The LDAP database used by Active Directory records the date/time of a user's last logon. The purposes of last logon date/time may include the following. Improving security If there are no regular logons, the user account may no longer be needed. Disabling or deleting the account may enhance security. Audit Purpose This …

Read More

This article introduces how to check your Windows edition, version, and OS build. When checking on the actual machine Confirmation with winver command Press Windows key + R and you will see a Run at the bottom left of your desktop. Enter winver in Open and click OK. The About Windows will appear. You can check the …

Read More

I think that Wireshark is often used for a packet capture on Windows.However, I think that installation may be restricted depending on company policies or operating environments. Powershell has a cmdlet called NetEventPacketCapture, which can be used to capture packets. This article introduces a packet capture method …

Read More

In the previous article, I introduced how to implement the configuration of the system proxy (WinHTTP Proxy) with commands. This article introduces how to deploy WinHTTP Proxy settings via group policy. Location of WinHTTP Proxy settings WinHTTP Proxy settings are stored in the registry as binary values. The settings …

Read More

There are two main types of Windows proxy settings: one is the proxy setting found in Internet Options, etc., and the other is the WinHTTP Proxy proxy setting. The features of each are summarized below. Item Description Internet Options Configure in Internet Options, or in Windows 10/11, from the Settings app. Set per …

Read More

In some cases, such as file server migration, you may want to output a list of paths and permissions for Windows Shared Folders.This article introduces how to check them with Powershell. *In general, access control is set to Everyone/Full control in the Shared Folder Permissions, is often finely controlled by NTFS …

Read More

Windows has a remote computer logging feature called the Event Collector. The Event Collector uses WS-Management (Web Services-Management). It is possible to set up a subscription on the collector computer and transfer event logs from the source computer to the collector computer. There are two event collection …

Read More