](https://blog.matrixpost.net/tag/sql-server/)
- [Service Account](https://blog.matrixpost.net/tag/service-account/)
- [Permissions](https://blog.matrixpost.net/tag/permissions/)
- [Virtual Accounts](https://blog.matrixpost.net/tag/virtual-accounts/)
- [built-in system accounts](https://blog.matrixpost.net/tag/built-in-system-accounts/)
- [Managed Service Accounts (MSA)](https://blog.matrixpost.net/tag/managed-service-accounts-msa/)
- [SQL Server 2019](https://blog.matrixpost.net/tag/sql-server-2019/)
- [Microsoft Graph Power Shell](https://blog.matrixpost.net/tag/microsoft-graph-power-shell/)
- [MSOnline](https://blog.matrixpost.net/tag/msonline/)
- [Msol](https://blog.matrixpost.net/tag/msol/)
- [Azure Active Directory PowerShell for Graph](https://blog.matrixpost.net/tag/azure-active-directory-powershell-for-graph/)
- [Microsoft Graph](https://blog.matrixpost.net/tag/microsoft-graph/)
- [User management](https://blog.matrixpost.net/tag/user-management/)
- [WoW64](https://blog.matrixpost.net/tag/wow64/)
- [SysWOW64](https://blog.matrixpost.net/tag/syswow64/)
- [System32](https://blog.matrixpost.net/tag/system32/)
- [Subsystem](https://blog.matrixpost.net/tag/subsystem/)
- [SQL Server Integration Services](https://blog.matrixpost.net/tag/sql-server-integration-services/)
- [SSIS](https://blog.matrixpost.net/tag/ssis/)
- [ETL](https://blog.matrixpost.net/tag/etl/)
- [DTS](https://blog.matrixpost.net/tag/dts/)
- [ODBC](https://blog.matrixpost.net/tag/odbc/)
- [OLE DB](https://blog.matrixpost.net/tag/ole-db/)
- [Data Flow](https://blog.matrixpost.net/tag/data-flow/)
- [ADO NET Source](https://blog.matrixpost.net/tag/ado-net-source/)
- [OLE DB Source](https://blog.matrixpost.net/tag/ole-db-source/)
- [SQL Server Destination](https://blog.matrixpost.net/tag/sql-server-destination/)
- [Bulk load](https://blog.matrixpost.net/tag/bulk-load/)
- [Script Task](https://blog.matrixpost.net/tag/script-task/)
- [SQL Server Data Tools](https://blog.matrixpost.net/tag/sql-server-data-tools/)
- [SSDT](https://blog.matrixpost.net/tag/ssdt/)
- [Windows SDK](https://blog.matrixpost.net/tag/windows-sdk/)
- [Platform SDK](https://blog.matrixpost.net/tag/platform-sdk/)
- [.NET Framework SDK](https://blog.matrixpost.net/tag/net-framework-sdk/)
- [Software Development Kit](https://blog.matrixpost.net/tag/software-development-kit/)
- [SDK](https://blog.matrixpost.net/tag/sdk/)
- [.Net](https://blog.matrixpost.net/tag/net/)
- [.Net Framework](https://blog.matrixpost.net/tag/net-framework/)
- [Assembly](https://blog.matrixpost.net/tag/assembly/)
- [Strong Named Assemblies](https://blog.matrixpost.net/tag/strong-named-assemblies/)
- [Strong Name](https://blog.matrixpost.net/tag/strong-name/)
- [CLR](https://blog.matrixpost.net/tag/clr/)
- [Common Language Runtime](https://blog.matrixpost.net/tag/common-language-runtime/)
- [GAC](https://blog.matrixpost.net/tag/gac/)
- [Global Assembly Cache](https://blog.matrixpost.net/tag/global-assembly-cache/)
- [Application Domain](https://blog.matrixpost.net/tag/application-domain/)
- [Inter Domain Communication](https://blog.matrixpost.net/tag/inter-domain-communication/)
- [Managed Code](https://blog.matrixpost.net/tag/managed-code/)
- [Visual Studio](https://blog.matrixpost.net/tag/visual-studio/)
- [C#](https://blog.matrixpost.net/tag/c/)
- [Exchange Web Services](https://blog.matrixpost.net/tag/exchange-web-services/)
- [EWS](https://blog.matrixpost.net/tag/ews/)
- [NuGet Package Manager](https://blog.matrixpost.net/tag/nuget-package-manager/)
- [System.Configuration](https://blog.matrixpost.net/tag/system-configuration/)
- [App.config](https://blog.matrixpost.net/tag/app-config/)
- [Microsoft.Exchange.WebServices](https://blog.matrixpost.net/tag/microsoft-exchange-webservices/)
- [Microsoft](https://blog.matrixpost.net/tag/microsoft/)
- [System.Net](https://blog.matrixpost.net/tag/system-net/)
- [System.Net.Http](https://blog.matrixpost.net/tag/system-net-http/)
- [msiexec.exe](https://blog.matrixpost.net/tag/msiexec-exe/)
- [msiinv.exe](https://blog.matrixpost.net/tag/msiinv-exe/)
- [Select-String](https://blog.matrixpost.net/tag/select-string/)
- [Select-String Context Parameter](https://blog.matrixpost.net/tag/select-string-context-parameter/)
- [Broken Installation](https://blog.matrixpost.net/tag/broken-installation/)
- [Azure Storage File Share](https://blog.matrixpost.net/tag/azure-storage-file-share/)
- [Azure Storage Account](https://blog.matrixpost.net/tag/azure-storage-account/)
- [Request body is too large](https://blog.matrixpost.net/tag/request-body-is-too-large/)
- [MaxLimit : 4194304](https://blog.matrixpost.net/tag/maxlimit-4194304/)
- [GetSubdirectoryClient](https://blog.matrixpost.net/tag/getsubdirectoryclient/)
- [GetDirectoryClient](https://blog.matrixpost.net/tag/getdirectoryclient/)
- [List](https://blog.matrixpost.net/tag/list/)
- [Tuple](https://blog.matrixpost.net/tag/tuple/)
- [List Tuple](https://blog.matrixpost.net/tag/list-tuple/)
- [System.Collections.Generic](https://blog.matrixpost.net/tag/system-collections-generic/)
- [Array](https://blog.matrixpost.net/tag/array/)
- [Custom Array](https://blog.matrixpost.net/tag/custom-array/)
- [Generic List](https://blog.matrixpost.net/tag/generic-list/)
- [Custom Data Type](https://blog.matrixpost.net/tag/custom-data-type/)
- [Asynchronous Programming](https://blog.matrixpost.net/tag/asynchronous-programming/)
- [synchronous method call](https://blog.matrixpost.net/tag/synchronous-method-call/)
- [asynchronous method call](https://blog.matrixpost.net/tag/asynchronous-method-call/)
- [async](https://blog.matrixpost.net/tag/async/)
- [await](https://blog.matrixpost.net/tag/await/)
- [thread](https://blog.matrixpost.net/tag/thread/)
- [Azurite](https://blog.matrixpost.net/tag/azurite/)
- [Azure Storage Emulator](https://blog.matrixpost.net/tag/azure-storage-emulator/)
- [Azurite Emulator](https://blog.matrixpost.net/tag/azurite-emulator/)
- [Azure Blob Services](https://blog.matrixpost.net/tag/azure-blob-services/)
- [Azure Queue Services](https://blog.matrixpost.net/tag/azure-queue-services/)
- [Azure Table Services](https://blog.matrixpost.net/tag/azure-table-services/)
- [gacutil](https://blog.matrixpost.net/tag/gacutil/)
- [coreflags](https://blog.matrixpost.net/tag/coreflags/)
- [Visual Studio for Applications](https://blog.matrixpost.net/tag/visual-studio-for-applications/)
- [Vsta](https://blog.matrixpost.net/tag/vsta/)
- [Script Task Editor](https://blog.matrixpost.net/tag/script-task-editor/)
- [ScriptMain.cs](https://blog.matrixpost.net/tag/scriptmain-cs/)
- [AppDomain.AssemblyResolve](https://blog.matrixpost.net/tag/appdomain-assemblyresolve/)
- [AssemblyResolve](https://blog.matrixpost.net/tag/assemblyresolve/)
- [Conditional Access](https://blog.matrixpost.net/tag/conditional-access/)
- [Azure Blob Storage](https://blog.matrixpost.net/tag/azure-blob-storage/)
- [Blobs](https://blog.matrixpost.net/tag/blobs/)
- [.NET 5.0](https://blog.matrixpost.net/tag/net-5-0/)
- [NuGet](https://blog.matrixpost.net/tag/nuget/)
- [Library](https://blog.matrixpost.net/tag/library/)
- [Azure AD B2B](https://blog.matrixpost.net/tag/azure-ad-b2b/)
