# Hybrid Infrastructure and Cloud Architecture

> Andreas Hartig - MVP


## Posts

- [Windows Server 2025 – Part 5 (Active Directory)](https://hartiga.de/windows-server/windows-server-2025-part-5-active-directory/): How to set up Active Directory on Windows Server 2025? Despite servers being enabled for Entra ID, formerly known as Azure Active Directory, almost all buisness Windows Server installations will have an Active Directory used for authentication and authorization. This still makes Active Directory and it’s functionality by far the most used system in my environments for centralized user and rights management. About Active Directory Active Directory (AD) is an essential tool for most Microsoft customers and their administrators, enabling efficient management of users and resources across a network. It is organized into three main tiers: domains, trees, and forests. A […]
- [Squid on Hyper-V - new Ubuntu 24.04](https://hartiga.de/tools/squid-on-hyper-v-new-ubuntu-24-04/): A Linux VM with Proxy, such as Squid, can be used to reduce bandwidth as it caches frequently requested websites. Today we want to configure a Linux VM with Proxy and deploy it for troubleshooting. Why build a Linux VM with Squid on Hyper-V? This used to be a valid business scenario when bandwidth was still expensive, even for companies. Today, these costs no longer play a role, especially since a cache in the proxy tends to lead to problems (complexity). In times of encrypted connections via HTTPS for most websites, this is also rather impractical and not very efficient. I always need a […]
- [Conway's Law - new and updated August 2024](https://hartiga.de/it-architecture/conways-law-new-and-updated-august-2024/): “Conway’s Law: Why your company’s organisational structure affects your software”. Software Development and Conway’s law In software development, there are many factors that can influence the quality and success of your project. One of these is Conway’s Law. This law states that the structure of a system developed by a team tends to be similar to the organisational structure of the team itself. Any organization that designs a system (defined broadly) will produce a design whose structure is a copy of the organization’s communication structure. Melvin E. Conway Melvin Conway formulated the law in 1967 and it describes that the way […]
- [Azure Feeds – all your RSS Feed Updates](https://hartiga.de/tools/azure-feeds-all-your-rss-feed-updates/): A little tip for the RSS fans and bookworms among us for the weekend: Azurefeeds.com collects lots of articles in one place for your RSS Feed. As described in an German article a while back, I am currently using Feedly to collect my articles on the World Wide Web. This week I stumbled across a website that I have been using ever since as it consolidates many websites into one view for me. AzureFeeds If you know how RSS Feeds work and you are interested, the URL for the feed looks like this: https://azurefeeds.com/feed RSS Feeds basics and WordPress RSS Feeds are somewhat out of fashion, but […]
- [Quickly test Latency to Azure Locations 2024](https://hartiga.de/azure/quickly-test-latency-to-azure-locations-2024/): Which data center is the right one for you if it’s all about latency? How can you test this quickly? Challenge – What is the best region? You have a location in your global company and are not sure where you want to connect this location to? The requirements is only “Standard SaaS, PaaS and IaaS”? Product Finder If you have requirements, such as special VMWare sizes, e.g. with vGPUs, then check the availability of these in parallel here with the Azure Product Finder. Go to the website and choose your region. Download the product list and check if your products are available. […]
- [Always choose the right DNS / Active Directory domain name for your 2024 home lab](https://hartiga.de/it-architecture/always-choose-the-right-dns-active-directory-domain-name-for-your-2024-home-lab/): When setting up your home lab and Active Directory, you will have to decide for the domain nameand also for an Active Directory name. Very often you will see recommendation like “.local” and you shouldn’t be doing that. Why not to use .local or others? You will see recommendations to use .local and I have used this myself in the past. Take your time and read RFC 6762 to understand how .local is used and why it may cause issues with your local setup. This document specifies that the DNS top-level domain “.local.” is a special domain with special semantics, namely […]
- [My new Customized Windows Terminal settings.json 2024](https://hartiga.de/tools/my-new-customized-terminal-settings-json-2024/): I wanted to personalize my Terminal setting as part of upcoming articles and being more technical lately. Turned out… it’s not that easy and you require some reading of documentation. Installation of Windows Terminal I only use Winget to take care of these things and here is how you can do it now. The other option is a manual installation using GitHub. The Terminal was originally announced back in 2019 and if you haven’t been using it, better start today for a productivity boost. The article is by Thomas Maurer, who also inspired me and his blog posting on the settings.json […]
- [Install Windows Terminal 2024](https://hartiga.de/tools/install-windows-terminal-2024/): With just a few command you can run your CMD, a Linux Bash, PowerShell and Azure Cloud Shell in One Terminal Screen under current versions of Windows 10 & Windows 11. Introduction to Windows Terminal Windows Terminal is the new standard in terminal applications for command-line tools and shells like Command Prompt, PowerShell, and WSL. It’s fast, efficient, powerful, and productive. This software offers a multi-tab option and is fully integrated with Azure CLI, WSL, Command Line, and Powershell commands. It also includes different color schemes, backgrounds, and the option to save and restore your settings. Update Powershell using Winget Updating […]
- [Windows Home Edition – Group Policy Editor](https://hartiga.de/tools/windows-home-edition-group-policy-editor/): If you are using a Windows Home version and want to make a setting via Group Policy, you will find that there is no Group Policy Manager under Windows Home versions. Solution PolicyPlus There is a solution for this on Github called “PolicyPlus“. If you download the Group Policy extension from the website via this direct link, you can easily bypass this limitation. This looks quite similar and you can do less in the registry and more controlled in a graphical user interface. Policy Plus features Policy Plus should make the group policy settings accessible to everyone. Enable more features for […]
- [Install Windows Linux Subsystem 2 (easy)](https://hartiga.de/tools/install-windows-linux-subsystem-2-easy/): With just one command you can run a Linux under current versions of Windows 10 & Windows 11. Introduction to WSL Are you using Windows 10 or 11 at the latest feature and patch level? Microsoft recommends version 19041 for Windows 10 or Windows 11. Then you can really use the Windows Linux Subsystem 2 with a command line. If you follow the Microsoft documentation and execute the command “wsl -install” without parameters, Ubuntu will also be installed. But let’s first see which distributions are available to us. To do this, execute the following command. Install Ubuntu 24.04 We decide to […]
- [Powershell - List all domain controllers and more for the new Windows Server 2025](https://hartiga.de/tools/powershell-list-all-domain-controllers-and-more-for-the-new-windows-server-2025/): How do you create a list of all domain controllers (DCs) with a few commands and write it to a CSV file? Comma-separated values (CSV) is a text file format that uses commas to separate values, and newlines to separate records. Use Powershell to list all DCs and export to a CSV We start Powershell ISE first and change to our desired directory for the export. I always change there to Documents or to the download area. If you don’t work much with command lines, you should get into the habit of pressing the “Tab” key known from Linux to complete […]
- [Active Directory - Group Policy Report](https://hartiga.de/tools/active-directory-group-policy-report/): If you want to quickly sort or filter the GPOs in the Active Directory by name or by enabled computer or user GPO settings, it is best to use Powershell. Group Policy Report For a Group Policy assessments which involve many GPOs, I should filter be able to filter by terms or settings and where those settings are then only enabled for computers and where for users. With the following Powershell script, some patience and love for Excel you can build a Group Policy Report. This report can run for minutes in large environments. This is depending on the number of […]
- [Windows Server 2025 – Part 4 (Services Removed)](https://hartiga.de/windows-server/windows-server-2025-part-4-services-removed-or-no-longer-developed/): Microsoft is removing services or components from Windows Server 2025 or stopped developing them. Services Removed with Windows Server 2025 Feature Explanation IIS 6 Management Console (Web-Lgcy-Mgmt-Console) The console has been removed after being no longer developed in Windows Server 2019. You should also start migration from IIS 6.0 or earlier versions, and move to the latest version of IIS, which is always available in the most recent release of Windows Server. Wordpad WordPad has been removed from Windows Server 2025. We recommend Microsoft Word for rich text documents like .doc and .rtf and Windows Notepad for plain text documents like .txt. SMTP Server The SMTP […]
- [Active Directory - Check communication (portqueryUI)](https://hartiga.de/tools/active-directory-check-communication-portqueryui/): Overview With network segmentation, domain controllers often have to configured on a firewall. How do you test, verify and document the functioniality or errors? You often have to run tests, repeat them and document them. I like to use the Microsoft port query tool for this and add the GUI – graphical user interface – for better visibility. The tool is available from Microsoft and allows various functions to be executed and run against DNS names of systems or IP addresses. Download and Installation of portqueryUI To do this, we download the programme directly from Microsoft via this link or search […]
- [Starlink and quick Windows Admin Center in Azure in 2024](https://hartiga.de/azure/starlink-and-windows-admin-center-in-azure-in-2024/): Starlink is an amazing solution to the “work anywhere” problem, and I’m using it to get ready for my sabbatical in 2026. I’m thrilled to have the chance to use such a technology, especially since I’m currently in a remote location in Italy. I’m going to share the test results with my recently created Home Lab! In this article I’ve been testing it with Azure Arc servers in Germany using Windows Admin Center in Azure with RDP over HTML5. Setup This test was done in Bagnolo in Italy. As you can see it was placed on a small roof and there […]
- [IT architects Abbreviations used with storage](https://hartiga.de/it-architecture/it-architects-abbreviations-storage/): IT Architects often use abbreviations in the Architectural Elevator and this often doesn’t help our conversation partners with architectural topics. Today I will explain some abbreviations on the subject of storage. Dealing with abbreviations If you want to use the Architectural Elevator, give your “stakeholder” a chance to know the term. One variation is to use the long form several times and then switch to the abbreviation. If you are interested in the topic of Architectural Elevator and have not yet heard of it, take a look here. I will also be covering the topic here on the blog in the […]
