Posts

Showing posts from August, 2016

Document Local Administrator Password Solution (LAPS) Settings

Image
New functionality has recently been added to the server documentation software XIA Configuration which allows it document  Local Administrator Password Solution (LAPS) settings. This allows you to quickly and easily check policy settings such as password length and complexity type. The Local Administrator Password Solution increases security by allowing you to set different local administrator passwords on each computer on your Active Directory domain and to change them more often.  You can also retrieve the passwords straight from Active Directory. Find out more >

The attribute syntax specified to the directory service is invalid.

Image
This post describes how to fix the error: The attribute syntax specified to the directory service is invalid. Problem When committing the setting of an Active Directory custom attribute you get the error: System.DirectoryServices.DirectoryServicesCOMException (0x8007200B): The attribute syntax specified to the directory service is invalid. at System.DirectoryServices.DirectoryEntry.CommitChanges() Cause This error occurs when you try to set a custom attribute to a type that is invalid. For example, if you try to set an integer when the Active Directory schema is configured to accept a string. This can occur when you use XIA Automation to create or modify accounts with one or more custom attributes in Active Directory: XIA Automation screenshot showing the error The attribute syntax specified to the directory service is invalid Solution Ensure that the value type that you are trying to set matches what has been configured for that custom attribute in your Ac

Audit and Document your Windows Services Settings

Image
If you want to automatically audit and  document your Windows Services settings then check out some of the latest functionality added to the IT documentation tool XIA Configuration Server.  Retrieve settings about each Windows service including dependencies and recovery information. The full list of Windows services settings documented include: Service Name Service Display Name Description Service Account Name Service Path Service Process ID Service Start Mode (including Delayed and Trigger starts) Allow Service to Interact with Desktop Service State Recovery Options First failure action Second failure action Subsequent failure action Reset failure count Service restart delay Enable actions for stops with errors Computer restart delay Failure command  Learn more >

Document Fine-Grained Password Policies

Image
The server documentation tool XIA Configuration has recently been updated to support documenting fine-grained password policies in an Active Directory domain. Auditing fine-grained password policy configuration can help you provide information aligned to PCI DSS requirement 8.2.4 and requirement 8.2.5. The following settings are documented: Name Precedence Description Minimum Password Length Password History Password Must Meet Complexity Requirements Store Password Using Reversible Encryption Minimum Password Age Maximum Password Age Last Updated Creation Date Account Lockout Policy Account Lockout Duration Reset Failed Logon Attempts After (minutes) Applies To (accounts) Learn more >

Document Advanced Security Audit Policy Settings

Image
If you want to document your Windows Advanced Security Policy settings, take a look at the server documentation tool XIA Configuration. It has recently been updated to include information about advanced audit policy configuration . The information is gathered remotely so you don't need to install any software on each of the machines you want to document. Information from the following categories is documented by XIA Configuration: Account Logon, Account Management, Detailed Tracking, DS Access, Logon/Logoff, Object Access, Policy Change, Privilege Use and System. If you're interested, find out more about XIA Configuration  or request a free trial .