https://www.avantia.dk/blog daily 0.75 2024-03-28 https://www.avantia.dk/blog/2023/7/29/are-you-ready-for-the-netjoin-domain-join-hardening-changes-coming-soon monthly 0.5 2023-09-12 https://www.avantia.dk/blog/2022/9/28/disable-chrome-and-edge-enhanced-spell-check-to-prevent-data-leak monthly 0.5 2022-09-28 https://www.avantia.dk/blog/2022/9/21/why-and-how-to-implement-browser-extension-whitelisting monthly 0.5 2022-09-28 https://www.avantia.dk/blog/2022/9/27/generate-firefox-extension-whitelisting-configuration-in-json-format monthly 0.5 2022-09-28 https://www.avantia.dk/blog/2022/9/21/discover-installed-and-potentially-malicious-browser-extensions monthly 0.5 2022-09-28 https://www.avantia.dk/blog/2021/11/15/windows-security-pop-up-when-connecting-to-ad-with-ldaps monthly 0.5 2021-11-22 https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/fd5e9af6-9454-47f4-a16c-0737fced8dfd/CertProperties_NoClientAuth.jpg Blog - Windows Security pop-up when connecting to AD with LDAPS - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/a5f9c794-e64b-4e2a-b027-d69ea16dee27/EnableStrongPrivateKeyProtection.jpg Blog - Windows Security pop-up when connecting to AD with LDAPS - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/29cb46fc-15f5-43a0-a30d-d88462ed0a26/WindowsSecurityPopUpCredentialRequired_NoPW.jpg Blog - Windows Security pop-up when connecting to AD with LDAPS - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/cfee630a-6127-4649-bca2-03c96795d2a3/LDP_SSLConnect.jpg Blog - Windows Security pop-up when connecting to AD with LDAPS - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/b66fb63b-d4af-44f4-9855-958f061c2200/WindowsSecurityPopUpCredentialRequired.jpg Blog - Windows Security pop-up when connecting to AD with LDAPS - Make it stand out The application was failing, because the password needed here is not the user’s Active Directory account password, but the users of course had no idea. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/0c72ecac-44fa-432e-bc18-02df92ad670d/Certificate_IntendedPurposes_AllApplicationPolices.jpg Blog - Windows Security pop-up when connecting to AD with LDAPS - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/d139d7c7-2dbb-421e-b27a-7aeb01732719/OCESCertNoSubjectSANorEKUApplicable.jpg Blog - Windows Security pop-up when connecting to AD with LDAPS - Make it stand out Subject and SAN of the certificate does not contain the AD user account’s UPN, and EKU is empty https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/b3b58381-235b-4ff0-82fc-b614a3159b56/StrongPrivateKeyProtection_SecurityLevel.jpg Blog - Windows Security pop-up when connecting to AD with LDAPS - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.avantia.dk/blog/2021/7/5/printnightmare-still-unpatched-what-should-i-do-and-what-shouldnt-i-do monthly 0.5 2021-07-19 https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1625756369260-QCHAXGETTSFOFLDERFOT/0Patch-Applied.jpg Blog - PrintNightmare still incompletely patched - What should I do... And what shouldn't I do? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1625756454674-UAPJGJHD4MHB3GDXNYIV/LocalSpl.dll-Sigcheck.jpg Blog - PrintNightmare still incompletely patched - What should I do... And what shouldn't I do? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1625755888432-LHM21X7ECQPWNJXAOIKR/0Patch-NotApplied.jpg Blog - PrintNightmare still incompletely patched - What should I do... And what shouldn't I do? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.avantia.dk/blog/2021/6/29/first-experiences-with-customizing-windows-11-start-and-taskbar monthly 0.5 2021-07-05 https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1624982286413-44IBOPL93EVS7GVOAODM/Start-Layout-ClassicStart-XML-file.jpg Blog - First experiences with customizing Windows 11 Start and taskbar - Make it stand out Classic XML file exported from Windows 11 after switching to classic Start https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1624980718824-DLFRNPFQKH448PZOSA14/Start-Layout-JSON-file.jpg Blog - First experiences with customizing Windows 11 Start and taskbar - Make it stand out This is an export of the Windows Start, as it is at first install. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1624982650414-DX7L1GZOBR2ZFC8UKHQ5/NoPinToStart.jpg Blog - First experiences with customizing Windows 11 Start and taskbar - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1624983135013-WDEKK2TJD4PB7NBMK36M/Start-Layout-ReapplyAtEveryLogon.jpg Blog - First experiences with customizing Windows 11 Start and taskbar - Make it stand out You can now choose between applying the Start Layout at every logon or not. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1624981800896-9S6FEM9VRTIQQTDV2HN1/ClassicStart_LeftAligned.jpg Blog - First experiences with customizing Windows 11 Start and taskbar - Make it stand out This is what you will get after setting the two registry values below https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1624981712448-I0Y17VQHH09A3032VDK7/Registry_ClassicStart_LeftAligned.jpg Blog - First experiences with customizing Windows 11 Start and taskbar - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1624982741575-LDK0PWYVBUB1O92QU7SS/LiveTileUsingStartLayoutXML.jpg Blog - First experiences with customizing Windows 11 Start and taskbar - Make it stand out Functioning Weather live tile after forcing a modified Start Layout XML file on. https://www.avantia.dk/blog/2020/5/13/script-to-convert-internet-explorer-favorites-to-managed-bookmarks-in-chrome-edge monthly 0.5 2020-05-17 https://www.avantia.dk/blog/2019/8/26/danish-blog-post-sdan-installerer-man-nemid-nglefilsprogram-p-den-chromium-baserede-edge-browser monthly 0.5 2019-09-04 https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1566828256667-MUKYNI3JHTQZRAVVCSFV/LoadUnpackedFromNemIDPath.png Blog - [Danish Blog Post]: Sådan installerer man NemID Nøglefilsprogram på den Chromium baserede Edge browser Indsæt stien, som du kopierede til udklipsholder fra Stifinder. Tryk på “Vælg mappe” https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1566828435947-XPTS1WHGVY3Z9JXPFGQW/RemoveDeveloperMode.PNG Blog - [Danish Blog Post]: Sådan installerer man NemID Nøglefilsprogram på den Chromium baserede Edge browser Developer mode kan nu slås fra igen, da NemID extension også virker uden, at Developer mode er slået til. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1566827824318-ORVR05P8ICBW6J2I7T0D/ChromeVersionAndProfilePath.PNG Blog - [Danish Blog Post]: Sådan installerer man NemID Nøglefilsprogram på den Chromium baserede Edge browser Kopier Profilstien til udklipsholder https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1566828339528-CZHNXKQQAHUHRETGXSHY/NemIDExtenstionLoadedInEdge.PNG Blog - [Danish Blog Post]: Sådan installerer man NemID Nøglefilsprogram på den Chromium baserede Edge browser Nu bliver extention installeret i Edge og kan ses under edge://extensions -> Installed extensions -> From other sources. