GetSecureScore

How to Redirect HTTP to HTTPS with Windows IIS 10

To create redirection rules in IIS, you must download and install the URL Rewrite Module 2.1 IIS module (https://www.iis.net/downloads/microsoft/url-rewrite). Then open the Internet Information Services Manager console (InetMgr.exe) and select your site. Go to the SSL Settings section and make sure that the Require SSL option is not enabled. If not, this will cause a conflict with the Rewrite URL Read More

GetSecureScore

How to Enable SMB Signing?

SMB signing (also known as security signatures) is a security mechanism in the SMB protocol. SMB signing means that every SMB message contains a signature that is generated by using the session key. The client puts a hash of the entire message into the signature field of the SMB header. SMB signing first appeared in Read More

GetSecureScore

How to Disable TLS 1.0 and TLS 1.1 via Group Policy

How to Disable TLS 1.0 and TLS 1.1 via Group Policy Open regedit utility Open Group Policy Management (gpmc.msc) in a Domain Controller. 2. Creating a GPO in the Domain Controller Navigate to the OU where Policy is to be linked and right-click and select ‘Create a GP in this domain and Link it here’; In this Read More

GetSecureScore

How to Disable FIPS-Complaint Encryption on Windows

The Professional, Enterprise and Education versions of Microsoft Windows have a hidden setting that enables government-certified “FIPS-compliant” encryption. FIPS stands for “Federal Information Processing Standards.” It is a set of government standards that define how certain things are used in the government—for example, encryption algorithms. This setting in not available on the Home version of Read More

GetSecureScore

Removing Device Primary User from Local Administrator Group by Using Intune Profiles

First off, if you are still pondering the age old question “Should my users be local admin or not” I’m gonna help you right here: No, No, a Thousand Times No。 The only good reason I can think of for letting your users be local administrators is if you have too much money & time Read More

GetSecureScore

How to Register Printers with Microsoft Universal Print by Using the Universal Print Connector

 The connector must have access to the following endpoints: https://login.microsoftonline.com https://aadcdn.msftauth.net *.print.microsoft.com Follow the steps here to install the connector and sign in to the connector app using a tenant user that has the Global Administator or the Printer Administrator role. Select the printers your want to register from the Available Printers list and click the Register button.  Tip Refer to Read More