- [Federation](https://blog.matrixpost.net/tag/federation/)
- [Collaboration](https://blog.matrixpost.net/tag/collaboration/)
- [Guest user access](https://blog.matrixpost.net/tag/guest-user-access/)
- [Azue AD External Identities](https://blog.matrixpost.net/tag/azue-ad-external-identities/)
- [Azure AD Tenant](https://blog.matrixpost.net/tag/azure-ad-tenant/)
- [MAU](https://blog.matrixpost.net/tag/mau/)
- [Invitation Redemption](https://blog.matrixpost.net/tag/invitation-redemption/)
- [Profiles](https://blog.matrixpost.net/tag/profiles/)
- [PowerShell profile](https://blog.matrixpost.net/tag/powershell-profile/)
- [Central Log Server](https://blog.matrixpost.net/tag/central-log-server/)
- [Remote Messages](https://blog.matrixpost.net/tag/remote-messages/)
- [Session Border Controller](https://blog.matrixpost.net/tag/session-border-controller/)
- [SBC](https://blog.matrixpost.net/tag/sbc/)
- [OMG](https://blog.matrixpost.net/tag/omg/)
- [AudioCodes](https://blog.matrixpost.net/tag/audiocodes/)
- [Audio Codes Mediant VE SBC](https://blog.matrixpost.net/tag/audio-codes-mediant-ve-sbc/)
- [Microsoft Teams](https://blog.matrixpost.net/tag/microsoft-teams/)
- [DeutschlandLAN SIP-trunk](https://blog.matrixpost.net/tag/deutschlandlan-sip-trunk/)
- [DTAG](https://blog.matrixpost.net/tag/dtag/)
- [Phone System](https://blog.matrixpost.net/tag/phone-system/)
- [PSTN](https://blog.matrixpost.net/tag/pstn/)
- [PBX](https://blog.matrixpost.net/tag/pbx/)
- [Exchange Hybrid](https://blog.matrixpost.net/tag/exchange-hybrid/)
- [HCW8064](https://blog.matrixpost.net/tag/hcw8064/)
- [HCW8110](https://blog.matrixpost.net/tag/hcw8110/)
- [HCW](https://blog.matrixpost.net/tag/hcw/)
- [Hybrid Configuration Wizard](https://blog.matrixpost.net/tag/hybrid-configuration-wizard/)
- [Organization Configuration Transfer](https://blog.matrixpost.net/tag/organization-configuration-transfer/)
- [OCT](https://blog.matrixpost.net/tag/oct/)
- [Let's Encrypt](https://blog.matrixpost.net/tag/lets-encrypt/)
- [Cerbot](https://blog.matrixpost.net/tag/cerbot/)
- [certbot-auto](https://blog.matrixpost.net/tag/certbot-auto/)
- [Certificates](https://blog.matrixpost.net/tag/certificates/)
- [https](https://blog.matrixpost.net/tag/https/)
- [TLS](https://blog.matrixpost.net/tag/tls/)
- [PostgreSQL](https://blog.matrixpost.net/tag/postgresql/)
- [Upgrade PostgreSQL](https://blog.matrixpost.net/tag/upgrade-postgresql/)
- [AudiCodes](https://blog.matrixpost.net/tag/audicodes/)
- [DTAG SIP Trunk](https://blog.matrixpost.net/tag/dtag-sip-trunk/)
- [Hyper-V](https://blog.matrixpost.net/tag/hyper-v/)
- [Team](https://blog.matrixpost.net/tag/team/)
- [DNS SRV record](https://blog.matrixpost.net/tag/dns-srv-record/)
- [Open Federation](https://blog.matrixpost.net/tag/open-federation/)
- [Allowed Domain list](https://blog.matrixpost.net/tag/allowed-domain-list/)
- [Federated Domains](https://blog.matrixpost.net/tag/federated-domains/)
- [SIP Domain](https://blog.matrixpost.net/tag/sip-domain/)
- [Broken Federation](https://blog.matrixpost.net/tag/broken-federation/)
- [Site-to-Site VPN](https://blog.matrixpost.net/tag/site-to-site-vpn/)
- [NAT](https://blog.matrixpost.net/tag/nat/)
- [PAT](https://blog.matrixpost.net/tag/pat/)
- [BINAT](https://blog.matrixpost.net/tag/binat/)
- [Biderectional NAT](https://blog.matrixpost.net/tag/biderectional-nat/)
- [Fax Server](https://blog.matrixpost.net/tag/fax-server/)
- [AC Fax Server](https://blog.matrixpost.net/tag/ac-fax-server/)
- [T.38](https://blog.matrixpost.net/tag/t-38/)
- [G.711](https://blog.matrixpost.net/tag/g-711/)
- [G.711 A-Law](https://blog.matrixpost.net/tag/g-711-a-law/)
- [G.711 U-Law](https://blog.matrixpost.net/tag/g-711-u-law/)
- [GFI](https://blog.matrixpost.net/tag/gfi/)
- [FaxMaker](https://blog.matrixpost.net/tag/faxmaker/)
- [GFI FaxMaker](https://blog.matrixpost.net/tag/gfi-faxmaker/)
- [XCAPI](https://blog.matrixpost.net/tag/xcapi/)
- [AudioCodes Mediant VE SBC](https://blog.matrixpost.net/tag/audiocodes-mediant-ve-sbc/)
- [System Center](https://blog.matrixpost.net/tag/system-center/)
- [Dell](https://blog.matrixpost.net/tag/dell/)
- [iDRAC](https://blog.matrixpost.net/tag/idrac/)
- [SMTP Relay](https://blog.matrixpost.net/tag/smtp-relay/)
- [Call Forwarding no audio](https://blog.matrixpost.net/tag/call-forwarding-no-audio/)
- [No-OP Packets](https://blog.matrixpost.net/tag/no-op-packets/)
- [Generate No-Op Packets](https://blog.matrixpost.net/tag/generate-no-op-packets/)
- [NAT Traversal](https://blog.matrixpost.net/tag/nat-traversal/)
- [UPD hole punching](https://blog.matrixpost.net/tag/upd-hole-punching/)
- [firewall pinholes](https://blog.matrixpost.net/tag/firewall-pinholes/)
- [RTP payload](https://blog.matrixpost.net/tag/rtp-payload/)
- [Symmetric RTP](https://blog.matrixpost.net/tag/symmetric-rtp/)
- [WPA2](https://blog.matrixpost.net/tag/wpa2/)
- [CLIP no screening](https://blog.matrixpost.net/tag/clip-no-screening/)
- [Microsoft Teams Direct Routing](https://blog.matrixpost.net/tag/microsoft-teams-direct-routing/)
- [Message Manipulation](https://blog.matrixpost.net/tag/message-manipulation/)
- [Office365](https://blog.matrixpost.net/tag/office365/)
- [Block Sender Domain](https://blog.matrixpost.net/tag/block-sender-domain/)
- [rebuild index](https://blog.matrixpost.net/tag/rebuild-index/)
- [SQL Server Maintenance Solution](https://blog.matrixpost.net/tag/sql-server-maintenance-solution/)
- [ARP Proxy](https://blog.matrixpost.net/tag/arp-proxy/)
- [Routing](https://blog.matrixpost.net/tag/routing/)
- [Perimeter Network](https://blog.matrixpost.net/tag/perimeter-network/)
- [Public IPv4 Addresses](https://blog.matrixpost.net/tag/public-ipv4-addresses/)
- [Network Address Translation](https://blog.matrixpost.net/tag/network-address-translation/)
- [FRR](https://blog.matrixpost.net/tag/frr/)
- [Free Range Routing](https://blog.matrixpost.net/tag/free-range-routing/)
- [OSPF](https://blog.matrixpost.net/tag/ospf/)
- [Routed IPSec (VTI)](https://blog.matrixpost.net/tag/routed-ipsec-vti/)
- [OpenBGPD depricated](https://blog.matrixpost.net/tag/openbgpd-depricated/)
- [webConfigurator](https://blog.matrixpost.net/tag/webconfigurator/)
- [Certificate expiring](https://blog.matrixpost.net/tag/certificate-expiring/)
- [Microsoft Stream](https://blog.matrixpost.net/tag/microsoft-stream/)
- [Teams cloud meeting recording](https://blog.matrixpost.net/tag/teams-cloud-meeting-recording/)
- [in-country](https://blog.matrixpost.net/tag/in-country/)
- [AllowRecordingStorageOutsideRegion](https://blog.matrixpost.net/tag/allowrecordingstorageoutsideregion/)
- [Event ID 36871](https://blog.matrixpost.net/tag/event-id-36871/)
- [Schannel](https://blog.matrixpost.net/tag/schannel/)
- [TLS Client](https://blog.matrixpost.net/tag/tls-client/)
- [SystemDefaultTlsVersions](https://blog.matrixpost.net/tag/systemdefaulttlsversions/)
- [pfSense 2.5.0](https://blog.matrixpost.net/tag/pfsense-2-5-0/)
- [Router Advertisements Server](https://blog.matrixpost.net/tag/router-advertisements-server/)
- [SCL](https://blog.matrixpost.net/tag/scl/)
- [Spam confidence level](https://blog.matrixpost.net/tag/spam-confidence-level/)