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1566827627181-9LZNO3O9AUK0QIO522M2/2_AllowChromeStoreAndDeveloperMode.PNG Blog - [Danish Blog Post]: Sådan installerer man NemID Nøglefilsprogram på den Chromium baserede Edge browser Nederst til venstre skal du slå “Allow extensions from other stores” til (permanent) og “Developer mode” (midlertidigt, mens Nøglefil extension bliver installeret). https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1566827954937-B6WU0QNVLT5LVWMTZWTT/NemIDChromeExtensionPath_1.PNG Blog - [Danish Blog Post]: Sådan installerer man NemID Nøglefilsprogram på den Chromium baserede Edge browser Åben stien i Stifinder. Den markerede folder er id for NemID Chrome extension. Åben den folder. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1566828016595-PLQYX7LPVE3BV8NYY15J/NemIDChromeExtensionPath_2.png Blog - [Danish Blog Post]: Sådan installerer man NemID Nøglefilsprogram på den Chromium baserede Edge browser Højreklik på folderen med versionsnummer, mens du holder SHIFT inde og vælg “Kopier som sti”. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1566828195886-1DKFAZW8PL691CMPNFH0/LoadUnpacked.png Blog - [Danish Blog Post]: Sådan installerer man NemID Nøglefilsprogram på den Chromium baserede Edge browser Vælg “Load unpacked” under installed extensions https://www.avantia.dk/blog/2019/6/5/find-remote-desktop-hosts-vulnerable-to-bluekeep-before-someone-else-does monthly 0.5 2019-07-02 https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1559735055588-KNNZVEHJXT0LL71A5CG2/RDPScan3.jpg Blog - Find Remote Desktop hosts vulnerable to BlueKeep before someone else does Here the hosts are all patched against BlueKeep and two of them protected by CredSSP/NLA https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1559735220708-N94UO4QK9T5BYJ4Z1G4X/RDPScan4.jpg Blog - Find Remote Desktop hosts vulnerable to BlueKeep before someone else does Here, I tested againt two unpatched VM’s, one protected by CredSSP/NLA, the other completely unprotected against CVE-2019-0708. https://www.avantia.dk/blog/2018/11/21/missing-desktop-app-icons-in-start-menu-customized-with-start-layout-xml monthly 0.5 2018-11-23 https://www.avantia.dk/blog/2017/10/22/lingering-access-with-temporary-group-memberships monthly 0.5 2019-10-27 https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508311943699-89EQB215QI787CRE9STQ/CreateUserWhileTempAdmin_005_arrows_20171010.jpg Blog - Lingering access with Temporary Group Memberships Here, I am logged on as TempGroupUser, that has temporarily been added to Domain Admins for 10 minutes. Using TempGroupUser, I create a new user, Rogue1 (Star Wars reference intentional, couldn’t help it!) and add it to the Domain Admins group with no Time To Live. After this, you will see both TempGroupUser and Rogue1 as Domain Admins, the latter with no time restraints. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508315315189-YY9HLB9USXVRJM591OA7/FilesOnFileShare_CreatedWithNTLMBeforeAndAfterTTLExpiry.jpg Blog - Lingering access with Temporary Group Memberships As you see in the screenshot, I’m able to continue writing to the share, as long as I keep the SMB connection (and with that the Logon Session) alive. Even 49 minutes after the expiry of the user’s group membership! https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508315567148-A72J5Y12ZT7T4607Z2YG/LogoffEventOnFileServer_51MinutesAfterLogonWithTempGroup.jpg Blog - Lingering access with Temporary Group Memberships And the Logon Session for this Logon ID is not destroyed until 6:52 PM, when the user disconnects from the share, and the SMB session is closed. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508313744533-XBLDE2R4P797X3PD44EW/AccessDeniedToIIS_LoggedOnWithTmpGrp_ButLessThan5MinsLeft.jpg Blog - Lingering access with Temporary Group Memberships In this screenshot, I have refreshed the web page with less than 5 minutes left of the group membership TTL. The user is met with a logon prompt, and logon attempts fail. This is despite the fact, that the TempGroupTest user according to the screenshot obviously still member of the Test-Admins group, not only according to the local access token, but evidently also according to Active Directory. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1572207634243-L49B5VOULD23CMURAZ7D/207_HTTPAccessGrantedAfterTTLCompleteExpiry_MemberOfGroupAccordingToIIS_5.jpg Blog - Lingering access with Temporary Group Memberships Even after the TTL has expired, and Active Directory no longer considers the TempGroupTest user a member of Test-Admins, the IIS ASP.NET page reports back to me, that it considers TempGroupTest user a member of Test-Admins. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508313627760-8YHU559IKF6N7P8CS7DR/AccessGrantedToIIS_LoggedOnWTmpGrp_WithinTimeTolerance.jpg Blog - Lingering access with Temporary Group Memberships Having logged on after being temporarily added to the Test-Admins group, we have full SSO to the website, and the local access token has Test-Admins represented. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508312034483-9484OH7DTZZY75ECIESS/Rogue1UserRunningAsDomAdm_002.jpg Blog - Lingering access with Temporary Group Memberships And just to confirm: More than 20 minutes later – when TempGroupUser’s TTL has expired and is no longer Domain Admin – Rogue1, that was created using TempGroupUsers temporary group Membership, is still able to log on as Domain Admin and with no time limits. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508313935191-UBNKZ32EVLUJB6Q7VKPK/LoggedOnWithTempGroup_IncludingTimeStampsAndTTL.jpg Blog - Lingering access with Temporary Group Memberships As you can see in the output from SecTok.exe, both membership of Test-Admins and the local Administrators group are in the access token on the local client. (and Active Directory also confirms the membership of the group). Note the time 8:59 AM. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508315429473-0VBOS4MAJVMM2T019LBR/SMBSessionOnServer_57Minutes_TTLExpired47MinsAgo.jpg Blog - Lingering access with Temporary Group Memberships At the server side, you will see an active SMB session, that has been active for 57 minutes, although the TTL for the group membership was only 10 minutes https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508314977565-6L0V92YH4ZG7YNQOX6DY/LogonEventAtFilServer_KerberosSMBConnection.jpg Blog - Lingering access with Temporary Group Memberships TempGroupTest connects to the file share at 10:00 PM, as shown the Logon Event on the file server https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508315824253-HU531SJSG3BD7S4MP7MT/AccessDenied_NTLM_WhenUserIsMemberOfProtectedUsers.jpg Blog - Lingering access with Temporary Group Memberships With Protected Users group, it is clearly stated, that your account is being restricted. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508312433608-7R21R7SIFXRSZF9M8QK8/TestSetup1jpg Blog - Lingering access with Temporary Group Memberships https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508314898108-KGZIFF0JE8E17L9M980G/AccessDeniedtoSMBAtTTLexpiry_GrantedDuring5MinsLeft.jpg Blog - Lingering access with Temporary Group Memberships At the exact time of the TTL expiry, access to the share is revoked. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508314555194-V6G2X05Q8JJVY05FDNE3/MMCConfirmation_LocalAdminCreated.jpg Blog - Lingering access with Temporary Group Memberships And using the MMC console, we can verify the successful addition of Rogue1Local to the Administrators group. (Using the same console we can also take advantage of the “lingering administrative permissions“ to remove the user again or create another) https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508315489650-C3E9KWYO5Q0NFH99BDFY/LogonEventOnFileServer.jpg Blog - Lingering access with Temporary Group Memberships Looking at the logon events, we see a Logon Session being created at 5:53 PM with the Logon ID 0x269E8E2, when we first connect to the file share from the client. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508313536969-I8S5FSPDZXDAHTSUT0NV/AccessToIIS_NoLocalToken.jpg Blog - Lingering access with Temporary Group Memberships As you see in the attached screenshot, the web page recognizes the user’s membership of the group “Test-Admins” (SID ending in “1142”), which is what gives access to the page. But looking at the clients local access token (using joeware.net’s SecTok), we can see that the client does not know about the user being a member of any domain groups other than Domain Users group, even though it has been added (See the Get-ADGroup output at the bottom of the command shell window). This is of course because the user has logged on, before being added temporarily to the Test-Admins group. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508313982293-CJZ8YSYQX51XYFJUFEBR/CreateLocalAdmin_HoursAfterTTLExpiry.jpg Blog - Lingering access with Temporary Group Memberships Now – at 4:39 PM – memberships of both Test-Admins and therefore also local Administrators groups are still in the local access token, although Get-ADGroup confirms the user is not a member of the group according to Active Directory. To proof the administrative access is in effect, in the screenshot the user creates a local user account with no expiry or password expiry and adds it to the local Administrators group. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508314808303-AUK5QPPLM42OFO0PFWPT/AccessDeniedWithNTLMAndLessThan5minsLeft.jpg Blog - Lingering access with Temporary Group Memberships https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508315882077-HWMO50H147DXYH0BB27Z/NetworkError_NTLM_WhenNTLMBlockingPoliciesInEffectOnDCLevel.jpg Blog - Lingering access with Temporary Group Memberships Using NTLM blocking, the end user is told, there was a "Network Error". I could imagine this resulting in some Service Desk calls from users complaining about faults in the network. https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508314744973-86DVN7NUQ24RSNNYAEJ7/AccessDeniedWithKerberosAndLessThan5MinsLeft.jpg Blog - Lingering access with Temporary Group Memberships https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1508315094214-YMI5VIH4F0U3MR669KXI/503_LogoffEventAtFileServer_Kerberos_AtClosingSMBSession_4MinsAfterTTLExpiry_2.jpg Blog - Lingering access with Temporary Group Memberships https://www.avantia.dk/blog/2016/8/17/quick-and-dirty-workaround-for-unstable-wi-fi-in-windows-10 monthly 0.5 2019-06-11 https://www.avantia.dk/blog/2015/7/26/missing-get-windows-10-icon-on-unmanaged-windows-7-a-few-tips monthly 0.5 2016-12-31 https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1483178096643-A1YP607LI6WXANFB0HFD/ReserveW10Icon.jpg Blog - Missing ”Get Windows 10” icon on unmanaged Windows 7 – a few tips https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1483178211060-QO639SKN6ILT1P23NKSW/PreWin10Updates.jpg Blog - Missing ”Get Windows 10” icon on unmanaged Windows 7 – a few tips https://www.avantia.dk/blog/2015/4/15/a-powershell-script-to-ease-migration-of-file-servers-in-vmware-from-2003-to-2012-r2 