An authentication error has occurred; this could be due to CredSSP encryption oracle remediation

Windows ServerThis error first came up early in 2018, but I’ve stumbled across it a couple of times recently and had to hunt around for the solution, so I am posting it here so I know where to find it next time.

Microsoft released an update to address vulnerabilities for the Credential Security Support Provider protocol (CredSSP) used by Remote Desktop Protocol (RDP) connections for Windows clients and Windows Server.

Since that hotfix came out, if you try to connect from a patched machine to an unpatched one, you receive this error:

CredSSP error

Remote Desktop Protocol

An authentication error has occurred.
The function requested is not supported.

Remote computer: {server name}
This could be due to CredSSP encryption oracle remediation.

Continue reading “An authentication error has occurred; this could be due to CredSSP encryption oracle remediation”

Enable Bitlocker on Removable Drive

WindowsWhen I joined ISC Software I was given a new laptop and associated peripherals which included a removable 1TB SSD. As this SSD travels with me, one of the first things I did was encrypt it with BitLocker.

To encrypt a drive with BitLocker, launch Windows Explorer, right click on the drive and select Turn BitLocker On. When the BitLocker Drive Encryption window appears, click Encrypt this drive using BitLocker Drive Encryption:

Bitlocker Drive Encryption

Continue reading “Enable Bitlocker on Removable Drive”

Disable IE Enhanced Security Configuration

Windows ServerI do a lot of work in virtual machines and this work often involves using the web browser; this is usually just for web client, SSRS or other similar local pages, but even then Internet Explorer Enhanced Security Configuration will get in the way and need to be disabled.

I never remember where the setting for this is, so I am posting here to make it easy to find in future. To change the setting, open Server Manager; in the left pane, click Local Server:

Server Manager > Dashboard

In the main section of the page, click the word ON next to IE Enhanced Security Configuration:

Continue reading “Disable IE Enhanced Security Configuration”

Network Shell Snippets: Delete Bound SSL Certificate

PowerShellThis post is part of the series on Network Shell Snippets.

The following Network Shell command will delete the bound SSL certificate:

netsh http delete sslcert ipport=0.0.0.0:28666

Change the highlighted section to the port number to which the SSL certificate is bound.

Network Shell Snippets: Delete URL Reservation

PowerShellThis post is part of the series on Network Shell Snippets.

The following Network Shell command will delete the specified URL reservations:

netsh http delete urlacl URL={reserved url}

Replace the highlighted section, including the curly brackets, with the URL reservation to be removed.

Network Shell Snippets: View URL Reservations

PowerShellThis post is part of the series on Network Shell Snippets.

The following Network Shell command will list all URL reservations:

netsh http show urlacl

PowerShell to Promote Domain Controller

Windows ServerWhen testing Microsoft Dynamics GP, I often need a domain controller within my set of virtual machines. I’ve been promoting a server to be a domain controller manually, but it recently occurred to me that I could probably do the same task using PowerShell.

After doing some research, I came up with four commands which will rename and restart the server, install the Active Directory feature and add a forest.

To rename a server, run the following command, replacing the highligted section with the new server name:

Rename-computer -newname {server name}

Continue reading “PowerShell to Promote Domain Controller”

How to Remove a Dependency from a Windows Service

Microsoft Dynamics GPIn the last post I showed how to use sc.exe to add a dependency to a Windows service; the first time I added the dependency to the eOne and eConnect services, I got the service name wrong. This was because the server I was working on had a SQL Server Named instance rather than the default name.

I had to do some searching around how to remove the incorrect dependency, as it was preventing the services from starting:

Services - Windows could not start the eConnect for Microsoft Dynamics GP 2018 Integration Service service on the Local Computer

Continue reading “How to Remove a Dependency from a Windows Service”