Tag Archives: Security

How to Deploy the Windows 11 26H2 Feature Update Using Microsoft Intune

Posted on by
Reply

Keeping Windows devices on a supported operating system version is an important responsibility for IT administrators. With Microsoft Intune, organizations can control when eligible devices receive Windows 11 version 26H2, deploy it gradually, and monitor the upgrade from one centralized portal.

Windows 11 version 26H2 is Microsoft’s latest annual Windows 11 feature update. It uses the same servicing foundation as Windows 11 versions 24H2 and 25H2. Eligible devices can move to version 26H2 through a smaller enablement package instead of completing a traditional full operating system upgrade. This can provide a faster installation experience, usually requiring only one restart in supported scenarios. Continue reading →

Microsoft Entra ID: Why Identity Is the New Security Perimeter

Posted on by
Reply

There was a time when the corporate network represented a reasonably clear security boundary.

Employees worked inside an office.

Servers lived in company data centers.

Workstations joined corporate Active Directory.

Firewalls separated the internal network from the internet.

Cloud computing fundamentally changed that model. Continue reading →

Intune vs Group Policy: Is GPO Becoming Obsolete?

Posted on by
Reply

For Windows administrators, Group Policy has been one of the most important management technologies for decades.

But cloud management has introduced a question that appears increasingly often:

Is Microsoft Intune replacing Group Policy?

The realistic answer is more complicated than yes or no. Continue reading →

Microsoft Intune and the Future of Cloud Device Management

Posted on by
Reply

Managing computers has traditionally been closely tied to the corporate network.

Configure Active Directory, join the computer to the domain, apply Group Policy and use on-premises management infrastructure.

That model remains important, but the definition of a corporate device is changing.

Employees use laptops, smartphones and tablets. They connect from outside the office. Some devices belong to the company while others belong to the employee. Continue reading →

How to Investigate Failed Microsoft 365 Sign-Ins

Posted on by
Reply

One of the most common tickets an administrator receives is deceptively simple:

“I can’t log in.”

That statement doesn’t tell us very much.

An authentication problem could involve:

  • Incorrect credentials
  • MFA
  • Conditional Access
  • Device compliance
  • Account status
  • Authentication methods
  • Application access
  • Risk-based controls

Continue reading →

Get started with DirectAdmin. Installation & Security

Posted on by
Reply

In this guide I will be explaining how to install Direct Admin on a clean installation of CentOS 5, 6 and 7. The procedure is exactly the same on all three of these operating systems and with both 32-bit and 64-bit versions. It is very important to start off with a clean installation, as the DirectAdmin installer will take care of all software components you need.

Continue reading →

Setup Malware Detect (Maldet)

Posted on by
Reply

Linux Malware Detect (LMD) is a malware scanner for Linux released under the GNU GPLv2 license, that is designed around the threats faced in shared hosted environments. It uses threat data from network edge intrusion detection systems to extract malware that is actively being used in attacks and generates signatures for detection.

In addition, threat data is also derived from user submissions with the LMD checkout feature and from malware community resources. The signatures that LMD uses are MD5 file hashes and HEX pattern matches, they are also easily exported to any number of detection tools such as ClamAV. Continue reading →

Setup Rootkit Hunter (rkhunter)

Posted on by
Reply

Rootkit Hunter (rkhunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. This guide explains how to install and configure RKHunter on CentOS 5,6 or 7.

Rootkits are self-hiding toolkits secretly installed by a malicious intruder to allow that user to gain access to the server. Rootkit Hunter offers protection by comparing SHA-1 hashes of important files with known good ones in a online database as well as:

    • MD5 hash compare
    • Look for default files used by rootkits
    • Wrong file permissions for binaries
    • Look for suspected strings in LKM and KLD modules
    • Look for hidden files
    • Optional scan within plaintext and binary files

Continue reading →

Setup Spamassasin for DirectAdmin

Posted on by
Reply

In this guide I will be explaining how to install and configure SpamAssasin on a Direct Admin based server running CentOS.

SpamAssasin is used for e-mail spam filtering based on content-matching rules. SpamAssassin uses a variety of spam-detection techniques, that includes DNS-based and fuzzy-checksum-based spam detection, Bayesian filtering, external programs, blacklists and online databases.

The program can be integrated with the mail server to automatically filter all mail for a site. It can also be run by individual users on their own mailbox. SpamAssassin is highly configurable; if used as a system-wide filter it can still be configured to support per-user preferences.

Continue reading →

Setup ClamAV Antivirus for DirectAdmin

Posted on by
Reply

Clam AntiVirus is a popular open source (GPL) anti-virus toolkit for UNIX, designed for e-mail scanning on mail gateways. It provides a flexible and scalable multi-threaded daemon, a command line scanner and it can detect Trojan horses, viruses, malware and other malicious threats. It also comes with an advanced tool for automatic database updating via the Internet.
This article will guide you through the installation and configuration of ClamAV on a DirectAdmin based web server. Continue reading →