- [sender domain](https://blog.matrixpost.net/tag/sender-domain/)
- [bypass spam](https://blog.matrixpost.net/tag/bypass-spam/)
- [Component State](https://blog.matrixpost.net/tag/component-state/)
- [HighAvailability](https://blog.matrixpost.net/tag/highavailability/)
- [Microsoft Teams Exploratory](https://blog.matrixpost.net/tag/microsoft-teams-exploratory/)
- [Licenses](https://blog.matrixpost.net/tag/licenses/)
- [Hybrid Migration Endpoint](https://blog.matrixpost.net/tag/hybrid-migration-endpoint/)
- [MRS Proxy](https://blog.matrixpost.net/tag/mrs-proxy/)
- [temperature](https://blog.matrixpost.net/tag/temperature/)
- [thermal sensors](https://blog.matrixpost.net/tag/thermal-sensors/)
- [IPv6](https://blog.matrixpost.net/tag/ipv6/)
- [Neighbor Solicitation](https://blog.matrixpost.net/tag/neighbor-solicitation/)
- [Neighbor Advertisement](https://blog.matrixpost.net/tag/neighbor-advertisement/)
- [Public IP addresses](https://blog.matrixpost.net/tag/public-ip-addresses/)
- [Router Advertisement](https://blog.matrixpost.net/tag/router-advertisement/)
- [NPT](https://blog.matrixpost.net/tag/npt/)
- [Network Prefix Translation](https://blog.matrixpost.net/tag/network-prefix-translation/)
- [InterpretedUserType](https://blog.matrixpost.net/tag/interpretedusertype/)
- [Move-CsUser](https://blog.matrixpost.net/tag/move-csuser/)
- [Teams provisioning](https://blog.matrixpost.net/tag/teams-provisioning/)
- [msRTCSIP-PrimaryUserAddress](https://blog.matrixpost.net/tag/msrtcsip-primaryuseraddress/)
- [SipProxyAddress](https://blog.matrixpost.net/tag/sipproxyaddress/)
- [ExchangeGUID](https://blog.matrixpost.net/tag/exchangeguid/)
- [msExchMailboxGuid](https://blog.matrixpost.net/tag/msexchmailboxguid/)
- [ADFS](https://blog.matrixpost.net/tag/adfs/)
- [AD FS](https://blog.matrixpost.net/tag/ad-fs/)
- [Active Directory Federation Services](https://blog.matrixpost.net/tag/active-directory-federation-services/)
- [WAP](https://blog.matrixpost.net/tag/wap/)
- [Web Application Proxy](https://blog.matrixpost.net/tag/web-application-proxy/)
- [Remote Access Server](https://blog.matrixpost.net/tag/remote-access-server/)
- [Claims](https://blog.matrixpost.net/tag/claims/)
- [SAML](https://blog.matrixpost.net/tag/saml/)
- [WS-FED](https://blog.matrixpost.net/tag/ws-fed/)
- [oAuth](https://blog.matrixpost.net/tag/oauth/)
- [Atlassian](https://blog.matrixpost.net/tag/atlassian/)
- [Confluence](https://blog.matrixpost.net/tag/confluence/)
- [single sin-on](https://blog.matrixpost.net/tag/single-sin-on/)
- [Account Partner](https://blog.matrixpost.net/tag/account-partner/)
- [Resource Partner](https://blog.matrixpost.net/tag/resource-partner/)
- [Claims Provider Trusts](https://blog.matrixpost.net/tag/claims-provider-trusts/)
- [ADFS Partner Trust](https://blog.matrixpost.net/tag/adfs-partner-trust/)
- [ADFS Federation Trust](https://blog.matrixpost.net/tag/adfs-federation-trust/)
- [Atlassian Cloud](https://blog.matrixpost.net/tag/atlassian-cloud/)
- [Enterprise Application](https://blog.matrixpost.net/tag/enterprise-application/)
- [SAML single sign-on](https://blog.matrixpost.net/tag/saml-single-sign-on/)
- [Token](https://blog.matrixpost.net/tag/token/)
- [Jira](https://blog.matrixpost.net/tag/jira/)
- [IIS](https://blog.matrixpost.net/tag/iis/)
- [Internet Information Services IIS](https://blog.matrixpost.net/tag/internet-information-services-iis/)
- [URL Redirect](https://blog.matrixpost.net/tag/url-redirect/)
- [URL Rewrite](https://blog.matrixpost.net/tag/url-rewrite/)
- [HTTP Redirect](https://blog.matrixpost.net/tag/http-redirect/)
- [Web Platform Installer](https://blog.matrixpost.net/tag/web-platform-installer/)
- [Fiddler](https://blog.matrixpost.net/tag/fiddler/)
- [WS-Federation](https://blog.matrixpost.net/tag/ws-federation/)
- [autodiscover](https://blog.matrixpost.net/tag/autodiscover/)
- [preparing mailbox](https://blog.matrixpost.net/tag/preparing-mailbox/)
- [domain removal](https://blog.matrixpost.net/tag/domain-removal/)
- [superset](https://blog.matrixpost.net/tag/superset/)
- [apache-superset](https://blog.matrixpost.net/tag/apache-superset/)
- [Mailbox Permissions](https://blog.matrixpost.net/tag/mailbox-permissions/)
- [Cross premise calendar sharing](https://blog.matrixpost.net/tag/cross-premise-calendar-sharing/)
- [Automapping](https://blog.matrixpost.net/tag/automapping/)
- [ASP.NET MVC](https://blog.matrixpost.net/tag/asp-net-mvc/)
- [ASP.NET Web Forms](https://blog.matrixpost.net/tag/asp-net-web-forms/)
- [ASP.NET](https://blog.matrixpost.net/tag/asp-net/)
- [MVC](https://blog.matrixpost.net/tag/mvc/)
- [Web Forms](https://blog.matrixpost.net/tag/web-forms/)
- [Windows Identity Foundation (WIF)](https://blog.matrixpost.net/tag/windows-identity-foundation-wif/)
- [claim token](https://blog.matrixpost.net/tag/claim-token/)
- [LocalDB](https://blog.matrixpost.net/tag/localdb/)
- [Microsoft SQL Server LocalDB](https://blog.matrixpost.net/tag/microsoft-sql-server-localdb/)
- [SQL Server Express](https://blog.matrixpost.net/tag/sql-server-express/)
- [.NET Core](https://blog.matrixpost.net/tag/net-core/)
- [.NET 6.0](https://blog.matrixpost.net/tag/net-6-0/)
- [.NET Core 3.1](https://blog.matrixpost.net/tag/net-core-3-1/)
- [ASP.NET Core](https://blog.matrixpost.net/tag/asp-net-core/)
- [Model View Control](https://blog.matrixpost.net/tag/model-view-control/)
- [OpenID Connect](https://blog.matrixpost.net/tag/openid-connect/)
- [scope](https://blog.matrixpost.net/tag/scope/)
- [JWT](https://blog.matrixpost.net/tag/jwt/)
- [Jason Web Token](https://blog.matrixpost.net/tag/jason-web-token/)
- [ASP.NET Core Web App](https://blog.matrixpost.net/tag/asp-net-core-web-app/)
- [SAML 2.0](https://blog.matrixpost.net/tag/saml-2-0/)
- [SAML 2.0 Web SSO](https://blog.matrixpost.net/tag/saml-2-0-web-sso/)
- [WS-Trust](https://blog.matrixpost.net/tag/ws-trust/)
- [SAML 2.0 Web Browser SSO](https://blog.matrixpost.net/tag/saml-2-0-web-browser-sso/)
- [OIDC](https://blog.matrixpost.net/tag/oidc/)
- [LDAP](https://blog.matrixpost.net/tag/ldap/)
- [Kerberos](https://blog.matrixpost.net/tag/kerberos/)
- [NTLM](https://blog.matrixpost.net/tag/ntlm/)
- [Oauth2](https://blog.matrixpost.net/tag/oauth2/)
- [OpenID](https://blog.matrixpost.net/tag/openid/)
- [SAML2.0](https://blog.matrixpost.net/tag/saml2-0/)
- [IWA](https://blog.matrixpost.net/tag/iwa/)
- [SPNEGO](https://blog.matrixpost.net/tag/spnego/)
- [WebAuthn](https://blog.matrixpost.net/tag/webauthn/)
- [FIDO2](https://blog.matrixpost.net/tag/fido2/)
- [SASL](https://blog.matrixpost.net/tag/sasl/)
- [modern authentication](https://blog.matrixpost.net/tag/modern-authentication/)
- [MFA](https://blog.matrixpost.net/tag/mfa/)
- [evoSTS](https://blog.matrixpost.net/tag/evosts/)
- [hybrid auth](https://blog.matrixpost.net/tag/hybrid-auth/)
- [basic authentication](https://blog.matrixpost.net/tag/basic-authentication/)
- [bearer](https://blog.matrixpost.net/tag/bearer/)
- [security defaults](https://blog.matrixpost.net/tag/security-defaults/)
- [HMA](https://blog.matrixpost.net/tag/hma/)
- [Hybrid Modern Authentication](https://blog.matrixpost.net/tag/hybrid-modern-authentication/)