- [WinMTR - Visualization of ping and traceroute](https://hartiga.de/tools/winmtr-visualization-of-ping-and-traceroute/): WinMTR is a port of the Linux tool “mtr” and the addition of a graphical user interface (GUI). This means that network problems can also be quickly investigated by colleagues with less command line affinity by visualizing ping and traceroute. This is an extremely useful tool when it comes to solving network problems. It can help you to quickly identify and resolve problems such as delays, loss of data packets or a poor network connection. The program has a clear user interface that allows users to collect and analyze data without the need for in-depth network knowledge. Even today it is […]
- [Get started with the new Azure Arc Site Manager](https://hartiga.de/azure/get-started-with-the-new-azure-arc-site-manager/): Microsoft announced another Azure Arc preview tool. Azure Arc site manager will allow you to get a quick overview over all your Azure Arc resources. What is Azure Arc site manager? Azure Arc site manager is a tool that allows you to manage and monitor your on-premises environments as Azure Arc sites. Arc sites are scoped to an Azure resource group or subscription and allows you to track connectivity, alerts, and updates across your environment. Configure Azure Arc Site Manager For a quick demonstration I will use my home lab configuration, that i created in this guide here. Search for the […]
- [Windows Server 2025 - Part 3 (Azure Arc)](https://hartiga.de/windows-server/windows-server-2025-part-3-azure-arc/): To connect Windows Server 2025 with Azure Arc is the next step for my HomeLab includes configuring the existing Windows Server 2025, the 3 Windows Server 2025, my Linux VM and for using the current supported OS (End of April 2024) we will also add a Windows Server 2022. Windows Server 2022 With the Cumulative Update of 10/10/2023 for Windows Server 2022 we did get a new system tray icon. With Cumulative Update of 10/10/2023 a new Server Manager entry for Azure Arc Management has also been added. From the Sys Tray and from the Server Manager you can now quickly configure your […]
- [UniGetUI formerly WingetUI for Server 2019 / 2022](https://hartiga.de/tools/wingetui-soon-new-name-unigetui-for-server-202x/): Winget is a powerful tool to automate installation and keep applications update. In my Windows Server 2022 and Windows Server 2025 test environment I use WingetUI as a graphical user interface, which will soon be renamed to UniGetUI. Recommended: Windows Server 2019 / 2022 – Using winget-install The recommended approach to install Winget to Windows Server 2022 is the Script maintained here by asherto Features – Source:https://github.com/asheroto/winget-install Setup using PowerShell Gallery Download UniGet from the official website https://www.marticliment.com or use this direct download link and manually install it. Windows Server 2022 – Manual Installation Winget Winget is not a component of […]
- [Windows OS - 3 easy ways to see the Uptime](https://hartiga.de/tools/windows-os-check-uptime/): 3 ways in which you can quickly and easily find out how long your PC has been running since the last restart or when the computer was last booted. cmd – net statistics workstation showing Windows Uptime since cmd – systeminfo showing last Boot Time Taskmanager showing Uptime for how many h:mm:ss This requires you to open the Taskmanager. You can open the taskmanager using ctrl+alt+del and click on open the taskmanager, with newer Windows OS by rightclicking the taskbar or by entering the command tskmgr in the cmd This works perfectly on Windows Server 2025. If you haven’t started with […]
- [Windows Server 2025 - Part 2 (Hyper-V)](https://hartiga.de/windows-server/windows-server-2025-part-2-hyper-v/): Last time I started here with Part 1 and the IT Architect view on Windows Server 2025 and prepared a hardware and Operating system. This time we look into Hyper-V to get things started. With the recent changes in the Virtualization market, this is become a very interesting topic again. In this tutorial we will create and configure Hyper-V on our recently installed Windows Server 2025 and configure 3 Windows Server 2025 and 1 Linux Virtual machines on it. We are preparing this environment to be used: Setup our Windows Server 2025 Hyper-V role and Hyper-V VMs In your Windows Server […]
- [IT architects Abbreviations used with clusters](https://hartiga.de/it-architecture/it-architects-abbreviations-of-clusters/): IT Architects often use abbreviations in the Architectural Elevator and this often doesn’t help our conversation partners with architectural topics. Today I will explain some abbreviations on the subject of clusters. Dealing with abbreviations If you want to use the Architectural Elevator, give your “stakeholder” the chance to know the term. One variant is to use the long form several times and only then switch to the abbreviation. If you are interested in the topic of Architecture Elevator and have not yet heard of it, take a look here. I will also be addressing the topic here in the blog over […]
- [Tail for Logfiles with Windows - various options](https://hartiga.de/tools/tail-for-logfiles-with-windows-various-options/): I views a lot of log files and I always look for the functionality to use Tail for Logfiles with Windows “live” in a GUI. Under Linux, this is very easy via “tail” and under Windows there are also several options. My favorite tool is the CMTrace from Microsoft. This is available in every SCCM installation, but can also be extracted from an official download. https://www.microsoft.com/en-us/evalcenter/download-microsoft-endpoint-configuration-manager Simply unzip the file and you will find the CMTrace tool directly under \SMSSETUP\TOOLS\CMTrace.exe An alternative Tail tool for Logfiles with Windows is LogExpert. You can find it on Github. For a more professional solution […]
- [Azure Landing Zone – Reference architecture](https://hartiga.de/azure/azure-landing-zone-architecture/): The Landing Zone for the Microsoft Cloud environment is a reference architecture that supports companies in the secure and scalable provisioning of Azure resources. What are the 5 focus topics when designing the Azure Landing Zone? Security The Landing Zone provides a secure environment in which sensitive data and applications are protected. This includes security measures such as multi-factor authentication, network security and access controls. Scalability The zone is designed to adapt easily and quickly to changing business requirements. We achieve this, for example, through the use of automated scripts and templates. Governance Effective governance is important in order to manage […]
- [Windows Server 2025 - Part 1 (Preparation) - Preview / Outdated](https://hartiga.de/windows-server/windows-server-2025-part-1-preparation-outdated/): IMPORTANT: Check the updated version for the final release! Click here. As an IT Architect i am always interested to see the newest stuff. Microsoft released the Windows Server 2025 and made it available within it’s Insider programm. With the latest changes in the server and datacenter Virtualization market, i wanted to take a more detailed look at Hyper-V again. Let’s get started! I am fond of simple solutions. In this introduction part 1 will use my low-cost development environment. This should allow nearly everyone will be able to test and learn in their own lab. To get ready, there are […]
- [Fujitsu Q556/2 and Windows Server 2025](https://hartiga.de/windows-server/fujitsu-q556-2-and-windows-server-2025/): In the next weeks I will start a lot of activities around Fujitsu Mini Desktops and Windows Server 2025 with Hyper-V. If you want to follow the progress, maybe it’s time for your first Fujitsu Q556/2 – Hardware Upgrade(s) for Server 2025? Even though it is a small case, the Fujitsu Q556/2 can be improved in many ways and in parts very cheaply. We can completely disassemble these small computers and upgrade the RAM, hard disk and even the CPU. None of the following links are affiliate links, so I am not receiving any commission if you use or order from […]
- [Remove Path length limit of 260 characters with Windows 10 / 11 260](https://hartiga.de/tools/remove-path-length-limit-of-260-characters/): With Windows 10 from build 14352 and with Windows 11, Microsoft has made it possible to override the maximum path length of 260.
- [mouse and keyboard on 2 Pc's](https://hartiga.de/tools/mouse-and-keyboard-on-2-pcs/): If you have two Windows PCs next to each other and want to use the same mouse and keyboard on 2 Pc’s at the same time, you can fall back on a Microsoft product. Even if there are 3rd party solutions here, you are certainly on the safer side with input devices.
- [Notepad++ – Most important AddOns 2024](https://hartiga.de/tools/notepad-the-most-important-addons/): Notepad++is my favourite notebook and editor is actually perfect, but it can always be better. For this reason, there are a few “quality of life” improvements that I use over the add-ons that are the Notepad++ my most important AddOns. Check the 2025 version here. AutoSave AutoSave saves the open files automatically. This can also be customised via a menu. Save as Admin From the Notepad++ most important AddOns list, this is the most important add-ons for me. Because I often made changes to system and hosts files and this is only possible if you have already started notepad or notepad++ […]
- [Illuminate Technical Debt by "Daily DevOps & .NET"](https://hartiga.de/it-architecture/illuminate-technical-debt-daily/): I wanted to write about how to illuminate technical debt. Luckily I noticed that my colleague Martin Stühmer had already written an article on this subject. This is available on the website Daily DevOps & .NET. You can also find his article and more exciting information on Microsoft .Net, MS certifications and IT architecture on the website. In line with Martin Stühmer’s article, you can find more IT architecture articles on our blog. There is also a the german version here. Illuminate Technical Debt Whatever our role, be it developer, IT professional or architect, we try to avoid technical debt. If […]
- [Azure Quick Review - High Level Assessments](https://hartiga.de/azure/azure-quick-review-high-level-assessments/): With Azure Quick Review (azqr) you can quickly make a High Level Assessment of an “Azure Subscription” or “Resource Group”. You can expect the following information as a result in the form of an Excel table: SLA: current expected SLAAvailability Zones: Checks whether the service is protected against zone failures.Private Endpoints: Checks whether the service uses private endpoints.Diagnostic Settings: Checks whether diagnostic settings are configured for the service.CAF naming convention: Checks whether the service conforms to the CAF naming convention. The Excel table will look like this. Tried it out briefly in my test environment. We download the installation file for […]
- [IT Architecture is team work - Important Learning v2](https://hartiga.de/it-architecture/it-architecture-is-team-work/): IT architecture is a complex and important component of any organization and requires the collaboration of different teams and departments. “IT Architecture is Team Work” is a principle that emphasizes that planning and implementing an effective IT architecture requires a joint effort of different teams. An important aspect of “IT Architecture is team work” is the need for extensive collaboration and coordination between teams. This means that teams must work closely together to understand the requirements of various stakeholders and ensure that the IT architecture meets all necessary requirements. What are the IT architecture approaches for organizations? What can IT architecture […]
- [The 5 Why's - Not only 1](https://hartiga.de/it-architecture/the-5-whys-not-only-1/): Asking ” The 5 Why’s” is an important part of the job of IT architect’s and should be an important part of our personal decision making process. It is exciting to see that many content creators are pushing to use this technique. 
