Windows Server
Standalone (non-AD) Windows Server admin: local policy, updates, hardening.
12 guides
- Windows Server
Print Spooler Won't Stay Running on Windows Server? Check the PrintNightmare GPO First
Check Windows Server spooler errors and policy, distinguish PrintNightmare from RPC hardening and confirm security prerequisites before enabling printing.
June 12, 2026 - Windows Server
CredSSP Encryption Oracle Remediation RDP Error: Patch and Check Policy
Patch both Remote Desktop endpoints and check CredSSP policy direction. Mitigated on a patched client still blocks connections to an unpatched server.
June 9, 2026 - Windows Server
"Remote Desktop Licensing Mode Is Not Configured"? Set It Right (Don't Reset the Clock)
The 'RDS will stop working in X days' warning means the licensing mode isn't set. The popular grace-period registry reset is a license violation — here's the supported fix.
June 7, 2026 - Windows Server
Setting Up & Hardening a Standalone (Non-AD) Windows Server 2019
A practical checklist for a workgroup Windows Server 2019 with no Active Directory: disable Server Manager autostart, set local security policy, lock down accounts, and the firewall.
May 27, 2026 - Windows Server
How to Detect and Disable SMBv1 on Windows Server (Audit First, by Component)
Disabling SMBv1 isn't one registry flip — it's separate for the server and client components. And audit usage first so you don't cut off a legacy device. The full, safe method.
May 25, 2026 - Windows Server
Shared Printing Broke After the Print RPC Hardening (CVE-2021-1678)? Patch Clients First
Enabling RpcAuthnLevelPrivacyEnabled hardens print spooler RPC (CVE-2021-1678) — but if clients aren't patched first, network printing breaks. The correct order, and the safe value.
May 21, 2026 - Windows Server
LGPO.exe: Batch-Apply Local Group Policy on a Standalone Server (Reflects in gpedit)
On a non-AD server you can't push GPOs — but LGPO.exe lets you back up, version, and batch-apply local group policy from the command line, and the settings show up in gpedit.msc.
May 21, 2026 - Windows Server
PSWindowsUpdate: Manage Windows Server Updates from PowerShell (Install, Schedule, Remote)
Run Windows Updates from the command line on Server 2019/2022 with the PSWindowsUpdate module — scan, install, auto-reboot, and patch remote servers over WinRM.
May 9, 2026 - Windows Server
KMS Activation Error 0x8007007B ("DNS Name Does Not Exist")? Fix the SRV Record
0x8007007B means the KMS client can't find the _VLMCS SRV record in DNS — not a bad key. Confirm a KMS host exists, or point the client directly with slmgr /skms.
May 6, 2026 - Windows Server
Windows Activation Error 0xC004F074 ("No KMS Could Be Contacted")? Fix the Real Cause
0xC004F074 isn't a bad key — it means the client can't reach a working KMS host. Check the service, port 1688, time skew and DNS, not a new product key.
May 6, 2026 - Windows Server
"No Remote Desktop License Servers Available" on a Workgroup Server? Use Per-Device CALs
On a non-AD/workgroup RD Session Host you MUST use Per Device CALs — Per User silently fails. Set the license server and mode in Local Group Policy.
April 22, 2026 - Windows Server
Enable PowerShell Remoting (WinRM) on a Standalone / Workgroup Server
Configure workgroup PowerShell remoting, distinguish HTTP from certificate-based HTTPS, and review listener, authentication and firewall scope.
April 9, 2026