- [Plus Addressing](https://blog.matrixpost.net/tag/plus-addressing/)
- [WSL](https://blog.matrixpost.net/tag/wsl/)
- [Windows Subsystem Linux](https://blog.matrixpost.net/tag/windows-subsystem-linux/)
- [Hybrid Azure AD join](https://blog.matrixpost.net/tag/hybrid-azure-ad-join/)
- [AD Connect](https://blog.matrixpost.net/tag/ad-connect/)
- [SCP](https://blog.matrixpost.net/tag/scp/)
- [Service Connection Point](https://blog.matrixpost.net/tag/service-connection-point/)
- [dsregcmd](https://blog.matrixpost.net/tag/dsregcmd/)
- [PRT](https://blog.matrixpost.net/tag/prt/)
- [Primary Refresh Token](https://blog.matrixpost.net/tag/primary-refresh-token/)
- [Microsoft Intune](https://blog.matrixpost.net/tag/microsoft-intune/)
- [Azure AD Registered](https://blog.matrixpost.net/tag/azure-ad-registered/)
- [Seamless Single Sign On](https://blog.matrixpost.net/tag/seamless-single-sign-on/)
- [Device Identity](https://blog.matrixpost.net/tag/device-identity/)
- [Azure AD Authentication](https://blog.matrixpost.net/tag/azure-ad-authentication/)
- [Device Identities](https://blog.matrixpost.net/tag/device-identities/)
- [Federated Domain](https://blog.matrixpost.net/tag/federated-domain/)
- [Managed Domain](https://blog.matrixpost.net/tag/managed-domain/)
- [SI prefix](https://blog.matrixpost.net/tag/si-prefix/)
- [binary prefix](https://blog.matrixpost.net/tag/binary-prefix/)
- [GB](https://blog.matrixpost.net/tag/gb/)
- [GiB](https://blog.matrixpost.net/tag/gib/)
- [MB](https://blog.matrixpost.net/tag/mb/)
- [MiB](https://blog.matrixpost.net/tag/mib/)
- [TB](https://blog.matrixpost.net/tag/tb/)
- [TiB](https://blog.matrixpost.net/tag/tib/)
- [decimal system](https://blog.matrixpost.net/tag/decimal-system/)
- [powers of 2](https://blog.matrixpost.net/tag/powers-of-2/)
- [powers of 10](https://blog.matrixpost.net/tag/powers-of-10/)
- [metrix prefix](https://blog.matrixpost.net/tag/metrix-prefix/)
- [unit prefix](https://blog.matrixpost.net/tag/unit-prefix/)
- [Byte](https://blog.matrixpost.net/tag/byte/)
- [Windows Autopilot](https://blog.matrixpost.net/tag/windows-autopilot/)
- [Microsoft Store for Business](https://blog.matrixpost.net/tag/microsoft-store-for-business/)
- [Microsoft Endpoint Manager](https://blog.matrixpost.net/tag/microsoft-endpoint-manager/)
- [Microsoft 365](https://blog.matrixpost.net/tag/microsoft-365/)
- [IntuneWinAppUtil](https://blog.matrixpost.net/tag/intunewinapputil/)
- [Offline Domain Join](https://blog.matrixpost.net/tag/offline-domain-join/)
- [ODJ](https://blog.matrixpost.net/tag/odj/)
- [App registration](https://blog.matrixpost.net/tag/app-registration/)
- [Service Principal Object](https://blog.matrixpost.net/tag/service-principal-object/)
- [Application Object](https://blog.matrixpost.net/tag/application-object/)
- [App registrations](https://blog.matrixpost.net/tag/app-registrations/)
- [identity and access management (IAM)](https://blog.matrixpost.net/tag/identity-and-access-management-iam/)
- [identity provider (IdP)](https://blog.matrixpost.net/tag/identity-provider-idp/)
- [Microsoft identity platform](https://blog.matrixpost.net/tag/microsoft-identity-platform/)
- [MSAL](https://blog.matrixpost.net/tag/msal/)
- [Microsoft Authentication Library](https://blog.matrixpost.net/tag/microsoft-authentication-library/)
- [password writeback](https://blog.matrixpost.net/tag/password-writeback/)
- [self-service password reset](https://blog.matrixpost.net/tag/self-service-password-reset/)
- [0x80190194](https://blog.matrixpost.net/tag/0x80190194/)
- [OAB](https://blog.matrixpost.net/tag/oab/)
- [Offline Address Book](https://blog.matrixpost.net/tag/offline-address-book/)
- [Outlook](https://blog.matrixpost.net/tag/outlook/)
- [Sync Engine](https://blog.matrixpost.net/tag/sync-engine/)
- [Metaverse](https://blog.matrixpost.net/tag/metaverse/)
- [Connector Space](https://blog.matrixpost.net/tag/connector-space/)
- [Connected Directory](https://blog.matrixpost.net/tag/connected-directory/)
- [thumbnailPhoto](https://blog.matrixpost.net/tag/thumbnailphoto/)
- [extension attribute](https://blog.matrixpost.net/tag/extension-attribute/)
- [Large Attribute](https://blog.matrixpost.net/tag/large-attribute/)
- [Sync Error](https://blog.matrixpost.net/tag/sync-error/)
- [Bookings](https://blog.matrixpost.net/tag/bookings/)
- [Calendar](https://blog.matrixpost.net/tag/calendar/)
- [appointments](https://blog.matrixpost.net/tag/appointments/)
- [scheduling](https://blog.matrixpost.net/tag/scheduling/)
- [Microsoft 365 Groups](https://blog.matrixpost.net/tag/microsoft-365-groups/)
- [Outlook on the web](https://blog.matrixpost.net/tag/outlook-on-the-web/)
- [Office 365 Groups](https://blog.matrixpost.net/tag/office-365-groups/)
- [Branch Office Network](https://blog.matrixpost.net/tag/branch-office-network/)
- [Headquarters Network](https://blog.matrixpost.net/tag/headquarters-network/)
- [IPSec VPN Tunnel](https://blog.matrixpost.net/tag/ipsec-vpn-tunnel/)
- [dynamic route-based](https://blog.matrixpost.net/tag/dynamic-route-based/)
- [PetitPotam](https://blog.matrixpost.net/tag/petitpotam/)
- [NTLM Relay Attack](https://blog.matrixpost.net/tag/ntlm-relay-attack/)
- [AD CS](https://blog.matrixpost.net/tag/ad-cs/)
- [Certificate Authority Web Enrollment](https://blog.matrixpost.net/tag/certificate-authority-web-enrollment/)
- [Certificate Enrollment Web Service](https://blog.matrixpost.net/tag/certificate-enrollment-web-service/)
- [Virtual Account](https://blog.matrixpost.net/tag/virtual-account/)
- [NT Service\MSSQLSERVER](https://blog.matrixpost.net/tag/nt-servicemssqlserver/)
- [FCB::Open failed](https://blog.matrixpost.net/tag/fcbopen-failed/)
- [Access is denied](https://blog.matrixpost.net/tag/access-is-denied/)
- [OAuth 2.0](https://blog.matrixpost.net/tag/oauth-2-0/)
- [Access Token](https://blog.matrixpost.net/tag/access-token/)
- [Refresh Token](https://blog.matrixpost.net/tag/refresh-token/)
- [ID Token](https://blog.matrixpost.net/tag/id-token/)
- [Authorization](https://blog.matrixpost.net/tag/authorization/)
- [Authentication](https://blog.matrixpost.net/tag/authentication/)
- [Identity Provider](https://blog.matrixpost.net/tag/identity-provider/)
- [IdP](https://blog.matrixpost.net/tag/idp/)
- [OpenID Connect Provider (OP)](https://blog.matrixpost.net/tag/openid-connect-provider-op/)
- [OAuth2.0](https://blog.matrixpost.net/tag/oauth2-0/)
- [Google API](https://blog.matrixpost.net/tag/google-api/)
- [Security Assertion Markup Language](https://blog.matrixpost.net/tag/security-assertion-markup-language/)
- [Windows Hello](https://blog.matrixpost.net/tag/windows-hello/)
- [Windows Hello for Business](https://blog.matrixpost.net/tag/windows-hello-for-business/)
- [PIN](https://blog.matrixpost.net/tag/pin/)
- [Fingerprint](https://blog.matrixpost.net/tag/fingerprint/)
- [Activity History](https://blog.matrixpost.net/tag/activity-history/)
- [ACL](https://blog.matrixpost.net/tag/acl/)
- [ACE](https://blog.matrixpost.net/tag/ace/)
- [DACL](https://blog.matrixpost.net/tag/dacl/)
- [SACL](https://blog.matrixpost.net/tag/sacl/)
