richardjgreen.net Report : Visit Site

Technical data of the richardjgreen.net

Geo IP provides you such as latitude, longitude and ISP (Internet Service Provider) etc. informations. Our GeoIP service found where is host richardjgreen.net. Currently, hosted in United States and its service provider is Xerox Corporation .

the related websites

gov.scot addsyork.co.uk thisismoney.co.uk classifieds.belfasttelegraph.co.uk dailymail.co.uk bmfa.org classifieds.hulldailymail.co.uk freeukclassifieds.co.uk classifieds.scunthorpetelegraph.co.uk usedwolverhampton.co.uk 

HTTP Header Analysis

HTTP Header information is a part of HTTP protocol that a user's browser sends to called containing the details of what the browser wants and will accept back from the web server.

DNS

HtmlToText

-- skip to main content toggle navigation richard j green about me contact faq linkedin twitter active directory fine-grained password policies 7th march 2018 richardjgreen this post isn’t going to set the world on fire because of it’s revelations and new features; instead, i am going to talk about a feature that has been around since windows server 2008 called fine grained password policies. active directory password policies are, even in 2018, still misunderstood. for all the consulting engagements i do, i still encounter customer environments where admins have tried to configure multiple group policy objects to control password policy at various levels within their ou structure. an example of this behaviour would be to set the default domain policy object to a standard password complexity and then have an ou containing administrative accounts for domain admins which has a gpo applying a more complex policy. setting the record straight before we go any further then, let’s set the record straight. in a standard configuration ad domain there can be only one password policy. it matters not where or how many times you try to link and create gpos to set different policies, it will not work. in a default ad domain, the password policy is configured in the default domain policy which is applied at the root, the top-level of the domain. the password policy is enacted and controlled by the domain controllers not by the computer or user object of a client. in the modern era of powershell, we can see that the default password policy for the domain is by using the get-addefaultdomainpasswordpolicy powershell command which outputs similar to the screenshot below. in this example, the lockout duration and observation windows are 15 minutes each, accounts are locked out after five failed attempts and passwords must be at least seven characters long, meet complexity requirements, be no older than 90 days but more than 1 day old, and the previous 12 passwords are remembered. defining granular password policies enter windows server 2008 r2 which brought with it a feature, as part of active directory, called fine grained password policies. what this new feature allows us to do, at last, it to have control over the password policy for specific users or groups. want uber complex admin account passwords? sure, do it. want to force hr or finance staff to have a slightly more complex policy than normal users but a little less than admins? go right ahead! now, it’s time to be honest. the feature was first introduced in windows server 2008, however, it got a lot easier with windows server 2012. in this post i will be concentrating on the latter. to make this work, there are two things we need to do and one thing we need to understand. we need to create password policy objects we need to link password policy objects to users or groups we need to understand the precendence understanding precedence clearing the understanding out of the way first, we need to make sure that the correct policy is applied to the correct user or group. when we create a policy, one of the parameters required is precedence. the value for this must be a positive integer starting from 1. a user or a group can be assigned multiple policies: when this happens, the policy which wins is determined by the precedence. if a user has a direct policy linked to them with a value of 10 but they are also a member of a group which has a policy value of 5, the policy with the value of 5 will win. creating the password policy the first real step is to create the policy. this is one, albeit long, line of powershell. the full list of parameters and possible values are in the microsoft documentation at https://technet.microsoft.com/ru-ru/library/hh852234(v=wps.620).aspx . in this example, i have created a policy which backs off the default policy to allow users to keep their current password for up to 365 days. the command executed in the example and the screenshot below: new-adfinegrainedpasswordpolicy -name "maxpassword365days" -displayname "max password age 365 days" -complexityenabled $true -description "increases the maximum password age to 365 days." -lockoutduration 00:15:00 -lockoutobservationwindow 00:15:00 -lockoutthreshold 5 -maxpasswordage 365:00:00:00 -minpasswordage 1:00:00:00 -minpasswordlength 7 -passwordhistorycount 12 -reversibleencryptionenabled $false -precedence 100 with our policy now created, it won’t do anything because it isn’t linked to a user or a group so the next step is to link it. if you are testing this then by all means link it to a single user, however, in the real-world i would always use a group to allow you to be flexible and manage these policies more effectively. to link the policy, we use the add-adfinegrainedpasswordpolicysubject powershell command. once linked, we can use the get-adfinegrainedpasswordpolicy command to verify that the policy is linked. add-adfinegrainedpasswordpolicysubject maxpassword365days -subjects max_password_age_365_days_gg in the example above, we can see that i used the add-adfinegrainedpasswordpolicysubject command. in the command we give the name of the password settings object that we want to use. we then use the -subjects parameter to declare who it should be applied to. in my case, this is a global group in active directory but this could just as easily be a user object. once the policy has been applied we can use the get-adfinegrainedpasswordpolicy to see what’s being applied. in the screenshot, we see that the maxpassword365days policy has an appliesto value of the global group that i set in the former command. meltdown and