- [Windows Server 2025 – Part 5 (Active Directory)](https://hartiga.de/windows-server/windows-server-2025-part-5-active-directory/): How to set up Active Directory on Windows Server 2025? Despite servers being enabled for Entra ID, formerly known as Azure Active Directory, almost all buisness Windows Server installations will have an Active Directory used for authentication and authorization. This still makes Active Directory and it’s functionality by far the most used system in my environments for centralized user and rights management. About Active Directory Active Directory (AD) is an essential tool for most Microsoft customers and their administrators, enabling efficient management of users and resources across a network. It is organized into three main tiers: domains, trees, and forests. A […]
- [Squid on Hyper-V - new Ubuntu 24.04](https://hartiga.de/tools/squid-on-hyper-v-new-ubuntu-24-04/): A Linux VM with Proxy, such as Squid, can be used to reduce bandwidth as it caches frequently requested websites. Today we want to configure a Linux VM with Proxy and deploy it for troubleshooting. Why build a Linux VM with Squid on Hyper-V? This used to be a valid business scenario when bandwidth was still expensive, even for companies. Today, these costs no longer play a role, especially since a cache in the proxy tends to lead to problems (complexity). In times of encrypted connections via HTTPS for most websites, this is also rather impractical and not very efficient. I always need a […]
- [Conway's Law - new and updated August 2024](https://hartiga.de/it-architecture/conways-law-new-and-updated-august-2024/): “Conway’s Law: Why your company’s organisational structure affects your software”. Software Development and Conway’s law In software development, there are many factors that can influence the quality and success of your project. One of these is Conway’s Law. This law states that the structure of a system developed by a team tends to be similar to the organisational structure of the team itself. Any organization that designs a system (defined broadly) will produce a design whose structure is a copy of the organization’s communication structure. Melvin E. Conway Melvin Conway formulated the law in 1967 and it describes that the way […]
- [Azure Feeds – all your RSS Feed Updates](https://hartiga.de/tools/azure-feeds-all-your-rss-feed-updates/): A little tip for the RSS fans and bookworms among us for the weekend: Azurefeeds.com collects lots of articles in one place for your RSS Feed. As described in an German article a while back, I am currently using Feedly to collect my articles on the World Wide Web. This week I stumbled across a website that I have been using ever since as it consolidates many websites into one view for me. AzureFeeds If you know how RSS Feeds work and you are interested, the URL for the feed looks like this: https://azurefeeds.com/feed RSS Feeds basics and WordPress RSS Feeds are somewhat out of fashion, but […]
- [Quickly test Latency to Azure Locations 2024](https://hartiga.de/azure/quickly-test-latency-to-azure-locations-2024/): Which data center is the right one for you if it’s all about latency? How can you test this quickly? Challenge – What is the best region? You have a location in your global company and are not sure where you want to connect this location to? The requirements is only “Standard SaaS, PaaS and IaaS”? Product Finder If you have requirements, such as special VMWare sizes, e.g. with vGPUs, then check the availability of these in parallel here with the Azure Product Finder. Go to the website and choose your region. Download the product list and check if your products are available. […]
- [Always choose the right DNS / Active Directory domain name for your 2024 home lab](https://hartiga.de/it-architecture/always-choose-the-right-dns-active-directory-domain-name-for-your-2024-home-lab/): When setting up your home lab and Active Directory, you will have to decide for the domain nameand also for an Active Directory name. Very often you will see recommendation like “.local” and you shouldn’t be doing that. Why not to use .local or others? You will see recommendations to use .local and I have used this myself in the past. Take your time and read RFC 6762 to understand how .local is used and why it may cause issues with your local setup. This document specifies that the DNS top-level domain “.local.” is a special domain with special semantics, namely […]
- [My new Customized Windows Terminal settings.json 2024](https://hartiga.de/tools/my-new-customized-terminal-settings-json-2024/): I wanted to personalize my Terminal setting as part of upcoming articles and being more technical lately. Turned out… it’s not that easy and you require some reading of documentation. Installation of Windows Terminal I only use Winget to take care of these things and here is how you can do it now. The other option is a manual installation using GitHub. The Terminal was originally announced back in 2019 and if you haven’t been using it, better start today for a productivity boost. The article is by Thomas Maurer, who also inspired me and his blog posting on the settings.json […]
- [Install Windows Terminal 2024](https://hartiga.de/tools/install-windows-terminal-2024/): With just a few command you can run your CMD, a Linux Bash, PowerShell and Azure Cloud Shell in One Terminal Screen under current versions of Windows 10 & Windows 11. Introduction to Windows Terminal Windows Terminal is the new standard in terminal applications for command-line tools and shells like Command Prompt, PowerShell, and WSL. It’s fast, efficient, powerful, and productive. This software offers a multi-tab option and is fully integrated with Azure CLI, WSL, Command Line, and Powershell commands. It also includes different color schemes, backgrounds, and the option to save and restore your settings. Update Powershell using Winget Updating […]
- [Windows Home Edition – Group Policy Editor](https://hartiga.de/tools/windows-home-edition-group-policy-editor/): If you are using a Windows Home version and want to make a setting via Group Policy, you will find that there is no Group Policy Manager under Windows Home versions. Solution PolicyPlus There is a solution for this on Github called “PolicyPlus“. If you download the Group Policy extension from the website via this direct link, you can easily bypass this limitation. This looks quite similar and you can do less in the registry and more controlled in a graphical user interface. Policy Plus features Policy Plus should make the group policy settings accessible to everyone. Enable more features for […]
- [Install Windows Linux Subsystem 2 (easy)](https://hartiga.de/tools/install-windows-linux-subsystem-2-easy/): With just one command you can run a Linux under current versions of Windows 10 & Windows 11. Introduction to WSL Are you using Windows 10 or 11 at the latest feature and patch level? Microsoft recommends version 19041 for Windows 10 or Windows 11. Then you can really use the Windows Linux Subsystem 2 with a command line. If you follow the Microsoft documentation and execute the command “wsl -install” without parameters, Ubuntu will also be installed. But let’s first see which distributions are available to us. To do this, execute the following command. Install Ubuntu 24.04 We decide to […]
- [Powershell - List all domain controllers and more for the new Windows Server 2025](https://hartiga.de/tools/powershell-list-all-domain-controllers-and-more-for-the-new-windows-server-2025/): How do you create a list of all domain controllers (DCs) with a few commands and write it to a CSV file? Comma-separated values (CSV) is a text file format that uses commas to separate values, and newlines to separate records. Use Powershell to list all DCs and export to a CSV We start Powershell ISE first and change to our desired directory for the export. I always change there to Documents or to the download area. If you don’t work much with command lines, you should get into the habit of pressing the “Tab” key known from Linux to complete […]
- [Active Directory - Group Policy Report](https://hartiga.de/tools/active-directory-group-policy-report/): If you want to quickly sort or filter the GPOs in the Active Directory by name or by enabled computer or user GPO settings, it is best to use Powershell. Group Policy Report For a Group Policy assessments which involve many GPOs, I should filter be able to filter by terms or settings and where those settings are then only enabled for computers and where for users. With the following Powershell script, some patience and love for Excel you can build a Group Policy Report. This report can run for minutes in large environments. This is depending on the number of […]
- [Windows Server 2025 – Part 4 (Services Removed)](https://hartiga.de/windows-server/windows-server-2025-part-4-services-removed-or-no-longer-developed/): Microsoft is removing services or components from Windows Server 2025 or stopped developing them. Services Removed with Windows Server 2025 Feature Explanation IIS 6 Management Console (Web-Lgcy-Mgmt-Console) The console has been removed after being no longer developed in Windows Server 2019. You should also start migration from IIS 6.0 or earlier versions, and move to the latest version of IIS, which is always available in the most recent release of Windows Server. Wordpad WordPad has been removed from Windows Server 2025. We recommend Microsoft Word for rich text documents like .doc and .rtf and Windows Notepad for plain text documents like .txt. SMTP Server The SMTP […]
- [Active Directory - Check communication (portqueryUI)](https://hartiga.de/tools/active-directory-check-communication-portqueryui/): Overview With network segmentation, domain controllers often have to configured on a firewall. How do you test, verify and document the functioniality or errors? You often have to run tests, repeat them and document them. I like to use the Microsoft port query tool for this and add the GUI – graphical user interface – for better visibility. The tool is available from Microsoft and allows various functions to be executed and run against DNS names of systems or IP addresses. Download and Installation of portqueryUI To do this, we download the programme directly from Microsoft via this link or search […]
