- Boot from Microsoft Windows Server 2012R2 DVD/ISO.
- From the Windows Setup menu, click "Next".
- Select "Repair your computer".
- Click on "Troubleshoot".
- Under Advanced options, click "Command Prompt".
At the command prompt, run the following commands:
| # This Gist is a PowerShell script to set the SSL Cipher Suite Order Group Policy Object (GPO) for Windows Server 2016 and 2019/2022. | |
| # Reference: https://www.dsinternals.com/en/active-directory-domain-controller-tls-ldaps/ | |
| # Security optmized cipher suite list for Windows Server 2019/2022 | |
| $Ciphers2022 = 'TLS_AES_256_GCM_SHA384,TLS_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256' | |
| # Security optmized cipher suite list for Windows Server 2016 | |
| $Ciphers2016 = 'TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256' | |
| $GpoName = 'Domain Controller Security Baseline' |
| <# | |
| .SYNOPSIS | |
| Converts a .REG file into an XML document that is compatible with GPO | |
| preferences. | |
| .DESCRIPTION | |
| Converts a .REG file into an XML document that is compatible with GPO | |
| preferences. The registry file can contain updates or deletions. The | |
| resulting XML file can be copy and pasted, or drag and dropped onto the | |
| GPO preferences registry window to import the file. |
| #requires -version 2 | |
| <# | |
| .SYNOPSIS | |
| Outputs the last bootup time and uptime for one or more computers. | |
| .DESCRIPTION | |
| Outputs the last bootup time and uptime for one or more computers. | |
| .PARAMETER ComputerName |
| ## Configure eth0 | |
| # | |
| # vi /etc/sysconfig/network-scripts/ifcfg-eth0 | |
| DEVICE="eth0" | |
| NM_CONTROLLED="yes" | |
| ONBOOT=yes | |
| HWADDR=A4:BA:DB:37:F1:04 | |
| TYPE=Ethernet | |
| BOOTPROTO=static |