The blog
140 tutorials and war stories on homelabs, Windows Server, Microsoft 365, networking and security. Searchable, tagged, no pagination maze.
Find Your Hyper-V VM’s Host Name with PowerShell
One PowerShell command that reads the Hyper-V guest registry key to tell you which Hyper-V host a VM is running on, handy when you manage several hosts.
Fix Error 8018000a: This Device Is Already Enrolled
Entra (Azure AD) join fails with 8018000a, device already enrolled: a PowerShell script removes the stale enrollment, then you delete the old device.
Installing Office 365 on a Remote Desktop Host!
Part 4 of the Server 2022 RDS series: install Office 365 on a Session Host with shared computer activation so users sign in with their own licenses.
Remote Desktop Services - FSLogix
Part 3 of the Server 2022 RDS series: install and configure FSLogix so user profiles live on a file share instead of the Remote Desktop Session Host.
Manage Local Admins with Group Policy on Workstations
Strip local admins with Group Policy and give admin rights only to the workstation's Managed By user, via item-level targeting and two LDAP queries.
AutoPilot - Hybrid Azure AD
Autopilot for Hybrid Azure AD Join: install the Intune Connector for AD, create the OU, dynamic group, Autopilot profile and Domain Join profile.
Server 2022 - Remote Desktop Services - Part 2
Part 2 of the Server 2022 RDS series: create Group Policies for Remote Desktop Services that tune session performance and the user experience on the hosts.
Intune - Applications and Policies
Deploy the Office suite and apply Administrative Templates through Intune to Hybrid Azure AD joined Windows 11 devices from the earlier setup.
Windows 11 - Active Directory - Hybrid Join - Azure AD
Set up Hybrid Azure AD Join for Windows 11 devices in an existing Active Directory and enable automatic MDM enrollment in Intune through Group Policy.
Server 2022 - Azure AD Connect Sync
Install Azure AD Connect on Server 2022, start with a test group, add Seamless SSO via GPO and group-based licensing, then extend the sync to all OUs.