29Jun
22Jun
How to securely deploy Remote Desktop Services (RDS) with the Gateway Role
Remote Desktop can be deployed in any number of different ways, and not all of them are created equally when it comes to security. In the Enterprise, we'd most likely see RDS deployed using a "DMZ" or "Demilitarized Zone," which is a special type of network, that usually contains some...
01Jun
My Essential Checklist for Settting up any New Windows 10 Pro Device
This post features the things I do when setting up any (personal) Windows 10 Pro device, whether it's for myself, my family members, clients, or anyone really. I usually do these things with security / compliance in mind--but some of it comes down to preference (I think the differences between these will...
18May
5 Tips to Help Tighten your Security Using BIOS/UEFI
In the olden days of PC's, BIOS or "Basic Input-Output System" was something only the nerdy computer geeks were aware of, and the typical user never really went in there, or ran any kind of updates for it, unless explicitly instructed to by a support professional. Usually getting into BIOS...
04May
Password best practices
Some people say passwords are dead. I don't know if I 100% agree with that, since in actual fact and practice, we still rely on them heavily to secure access to our personal information online. The idea behind these "passwords are dead" sentiments is that a single factor of authentication...
27Apr
How to enable 2-factor or multi-factor authentication (2FA or MFA)
Enabling a second factor for authentication is an important (and often very easy) thing to do. Usually this can be accomplished in just a few clicks for most websites and cloud services. It is highly recommended that you take the time to do this, especially for any accounts that are tied to...
20Apr
What is Windows Hello, and how to enable it
Windows 10 introduced a new security feature called "Hello," which allows a computer to be unlocked via different means than a traditional username/password prompt. The marketing around this sells it as a more "personalized" login experience--more "human" or whatever. But it's really just extra security in disguise. Why is a PIN...
13Apr
How to enable BitLocker in Windows 10, with or without TPM
BitLocker used to require an Enterprise or Ultimate copy of Windows 7. These days, it is included with Windows 10 Pro, which many people get OEM with their computer. This is great news, because it means that you will be able to fully encrypt your hard drive, making it much...
11Apr
New ransomware variant also finds & deletes backups?!
I recently came across this forum thread on Veeam's website, which scared the crap out of me. Coincidentally, Veeam published this article the same day. If these reports are accurate, then it means most organizations have some work to do to better secure themselves against the latest emerging rasomware /...
30Mar