PowerShell Cheat Sheet for Windows Server Admins
PowerShell cheat sheet for Windows Server admins: services, Get-WinEvent filters, networking, firewall, disks, updates, local users, Active Directory, remoting and tasks.
October 6, 2026
Reset krbtgt Password Safely: Two Resets, Replication and RODCs
Reset the krbtgt password safely: why it takes two resets, how long to wait, replication checks, Microsoft's New-KrbtgtKeys.ps1 modes, and RODC krbtgt accounts.
October 6, 2026
How to Audit Active Directory Changes: Track Who Changed What and From Which Computer
Turn on the right audit policy and SACLs, then find who changed which Active Directory user, group or setting, the old and new value, and the computer it came from. Tested on Windows Server 2025.
October 6, 2026
AD DNS Scavenging: Safe Aging Setup with PowerShell
Set up DNS aging and scavenging on AD-integrated zones safely: timers explained, a three-phase rollout with PowerShell, protecting static records, and events 2501/2502.
October 6, 2026
BadSuccessor dMSA on Server 2025: Audit OU Rights and Patch
BadSuccessor (CVE-2025-53779) let anyone who could create a dMSA on Windows Server 2025 take over the domain. Check DC builds, audit OU rights and dMSA links, and monitor.
October 6, 2026
Block RDP Brute Force on Windows Server: Detect and Stop It
Stop RDP brute force on Windows Server: read event 4625 (logon types 3 and 10), close or scope port 3389, require NLA, set account lockout, and auto-block attacking IPs.
October 6, 2026
Plesk AlmaLinux 10: Supported Version and What Is Missing
Plesk supports AlmaLinux 10 from Obsidian 18.0.72, but without Watchdog, SOGo, Premium Antivirus and old Xeon CPUs. What is missing and how to move from AlmaLinux 9.
October 6, 2026
LiteSpeed vs OpenLiteSpeed for Hosting Servers: Which to Pick
LiteSpeed Enterprise vs OpenLiteSpeed for hosting servers: .htaccess handling, panel support, licence tiers, cache and when to pick each.
October 6, 2026
Let’s Encrypt Changes 2025 to 2028: What Hosting Admins Must Do
Let's Encrypt changes from 2025 to 2028: no expiry emails, no OCSP, no clientAuth EKU, Gen Y intermediates, 64- then 45-day certificates, and what cPanel and DirectAdmin admins must do.
October 6, 2026
200-Day SSL Certificates and DCV Reuse: What It Means for AutoSSL
The CA/B Forum schedule: 200-day certificates and DCV reuse from March 2026, then 100 and 47 days, retired email validation, DNSSEC checks, and what it means for AutoSSL and ACME.
October 6, 2026
Gmail and Yahoo Bulk Sender Requirements: 2026 Host Checklist
Gmail and Yahoo bulk sender rules for 2026: the 5,000-a-day threshold, SPF, DKIM, DMARC alignment, one-click unsubscribe, 0.3% spam rate and a host checklist.
October 6, 2026
DMARCbis (RFC 9989): What Changed and Must You Edit Records?
DMARCbis (RFC 9989, 9990, 9991) explained: new np, psd and t tags, pct/rf/ri removed, the DNS tree walk, and whether you need to edit your DMARC record.
October 6, 2026