spectre cpu flaws on windows systems 4th january 2018 5th january 2018 richardjgreen over the course of the last few days, there has been much said online about a security flaw which is affecting the x86 cpu architecture and more specifically intel cpus*. this is an issue which has been known since earlier in 2017 but has only recently started doing the rounds. the issue was uncovered by google ( https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html?m=1 ) and was not scheduled to be made public just yet, however, growing information and leaks online led google to release it early. the issue has also been logged under three cves: cve-2017-5715 , cve-2017-5753 , and cve-2017-5754 . microsoft also has their own article at https://support.microsoft.com/en-us/help/4073119/windows-client-guidance-for-it-pros-to-protect-against-speculative-exe . the early release by google prompted various things that were already in-play to also happen early. microsoft was forced to release the hotfix for windows immediately and the microsoft azure planned vm maintenance which was scheduled for the 10th january has been brought forward to happen almost immediately. * there are numerous reports including the original publication from google that the issues also affect arm and amd cpus as well. i do not wish to get embroiled in a debate whether or not amd and arm are affected as there is arguments coming from both sides. for the purposes of this article, i will focus on intel as we know 100% that their processors are affected. intel is keen to point out that while they are still affected, cpus based on the newer platforms like skylake and kaby lake will experience a lesser performance drop-off. read the full post save with byol and azure hybrid benefit 20th december 2017 richardjgreen in my post from earlier today, i talked about the benefits of using azure instance reservations to save money on the compute of iaas virtual machines. when we think about the components that make up an iaas vm, we have a few: the vm instance and configuration, the storage, and the software that runs on it. for most people, the software at the most basic level will be either microsoft windows or linux and likely some application software layered on top such as sql server. when we are talking about microsoft windows there is a license associated with running the operating system and when you commit to running a microsoft azure iaas vm running microsoft windows, the cost of that virtual machine includes that license. if you are an enterprise client of microsoft’s with an enterprise agreement you will likely already have entitlement some windows server licenses through that agreement. if you already have licenses that you are paying for, why would you want to pay for them again in azure? the obvious answer is that you wouldn’t unless your intentions are to do away with the enterprise agreement and license everything through retail channels. microsoft azure offers a lesser known option called azure hybrid benefit which is often referred to as hybrid usage benefit (hub for short). hub allows you to apply your enterprise agreement licenses to your iaas vms deployed in azure. what this means in cost terms is that the price of the azure iaas vm ceases to include the windows server license element and you are paying purely for the compute. the benefits of hub are not limited to windows server either. you can also use the hub option with sql server iaas vms deployed to azure which means you no longer pay the list price in azure for either the windows server or the sql server application license. read the full post saving with azure reserved instances 20th december 2017 richardjgreen 1 comment the cloud is everywhere we look in it now: more, and more organisations are adopting cloud services of one flavour or another. one of the benefits of cloud is that the costs can come out of operational expenditure in nice little monthly packages instead of giant wedges of capital expenditure. while cloud also offers us the commodity of scale providing services faster, better protected, and more reliable than we can often build ourselves on-premises for equivalent cost but that doesn’t mean we need to pay the recommended retail price. in this article, i’m going to cover a little-known feature in microsoft azure called reserved instances (ris). previously called compute pre-purchase, this feature is available to anybody using a pay as you go (payg) subscription or an enterprise agreement subscription. if you are using any other type of subscription such as one bundled as part of an offer then you will not be able to participate. reserved instances are only available for infrastructure-as-a-service (iaas) virtual machines. they cannot be used for any other types of service. read the full post set the thumbnailphoto in active directory with powershell 24th november 2017 richardjgreen for years and years, as @lupoloopy could probably attest to, i have been a fan of dumping user photos into active directory. even as far back as exchange 2010 we have been able to light up outlook with user photos downloaded as part of the global address list and today; with the likes of azure ad, office 365, and more; the users’ photo is more and more prominent. over the years, i have relied on a tool from cjwdev called ad photo edit, however, only this week, i discovered that we can actually do this natively with powershell negating the need for the tool to be used at all. the powershell for this requires you to have the active directory powershell module imported but other than that, there are no complex requirements. $photo = [byte[]](get-content "" -encoding byte) set-aduser -replace @{thumbnailphoto=$photo} it really is that simple! i do, however, have a segway here: there still, to this day, does not seem to be a way to reverse the flow of profile pictures with azure ad connect. it is possible and always has been to export the thumbnailphoto attribute from active directory to azure ad for use in office 365. there does not, however, seem to be a way to have azure ad and office 365 act as the image source and have them imported into active directory from the cloud. this is a shame because in azure ad and office 365 we have native interface elements that allow the user to self-service upload and edit their own user photo but the same tools don’t exist on-premises. one day, i