- [Starlink and quick Windows Admin Center in Azure in 2024](https://hartiga.de/azure/starlink-and-windows-admin-center-in-azure-in-2024/): Starlink is an amazing solution to the “work anywhere” problem, and I’m using it to get ready for my sabbatical in 2026. I’m thrilled to have the chance to use such a technology, especially since I’m currently in a remote location in Italy. I’m going to share the test results with my recently created Home Lab! In this article I’ve been testing it with Azure Arc servers in Germany using Windows Admin Center in Azure with RDP over HTML5. Setup This test was done in Bagnolo in Italy. As you can see it was placed on a small roof and there […]
- [IT architects Abbreviations used with storage](https://hartiga.de/it-architecture/it-architects-abbreviations-storage/): IT Architects often use abbreviations in the Architectural Elevator and this often doesn’t help our conversation partners with architectural topics. Today I will explain some abbreviations on the subject of storage. Dealing with abbreviations If you want to use the Architectural Elevator, give your “stakeholder” a chance to know the term. One variation is to use the long form several times and then switch to the abbreviation. If you are interested in the topic of Architectural Elevator and have not yet heard of it, take a look here. I will also be covering the topic here on the blog in the […]
- [WinMTR - Visualization of ping and traceroute](https://hartiga.de/tools/winmtr-visualization-of-ping-and-traceroute/): WinMTR is a port of the Linux tool “mtr” and the addition of a graphical user interface (GUI). This means that network problems can also be quickly investigated by colleagues with less command line affinity by visualizing ping and traceroute. This is an extremely useful tool when it comes to solving network problems. It can help you to quickly identify and resolve problems such as delays, loss of data packets or a poor network connection. The program has a clear user interface that allows users to collect and analyze data without the need for in-depth network knowledge. Even today it is […]
- [Get started with the new Azure Arc Site Manager](https://hartiga.de/azure/get-started-with-the-new-azure-arc-site-manager/): Microsoft announced another Azure Arc preview tool. Azure Arc site manager will allow you to get a quick overview over all your Azure Arc resources. What is Azure Arc site manager? Azure Arc site manager is a tool that allows you to manage and monitor your on-premises environments as Azure Arc sites. Arc sites are scoped to an Azure resource group or subscription and allows you to track connectivity, alerts, and updates across your environment. Configure Azure Arc Site Manager For a quick demonstration I will use my home lab configuration, that i created in this guide here. Search for the […]
- [Windows Server 2025 - Part 3 (Azure Arc)](https://hartiga.de/windows-server/windows-server-2025-part-3-azure-arc/): To connect Windows Server 2025 with Azure Arc is the next step for my HomeLab includes configuring the existing Windows Server 2025, the 3 Windows Server 2025, my Linux VM and for using the current supported OS (End of April 2024) we will also add a Windows Server 2022. Windows Server 2022 With the Cumulative Update of 10/10/2023 for Windows Server 2022 we did get a new system tray icon. With Cumulative Update of 10/10/2023 a new Server Manager entry for Azure Arc Management has also been added. From the Sys Tray and from the Server Manager you can now quickly configure your […]
- [UniGetUI formerly WingetUI for Server 2019 / 2022](https://hartiga.de/tools/wingetui-soon-new-name-unigetui-for-server-202x/): Winget is a powerful tool to automate installation and keep applications update. In my Windows Server 2022 and Windows Server 2025 test environment I use WingetUI as a graphical user interface, which will soon be renamed to UniGetUI. Recommended: Windows Server 2019 / 2022 – Using winget-install The recommended approach to install Winget to Windows Server 2022 is the Script maintained here by asherto Features – Source:https://github.com/asheroto/winget-install Setup using PowerShell Gallery Download UniGet from the official website https://www.marticliment.com or use this direct download link and manually install it. Windows Server 2022 – Manual Installation Winget Winget is not a component of […]
- [Windows OS - 3 easy ways to see the Uptime](https://hartiga.de/tools/windows-os-check-uptime/): 3 ways in which you can quickly and easily find out how long your PC has been running since the last restart or when the computer was last booted. cmd – net statistics workstation showing Windows Uptime since cmd – systeminfo showing last Boot Time Taskmanager showing Uptime for how many h:mm:ss This requires you to open the Taskmanager. You can open the taskmanager using ctrl+alt+del and click on open the taskmanager, with newer Windows OS by rightclicking the taskbar or by entering the command tskmgr in the cmd This works perfectly on Windows Server 2025. If you haven’t started with […]
- [Windows Server 2025 - Part 2 (Hyper-V)](https://hartiga.de/windows-server/windows-server-2025-part-2-hyper-v/): Last time I started here with Part 1 and the IT Architect view on Windows Server 2025 and prepared a hardware and Operating system. This time we look into Hyper-V to get things started. With the recent changes in the Virtualization market, this is become a very interesting topic again. In this tutorial we will create and configure Hyper-V on our recently installed Windows Server 2025 and configure 3 Windows Server 2025 and 1 Linux Virtual machines on it. We are preparing this environment to be used: Setup our Windows Server 2025 Hyper-V role and Hyper-V VMs In your Windows Server […]
- [IT architects Abbreviations used with clusters](https://hartiga.de/it-architecture/it-architects-abbreviations-of-clusters/): IT Architects often use abbreviations in the Architectural Elevator and this often doesn’t help our conversation partners with architectural topics. Today I will explain some abbreviations on the subject of clusters. Dealing with abbreviations If you want to use the Architectural Elevator, give your “stakeholder” the chance to know the term. One variant is to use the long form several times and only then switch to the abbreviation. If you are interested in the topic of Architecture Elevator and have not yet heard of it, take a look here. I will also be addressing the topic here in the blog over […]
- [Tail for Logfiles with Windows - various options](https://hartiga.de/tools/tail-for-logfiles-with-windows-various-options/): I views a lot of log files and I always look for the functionality to use Tail for Logfiles with Windows “live” in a GUI. Under Linux, this is very easy via “tail” and under Windows there are also several options. My favorite tool is the CMTrace from Microsoft. This is available in every SCCM installation, but can also be extracted from an official download. https://www.microsoft.com/en-us/evalcenter/download-microsoft-endpoint-configuration-manager Simply unzip the file and you will find the CMTrace tool directly under \SMSSETUP\TOOLS\CMTrace.exe An alternative Tail tool for Logfiles with Windows is LogExpert. You can find it on Github. For a more professional solution […]
- [Azure Landing Zone – Reference architecture](https://hartiga.de/azure/azure-landing-zone-architecture/): The Landing Zone for the Microsoft Cloud environment is a reference architecture that supports companies in the secure and scalable provisioning of Azure resources. What are the 5 focus topics when designing the Azure Landing Zone? Security The Landing Zone provides a secure environment in which sensitive data and applications are protected. This includes security measures such as multi-factor authentication, network security and access controls. Scalability The zone is designed to adapt easily and quickly to changing business requirements. We achieve this, for example, through the use of automated scripts and templates. Governance Effective governance is important in order to manage […]
- [Windows Server 2025 - Part 1 (Preparation) - Preview / Outdated](https://hartiga.de/windows-server/windows-server-2025-part-1-preparation-outdated/): IMPORTANT: Check the updated version for the final release! Click here. As an IT Architect i am always interested to see the newest stuff. Microsoft released the Windows Server 2025 and made it available within it’s Insider programm. With the latest changes in the server and datacenter Virtualization market, i wanted to take a more detailed look at Hyper-V again. Let’s get started! I am fond of simple solutions. In this introduction part 1 will use my low-cost development environment. This should allow nearly everyone will be able to test and learn in their own lab. To get ready, there are […]
- [Fujitsu Q556/2 and Windows Server 2025](https://hartiga.de/windows-server/fujitsu-q556-2-and-windows-server-2025/): In the next weeks I will start a lot of activities around Fujitsu Mini Desktops and Windows Server 2025 with Hyper-V. If you want to follow the progress, maybe it’s time for your first Fujitsu Q556/2 – Hardware Upgrade(s) for Server 2025? Even though it is a small case, the Fujitsu Q556/2 can be improved in many ways and in parts very cheaply. We can completely disassemble these small computers and upgrade the RAM, hard disk and even the CPU. None of the following links are affiliate links, so I am not receiving any commission if you use or order from […]
- [Remove Path length limit of 260 characters with Windows 10 / 11 260](https://hartiga.de/tools/remove-path-length-limit-of-260-characters/): With Windows 10 from build 14352 and with Windows 11, Microsoft has made it possible to override the maximum path length of 260.
- [mouse and keyboard on 2 Pc's](https://hartiga.de/tools/mouse-and-keyboard-on-2-pcs/): If you have two Windows PCs next to each other and want to use the same mouse and keyboard on 2 Pc’s at the same time, you can fall back on a Microsoft product. Even if there are 3rd party solutions here, you are certainly on the safer side with input devices.
