WINDOWS. PS. What GPO has been Modified

To check the last 10 GPO modified:

Command: Get-GPO -all | Sort ModificationTime -Descending | Select -First 10 | FT DisplayName, ModificationTime, GpoStatus, Description

Check at Windows 2012R2 & W10

by GoN | Published: April 23, 2018 | Last Updated:

WINDOWS. PS. PowerShell Web Access - PSWA

This post could be util to access a PS console o script tools from web access.

One form to do it could be this...

[1] Install the AD tools for web Access

Command: Install-Windowsfeature WindowsPowerShellWebaccess -IncludeManagementTools

[2] It's necessary install one certificate, for this example we use one test certificate. For producction environtment it's not recomended configure a test certificate.

Command: Install-PswaWebApplication -UseTestCertificate

[3] Permissions. Configure Access Rules

For all computers
Command: Add-PswaAuthorizationRule -UserName * -ComputerName * -ConfigurationName *

Only for my computer
Command: Add-PswaAuthorizationRule -UserName * -ComputerName MyDomPc -ConfigurationName *

My recomendation, for users

Command: Add-PswaAuthorizationRule -UserName contoso\user1, contoso\user2, contoso\user3 -ComputerName TheSErver.contoso.com -ConfigurationName Microsoft.PowerShell

For remove access

Command: Remove-PswaAuthorizationRule -id 1

[4] Check & Result:

The credentials:

You can put any domain computer

The result

More info: 

https://docs.microsoft.com/en-us/powershell/module/powershellwebaccess/add-pswaauthorizationrule?view=winserver2012r2-ps

Check at Windows 2012R2 & W10

by GoN | Published: April 17, 2018 | Last Updated:

WINDOWS. PS. klist. Kerberos. Activity krbtgt tickets

Running klist command shows the new Kerberos service ticket with RC4-HMAC encryption and it shows the tickets are in user memory.

Command: Klist

Command: Klist sessions

Check at Windows 2012R2 & W10

by GoN | Published: April 16, 2018 | Last Updated: April 23, 2018