hope, we will have the ability to import to ad from aad but until that time comes, i am planning on looking into building a really small web application that will execute the powershell code behind the scenes and allow users to self-service their images. azure route-based vpn with a cisco asa 5505 24th november 2017 24th november 2017 richardjgreen i haven’t posted here for a while and i have a bit of a success story that i thought i would share and hopefully help somebody else encountering the same issues. over the last few weeks, i have been working with a customer: the customer has a cisco asa 5505 firewall in a co-lo datacentre operated by a third-party whose name is something like (big metal thing that vertically stores servers)(the place where jean-luc picard travels around). the customer has started to consume some azure iaas vms and wanted to be able to establish a vpn to the co-lo to enable them to hop from one location to the other; a vpn connection from azure was already in place to the office site which means we needed to use a multi-site vpn to azure. with the vpn to the office already working, we knew that the vpn gateway and virtual network in azure were sound. a multi-site azure vpn requires a route-based connection, not the basic policy-based connection. we got the vpn gateway all set up for route-based connections and confirmed that was still working; no dramas. after doing this, we started speaking to the co-lo. the first response from the co-lo was that the asa 5505 didn’t support a route-based vpn which put us in dangerous territory. reading the azure documentation, there are a few articles that seem to contradict and conflict and having the right documents to hand helped enormously. the first article you will probably encounter is the generic supported devices list for azure vpn with caveats around policy-based only or only supported route-based in specific circumstances which are at https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices . this article used to state that the asa 5505 did not support route-based connections but it no longer does state this. if your vendor is telling you otherwise, direct them to the article in the first instance. for the asa 5505, we need to ensure that it is running asa os 8.4 or above; this added supported to ikev2 which is a requirement for route-based connections to azure. with the first hump over, we initially struggled to get the connection up and running which is where the next articles come in. firstly, direct the vendor to https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-3rdparty-device-config-cisco-asa . this article is a specific example of the asa 5505 using ikev2 without bgp for a route-based vpn. once the vendor was on-board, we started to make progress, however, there are changes you will need to make in azure too! firstly, the implementation of a route-based vpn with an asa 5505 requires the use of traffic policy selectors. when configured, this requires you to define a custom ipsec policy in azure for the connection and then apply the policy and the use traffic policy selectors option to the connection. the second part is that both these features require a standard vpn gateway and will not work with a basic vpn gateway. for this configuration, follow the guidance of https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-ipsecikepolicy-rm-powershell#workflow . by the end of this, hopefully, you have a working vpn connection to an asa 5505 using a multi-site route-based azure vpn, however, if you do not, here are a few things to check: verify the pre-shared key at both ends of the connection matches verify that the custom ipsec policy in azure matches that on the firewall verify that the correct traffic policy selectors are applied on the firewall verify that the azure virtual network and azure vpn connections have the correct address ranges configured any of the above will cause the connection to fail. if the connection still refuses to establish, you can enable the azure network watcher feature and enable diagnostics for the vpn connection. the diagnostic logging will generate a .zip file which contains two files of interest: connectionstats.txt and ikeerror.txt. below are the outputs for both files from my real-world scenario. as you will observe, ikeerrors.txt reported a generic authentication failed error and suggests checking the pre-shared key, crypto algorithms and the sa lifetimes, however, the connectionstats.txt file shows a more specific “packets dropped due to traffic selector mismatch” error. error: authenticated failed. check keys and auth type offers. based on log : peer sent authentication_failed notify error: authentication failed. check shared key. check crypto. check lifetimes. based on log : peer failed with windows error 13801(error_ipsec_ike_auth_fail) connectivity state : connecting remote tunnel endpoint : 1.2.3.4 ingress bytes (since last connected) : 0 b egress bytes (since last connected) : 0 b ingress packets (since last connected) : 0 packets egress packets (since last connected) : 0 packets ingress packets dropped due to traffic selector mismatch (since last connected) : 0 packets egress packets dropped due to traffic selector mismatch (since last connected) : 0 packets bandwidth : 0 b/s peak bandwidth : 0 b/s connected since : 1/1/0001 12:00:00 am polycom vvx phones and uk daylight savings time 30th october 2017 richardjgreen this weekend just past, the uk observed the end of daylight savings time for another year, bitterly welcoming in the cold weather and the start of the dark months. with that comes the day that many administrators dread in fear that their devices and equipment will fail to update with the proper time. suffice to say, i have learnt lessons from previous years and my servers and network equipment all survived to tell the tale, however, i noted this morning that my polycom vvx 500 desk phone had not. i was surprised by this as i had all the proper configurations in place to ensure that the phone was using the correct time zone, however, upon investigation, the phone does not link the dst setting to the time zone: dst is configured separately. after a couple of minutes tweaking it via the web interface, i extracted the configuration, made it pretty and here it is. please feel free to use this on your own polycom provisioning server configuration file if you have