monthly 0.5 2019-06-11 https://www.avantia.dk/blog/2014/10/30/microsoft-has-reached-code-complete-on-work-folders-for-ios monthly 0.5 2016-12-31 https://www.avantia.dk/blog/2014/10/6/remote-management-of-microsoft-hyper-v-server-2012-r2-in-a-workgroup monthly 0.5 2016-12-31 https://www.avantia.dk/blog/2014/08/25/no-you-do-not-need-to-run-adprep-manually-anymore monthly 0.5 2016-12-31 https://www.avantia.dk/blog/category/Microsoft+Hyper-V+Server monthly 0.5 https://www.avantia.dk/blog/category/VMware monthly 0.5 https://www.avantia.dk/blog/category/Windows+Server+2003+EOS monthly 0.5 https://www.avantia.dk/blog/category/Hyper-V+Management monthly 0.5 https://www.avantia.dk/blog/category/Powershell monthly 0.5 https://www.avantia.dk/blog/category/Windows+Update monthly 0.5 https://www.avantia.dk/blog/category/Windows+Server monthly 0.5 https://www.avantia.dk/blog/category/vSphere+PowerCLI monthly 0.5 https://www.avantia.dk/blog/category/Certificates monthly 0.5 https://www.avantia.dk/blog/category/Work+Folders monthly 0.5 https://www.avantia.dk/blog/category/iOS monthly 0.5 https://www.avantia.dk/blog/category/Security monthly 0.5 https://www.avantia.dk/blog/category/Enterprise+Mobiliy monthly 0.5 https://www.avantia.dk/blog/category/Print monthly 0.5 https://www.avantia.dk/blog/category/MS+Edge+Chromium monthly 0.5 https://www.avantia.dk/blog/category/Google+Chrome monthly 0.5 https://www.avantia.dk/blog/category/Internet+Explorer monthly 0.5 https://www.avantia.dk/blog/category/ADPREP monthly 0.5 https://www.avantia.dk/blog/category/Windows+11 monthly 0.5 https://www.avantia.dk/blog/category/AD+DS monthly 0.5 https://www.avantia.dk/blog/category/Windows+10 monthly 0.5 https://www.avantia.dk/blog/category/Windows+Server+2012 monthly 0.5 https://www.avantia.dk/blog/category/Wi-Fi monthly 0.5 https://www.avantia.dk/blog/category/Browser+security monthly 0.5 https://www.avantia.dk/blog/category/Unmanaged+Computers monthly 0.5 https://www.avantia.dk/blog/category/Group+Policy monthly 0.5 https://www.avantia.dk/blog/category/Active+Directory monthly 0.5 https://www.avantia.dk/blog/category/PKI monthly 0.5 https://www.avantia.dk/blog/category/Mozilla+Firefox monthly 0.5 https://www.avantia.dk/blog/category/BYOD monthly 0.5 https://www.avantia.dk/blog/category/Windows+Server+2012+R2 monthly 0.5 https://www.avantia.dk/blog/category/Windows+7 monthly 0.5 https://www.avantia.dk/blog/category/Remote+Management monthly 0.5 https://www.avantia.dk/blog/category/Browser monthly 0.5 https://www.avantia.dk/blog/tag/Test-ComputerSecureChannel+-Repair monthly 0.5 https://www.avantia.dk/blog/tag/Browser+extensions monthly 0.5 https://www.avantia.dk/blog/tag/Certificates monthly 0.5 https://www.avantia.dk/blog/tag/Get+Windows+10 monthly 0.5 https://www.avantia.dk/blog/tag/Security monthly 0.5 https://www.avantia.dk/blog/tag/Reserve+Windows+10 monthly 0.5 https://www.avantia.dk/blog/tag/Extension+Management monthly 0.5 https://www.avantia.dk/blog/tag/Domain+Join monthly 0.5 https://www.avantia.dk/blog/tag/Kerberos monthly 0.5 https://www.avantia.dk/blog/tag/Print monthly 0.5 https://www.avantia.dk/blog/tag/StartLayout.xml monthly 0.5 https://www.avantia.dk/blog/tag/BlueKeep monthly 0.5 https://www.avantia.dk/blog/tag/Allow+computer+account+re-use+during+domain+join monthly 0.5 https://www.avantia.dk/blog/tag/Permissions monthly 0.5 https://www.avantia.dk/blog/tag/nmap monthly 0.5 https://www.avantia.dk/blog/tag/Start+Menu monthly 0.5 https://www.avantia.dk/blog/tag/Windows+11 monthly 0.5 https://www.avantia.dk/blog/tag/AD+DS monthly 0.5 https://www.avantia.dk/blog/tag/Windows+10 monthly 