Month: November 2020

Install System Manager on WorkSpaces – you must follow installing AWS System Manager on-premise. Create Hybrid Activations for your AWS WorkSpaces Copy code and id to the script that installs it to all AWS instances using PS remoting from your Active Directory Administration Account. Invoke the following code to install a System manager Agent on Workspaces: Set-ExecutionPolicy Unrestricted Invoke-Command -ComputerName WSAMZN-AJHQL2HU,WSAMZN-4C2SBR05 -FilePath .InstallSME.ps1 InstallSME.ps1: $code = “xxx” $id = “yyy” $region = “us-east-1” $dir = $env:TEMP + “ssm” New-Item -ItemType directory -Path $dir -Force cd $dir (New-Object System.Net.WebClient).DownloadFile(“https://amazon-ssm-$region.s3.amazonaws.com/latest/windows_amd64/AmazonSSMAgentSetup.exe”, $dir + “AmazonSSMAgentSetup.exe”) Start-Process .AmazonSSMAgentSetup.exe -ArgumentList @(“/q”, “/log”, “install.log”, “CODE=$code”, “ID=$id”, “REGION=$region”) -Wait Get-Content ($env:ProgramData + “AmazonSSMInstanceDataregistration”) Get-Service -Name “AmazonSSMAgent” Install Cloud Watch Agent on Work Spaces – that now you are see them as Managed Instances. Install Cloud Watch binaries using Run Command From System Manager, search for AWS-ConfigureAWSPackage package. Put AmazonCloudWatchAgent in Name and confirm that Action is Install and specify targets. You can use: aws workspaces describe-workspaces –output json > workspaceinstances.txt notepad .workspaceinstances.txt aws ssm describe-instance-information –output json > managedinstances.txt notepad .managedinstances.txt to fetch instance details and match instanceid against computername. Disable the S3 bucket and RUN. Run script that pass config files to the insances: Run command and … Implement AWS CloudWatch to the AWS WorkSpaces using System ManagerRead more

Zapraszam do udziału w The Hack Summit 2020, gdzie będę miał przyjemność prezentować następującą sesje: 5 błędów, które mogą doprowadzić do kompromitacji środowiska chmury Azure i Nie Tylko. Przy okazji, jeżeli chcą Państwo otrzymać, oczywiście bezpłatnie dokument jak bezpiecznie skonfigurować usługę WebApp / App Service w Microsoft Azure wraz z filmem dot. konfiguracji Managed Identity – proszę wypełnić poniższe zgłoszenie.

This feature like the old Windows AppLocker or Software restriction Policy. Simply you can block to run off any unknown software on your VM. First, it runs on Audit mode and then Enforces mode. By the way – some time ago I was in a team that delivered computers to schools – 40k+ and there was no antimalware/antivirus software and after three years if the teacher did not disable Software Restriction on these computers they working like a brand new without any unwanted software. Compare it to your laptop with a bunk of software that nobody knows what is for. Great Video: https://www.youtube.com/watch?v=wWWekI1Y9ck It runs under the licensed feature of the Security Center / Azure Defender. Recommended tab included automatically created groups of VM have similar applications detected by Machine Learning. You can use them just by clicking Audit mode and after auditing switch to Enforced mode. Machine Learning is great, but the human brain is better, so from here you can create your group with servers that play the same or similar role in your organization and runs the same or similar applications, especially for cross regions VMs. After that you should be patient and get data for at … Adaptive application controls – feature you must use to be secureRead more

Normal behavior is when you add a computer to Azure Active Directory & Intune PIN is required. You can disable it on the Tenant level here:

The best way is to use this scrip: https://gallery.technet.microsoft.com/scriptcenter/Update-the-Service-9e080ef8 If fail – Run the script as a local admin account – not a domain. You can finish manually it by local admin account: Set-AdfsSslCertificate -Thumbprint 2b02128a3fc867c65200e27bb1c25023d339f372 And as a domain account: Set-AdfsCertificate -CertificateType Service-Communications –Thumbprint 2b02128a3fc867c65200e27bb1c25023d339f372