- [Notepad++ – Most important AddOns 2024](https://hartiga.de/tools/notepad-the-most-important-addons/): Notepad++is my favourite notebook and editor is actually perfect, but it can always be better. For this reason, there are a few “quality of life” improvements that I use over the add-ons that are the Notepad++ my most important AddOns. Check the 2025 version here. AutoSave AutoSave saves the open files automatically. This can also be customised via a menu. Save as Admin From the Notepad++ most important AddOns list, this is the most important add-ons for me. Because I often made changes to system and hosts files and this is only possible if you have already started notepad or notepad++ […]
- [Illuminate Technical Debt by "Daily DevOps & .NET"](https://hartiga.de/it-architecture/illuminate-technical-debt-daily/): I wanted to write about how to illuminate technical debt. Luckily I noticed that my colleague Martin Stühmer had already written an article on this subject. This is available on the website Daily DevOps & .NET. You can also find his article and more exciting information on Microsoft .Net, MS certifications and IT architecture on the website. In line with Martin Stühmer’s article, you can find more IT architecture articles on our blog. There is also a the german version here. Illuminate Technical Debt Whatever our role, be it developer, IT professional or architect, we try to avoid technical debt. If […]
- [Azure Quick Review - High Level Assessments](https://hartiga.de/azure/azure-quick-review-high-level-assessments/): With Azure Quick Review (azqr) you can quickly make a High Level Assessment of an “Azure Subscription” or “Resource Group”. You can expect the following information as a result in the form of an Excel table: SLA: current expected SLAAvailability Zones: Checks whether the service is protected against zone failures.Private Endpoints: Checks whether the service uses private endpoints.Diagnostic Settings: Checks whether diagnostic settings are configured for the service.CAF naming convention: Checks whether the service conforms to the CAF naming convention. The Excel table will look like this. Tried it out briefly in my test environment. We download the installation file for […]
- [IT Architecture is team work - Important Learning v2](https://hartiga.de/it-architecture/it-architecture-is-team-work/): IT architecture is a complex and important component of any organization and requires the collaboration of different teams and departments. “IT Architecture is Team Work” is a principle that emphasizes that planning and implementing an effective IT architecture requires a joint effort of different teams. An important aspect of “IT Architecture is team work” is the need for extensive collaboration and coordination between teams. This means that teams must work closely together to understand the requirements of various stakeholders and ensure that the IT architecture meets all necessary requirements. What are the IT architecture approaches for organizations? What can IT architecture […]
- [The 5 Why's - Not only 1](https://hartiga.de/it-architecture/the-5-whys-not-only-1/): Asking ” The 5 Why’s” is an important part of the job of IT architect’s and should be an important part of our personal decision making process. It is exciting to see that many content creators are pushing to use this technique. 
- [Managing passwords with Proton Pass](https://hartiga.de/tools/managing-passwords-with-proton-pass/): Managing passwords with Proton Pass changed my password management and thus my backbone to manage my IT setup efficiently and secure. For years, local password managers like KeePassXC have been my standard to keep control over my encrypted databases. However, as my digital environments expand across operating systems, browsers, and mobile devices, manual file synchronization became complex and introduced and security risks. This article outlines my migration from my KeePassXC setup to Proton Pass, examining how it aligns with my security principles and providing a structured walkthrough to execute the transition cleanly across all environments. My “reality” of Password Management in […]
- [Unifying Local Credential Security - Legacy LAPS, Windows LAPS, and Azure Arc in Practice](https://hartiga.de/windows-server/unifying-local-credential-security/): Local Credential Security – Managing local administrator credentials across an enterprise fleet has always been a fundamental security control. For years, Microsoft Local Administrator Password Solution (often called Legacy LAPS or AdmPwd) served as the standard tool to prevent lateral movement caused by static local admin passwords. Introduction to Local Credential Security Over time, I have explored various facets of local credential security across several standalone articles, including comparing Legacy LAPS and Windows LAPS, analyzing LAPS operational event logging, reviewing essential Windows LAPS management tools and extending password rotation to non-domain workloads using LAPS for Azure Arc. While those specialized posts […]
- [How Microsoft MVPs Drive Measurable Business Value for Employers](https://hartiga.de/it-architecture/microsoft-mvp-business-value/): Microsoft MVP (Most Valuable Professional) award is one of the highest honors in the technology industry. It recognizes independent experts who passionately share their real-world knowledge with the community. However, a persistent gap exists between the community world and corporate operations. Many MVPs find themselves asking why their employers struggle to see the tangible value in supporting their community contributions, while leadership often views community work as a distraction from billable project work. To build a sustainable relationship between high-performing technical experts and enterprise organizations, we need to bridge this divide. This article explores what defines an MVP, why employers often […]
- [How to use the GPO Policy Analyzer](https://hartiga.de/tools/how-to-use-the-gpo-policy-analyzer/): Managing Group Policy Objects across a complex Active Directory environment has always been a challenge. Administrators often inherit hundreds of GPOs with overlapping configurations, stale settings, and hidden conflicts. Finding these issues manually requires clicking through endless report screens or exporting massive text files. Policy Analyzer solves this by giving you a fast, reliable way to identify drift, conflicts, and missing baseline settings without touching your production environment. Introduction Managing Group Policy Objects across a complex active directory environment has historically been a challenge. Administrators often inherit hundreds of GPOs with overlapping configurations, stale settings, and hidden conflicts. Finding these issues […]
- [Schedule Winget Auto Updates for operational usage](https://hartiga.de/tools/schedule-winget-auto-updates/): Deploying Winget Auto Updates (WAU) gives you a functional update baseline, for full functionality we need to configure more to get ready for production. If servers query the Winget repository at different times you might end up with inconsistent versions and unplanned outages. Introduction to schedule WinGet Auto Updates We have learned how to install Winget Auto Updates using a GPO in the last article “Centralized Software Patch Management: Deploying Winget Auto Updates (WAU) via Active Directory GPO”. In the video below from this article we also deployed the ADMX file needed in this article. By combining WAU with Active Directory […]
- [Centralized Software Patch Management: Deploying Winget Auto Updates (WAU) via Active Directory GPO](https://hartiga.de/tools/deploying-winget-auto-updates/): Deploying Winget Auto Updates for Software Patch Management for managing third-party software updates across an IT infrastructure typically requires expensive enterprise solutions. This article provides a technical guide on how to automate and centrally enforce Winget Auto Updates (WAU) across an Active Directory domain using native Group Policy Objects (GPO). Introduction to 3rd Party Software Patch Management Relying on localized scripts or individual task schedulers to maintain third-party software creates configuration drift and administrative overhead. Without central management, tracking update failures or maintaining standardized application baselines across multiple endpoints is difficult to scale. By integrating update processes with Active Directory Group […]
- [GPO Central Store - Help! My PolicyDefinitions Folder is missing](https://hartiga.de/azure/policydefinitions-folder-is-missing/): Your PolicyDefinitions Folder is missing? The GPO Central Store is key for Managing Group Policy Objects (GPOs) across multiple domain controllers can introduce configuration drift if administrative templates are not synchronized. By default, the Group Policy Management Editor relies on files stored on the local administrator’s workstation. This architecture introduces consistency risks across the IT team. This technical guide covers the purpose of the Central Store, why the policy folder is missing by default, and how to configure it to establish a single source of truth for your domain environment. Introduction to GPO Central Store When modifying Administrative Templates within a […]
- [Legacy LAPS vs. Windows LAPS vs. LAPS for Azure Arc](https://hartiga.de/azure/laps-for-azure-arc/): LAPS for Azure Arc is the new shining star, after for years, IT teams relied on the classic, legacy Microsoft LAPS tool. Microsoft then integrated Windows LAPS directly into the operating system core, modernizing the architecture. Now, the landscape expands further with the introduction of LAPS for Azure Arc. This evolution shifts password management from localized configuration policies up to a cloud-backed governance control plane. Introduction Securing local administrator credentials remains a critical baseline defensive measure for any enterprise. Leaving identical, static local passwords across a fleet of servers provides an open invitation for lateral movement and privilege escalation during a […]
- [Active Directory Planning Tool: Mapping Structures and Delegations with SMAD-X](https://hartiga.de/it-architecture/active-directory-planning-tool/): Using an Active Directory Planning Tool is key for understanding complex Active Directory environments and often requires more than what traditional management consoles can provide. While tools such as Active Directory Users and Computers offer object-level administration, they make it difficult to visualize relationships, GPO links, delegation models, and overall directory structure at scale. SMAD-X is an open-source tool that visualizes Active Directory structures, relationships, GPO links, and delegated permissions through an interactive graphical interface. This article provides a technical overview of the tool, focusing on the newly released version 0.3.5 and how it fits into the broader ecosystem of AD […]
- [Announcement: My YouTube Channel is Online](https://hartiga.de/it-architecture/youtube-channel/): There is some news here on hartiga.de. Starting right now, my official YouTube channel is live to bring the short 30 to 60-second guides from this blog into video format for the community. Completely free, of course. This step is a natural evolution of how content is delivered here. Over the past 18 months, the approach shifted from using animated GIFs to short MP4 videos. This change was made strictly for quality reasons, ensuring a much better visual experience and allowing the video guides to be utilized more effectively on platforms like LinkedIn. As with any new project, I am not […]