found your own phones now behaving. the configuration does a few things and hopefully, it should be clear enough for you to modify for your own needs in other locales. forcibly enable dst forcibly set dst to occur on a fixed schedule set dst to start on the last sunday of the third month (march) set dst to end on the last sunday of the tenth month (october) set dst to begin at 1 a.m. and end at 2 a.m. <tcpipapp.sntp.daylightsavings tcpipapp.sntp.daylightsavings.enable="1" tcpipapp.sntp.daylightsavings.fixeddayenable="1" /> <tcpipapp.sntp.daylightsavings tcpipapp.sntp.daylightsavings.start.month="3" tcpipapp.sntp.daylightsavings.start.dayofweek.lastinmonth="1" tcpipapp.sntp.daylightsavings.start.time="1" /> <tcpipapp.sntp.daylightsavings tcpipapp.sntp.daylightsavings.stop.month="10" tcpipapp.sntp.daylightsavings.stop.dayofweek.lastinmonth="1" tcpipapp.sntp.daylightsavings.stop.time="2" /> active directory 2016 time-based group membership 30th september 2017 30th september 2017 richardjgreen group membership control and management is one of the cornerstones of active directory domain services. in windows server 2016, microsoft introduced a new feature to active directory that forms part of the microsoft privileged access management (pam) strategy. when used in conjunction with automation, this can be used to provide just-in-time (jit) access to protected and administratively sensitive services. when used in an environment that is synchronised with azure active directory using azure ad connect, this can be used to provide jit for hybrid solutions in microsoft azure (when rbac has been applied to azure resource manager objects). in this post, i will briefly explain the processing for implementing time-based group membership in active directory. read the full post scouting uk web colours 18th september 2017 richardjgreen for any regular readers here, this is a pretty off-topic post, however, i decided it was worthy of submission. as some may know, i volunteer with a local scout group, the 1st chineham to be specific. as a group, we are exploring getting a website up and running; i will have more to post on this subject in the future. whilst navigating the branding guidelines and documentation for scouting uk at http://members.scouts.org.uk/comms_centre/zip/brand_guidelines.pdf, i discovered that the official colour palette for scouting uk is only advertised in rgb and cmyk and pantone. this is great for working in office apps (rgb) or print (cmyk) but does not help for web implementation. using an online rgb to hex converter, i have pulled together all of the colours. if you are struggling to find them yourself, please feel free to use this as a reference: scout purple #4d2177 scout green #84a40b scout mauve #8b0066 scout orange #ed7703 scout blue #006990 scout brown #9d552d scout grey #415a68 scout black #001323 introducing microsoft forms 9th august 2017 9th august 2017 richardjgreen in the ever expanding world of office 365, microsoft has introduced another, new, compelling product to the lineup. as with a number of the recent releases, microsoft forms is a free product, available to customers with a compatible license for existing services. microsoft forms is still in preview and is not production yet; this does not mean that it is viable to be used in anger though. we are all accustomed to microsoft releasing features in preview with office 365 and azure. next, do not be fooled by the name as i was when i saw it. my first reaction was that microsoft forms is a replacement for infopath. infopath is a form filing application from the office desktop suite which has long been marked for the end of life. microsoft forms is not an infopath replacement. microsoft forms offers two key pieces of functionality: surveys and questionnaires quizzes and test taking each of these two areas offers slightly different modalities for client use and slightly different features that can be consumed which we will look at next. read past the break to find out more. read the full post posts navigation 1 2 … 48 older posts search for: recent posts active directory fine-grained password policies meltdown and spectre cpu flaws on windows systems save with byol and azure hybrid benefit saving with azure reserved instances set the thumbnailphoto in active directory with powershell about richard j green richard green richard works as a cloud consultant for fordway solution where his primary focus is to help customers understand, adopt and develop with microsoft azure, office 365 and system center. richard green is an it pro with over 15 years' of experience in all things microsoft including system center and office 365. he has previously worked as a system center consultant and as an internal solutions architect across many verticals. outside of work, he loves motorbikes and is part of the orange army, marshaling for ngrrc, british superbikes and motogp. he is also an assistant cub scout leader. read more… categories azure general office 365 system center uncategorised windows archive 2018 (2) march (1) january (1) 2017 (29) december (2) november (2) october (1) september (2) august (4) july (2) june (2) may (4) april (1) march (2) february (4) january (3) 2016 (5) october (2) may (2) january (1) 2015 (60) november (3) september (1) july (7) june (6) may (4) april (8) march (11) february (13) january (7) 2014 (76) december (8) november (3) october (9) september (5) august (7) july (3) june (2) may (5) april (11) march (6) february (8) january (9) 2013 (52) december (1) november (13) october (12) september (3) july (2) june (2) may (6) april (1) february (5) january (7) 2012 (33) december (1) november (14) september (5) may (1) april (5) february (7) 2011 (35) december (6) october (6) august (5) july (1) june (6) may (3) march (5) february (3) 2010 (47) december (2) october (2) september (2) august (7) july (5) may (5) april (10) march (6) february (8) 2009 (84) december (5) november (3) october (7) september (6) august (5) july (2) june (26) may (10) april (8) march (5) february (5) january (2) 2008 (41) december (2) november (3) october (4) september (3) august (4) july (5) june (2) may (7) april (8) march (2) february (1) 2007 (14) november (2) october (1) september (5) august (1) july (5) facebook twitter linkedin google+ youtube github home azure system center windows faq about me © 2017 richard j green. all rights reversed.