- [Access Control List](https://blog.matrixpost.net/tag/access-control-list/)
- [Access Control Entry](https://blog.matrixpost.net/tag/access-control-entry/)
- [Security Descriptor](https://blog.matrixpost.net/tag/security-descriptor/)
- [non converged](https://blog.matrixpost.net/tag/non-converged/)
- [converged](https://blog.matrixpost.net/tag/converged/)
- [hyperconverged](https://blog.matrixpost.net/tag/hyperconverged/)
- [infrastructure](https://blog.matrixpost.net/tag/infrastructure/)
- [Azure Stack](https://blog.matrixpost.net/tag/azure-stack/)
- [Azure Stack Hub](https://blog.matrixpost.net/tag/azure-stack-hub/)
- [Azure Stack HCI](https://blog.matrixpost.net/tag/azure-stack-hci/)
- [Azure Stack Edge](https://blog.matrixpost.net/tag/azure-stack-edge/)
- [Task Scheduler](https://blog.matrixpost.net/tag/task-scheduler/)
- [Batch](https://blog.matrixpost.net/tag/batch/)
- [Error Level](https://blog.matrixpost.net/tag/error-level/)
- [0x1](https://blog.matrixpost.net/tag/0x1/)
- [Script](https://blog.matrixpost.net/tag/script/)
- [Device Owner](https://blog.matrixpost.net/tag/device-owner/)
- [Get-AzureADDevice](https://blog.matrixpost.net/tag/get-azureaddevice/)
- [Add-AzureADDeviceRegisteredOwner](https://blog.matrixpost.net/tag/add-azureaddeviceregisteredowner/)
- [Remove-AzureADDeviceRegisteredOwner](https://blog.matrixpost.net/tag/remove-azureaddeviceregisteredowner/)
- [MediaWiki](https://blog.matrixpost.net/tag/mediawiki/)
- [PHP](https://blog.matrixpost.net/tag/php/)
- [TCP-Keepalive](https://blog.matrixpost.net/tag/tcp-keepalive/)
- [Timeout](https://blog.matrixpost.net/tag/timeout/)
- [Putty](https://blog.matrixpost.net/tag/putty/)
- [WinSCP](https://blog.matrixpost.net/tag/winscp/)
- [modsecurity](https://blog.matrixpost.net/tag/modsecurity/)
- [libmodsecurity](https://blog.matrixpost.net/tag/libmodsecurity/)
- [apache](https://blog.matrixpost.net/tag/apache/)
- [WAF](https://blog.matrixpost.net/tag/waf/)
- [Web Application Firewall](https://blog.matrixpost.net/tag/web-application-firewall/)
- [Nitko](https://blog.matrixpost.net/tag/nitko/)
- [Nikto2](https://blog.matrixpost.net/tag/nikto2/)
- [web server scanner](https://blog.matrixpost.net/tag/web-server-scanner/)
- [fail2ban](https://blog.matrixpost.net/tag/fail2ban/)
- [sshd](https://blog.matrixpost.net/tag/sshd/)
- [Apache2](https://blog.matrixpost.net/tag/apache2/)
- [.htaccess](https://blog.matrixpost.net/tag/htaccess/)
- [.htpasswd](https://blog.matrixpost.net/tag/htpasswd/)
- [kettop](https://blog.matrixpost.net/tag/kettop/)
- [UFS](https://blog.matrixpost.net/tag/ufs/)
- [ZFS](https://blog.matrixpost.net/tag/zfs/)
- [boot loop](https://blog.matrixpost.net/tag/boot-loop/)
- [fsck](https://blog.matrixpost.net/tag/fsck/)
- [PC Engine](https://blog.matrixpost.net/tag/pc-engine/)
- [CoreBoot](https://blog.matrixpost.net/tag/coreboot/)
- [Aptio BIOS UEFI](https://blog.matrixpost.net/tag/aptio-bios-uefi/)
- [IPv4](https://blog.matrixpost.net/tag/ipv4/)
- [WAN Link](https://blog.matrixpost.net/tag/wan-link/)
- [point-to-point](https://blog.matrixpost.net/tag/point-to-point/)
- [link-local address](https://blog.matrixpost.net/tag/link-local-address/)
- [unique local address](https://blog.matrixpost.net/tag/unique-local-address/)
- [ULA](https://blog.matrixpost.net/tag/ula/)
- [Global Unicast Address](https://blog.matrixpost.net/tag/global-unicast-address/)
- [GUA](https://blog.matrixpost.net/tag/gua/)
- [prefix](https://blog.matrixpost.net/tag/prefix/)
- [Subnet](https://blog.matrixpost.net/tag/subnet/)
- [subnetting](https://blog.matrixpost.net/tag/subnetting/)
- [ISP](https://blog.matrixpost.net/tag/isp/)
- [provider-aggregatable address space](https://blog.matrixpost.net/tag/provider-aggregatable-address-space/)
- [PI](https://blog.matrixpost.net/tag/pi/)
- [PA](https://blog.matrixpost.net/tag/pa/)
- [provider-independent address space](https://blog.matrixpost.net/tag/provider-independent-address-space/)
- [RIR](https://blog.matrixpost.net/tag/rir/)
- [LIR](https://blog.matrixpost.net/tag/lir/)
- [autonomous system](https://blog.matrixpost.net/tag/autonomous-system/)
- [AS](https://blog.matrixpost.net/tag/as/)
- [longest prefix match](https://blog.matrixpost.net/tag/longest-prefix-match/)
- [maximum prefix length match](https://blog.matrixpost.net/tag/maximum-prefix-length-match/)
- [HSTS](https://blog.matrixpost.net/tag/hsts/)
- [HTTP Strict Transport Security](https://blog.matrixpost.net/tag/http-strict-transport-security/)
- [HSTS preload list](https://blog.matrixpost.net/tag/hsts-preload-list/)
- [HTTP](https://blog.matrixpost.net/tag/http/)
- [301 redirect](https://blog.matrixpost.net/tag/301-redirect/)
- [IEEE 802.11](https://blog.matrixpost.net/tag/ieee-802-11/)
- [NPAS](https://blog.matrixpost.net/tag/npas/)
- [IAS](https://blog.matrixpost.net/tag/ias/)
- [Internet Authentication Services](https://blog.matrixpost.net/tag/internet-authentication-services/)
- [GPO](https://blog.matrixpost.net/tag/gpo/)
- [802.1X](https://blog.matrixpost.net/tag/802-1x/)
- [PEAP](https://blog.matrixpost.net/tag/peap/)
- [EAP](https://blog.matrixpost.net/tag/eap/)
- [Extensible Authentication Protocol](https://blog.matrixpost.net/tag/extensible-authentication-protocol/)
- [Protected Extensible Authentication Protocol](https://blog.matrixpost.net/tag/protected-extensible-authentication-protocol/)
- [EAP-TTLS](https://blog.matrixpost.net/tag/eap-ttls/)
- [access point](https://blog.matrixpost.net/tag/access-point/)
- [X.509](https://blog.matrixpost.net/tag/x-509/)
- [computer certificate](https://blog.matrixpost.net/tag/computer-certificate/)
- [user certificate](https://blog.matrixpost.net/tag/user-certificate/)
- [certificate auto-enrollment](https://blog.matrixpost.net/tag/certificate-auto-enrollment/)
- [group policy](https://blog.matrixpost.net/tag/group-policy/)
- [Certificate Authority](https://blog.matrixpost.net/tag/certificate-authority/)
- [Certificate Templates Console](https://blog.matrixpost.net/tag/certificate-templates-console/)
- [Recovery Agent](https://blog.matrixpost.net/tag/recovery-agent/)
- [key archival](https://blog.matrixpost.net/tag/key-archival/)
- [key recovery](https://blog.matrixpost.net/tag/key-recovery/)
- [Certificate Mapping](https://blog.matrixpost.net/tag/certificate-mapping/)
- [implicit mapping](https://blog.matrixpost.net/tag/implicit-mapping/)
- [explicit mapping](https://blog.matrixpost.net/tag/explicit-mapping/)
- [NTAuth store](https://blog.matrixpost.net/tag/ntauth-store/)
- [pkiview.msc](https://blog.matrixpost.net/tag/pkiview-msc/)
- [UPN](https://blog.matrixpost.net/tag/upn/)
- [user principal name](https://blog.matrixpost.net/tag/user-principal-name/)
- [Subject Alternative Name](https://blog.matrixpost.net/tag/subject-alternative-name/)
- [SAN](https://blog.matrixpost.net/tag/san/)
- [chroot](https://blog.matrixpost.net/tag/chroot/)
- [chroot jail](https://blog.matrixpost.net/tag/chroot-jail/)
- [home directory](https://blog.matrixpost.net/tag/home-directory/)
- [OpenSSH](https://blog.matrixpost.net/tag/openssh/)
- [internal-sftp](https://blog.matrixpost.net/tag/internal-sftp/)
- [VPN tunnel](https://blog.matrixpost.net/tag/vpn-tunnel/)