- [AD Account Lockout (Free Tool)](https://hartiga.de/windows-server/ad-account-lockout-free-tool/): The AD Account Lockout tool is free and very valuable in troubleshooting account lockouts in Active Directory. This is a task as old as the directory service itself. Even in modern IT architectures, we still face the frustration of a user account repeatedly locking out without a clear source. While we strive for modern identity management, we must often rely on battle-tested tools from the past to solve these on-premises headaches. One of the most effective utilities for this is the Microsoft Account Lockout and Management Tools package. In this article, we look at how to use these tools to stop […]
- [Windows Server Summit 2026 Day 3](https://hartiga.de/it-architecture/windows-server-summit-2026-day-3/): Introduction to Windows Server Summit 2026 Day 3 The final day of the Windows Server Summit 2026 shifted the spotlight from overarching hybrid control planes toward core infrastructure, protocol modernization, and active collaboration with the product group. Following the roadmapping focus of Day 1 and the automation frameworks of Day 2, Day 3 targeted the foundational pillars of every enterprise architecture: identity, core networking, high-performance storage, and deep virtualization pathways. For adaptive cloud architects, this day provided the technical blueprints required to design resilient, future-proof environments. It emphasized how foundational workloads like Active Directory, PKI, and clustering are not merely surviving […]
- [Windows Server Summit 2026 Day 2](https://hartiga.de/it-architecture/windows-server-summit-2026-day-2/): Windows Server Summit 2026 Day 2 continues to celebrate that Windows Server 2025 is now over a year old. After Day 1 and it’s focus on roadmapping, Windows Server 2025 Hyper-V and the future operational stack, we now look into Azure Arc, Azure Virtual Desktop, Active Directory and PKI. Let’s look into Day 2 together. Introduction to Windows Server Summit 2026 Day 2 The Windows Server Summit 2026 Day 2 focused heavily on practical modernization, hybrid management via Azure Arc, and the groundbreaking integration of local AI workloads directly within your own data center. Following the strategic insights and core improvements […]
- [Windows Server Summit 2026 Day 1](https://hartiga.de/it-architecture/windows-server-summit-2026-day-1/): Windows Server Summit 2026 to celebrate that Windows Server 2025 is now over a year old and after the Windows Server 2025 we now did get insights into today, tomorrow and what’s next. Together with you I want to take a quick look at the 19 sessions and which one you need to watch. Introduction A total of 19 session talking about the success and challenges of Windows Server 2025. We also did get an insight in 19 sessions on how challenges will be resolved and what will be coming next to us. We also can get a public view into […]
- [Active Directory Visualization (Free Tools)](https://hartiga.de/tools/active-directory-visualization/): Designing and documenting Active Directory (AD) structures is always a long and complex exercise. Historically, this required either building full lab environments or settling for static Visio diagrams that became obsolete the moment they were saved. While the Microsoft Active Directory Topology Diagrammer (ADTD) served its purpose for years, it no longer fits the demands of a modern, fast-moving IT landscape. Introduction to Active Directory Visualization Active Directory remains the backbone of enterprise identity, yet the way we architect and document it often feels stuck in the early 2000s. For years, the industry standard was a reactive approach: build the infrastructure […]
- [Azure Arc Agent 1.54 Stuck? Fixing the WSUS Deadlock and Moving to 1.6x](https://hartiga.de/azure/azure-arc-agent-1-54-stuck/): Is your Azure Arc Agent 1.54 stuck and not updating? If that is the case you are in trouble. Azure Arc enabled servers operate on a strict twelve month support window. Once an agent version reaches its one year anniversary, Microsoft considers it unsupported. This is not just a status label; it affects service connectivity and extension reliability. Introduction As of today, April 2026, the following deadlines are critical Failing to move to the 1.6x branch before these dates will result in degraded connectivity and the inability to manage extensions via the Azure portal. Technical Deep-Dive Architectural Changes in 1.6x The […]
- [Azure Arc – Enable Azure Arc Auto Updates using WSUS and GPOs](https://hartiga.de/windows-server/azure-arc-auto-updates-using-wsus/): While our first part focused on the cloud-native way using Azure Portal and Policy, many IT administrators still prefer or require the reliability of on-premises control. In a traditional IT world, Windows Server Update Services is a legimate standard tool for server maintenance and Azure Arc Auto Updates using WSUS and GPOs. Introduction to Azure Arc Auto Updates using WSUS Integrating the Azure Arc Agent into your existing Windows Update infrastructure allows you to maintain the 12-month support window without learning entirely new tooling. This part of our story focuses on how to leverage Group Policy Objects (GPOs) to ensure your […]
- [Windows Server 2025 – Part 9 (WSUS on Windows Server 2025)](https://hartiga.de/windows-server/wsus-on-windows-server-2025/): Windows Server 2025 brings massive advancements in cloud-native management, but local control remains non-negotiable for many. While my previous articles highlighted modern cloud features, high-density on-premises environments still require robust bandwidth management. WSUS on Windows Server 2025 continues to be a fundamental service for bridging the gap between modern architecture and classic on-premises realities. WSUS (Windows Server Update Services) has been a fundamental service in our data centers for decades. Even with the rise of Azure Update Manager and Automanage, WSUS remains a critical tool for those who prefer to keep their update traffic internal. In Part 9, we look at […]
- [Azure Arc - Enable Azure Arc Auto Updates using Azure Portal](https://hartiga.de/windows-server/azure-arc-auto-updates/): Azure Arc Auto Updates is key, as the foundation of your hybrid cloud strategy and it’s single contral plane in Azure is the Connected Machine Agent. While we often focus on the workloads running on top of our servers, the bridge connecting them to Azure needs regular maintenance to remain secure and functional. Introduction to Azure Arc Auto Updates In this first part of our series, we look at the modern way to handle this using the Azure Portal and the newly available Automatic Agent Upgrade (public preview as of 09.04.2026). We will move away from manual scripts and embrace built-in […]
- [AGPM is End of Life on 14 April 2026](https://hartiga.de/it-architecture/agpm-is-end-of-life/): AGPM is End of Life on 14 April 2026. Microsoft’s Advanced Group Policy Management (AGPM) reaches its official End of Life (EOL) on April 14, 2026. After this date, the tool that provided the “safety net” for Group Policy edits will no longer receive security updates, bug fixes, or compatibility guarantees. For some of us, this isn’t just a minor software retirement; it’s a hard stop in the lifecycle of classic GPO management. If you are still using AGPM to backup, restore and have versioning of GPOs in your production environment, you need a plan today. What was AGPM and why […]
- [A Debt-Aware Approach to Architectural Decision Records](https://hartiga.de/it-architecture/architectural-decision-records/): Architectural Decision Records can help will speed up your decision making processes. My Debt-Aware ADR Model helps here. to get to a structured way to turn hidden liabilities and slow-moving decision making cycles into consciously accepted, explicitly tracked decisions. This is not about documentation. It is about control. Introduction Projects rarely fail because of a lack of talent. They stall because of two primary killers: slow decision making and the accumulation of unmanaged technical debt. In many organizations, the inability to make a timely choice or the fear of making the wrong one paralyzes progress just as effectively as legacy code. […]
- [Modern Windows Event Viewer - EventLogExpert](https://hartiga.de/tools/windows-event-viewer-eventlogexpert/): The project Windows Event Viewer – EventLogExpert provides a modern open-source toolset that fundamentally improves the way we interact with Windows Event Logs. Since troubleshooting .evtx files is often a tedious process, I was looking for an alternative and found this project on GitHub. Read my overview of why I think this tool belongs in the toolkit of every IT Architect and Administrator. Who Maintains the Project? The project is officially hosted under the Microsoft organization on GitHub. It is an open-source tool released under the MIT License. It is maintained by a dedicated group within Microsoft who develop the tool […]
- [Windows Terminal and Oh My Posh - personalization for improved coding](https://hartiga.de/tools/windows-terminal-and-oh-my-posh/): Windows Terminal and Oh My Posh are a great combination! In the past we looked here at how to utilize the Windows Terminal in a personalized way to improve usability and our performance. While the built-in customization options are a good starting point, there is an even better way today to turn your terminal from a simple text interface into a more powerful and personalized tool using Oh My Posh. Integrating Oh My Posh into your setup allows you to move beyond basic aesthetics and add functional support. This includes features like real-time Git status, path indicators, and some system performance […]
- [Windows Patching: Operations Runs the Platform, Not the Risk](https://hartiga.de/it-architecture/windows-patching-responsibilities/): If you spend enough years in IT operations and Windows Patching, you eventually reach a moment of clarity. You realize that Windows patching is not a technical problem. It is an organizational one. Windows Patching – Exceptions and Governance Technically speaking, we solved patching a long time ago. Whether you are leaning on WSUS, Microsoft Configuration Manager (MECM), or Windows Update for Business (WUfB)—the tooling exists, and it works. The “how” is documented. The “why” is obvious. The real friction always appears somewhere else: Exceptions The moment exceptions enter the conversation, patch management stops being a technical process and transforms into […]
- [WinGet and IaC - Take Winget to the next level](https://hartiga.de/azure/winget-and-iac/): WinGet and IaC are maybe your next step to automate your environment. In the past, managing third-party applications on Windows meant 3rd party tools or gathering MSI installers on network shares, writing complex deployment wrappers, and battling silent installation switches that changed from vendor to vendor. I enjoyed that work a lot, but it is no longer a modern approach. Microsoft’s WinGet package manager takes the package management concepts we’ve respected in Linux for decades and bakes them natively into the Windows ecosystem. But now with IaC it is time to say that WinGet has evolved massively. We are no longer […]
