https://prod.jnet.julianscorner.com/ 2026-04-17T12:43:19+00:00 https://prod.jnet.julianscorner.com/ https://prod.jnet.julianscorner.com/_media/wiki/dokuwiki-128.png text/html 2023-09-18T20:00:11+00:00 Anonymous (anonymous@undisclosed.example.com) https://prod.jnet.julianscorner.com/windows/ad/global_multi-domain_design Global Multi-Domain Design When a company spans more than one continent, I design the active directory forest based on a geographical model: Root (Used for adminstration accounts and "universal" groups; but otherwise empty) | +--- americas (includes North America and South America) | +--- emea (includes Europe, Middle East, and Africa) | +--- apac (includes Asia, Australia, and any countries in the Pacific Ocean) text/html 2023-09-18T20:00:11+00:00 Anonymous (anonymous@undisclosed.example.com) https://prod.jnet.julianscorner.com/windows/ad/group_managed_service_account Group Managed Service Accounts Managed Service Accounts, which were introduced in Windows Server 2008 R2, are managed domain accounts that provide automatic password management but are limited to use on only one computer. Group Managed Service Accounts provides the same functionality but also extends their use to multiple computers. text/html 2023-09-18T20:00:11+00:00 Anonymous (anonymous@undisclosed.example.com) https://prod.jnet.julianscorner.com/windows/ad/managed_service_account Managed Service Accounts One of the biggest issues in most orgainizations is almost always managing service accounts for the various servers and applications that spread and sometimes get forgot. The larger the the organization the worse the problem can be. PCI DSS, HIPPA, and FISMA standards/frameworks also has clauses that force any organization that is subject to compliance to have strong policies of password rotataion and proof of compliance. Microsoft has made this very easy with Managed S… text/html 2023-09-18T20:00:11+00:00 Anonymous (anonymous@undisclosed.example.com) https://prod.jnet.julianscorner.com/windows/ad/radius_vpn Setup Radius For Authentication With A pfSense VPN Server Open the Server Manager, Click on Manage, and choose Add roles and features. * Click Next on the “Before you begin” page if you don't skip the page by default. * Choose Role-Based or feature-based installation and click on next. text/html 2023-09-18T20:00:11+00:00 Anonymous (anonymous@undisclosed.example.com) https://prod.jnet.julianscorner.com/windows/ad/start Active Directory * Global Multi-Domain Design * Group Managed Service Accounts * Managed Service Accounts * Setup Radius For Authentication With A pfSense VPN Server