- [WPA3](https://blog.matrixpost.net/tag/wpa3/)
- [WPA2-Enterprise](https://blog.matrixpost.net/tag/wpa2-enterprise/)
- [WPA3-Enterprise](https://blog.matrixpost.net/tag/wpa3-enterprise/)
- [802.11](https://blog.matrixpost.net/tag/802-11/)
- [Framed-MTU](https://blog.matrixpost.net/tag/framed-mtu/)
- [EAP authentication exchange](https://blog.matrixpost.net/tag/eap-authentication-exchange/)
- [MTU](https://blog.matrixpost.net/tag/mtu/)
- [Access-Request](https://blog.matrixpost.net/tag/access-request/)
- [Access-Challange](https://blog.matrixpost.net/tag/access-challange/)
- [Fragmentation](https://blog.matrixpost.net/tag/fragmentation/)
- [Fragmented UDP messages](https://blog.matrixpost.net/tag/fragmented-udp-messages/)
- [home](https://blog.matrixpost.net/tag/home/)
- [parted](https://blog.matrixpost.net/tag/parted/)
- [MBR](https://blog.matrixpost.net/tag/mbr/)
- [GPT](https://blog.matrixpost.net/tag/gpt/)
- [fstab](https://blog.matrixpost.net/tag/fstab/)
- [UUID](https://blog.matrixpost.net/tag/uuid/)
- [mklabel](https://blog.matrixpost.net/tag/mklabel/)
- [mkpart](https://blog.matrixpost.net/tag/mkpart/)
- [mkfs](https://blog.matrixpost.net/tag/mkfs/)
- [Delegation](https://blog.matrixpost.net/tag/delegation/)
- [booking request](https://blog.matrixpost.net/tag/booking-request/)
- [room mailbox](https://blog.matrixpost.net/tag/room-mailbox/)
- [effective routes](https://blog.matrixpost.net/tag/effective-routes/)
- [Virtual Network Gateway](https://blog.matrixpost.net/tag/virtual-network-gateway/)
- [Local Network Gateway](https://blog.matrixpost.net/tag/local-network-gateway/)
- [service tag](https://blog.matrixpost.net/tag/service-tag/)
- [linux-azure package](https://blog.matrixpost.net/tag/linux-azure-package/)
- [Hyper-V Generation 2](https://blog.matrixpost.net/tag/hyper-v-generation-2/)
- [Secure Boot](https://blog.matrixpost.net/tag/secure-boot/)
- [UEFI](https://blog.matrixpost.net/tag/uefi/)
- [Set-MailboxCalendarFolder](https://blog.matrixpost.net/tag/set-mailboxcalendarfolder/)
- [Set-CalendarProcessing](https://blog.matrixpost.net/tag/set-calendarprocessing/)
- [Room Calendar](https://blog.matrixpost.net/tag/room-calendar/)
- [Booking](https://blog.matrixpost.net/tag/booking/)
- [calendar free and busy time](https://blog.matrixpost.net/tag/calendar-free-and-busy-time/)
- [Windows Server Date & Time](https://blog.matrixpost.net/tag/windows-server-date-time/)
- [RDP](https://blog.matrixpost.net/tag/rdp/)
- [DC](https://blog.matrixpost.net/tag/dc/)
- [AD DS](https://blog.matrixpost.net/tag/ad-ds/)
- [Schema](https://blog.matrixpost.net/tag/schema/)
- [Window Server 2019](https://blog.matrixpost.net/tag/window-server-2019/)
- [promote](https://blog.matrixpost.net/tag/promote/)
- [demote](https://blog.matrixpost.net/tag/demote/)
- [Upgrade DC](https://blog.matrixpost.net/tag/upgrade-dc/)
- [Active Directory Topology](https://blog.matrixpost.net/tag/active-directory-topology/)
- [Knowledge Consistency Checker (KCC)](https://blog.matrixpost.net/tag/knowledge-consistency-checker-kcc/)
- [KCC](https://blog.matrixpost.net/tag/kcc/)
- [Intersite Topology Generator (ISTG)](https://blog.matrixpost.net/tag/intersite-topology-generator-istg/)
- [ISTG](https://blog.matrixpost.net/tag/istg/)
- [repadmin](https://blog.matrixpost.net/tag/repadmin/)
- [NTDS Settings](https://blog.matrixpost.net/tag/ntds-settings/)
- [DFS](https://blog.matrixpost.net/tag/dfs/)
- [DFS-N](https://blog.matrixpost.net/tag/dfs-n/)
- [domain-based namespace](https://blog.matrixpost.net/tag/domain-based-namespace/)
- [DFS-R](https://blog.matrixpost.net/tag/dfs-r/)
- [hard link](https://blog.matrixpost.net/tag/hard-link/)
- [soft link](https://blog.matrixpost.net/tag/soft-link/)
- [symbolic link](https://blog.matrixpost.net/tag/symbolic-link/)
- [symlink](https://blog.matrixpost.net/tag/symlink/)
- [Inode](https://blog.matrixpost.net/tag/inode/)
- [File](https://blog.matrixpost.net/tag/file/)
- [payload](https://blog.matrixpost.net/tag/payload/)
- [prefixpolicy](https://blog.matrixpost.net/tag/prefixpolicy/)
- [dual stack](https://blog.matrixpost.net/tag/dual-stack/)
- [DisabledComponents](https://blog.matrixpost.net/tag/disabledcomponents/)
- [netsh](https://blog.matrixpost.net/tag/netsh/)
- [precedence](https://blog.matrixpost.net/tag/precedence/)
- [source address](https://blog.matrixpost.net/tag/source-address/)
- [destination address](https://blog.matrixpost.net/tag/destination-address/)
- [policy table](https://blog.matrixpost.net/tag/policy-table/)
- [IPv4 mapped addresses](https://blog.matrixpost.net/tag/ipv4-mapped-addresses/)
- [Edge Subscription](https://blog.matrixpost.net/tag/edge-subscription/)
- [Edge Server](https://blog.matrixpost.net/tag/edge-server/)
- [Licence Server](https://blog.matrixpost.net/tag/licence-server/)
- [Licensing Mode](https://blog.matrixpost.net/tag/licensing-mode/)
- [Access Denied](https://blog.matrixpost.net/tag/access-denied/)
- [NTFS](https://blog.matrixpost.net/tag/ntfs/)
- [takeown](https://blog.matrixpost.net/tag/takeown/)
- [icacls](https://blog.matrixpost.net/tag/icacls/)
- [DACLs](https://blog.matrixpost.net/tag/dacls/)
- [Windows Server Edition](https://blog.matrixpost.net/tag/windows-server-edition/)
- [Standard Edition](https://blog.matrixpost.net/tag/standard-edition/)
- [Datacenter Edition](https://blog.matrixpost.net/tag/datacenter-edition/)
- [IBM X3650 M4](https://blog.matrixpost.net/tag/ibm-x3650-m4/)
- [IBM x3650 M5](https://blog.matrixpost.net/tag/ibm-x3650-m5/)
- [BoMC](https://blog.matrixpost.net/tag/bomc/)
- [XClarity](https://blog.matrixpost.net/tag/xclarity/)
- [UpdateXpress](https://blog.matrixpost.net/tag/updatexpress/)
- [Hybrid User](https://blog.matrixpost.net/tag/hybrid-user/)
- [Restore User](https://blog.matrixpost.net/tag/restore-user/)
- [Ldifde](https://blog.matrixpost.net/tag/ldifde/)
- [Restore-ADObject](https://blog.matrixpost.net/tag/restore-adobject/)
- [ctive Directory Recycle Bin](https://blog.matrixpost.net/tag/ctive-directory-recycle-bin/)
- [Lifecycle Controller](https://blog.matrixpost.net/tag/lifecycle-controller/)
- [Dell PowerEdge R730](https://blog.matrixpost.net/tag/dell-poweredge-r730/)
- [Dell PowerEdge R740](https://blog.matrixpost.net/tag/dell-poweredge-r740/)
- [Set-CsOnlinePstnUsage](https://blog.matrixpost.net/tag/set-csonlinepstnusage/)
- [New-CsOnlineVoiceRoute](https://blog.matrixpost.net/tag/new-csonlinevoiceroute/)
- [Install-Module](https://blog.matrixpost.net/tag/install-module/)
- [Unable to cast object](https://blog.matrixpost.net/tag/unable-to-cast-object/)
- [System.Management.Automation.PSListModifier](https://blog.matrixpost.net/tag/system-management-automation-pslistmodifier/)
- [DNS SRV Records](https://blog.matrixpost.net/tag/dns-srv-records/)
- [generic (non-site-specific)](https://blog.matrixpost.net/tag/generic-non-site-specific/)
- [site-specific](https://blog.matrixpost.net/tag/site-specific/)
- [DC Locator](https://blog.matrixpost.net/tag/dc-locator/)
- [round robin](https://blog.matrixpost.net/tag/round-robin/)
- [netmask ordering](https://blog.matrixpost.net/tag/netmask-ordering/)
- [dnscmd](https://blog.matrixpost.net/tag/dnscmd/)