- [Azure Bastion Developer SKU: Secure Access Without the "Bastion Tax"](https://hartiga.de/azure/azure-bastion-developer/): In the past, securing your Azure Virtual Machines (VMs) often felt like a trade-off between security and budget. If you wanted to avoid the risks of exposing RDP or SSH to the public internet, you had to deploy Azure Bastion. While excellent, the Standard and Basic SKUs come with a “fixed” hourly cost that can be hard to justify for small dev/test environments or personal labs. The Developer SKU is specifically designed for non-production workloads. When to Use Azure Bastion Developer The Developer SKU is specifically designed for non-production workloads. It is my choice when I am running my personal or […]
- [How to Uninstall Azure Arc from Windows Server 2026](https://hartiga.de/azure/how-to-uninstall-azure-arc-2026/): Why do we need to Uninstall Azure Arc or Azure Arc Setup? Windows Server 2025 ships with the Azure Arc Setup feature baked in. You’ll notice a new tray icon and an optional-features entry even if you never intended to connect to Azure. For environments where cloud integration isn’t desired—or simply to reclaim resources—you can fully uninstall Azure Arc Setup and its agents. Historical Context – The Evolution of Windows Server Since Windows Server 2022, Azure Arc has been shipped as an “Optional Component.” With update KB 5031364, it was quietly installed on all systems including a system tray icon. This design […]
- [VPN Ubiquiti UniFi UDM to Azure (2026 Edition)](https://hartiga.de/azure/vpn-ubiquiti-unifi-udm-to-azure/): Update: This guide replaces my original article located here with this VPN Ubiquiti UniFi UDM to Azure (2026 Edition). In the past, we relied on the Basic VPN Gateway and Basic Public IPs for a cost-effective home lab setup. However, with Microsoft retiring Basic SKU Public IPs retires Basic SKU Public IPs on September 30, 2025, that “budget” approach is no longer viable or supported. To maintain a stable, supported connection today, we must use Standard SKU Public IPs and the VpnGw1 generation (or higher). While this increases the cost compared to the old Basic tier, it provides a significantly more […]
- [Tail for log files with Windows – 2026 Edition](https://hartiga.de/tools/tail-for-log-files-2026/): I view a lot of log files—probably more than I’d like to admit. Whether it’s troubleshooting a hybrid infrastructure issue or debugging a cloud deployment, I always look for the functionality to tail for log files live in a GUI on Windows. Introduction to tail for log files Under Linux, this is trivial via the classic tail command. Under Windows, however, we’ve historically had to be a bit more creative. In 2026, while I still value the traditional tools that have served us well for decades, the sheer size and speed of modern logging require us to look at more powerful, […]
- [Automation using Group Policy - Quality of Life GPO](https://hartiga.de/windows-server/quality-of-life-gpo/): Quality of Life GPOs. Finally. My favorite settings. In our previous articles, we established the Group Policies Foundation and discussed the Background of Automation. We also implemented some important GPOs. Now, we focus on fixing the “annoyances.” Introduction This article covers the essential “Quality of Life” (QoL) GPOs that I deploy to every new machine to make it respectful of my time. If you haven’t used Group Policy Objects (GPOs) that much, please start reading my initial blog posts “Group Policies and Group Policies Preferences” and “Automation using Group Policy – Background” to understand the foundation. Why “Quality of Life GPO” […]
- [Automation using Group Policy - Configure Time Zone using GPOs](https://hartiga.de/windows-server/configure-time-zone-using-gpos/): Setting the time zone on a server was often a manual step during the “Out of Box Experience” (OOBE). Let’s Configure Time Zone using GPOs as it might be something we forget about until the first log entries showed up with the wrong timestamps or we RDPed into the server for the first time. No template to Configure Time Zone using GPOs? Yes, there isn’t a dedicated “Administrative Template” for setting the Time Zone in Windows (even in Server 2025). Microsoft expects you to handle this via localization settings during deployment or via scripts. Let’s do fix that and build a […]
- [Automation using Group Policy - Allow Ping on Windows Server 2025](https://hartiga.de/windows-server/allow-ping-on-windows-server-2025/): Let’s be honest: There is nothing more frustrating than deploying a fresh Windows Server 2025 instance, trying to ping it to verify connectivity, and getting a “Request Timed Out.” We want to Allow Ping (ICMP) on Windows Server 2025! The Story to Allow Ping on Windows Server 2025 In the past, many (hopefully not you) administrators would simply disable the Windows Firewall entirely to “fix” this. That was the “traditional” quick fix. It worked, but it was reckless. Others would manually enable the rule on every single server. That’s not scalable. Today, we need a modern, automated, and secure approach. We […]
- [Windows DNS Performance Testing](https://hartiga.de/it-architecture/windows-dns-performance-testing/): DNS issues don’t always show up as clear outages. Often they show up as annoying browser behaviour like “random delays on first page load”, “sometimes it works, sometimes it spins”, long sign-in times for SaaS apps or just weird behavior that disappears when someone retries. My preferred approach: a simple GUI sanity check Yes, we can do Resolve-DnsName, packet captures, ETW traces, and deep dives. But when the question is “Are my local DNS servers performing like they should?”, I like a quick, visual baseline first. That’s why I use GRC DNS Benchmark: a small tool that benchmarks your configured DNS […]
- [What are Microsoft Security Baselines for Windows Server 2025](https://hartiga.de/windows-server/security-baselines-for-windows-server/): If you run Windows Server 2025 in production (on-prem, Azure, Azure Arc, “Adaptive Cloud”, homelab-with-a-budget — doesn’t matter), you need to understand “Microsoft Security Baselines for Windows Server 2025” and their lifecycle. Not “some settings we once configured in 2019 and never touched again”, but a repeatable, reviewable security posture. Microsoft’s answer to that is the Windows Server 2025 Security Baseline, shipped through the Security Compliance Toolkit (SCT). What a Microsoft security baseline is (and what it isn’t) A Microsoft security baseline is a group of recommended configuration settings created from input across Microsoft engineering, product teams, partners, and customers. It’s […]
- [2025 Review from Andreas Hartig](https://hartiga.de/it-architecture/2025-review/): Check below if you want to read my 2025 Review. 2025 was one of those years where everything moves at once — work, community, and the personal projects you thought were “just a hobby”. Introduction At work I stepped into a new role and into a project that’s both technically and personally meaningful to me: building an automated private cloud platform that delivers client services (desktop, thin and virtual) at scale. I won’t name the customer or the exact context for obvious reasons – but it’s connected to a mission I fully support: protecting stability and, in a very real way, […]
- [Windows Server 2025 on Ugreen NAS: Fixing annoying CPU Compatibility via CLI](https://hartiga.de/windows-server/windows-server-2025-on-ugreen-nas/): I’ve been testing Windows Server 2025 in my HomeLab, specifically running on a Ugreen NAS. While Ugreen’s hardware is fantastic for storage, its virtualization manager (based on KVM/QEMU) sometimes applies default CPU settings that newer Windows kernels dislike. Requirement – Preperation for Windows Server 2025 on Ugreen NAS This is the lab setup: Problem – Issue with Windows Server 2025 on Ugreen NAS I am getting the below error message after I installed a Windows Server 2025 on the Ugreen NAS using the integrated Virtualization solution. “BdsDxe: failed to load Boot0002 “UEFI Misc Device … Not found” This happens in a […]
- [Windows Server Event Log and Event Log Policies](https://hartiga.de/tools/windows-server-event-logs/): Windows Server Event Log for most teams are only used when something already smells like incident:💥 DC misbehaving,💥 file server “mysteriously slow”,💥 SOC asking for “all the logs you have from last week”. Until the moment of investigation, the Event Log is treated like a legacy detail from the Windows 2003 era and to be honest, it does look like from that time. It also is configured with defaults for servers with CPU, RAM and storage from the year 2003, so let’s look into it with our eyes from today. What you’ll get from this article about Windows Server Event Log […]
- [Timing & Trust in Architecture: My View on Secure Future Initiative Progress Report 2025](https://hartiga.de/azure/secure-future-initiative/): In this article you’ll explore how security, governance and lifecycle risk converge in modern infrastructure, why the recent Microsoft SFI report matters for hybrid-cloud and on-prem environments, and how you can treat trust as an architectural dimension in your stack. Introduction to Secure Future Initiative When infrastructure architects talk about technical debt, we usually mean outdated servers, unsupported firmware, drifted configurations. But there is another dimension that too few pay attention to: trust—and with it, timing.The Microsoft Corporation November 2025 progress report on its Secure Future Initiative (SFI) draws a line under that idea: security isn’t a feature you bolt on, […]
- [Azure Arc – Secure a Tier 0 resource - 2025](https://hartiga.de/azure/azure-arc-secure-a-tier-0-resource-2025/): Secure a Tier 0 resource in 2025 and why traditional ESAE architectures solved early Tier 0 challenges but are no longer sufficient in an era of hybrid and cloud-native identities. Azure Arc offers a powerful bridge for on-premises Tier 0 systems, but you must treat the Arc-connected servers as Tier 0 first – with dedicated subscriptions, tightened controls, and new identity processes. Jerry Devore’s field experience reinforces this shift: from bastion forests and PAWs to Entra-joined devices and detection-first strategies. Understanding Tier 0 Assets In the landscape of IT security, understanding the classification of assets is crucial for effective security posture […]
- [Why Microsoft 365 Local Matters: A Real Future for Disconnected & Sovereign On-Premises Environments](https://hartiga.de/it-architecture/why-microsoft-365-local-matters/): Why Microsoft 365 Local? With Microsoft 365 Local now generally available, Microsoft sends a strong signal: on-premises and sovereign-cloud footprints are not legacy baggage — they remrain strategically relevant. Together with Azure Local, which already delivers offline-capable, jurisdiction-bound infrastructure, this GA announcement finally closes a long-standing gap for organizations with large, disconnected, or strictly regulated operational environments. What is Microsoft Local Microsoft 365 Local brings updated, locally operated versions of: • Exchange Server Subscription Edition (SE)• SharePoint Server Subscription Edition (SE)• Skype for Business Server Subscription Edition (SE) These workloads still run at scale in many enterprises — especially where cloud […]