0.5 https://www.avantia.dk/blog/tag/PowerShell monthly 0.5 https://www.avantia.dk/blog/tag/mitigation monthly 0.5 https://www.avantia.dk/blog/tag/PrintNightmare monthly 0.5 https://www.avantia.dk/blog/tag/Vulnerability monthly 0.5 https://www.avantia.dk/blog/tag/Active+Directory monthly 0.5 https://www.avantia.dk/blog/tag/Firefox monthly 0.5 https://www.avantia.dk/blog/tag/Medarbejdersignatur monthly 0.5 https://www.avantia.dk/blog/tag/Netjoin monthly 0.5 https://www.avantia.dk/blog/tag/Remote+Desktop monthly 0.5 https://www.avantia.dk/blog/tag/LDAPS monthly 0.5 https://www.avantia.dk/blog/tag/Powershell monthly 0.5 https://www.avantia.dk/blog/tag/KB5020805 monthly 0.5 https://www.avantia.dk/blog/tag/MSEdgeBeta monthly 0.5 https://www.avantia.dk/blog/tag/JSON monthly 0.5 https://www.avantia.dk/blog/tag/Temporary+Group+Memberships monthly 0.5 https://www.avantia.dk/blog/tag/CryptoAPI monthly 0.5 https://www.avantia.dk/blog/tag/Extensions monthly 0.5 https://www.avantia.dk/blog/tag/Scripting monthly 0.5 https://www.avantia.dk/blog/tag/Taskbar monthly 0.5 https://www.avantia.dk/blog/tag/Chrome monthly 0.5 https://www.avantia.dk/blog/tag/N%C3%B8glefil monthly 0.5 https://www.avantia.dk/blog/tag/Malware monthly 0.5 https://www.avantia.dk/blog/tag/App+pinning monthly 0.5 https://www.avantia.dk/blog/tag/Windows+Server+2016 monthly 0.5 https://www.avantia.dk/blog/tag/CVE-2022-38042 monthly 0.5 https://www.avantia.dk/blog/tag/NTLM monthly 0.5 https://www.avantia.dk/blog/tag/Extension+Settings monthly 0.5 https://www.avantia.dk/blog/tag/Group+Policy monthly 0.5 https://www.avantia.dk/blog/tag/NemID monthly 0.5 https://www.avantia.dk/blog/tag/CVE-2021-34527 monthly 0.5 https://www.avantia.dk/blog/tag/rdpscan monthly 0.5 https://www.avantia.dk/blog/tag/Chromium monthly 0.5 https://www.avantia.dk/blog/tag/CVE-2021-1675 monthly 0.5 https://www.avantia.dk/blog/tag/CVE-2019-0708 monthly 0.5 https://www.avantia.dk/blog/tag/Edge monthly 0.5 https://www.avantia.dk/blog/tag/Start+Layout monthly 0.5 https://www.avantia.dk/home daily 1.0 2017-08-15 https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1483740013821-TJATGY9K470OM8RMJAOD/image-asset.jpeg Start https://www.avantia.dk/om-avantia daily 0.75 2016-12-31 https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1483180162090-M6RNSL81SK16319YH3ZZ/DSC_7590+22.jpg Om Avantia https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1483740080122-KDBQ3GUHVG93E6UDPJ37/image-asset.jpeg Om Avantia https://www.avantia.dk/contact daily 0.75 2023-11-21 https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1483740130957-DGEPN2DO2Q5OLUIHHHOM/image-asset.jpeg Kontakt https://www.avantia.dk/resume daily 0.75 2022-08-09 https://images.squarespace-cdn.com/content/v1/5863f429b8a79bb8e6c5bdcc/1483740162376-5MLMBOFEW9YP3FGDITIA/image-asset.jpeg Resume/CV https://www.avantia.dk/privacy-and-cookie-policy daily 0.75 2022-04-05 https://www.avantia.dk/home-alt-bedford daily 0.75 2025-05-12 https://images.squarespace-cdn.com/content/v1/52a74d9ae4b0253945d2aee9/1390500612440-PGQSIY8KL9F7T5VIXQLO/chambers-2.jpg Home Alt A better world Starts with a choice Contact Us https://images.squarespace-cdn.com/content/v1/52a74d9ae4b0253945d2aee9/1390500503574-5BAPXZO9U06UV61P49UO/chambers1.jpg Home Alt Sustainability Starts with you Join Us https://images.squarespace-cdn.com/content/v1/52a74d9ae4b0253945d2aee9/1390500933384-LII4SRIPHFYOUFX0UCXC/chambers-4.jpg Home Alt A better world Starts with a choice Join Us https://images.squarespace-cdn.com/content/v1/52a74d9ae4b0253945d2aee9/1390504287124-HQ8GNX1JCE22V047MSQ9/chambers-8.jpg Home Alt Preserve Nature Join Us