IIS 10.0 FTP IP Security allow list
In this post I’ll show you how to configure an IP allow list for IIS FTP Server using PowerShell, iisadministration and webadministration modules.
Search Results for: security
.htaccess security best practices in Apache 2.4.6+
Since Apache 2.4.6, a new module is used to configure and set up access control for websites: mod_authz_core. This means you have to use a different syntax for allowing or blocking hosts and IP addresses to your website. Apache Access Controle done right in WordPress .htaccess.
What are 4 important security measures for Windows Server & IIS 10?
In this post I address four (4) important actionable security measures for your servers running Windows Server (AD DS, DFS, IIS) and RDP.
How to enable HTTP Strict-Transport-Security (HSTS) on IIS
Set up HTTP Strict-Transport-Security (HSTS) response header in Windows Server IIS 10, here is some more technical information about HSTS in IIS, and other security headers…
OpenSSL Cheat Sheet: Common SSL / TLS Commands
Never forget an OpenSSL command again. This comprehensive cheat sheet covers certificate conversion (PFX, PEM, DER), CSR generation, and remote SSL / TLS verification for Windows and Linux admins.
Update SQL Server Management Studio (SSMS) automatically
The fire-and-forget method to update SQL Server Management Studio (SSMS) automatically by uninstalling any installed version and downloading & installing the newest available version from Microsoft.
About Jan Reilink and Sysadmins of the North (saotn.org)
About Jan Reilink and Sysadmins of the North
Send mail through SendGrid Web API using PowerShell
Learn how to use the Twilio SendGrid Web API v3 to send email with PowerShell
Disable ECDH public server param reuse in Windows Server IIS
Windows Server IIS is known for reusing DH key values, but there is a way to disable ECDH public server param reuse in Windows Server IIS and here is how.
Create strong passwords in Windows
Learn how to create strong and unique passwords in Windows using PowerShell, because the use of those unique and strong passwords is important.
Install IIS in Windows 11 using PowerShell
Have a need for IIS in your Windows 11 development station, and now you wonder how to install IIS? Here I describe how you can easily install IIS and some modules using PowerShell
Use PowerShell with SSL client certificates for HTTPS GET requests
Use a specific TLS certificate or thumbprint for outgoing HTTPS connections using PowerShell. Because sometimes there are endpoint restrictions in place.
Calculate SHA-256 checksums in PowerShell
Learn how to calculate and create file checksums with PowerShell’s Get-FileHash and certutil.exe. Use this to validate file integrity in Windows (Windows Server).
Windows SID to username and vice versa
Old school: learn how to convert a Windows SID (security identifier) to an username, or vice versa (username to SID) using PowerShell and VBScript. Because sometimes you just need to convert a Windows SID to an username, don’t you?
Install SSL / TLS certificates in Windows Server using PowerShell
Use PowerShell to install SSL certificate in Windows Server and change its FriendlyName property. As a bonus, I show you how to verify a certificate’s Common Name (Subject) and Subject Alternative Name (SAN) using certutil.exe and PowerShell Get-PfxCertificate.
Install Windows Updates using PowerShell
You can use PowerShell to install Windows Updates automatically, unattended and simple. Neat, right? For this, you don’t have to have an enterprise environment with WSUS, or Windows Server, but since this is Sysadmins of the North, I assume you do. In this post I show you how to install Windows Updates with PowerShell and the PSWindowsUpdate module.
Send email with PowerShell
Easily send your DevOps reporting by email with this PowerShell function, because the Send-MailMessage cmdlet is obsolete. Of course you’ll be using StartTLS and authenticated SMTP as additional security.
Create an additional SQL Server Login
Sometimes you need to create an additional SQL Server Login (user) for your database (databases). Here is a small T-SQL snippet that creates such a login for contained databases in SQL Server and adds memberships.
Blocking bad bots and search engines using .htaccess
Take control of your server resources by learning how to block aggressive bots and unwanted search engines using .htaccess and mod_rewrite. This guide provides copy-paste ready configurations to prevent bandwidth theft, stop scrapers, and ensure that only relevant search engines crawl your website.
Windows 11 and WSL 2 DevOps environment
DevOps in Windows: In this post I describe some of the settings and changes I made to make my Windows 11 and Ubuntu WSL2 into a fully fledged development environment. Here are the settings and tools I use for DevOps / SysOps on Windows.