URL analysis for richardjgreen.net

https://richardjgreen.net/about
https://richardjgreen.net/2014/09/
https://richardjgreen.net/2018/
https://richardjgreen.net/saving-azure-reserved-instances/
https://richardjgreen.net/2014/01/
https://richardjgreen.net/2008/09/
https://richardjgreen.net/polycom-vvx-phones-uk-daylight-savings-time/
https://richardjgreen.net/2016/05/
https://richardjgreen.net/2017/12/
https://richardjgreen.net/saving-azure-reserved-instances/#comments
https://richardjgreen.net/2011/06/
https://richardjgreen.net/2012/02/
https://richardjgreen.net/2017/02/
https://richardjgreen.net/2013/
https://richardjgreen.net/2009/08/

Whois Information

Whois is a protocol that is access to registering information. You can reach when the website was registered, when it will be expire, what is contact details of the site with the following informations. In a nutshell, it includes these informations;

Domain Name: RICHARDJGREEN.NET
Registry Domain ID: 1588391111_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2018-01-25T15:01:38Z
Creation Date: 2010-03-11T13:47:57Z
Registry Expiry Date: 2020-03-11T12:47:57Z
Registrar: NameCheap Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.6613102107
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: J.NS.BUDDYNS.COM
Name Server: K.NS.BUDDYNS.COM
Name Server: NS10.DNSMADEEASY.COM
Name Server: NS11.DNSMADEEASY.COM
Name Server: NS12.DNSMADEEASY.ORG
Name Server: NS13.DNSMADEEASY.ORG
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2018-03-27T05:19:18Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

  REGISTRAR NameCheap Inc.

SERVERS

  SERVER net.whois-servers.net

  ARGS domain =richardjgreen.net

  PORT 43

  TYPE domain

DOMAIN

  NAME richardjgreen.net

  CHANGED 2018-01-25

  CREATED 2010-03-11

STATUS
clientTransferProhibited https://icann.org/epp#clientTransferProhibited

NSERVER

  J.NS.BUDDYNS.COM 185.34.136.178

  K.NS.BUDDYNS.COM 185.136.176.247

  NS10.DNSMADEEASY.COM 208.94.148.4

  NS11.DNSMADEEASY.COM 208.80.124.4

  NS12.DNSMADEEASY.ORG 208.80.126.4

  NS13.DNSMADEEASY.ORG 208.80.125.4

  REGISTERED yes

Mistakes

The following list shows you to spelling mistakes possible of the internet users for the website searched .