joe (@joewaredotnet) header
joe (@joewaredotnet) profile picture

Former Microsoft DirSvc MVP (15+years), published author (still poor), nerd (duh), purveyor of nonsense, eternal optimistic cynic. Only 160 chars? Are you insa

Somewhere in Michigan
Joined September 2012
Photo by joe (@joewaredotnet)Photo by joe (@joewaredotnet)Photo by joe (@joewaredotnet)Photo by joe (@joewaredotnet)Photo by joe (@joewaredotnet)Photo by joe (@joewaredotnet)Photo by joe (@joewaredotnet)Photo by joe (@joewaredotnet)Photo by joe (@joewaredotnet)Photo by joe (@joewaredotnet)
I hate when one of the bugs I find is me not reading my own tool usage properly. It also means I failed on the intuitiveness of a given switch. Double fail. I mean you can't win them all, but still I hate fails even though I know and understand you find success through fails.
4
341
Entra? Not great, not even good. Way better than Azure Active Directory though since it isn't Active Directory in any way shape or form and never was. Hopefully this will clear up some confusion for some people. I recommend people just call it MCI. Microsoft Cloud Identity.
5
398
New versions of AdFind (Still not malware) and AdMod released despite the dev saying no more. blog.joeware.net/2023/05/06/… #activedirectory #adfind #admod
4
7
24
5,804
Remember DEC/TEC?? Now we have HIP, a lot of the same people with amazing content. And it is FREE!!! Go sign up! blog.joeware.net/2023/04/23/… #activedirectory
2
5
1,055
Hey Microsoft… Is the AD Delegation for Computer Objects Broken? blog.joeware.net/2023/03/17/… #activedirectory #KB5020276
2
6
10
2,063
When cleaning up several hundred virtual machines I accidently smoked my GITEA server. It is now rebuilt on Windows Server 2022 and better than ever, no data loss. Thank you data backup. I admit the first push really took some time though and made my heart slow for a bit.
213
It would be cool if NIST updated their cert renewal guidance for all periods to be "Number Of Years +1 month", so one year would now be 13 months, two years would now be 25 months. If you don't see the benefit I expect you haven't worked in ops before. #NIST #PKI Pass it on.
2
232
Once Again, Joeware Doesn’t Have Viruses if Downloaded From the Joeware.net site. blog.joeware.net/2023/02/22/… The problem isn't AdFind or joeware, it is End Point Security and Browser companies and clueless security people. #activedirectory
3
12
642
Semperis is one of the very very few vendors I will recommend / evangalize for. If I worked for a vendor, this is the one I would choose. Many of the best of the old DEC/TEC conferences work for Semperis now.
Don't miss out on our #ActiveDirectory security webinar on Feb 22nd at 6pm EST! Learn about top vulnerabilities, mitigation strategies, and #ADrecovery complexities from Semperis' experts. 💻 Register now: us06web.zoom.us/webinar/regi…
3
11
986
Chrome is being stupid now too, blocking joeware tool downloads. blog.joeware.net/2023/01/27/…
1
1
249
Well it doesn't look like the place has burned down since Elon took over. Are there less bots now?
Let's be honest, it is more of a case that I have a twitter account than the fact that I use twitter. "Using" twitter is much higher bar than I reach.
3
Well look at that, TLS 1.3 for LDAPS on Windows Server 2022... I guess my rant worked. 😁 blog.joeware.net/2022/07/09/… #activedirectory
1
10
Hey @StephenAtHome, when is Merrick coming on your show so you can ask him the hard question, when is the DOJ going to get to doing their jobs? Anytime now would be good. :)
1
Still waiting on the hacker collectives to donate my share of the loot they have made when hacking and using AdFind for AD Recon. Come on you guys. It is only fair with all of the AV companies fucking me. Tip Jar in the upper left hand corner of blog.joeware.net/. #adfind
2
Warning: If you pipe AdFind into AdMod for password changes it is a good chance your SOC is getting alerts that show the passwords you are typing into the command line in the pipeline. This is because many SOCs are popping alerts for AdFind use now. #activedirectory #joeware
1
2
If you type the DN directly into AdMod without using AdFind to pipe it it is a good chance an alert isn't popping but it is still likely going into a log - ESPECIALLY if you are running the commands from powershell.