- [LocalNetPriorityNetMask](https://blog.matrixpost.net/tag/localnetprioritynetmask/)
- [troubleshoot](https://blog.matrixpost.net/tag/troubleshoot/)
- [unable validate credentials](https://blog.matrixpost.net/tag/unable-validate-credentials/)
- [InteractiveAuth](https://blog.matrixpost.net/tag/interactiveauth/)
- [SAP Data Intelligence](https://blog.matrixpost.net/tag/sap-data-intelligence/)
- [SAP](https://blog.matrixpost.net/tag/sap/)
- [Kubernetes](https://blog.matrixpost.net/tag/kubernetes/)
- [Azure Kubernetes Service](https://blog.matrixpost.net/tag/azure-kubernetes-service/)
- [AKS](https://blog.matrixpost.net/tag/aks/)
- [ACR](https://blog.matrixpost.net/tag/acr/)
- [Azure Container Registry](https://blog.matrixpost.net/tag/azure-container-registry/)
- [FreeBSD 12.3](https://blog.matrixpost.net/tag/freebsd-12-3/)
- [pfSense 2.6.0](https://blog.matrixpost.net/tag/pfsense-2-6-0/)
- [RSC](https://blog.matrixpost.net/tag/rsc/)
- [Receive Segment Coalescing](https://blog.matrixpost.net/tag/receive-segment-coalescing/)
- [Virtual Switch](https://blog.matrixpost.net/tag/virtual-switch/)
- [Local Users group](https://blog.matrixpost.net/tag/local-users-group/)
- [Domain Users group](https://blog.matrixpost.net/tag/domain-users-group/)
- [Authenticated Users](https://blog.matrixpost.net/tag/authenticated-users/)
- [Interactive](https://blog.matrixpost.net/tag/interactive/)
- [log on](https://blog.matrixpost.net/tag/log-on/)
- [logon](https://blog.matrixpost.net/tag/logon/)
- [LogonWorkstations](https://blog.matrixpost.net/tag/logonworkstations/)
- [Deny log on locally](https://blog.matrixpost.net/tag/deny-log-on-locally/)
- [Allow log on locally](https://blog.matrixpost.net/tag/allow-log-on-locally/)
- [Code Signing](https://blog.matrixpost.net/tag/code-signing/)
- [Certificate](https://blog.matrixpost.net/tag/certificate/)
- [Sign Tool](https://blog.matrixpost.net/tag/sign-tool/)
- [ClickOnce](https://blog.matrixpost.net/tag/clickonce/)
- [Exchange Online Protection](https://blog.matrixpost.net/tag/exchange-online-protection/)
- [EOP](https://blog.matrixpost.net/tag/eop/)
- [Send Connector](https://blog.matrixpost.net/tag/send-connector/)
- [DKIM](https://blog.matrixpost.net/tag/dkim/)
- [DMARC](https://blog.matrixpost.net/tag/dmarc/)
- [SPF](https://blog.matrixpost.net/tag/spf/)
- [DKIM Signer](https://blog.matrixpost.net/tag/dkim-signer/)
- [Transport Agent](https://blog.matrixpost.net/tag/transport-agent/)
- [DomainKeys Identified Mail](https://blog.matrixpost.net/tag/domainkeys-identified-mail/)
- [Remote Desktop Connection](https://blog.matrixpost.net/tag/remote-desktop-connection/)
- [Remote App](https://blog.matrixpost.net/tag/remote-app/)
- [ShowInPortal](https://blog.matrixpost.net/tag/showinportal/)
- [Outlook Profile](https://blog.matrixpost.net/tag/outlook-profile/)
- [Office 365 Apps](https://blog.matrixpost.net/tag/office-365-apps/)
- [Office 2016](https://blog.matrixpost.net/tag/office-2016/)
- [Office 2019](https://blog.matrixpost.net/tag/office-2019/)
- [ZeroConfigExchange](https://blog.matrixpost.net/tag/zeroconfigexchange/)
- [ZeroConfigExchangeOnce](https://blog.matrixpost.net/tag/zeroconfigexchangeonce/)
- [Sender Policy Framework](https://blog.matrixpost.net/tag/sender-policy-framework/)
- [Domain-based Message Authentication](https://blog.matrixpost.net/tag/domain-based-message-authentication/)
- [Reporting and Conformance](https://blog.matrixpost.net/tag/reporting-and-conformance/)
- [postfix-policyd-spf-python](https://blog.matrixpost.net/tag/postfix-policyd-spf-python/)
- [OpenDKIM](https://blog.matrixpost.net/tag/opendkim/)
- [private key](https://blog.matrixpost.net/tag/private-key/)
- [public key](https://blog.matrixpost.net/tag/public-key/)
- [PuTTYGen](https://blog.matrixpost.net/tag/puttygen/)
- [authorized_keys](https://blog.matrixpost.net/tag/authorized_keys/)
- [ownCloud](https://blog.matrixpost.net/tag/owncloud/)
- [PPA](https://blog.matrixpost.net/tag/ppa/)
- [Virtual Host](https://blog.matrixpost.net/tag/virtual-host/)
- [ufw](https://blog.matrixpost.net/tag/ufw/)
- [iptables](https://blog.matrixpost.net/tag/iptables/)
- [nftables](https://blog.matrixpost.net/tag/nftables/)
- [netfilter](https://blog.matrixpost.net/tag/netfilter/)
- [iptables-nft](https://blog.matrixpost.net/tag/iptables-nft/)
- [iptables-legacy](https://blog.matrixpost.net/tag/iptables-legacy/)
- [STARTTLS](https://blog.matrixpost.net/tag/starttls/)
- [Enable Opportunistic TLS smtpd_tls_security_level](https://blog.matrixpost.net/tag/enable-opportunistic-tls-smtpd_tls_security_level/)
- [snakeoil](https://blog.matrixpost.net/tag/snakeoil/)
- [OpenSSL](https://blog.matrixpost.net/tag/openssl/)
- [Microsoft 365 Defender](https://blog.matrixpost.net/tag/microsoft-365-defender/)
- [OpenDMARC](https://blog.matrixpost.net/tag/opendmarc/)
- [WP fail2ban](https://blog.matrixpost.net/tag/wp-fail2ban/)
- [Brute-Force Attack](https://blog.matrixpost.net/tag/brute-force-attack/)
- [Firewall](https://blog.matrixpost.net/tag/firewall/)
- [Azure AD join](https://blog.matrixpost.net/tag/azure-ad-join/)
- [local administrator group](https://blog.matrixpost.net/tag/local-administrator-group/)
- [SID](https://blog.matrixpost.net/tag/sid/)
- [Azure AD role](https://blog.matrixpost.net/tag/azure-ad-role/)
- [Hyperscaler](https://blog.matrixpost.net/tag/hyperscaler/)
- [AWS](https://blog.matrixpost.net/tag/aws/)
- [GCP](https://blog.matrixpost.net/tag/gcp/)
- [Amazon](https://blog.matrixpost.net/tag/amazon/)
- [Google](https://blog.matrixpost.net/tag/google/)
- [Horizontal scaling](https://blog.matrixpost.net/tag/horizontal-scaling/)
- [Vertical scaling](https://blog.matrixpost.net/tag/vertical-scaling/)
- [systemd](https://blog.matrixpost.net/tag/systemd/)
- [SysV](https://blog.matrixpost.net/tag/sysv/)
- [user space](https://blog.matrixpost.net/tag/user-space/)
- [kernel space](https://blog.matrixpost.net/tag/kernel-space/)
- [userland](https://blog.matrixpost.net/tag/userland/)
- [systemctl](https://blog.matrixpost.net/tag/systemctl/)
- [bootstrapping](https://blog.matrixpost.net/tag/bootstrapping/)
- [BitLocker](https://blog.matrixpost.net/tag/bitlocker/)
- [Domain Controller](https://blog.matrixpost.net/tag/domain-controller/)
- [TPM](https://blog.matrixpost.net/tag/tpm/)
- [Trusted Platform Module](https://blog.matrixpost.net/tag/trusted-platform-module/)
- [WinRE](https://blog.matrixpost.net/tag/winre/)
- [Windows RE](https://blog.matrixpost.net/tag/windows-re/)
- [wmic](https://blog.matrixpost.net/tag/wmic/)
- [Windows PE](https://blog.matrixpost.net/tag/windows-pe/)
- [Utilman.exe](https://blog.matrixpost.net/tag/utilman-exe/)
- [external email forwarding](https://blog.matrixpost.net/tag/external-email-forwarding/)
- [Automatic - System-controlled](https://blog.matrixpost.net/tag/automatic-system-controlled/)
- [Off - Forwarding is disabled](https://blog.matrixpost.net/tag/off-forwarding-is-disabled/)
- [On - Forwarding is disabled](https://blog.matrixpost.net/tag/on-forwarding-is-disabled/)
- [Data Location](https://blog.matrixpost.net/tag/data-location/)
- [Cross-tenant](https://blog.matrixpost.net/tag/cross-tenant/)
