Windows Server
Standalone (non-AD) Windows Server admin: local policy, updates, hardening.
- Windows Server
RDP "CredSSP Encryption Oracle Remediation" Error: The Safe Fix (Not the Risky One)
This RDP error is a patch mismatch from CVE-2018-0886. The right fix is to patch both ends — or set the policy to Mitigated. Setting it to 'Vulnerable' exposes the server.
June 10, 2026 - Windows Server
Shared Printing Broke After the Print RPC Hardening (CVE-2021-1678)? Patch Clients First
Enabling RpcAuthnLevelPrivacyEnabled hardens print spooler RPC (CVE-2021-1678) — but if clients aren't patched first, network printing breaks. The correct order, and the safe value.
June 10, 2026 - Windows Server
Enable PowerShell Remoting (WinRM) on a Standalone / Workgroup Server
No domain means no automatic Kerberos trust — so PSRemoting needs TrustedHosts. Here's how to enable WinRM and connect between non-AD Windows servers safely.
June 10, 2026 - Windows Server
Setting Up & Hardening a Standalone (Non-AD) Windows Server 2019
A practical checklist for a workgroup Windows Server 2019 with no Active Directory: disable Server Manager autostart, set local security policy, lock down accounts, and the firewall.
June 10, 2026 - Windows Server
LGPO.exe: Batch-Apply Local Group Policy on a Standalone Server (Reflects in gpedit)
On a non-AD server you can't push GPOs — but LGPO.exe lets you back up, version, and batch-apply local group policy from the command line, and the settings show up in gpedit.msc.
June 10, 2026 - Windows Server
Print Spooler Won't Stay Running on Windows Server? Check the PrintNightmare GPO First
On Server 2019/2022/2025 the spooler often restarts then stops because a hardening GPO disabled it — not a corrupt queue. How to find the policy, plus the real driver/AV causes.
June 10, 2026 - Windows Server
PSWindowsUpdate: Manage Windows Server Updates from PowerShell (Install, Schedule, Remote)
Run Windows Updates from the command line on Server 2019/2022 with the PSWindowsUpdate module — scan, install, auto-reboot, and patch remote servers over WinRM.
June 10, 2026 - Windows Server
"No Remote Desktop License Servers Available" on a Workgroup Server? Use Per-Device CALs
On a non-AD/workgroup RD Session Host you MUST use Per Device CALs — Per User silently fails. Set the license server and mode in Local Group Policy. Exact steps.
June 10, 2026