- [New-MigrationBatch](https://blog.matrixpost.net/tag/new-migrationbatch/)
- [source tenant](https://blog.matrixpost.net/tag/source-tenant/)
- [target tenant](https://blog.matrixpost.net/tag/target-tenant/)
- [organization relationship](https://blog.matrixpost.net/tag/organization-relationship/)
- [skip-grant-tables](https://blog.matrixpost.net/tag/skip-grant-tables/)
- [mysqld](https://blog.matrixpost.net/tag/mysqld/)
- [flush privileges](https://blog.matrixpost.net/tag/flush-privileges/)
- [SpamAssassin](https://blog.matrixpost.net/tag/spamassassin/)
- [Greylisting](https://blog.matrixpost.net/tag/greylisting/)
- [smtpd_client_restrictions](https://blog.matrixpost.net/tag/smtpd_client_restrictions/)
- [smtpd_helo_restrictions](https://blog.matrixpost.net/tag/smtpd_helo_restrictions/)
- [smtpd_sender_restrictions](https://blog.matrixpost.net/tag/smtpd_sender_restrictions/)
- [smtpd_recipient_restrictions](https://blog.matrixpost.net/tag/smtpd_recipient_restrictions/)
- [UCE](https://blog.matrixpost.net/tag/uce/)
- [postconf](https://blog.matrixpost.net/tag/postconf/)
- [postmap](https://blog.matrixpost.net/tag/postmap/)
- [AWS CLI](https://blog.matrixpost.net/tag/aws-cli/)
- [Amazon Web Services](https://blog.matrixpost.net/tag/amazon-web-services/)
- [Quick Configuration](https://blog.matrixpost.net/tag/quick-configuration/)
- [IAM Access Key Pair](https://blog.matrixpost.net/tag/iam-access-key-pair/)
- [AWS CLI profile](https://blog.matrixpost.net/tag/aws-cli-profile/)
- [AWS Control Tower](https://blog.matrixpost.net/tag/aws-control-tower/)
- [AWS Organizations](https://blog.matrixpost.net/tag/aws-organizations/)
- [AWS account](https://blog.matrixpost.net/tag/aws-account/)
- [AWS VPC](https://blog.matrixpost.net/tag/aws-vpc/)
- [route based](https://blog.matrixpost.net/tag/route-based-2/)
- [virtual private gateway](https://blog.matrixpost.net/tag/virtual-private-gateway/)
- [customer gateway](https://blog.matrixpost.net/tag/customer-gateway/)
- [AD Connector](https://blog.matrixpost.net/tag/ad-connector/)
- [Directory Services](https://blog.matrixpost.net/tag/directory-services/)
- [seamlessly domain join](https://blog.matrixpost.net/tag/seamlessly-domain-join/)
- [Device Collection](https://blog.matrixpost.net/tag/device-collection/)
- [OS version](https://blog.matrixpost.net/tag/os-version/)
- [WSUS](https://blog.matrixpost.net/tag/wsus/)
- [IAM](https://blog.matrixpost.net/tag/iam/)
- [IAM Identity Manager](https://blog.matrixpost.net/tag/iam-identity-manager/)
- [Directory Service](https://blog.matrixpost.net/tag/directory-service/)
- [AWS Managed Microsoft AD](https://blog.matrixpost.net/tag/aws-managed-microsoft-ad/)
- [AWS Directory Service for Microsoft Active Directory](https://blog.matrixpost.net/tag/aws-directory-service-for-microsoft-active-directory/)
- [Simple AD](https://blog.matrixpost.net/tag/simple-ad/)
- [Amazon Cognito](https://blog.matrixpost.net/tag/amazon-cognito/)
- [AWS Subnet](https://blog.matrixpost.net/tag/aws-subnet/)
- [peering VPCs](https://blog.matrixpost.net/tag/peering-vpcs/)
- [Google Cloud](https://blog.matrixpost.net/tag/google-cloud/)
- [Google Cloud Platform](https://blog.matrixpost.net/tag/google-cloud-platform/)
- [Cloud Identity](https://blog.matrixpost.net/tag/cloud-identity/)
- [Google Workspace](https://blog.matrixpost.net/tag/google-workspace/)
- [G Suite](https://blog.matrixpost.net/tag/g-suite/)
- [organization resource](https://blog.matrixpost.net/tag/organization-resource/)
- [Google Cloud Identity](https://blog.matrixpost.net/tag/google-cloud-identity/)
- [Identity as a Service](https://blog.matrixpost.net/tag/identity-as-a-service/)
- [IDaas](https://blog.matrixpost.net/tag/idaas/)
- [enterprise mobility management](https://blog.matrixpost.net/tag/enterprise-mobility-management/)
- [EMM](https://blog.matrixpost.net/tag/emm/)
- [Admin Console](https://blog.matrixpost.net/tag/admin-console/)
- [GCP Console](https://blog.matrixpost.net/tag/gcp-console/)
- [Cloud Console](https://blog.matrixpost.net/tag/cloud-console/)
- [gcloud CLI](https://blog.matrixpost.net/tag/gcloud-cli/)
- [Cloud Shell](https://blog.matrixpost.net/tag/cloud-shell/)
- [Google Cloud CLI installer](https://blog.matrixpost.net/tag/google-cloud-cli-installer/)
- [Cloud SDK](https://blog.matrixpost.net/tag/cloud-sdk/)
- [sssd](https://blog.matrixpost.net/tag/sssd/)
- [System Securtiy Services Daemon](https://blog.matrixpost.net/tag/system-securtiy-services-daemon/)
- [realm](https://blog.matrixpost.net/tag/realm/)
- [domain](https://blog.matrixpost.net/tag/domain/)
- [pam](https://blog.matrixpost.net/tag/pam/)
- [Google Cloud organization resource](https://blog.matrixpost.net/tag/google-cloud-organization-resource/)
- [Azure Management Groups](https://blog.matrixpost.net/tag/azure-management-groups/)
- [Azure Mangement Groups](https://blog.matrixpost.net/tag/azure-mangement-groups/)
- [Subscription](https://blog.matrixpost.net/tag/subscription/)
- [Google Cloud project](https://blog.matrixpost.net/tag/google-cloud-project/)
- [Shared VPC network](https://blog.matrixpost.net/tag/shared-vpc-network/)
- [VPC network](https://blog.matrixpost.net/tag/vpc-network/)
- [Cloud API](https://blog.matrixpost.net/tag/cloud-api/)
- [Compute Engine](https://blog.matrixpost.net/tag/compute-engine/)
- [Cloud VPN](https://blog.matrixpost.net/tag/cloud-vpn/)
- [HA VPN](https://blog.matrixpost.net/tag/ha-vpn/)
- [VM instance](https://blog.matrixpost.net/tag/vm-instance/)
- [Priviliges](https://blog.matrixpost.net/tag/priviliges/)
- [sudo](https://blog.matrixpost.net/tag/sudo/)
- [sudoers](https://blog.matrixpost.net/tag/sudoers/)
- [substitute](https://blog.matrixpost.net/tag/substitute/)
- [Metadata](https://blog.matrixpost.net/tag/metadata/)
- [OS Login](https://blog.matrixpost.net/tag/os-login/)
- [metadata-based SSH keys](https://blog.matrixpost.net/tag/metadata-based-ssh-keys/)
- [metadata-managed SSH connections](https://blog.matrixpost.net/tag/metadata-managed-ssh-connections/)
- [Guest Environment](https://blog.matrixpost.net/tag/guest-environment/)
- [VM metadata](https://blog.matrixpost.net/tag/vm-metadata/)
- [IAM roles](https://blog.matrixpost.net/tag/iam-roles/)
- [SSH Metadata](https://blog.matrixpost.net/tag/ssh-metadata/)
- [SSH OS Login](https://blog.matrixpost.net/tag/ssh-os-login/)
- [Password Authentication](https://blog.matrixpost.net/tag/password-authentication/)
- [Private/Public Key Authentication](https://blog.matrixpost.net/tag/private-public-key-authentication/)
- [Azure VM](https://blog.matrixpost.net/tag/azure-vm/)
- [Linux](https://blog.matrixpost.net/tag/linux/)
- [SSH key pair](https://blog.matrixpost.net/tag/ssh-key-pair/)
- [AMI](https://blog.matrixpost.net/tag/ami/)
- [EC2](https://blog.matrixpost.net/tag/ec2/)
- [Amazon Machine Images](https://blog.matrixpost.net/tag/amazon-machine-images/)
- [static routes](https://blog.matrixpost.net/tag/static-routes/)
- [dynamic routes](https://blog.matrixpost.net/tag/dynamic-routes/)
- [VPNs](https://blog.matrixpost.net/tag/vpns/)
- [zone](https://blog.matrixpost.net/tag/zone/)
- [region](https://blog.matrixpost.net/tag/region/)