- [Timing Is Infrastructure Debt: Why Hybrid Cloud Teams Can’t Wait to Modernise](https://hartiga.de/it-architecture/timing-is-infrastructure-debt/): In this article you’ll discover why the familiar notion of technical debt goes well beyond code—and how in the hybrid-cloud and infrastructure world, the real culprit is often timing. You’ll get insight into how delayed upgrades, aging hardware, cloud/edge drift and integration mismatches all accumulate cost and risk. And you’ll walk away with a framework you can apply to your architecture review or operational planning today. Introduction on Timing Is Infrastructure Debt We’ve long treated technical debt as a software problem: messy code, legacy frameworks, missing tests. But if you take a step back and look across your hybrid-cloud estate—on-premises racks, […]
- [The 2nd Thing to Enable in Every AD - Protect object from accidental deletion](https://hartiga.de/windows-server/protect-object-from-accidental-deletion/): Protect object from accidential deletion is your 1st line of protection, if you value your OU structure. The checkbox “Protect object from accidental deletion” stops both accidental deletes and moves. Without it, one wrong click in ADUC or a faulty script can wipe out your OU hierarchy. Enforce it across the board — ideally automated with PowerShell. Technical Background around Protect object from accidental deletion The setting adds Deny Access Control Entries for “Delete” and “Delete Subtree” (usually against Everyone). This prevents both direct deletes and moves (since moves internally perform a delete on the source container). It’s simple, robust, and […]
- [The First Thing to Enable in Every AD - Active Directory Recycle Bin](https://hartiga.de/windows-server/active-directory-recycle-bin/): The Active Directory Recycle Bin is not a “nice-to-have” in 2025 — it’s mandatory. It allows fast, attribute-preserving recovery of deleted AD objects without the pain of authoritative restores. It keeps group memberships and critical attributes intact. The only requirement is a forest functional level of Windows Server 2008 R2 or higher. Activation is irreversible, but quick — via ADAC or PowerShell. Do it today. Why Active Directory Recycle Bin Matters Now In stable, long-lived environments, the biggest enemy is human error: accidental deletions during onboarding/offboarding, clumsy OU reorganizations, or scripts that were too broad in scope. Before Recycle Bin, recovery […]
- [Notepad++ - Most important AddOns 2025](https://hartiga.de/tools/notepad-most-important-addons-2025/): Notepad++ is my favourite notebook and editor is actually perfect, but it can always be better. For this reason, there are a few “quality of life” improvements that I use over the add-ons that are the Notepad++ my most important AddOns. As I keep using it constantly, I also keep my AddOns clean and updated. There have been a lot of changes, so it’s time for the 2025 version. AutoSave AutoSave saves the open files automatically. This can also be customised via a menu. ComparePlus Quickly compare files side by side. More details on Github here. NppFTP Quick SFTP/FTP/FTPS edits from […]
- [Automation using Group Policy - Background](https://hartiga.de/windows-server/automation-using-group-policy/): Automation using Group Policy is most likely the easiest step in your environment for custimzation. In one of the latest Blog articles we looked into “Group Policies and Group Policies Preferences” and now we want to use that foundational knowledge, to get a few GPOs deployed. This will be an ongoing series of GPO / GPP tipps and tricks and this will show the background to learn about the basics, file shares used and give you a certain guidance. The GPOs will be created while I automate, optimize, customize and secure my homelab. Where to store scripts, wallpapers & assets for […]
- [My new Customized Windows Terminal settings.json 2025](https://hartiga.de/it-architecture/customized-windows-terminal-2025/): A Customized Windows Terminal is fun and shows ownership. That’s why every once in a while I have to improve my personal terminal configuration set. This time I have updated my Terminal Settings as there have been changes in the json file. It was time to update my configuration to be aligned with the PowerShell Updates and include a cosmetic fix to get rid of the famous – “Install the latest PowerShell for new features and improvements! https://aka.ms/PSWindows” message. Installation of Windows Terminal I only use Winget to take care of these things and this can be done easily using a […]
- [Test Latency to Azure Regions 2025](https://hartiga.de/it-architecture/test-latency-to-azure-regions-2025/): Test Latency to Azure Regions, if users feel your app is “slow,” as nine times out of ten they’re feeling latency, not CPU. In Azure, that latency comes from three very different paths: within a zone, across zones (same region), and across regions. Treat them differently and you’ll make better architecture calls—and avoid expensive rework. What Microsoft publishes (and how to use it) Microsoft maintains round-trip latency statistics between Azure regions, based on continuous measurements over the Azure backbone. The data uses median (P50) round-trip times, with the current dataset covering a 30-day window and refreshed roughly every 6–9 months. Use […]
- [Create a Service on Windows Server 2025](https://hartiga.de/it-architecture/service-on-windows-server-2025/): Service on Windows Server 2025? Shouldn’t that happen automatically? Sometimes you want to run an executable as a service. Normally you get this feeling, when services you rely on do crash or are not running after a power outage. Running executables as a service can run without login and get functionality like automatic restart and even reboots. While NSSM “Non-Sucking Service Manager” has been a great tool in the past, it is long abandoned, so lets look at alternatives. Windows Server 2025 might look shinier, but its Service Control Manager (SCM) is the same old workhorse that kept NT 3.1 alive […]
- [Windows Server 2025 Autologon: When and Why?](https://hartiga.de/windows-server/windows-server-2025-autologon/): Windows Server 2025 Autologon is a challenging discussion. Learn why, when and how to enable Autologon in Windows Server 2025 safely, plus robust mitigation strategies. A reboot that lands on the Ctrl-Alt-Del screen is a fatal faux-pas in any self-respecting homelab. When you run headless nodes in a rack at 2 a.m., tip-toeing past sleeping family or barking dogs, Auto Login on Windows Server 2025 feels like that extra cup of coffee you forgot you needed – until you realise the security tab you just tore off the tin can. This article will not encourage you to use Autologon. It will […]
- [Group Policies and Group Policies Preferences (2025)](https://hartiga.de/windows-server/group-policies-foundation/): For Group Policies the time between Windows Server 2022 and Windows Server 2025 had a focus to move Group Policies and Group Policies Preferences towards being code-driven solution rather than legacy complexity. If you want a homelab that upgrades itself instead of collecting dust, you must understand how Group Policy Objects (GPO) and Group Policy Preferences (GPP) work under the hood—and how they’ve quietly changed since the Windows 2000 days. Using GPOs and GPPs is the first step of this series moving from manual work to automation.  What have we done so far? In our Windows Server series we learned how […]
- [Homelab - Build a robust DNS foundation - Part 3 Optimizing Technitium DNS Server on Windows](https://hartiga.de/it-architecture/optimizing-technitium/): Optimizing Technitium to make it a robust foundation. When name resolution hiccups, the whole household feels it faster than a power cut. DNS is the nervous system of any homelab and you should keep an eye on it. After spinning up a validating resolver (Unbound) in Part 1 and getting Technitium running on Windows in Part 2, we will tune Technitium DNS Server on Windows Server 2025 in Part 3 to block advertisements using DNS sinkholes, switch on structured query logging with the Query Logs (Sqlite) app and configure some retentions. We’ll close with a pragmatic Technitium vs. Pi-hole comparison and […]
- [Windows Server 2025 – Part 8 (Configuring Highly Available DHCP)](https://hartiga.de/windows-server/windows-server-highly-available-dhcp/): Highly Available DHCP is the backbone of network connectivity in modern infrastructures. When DHCP fails, clients lose IP leases, hindering access to services. Windows Server 2025’s built-in DHCP failover ensures two servers share lease and scope data, delivering uninterrupted IP assignment—even during maintenance or outages. This is a continuation of the Windows Server 2025 series. Previously: Windows Server 2025 – Part 7 (Active Directory Hardening). Highly Available DHCP Overview Windows Server 2025 implements the IETF failover reference model. Two DHCP servers (Primary & Partner) synchronize lease states and share configuration. The figure below shows how components and settings for a DHCP […]
- [Joining the Azure Arc Community – Resources and My Top Picks](https://hartiga.de/azure/join-the-azure-arc-community-2025/): The Azure Arc Community brings together everyone interested in the Azure management for any infrastructure—on-premises, multicloud, and at the edge. The core of the community for me is Azure Arc Jumpstart, as it extends this promise with automated scenarios, sandboxes, and community-driven guides. In this post, I’ll show you how to plug into the Azure Arc and Arc Jumpstart ecosystem, plus share my favorite YouTube channels and discussion spaces, so you know how I stay up to date and generate the content for this blog. Why Join the Azure Arc Community? Being part of the Azure Arc community means tapping into […]
- [How to Uninstall Azure Arc from Windows Server 2025](https://hartiga.de/azure/how-to-uninstall-azure-arc/): Why do we need to Uninstall Azure Arc or Azure Arc Setup? Windows Server 2025 ships with the Azure Arc Setup feature baked in. You’ll notice a new tray icon and an optional-features entry even if you never intended to connect to Azure. For environments where cloud integration isn’t desired—or simply to reclaim resources—you can fully uninstall Azure Arc Setup and its agents. Historical Context – The Evolution of Windows Server Since Windows Server 2022, Azure Arc has been shipped as an “Optional Component.” With update KB 5031364, it was quietly installed on all systems including a system tray icon. This design […]
- [Windows Server 2025 Summit - Session List](https://hartiga.de/windows-server/windows-server-2025-summit-session-list/): I couldn’t attend the Windows Server 2025 summit and missed the sessions. Luckily, all the sessions are available On_Demand to review. To follow them up, I created a list of the sessions to review and get them off my checklist. Now I can watch them one after the other when time permits. This comprehensive Windows Server 2025 Summit – Session List will ensure I don’t miss any valuable insights regarding the Windows Server 2025 Summit. Summary Two days of deep technical content, real-world demos, and forward-looking insights across Windows Server 2025, Azure Arc, and hybrid infrastructure. If you’re working in IT […]
- [Azure Arc Region Availability - Choose the right region](https://hartiga.de/azure/azure-arc-region-availability/): To choose the right region based on Azure Arc Region availability is your first step in the journey into hybrid cloud with Azure Arc promises unparalleled flexibility, extending Azure’s management capabilities to your on-premises, multi-cloud, and edge environments. But as with any cloud deployment, a critical decision looms large: which Azure region should you choose for your Azure Arc resources? This isn’t merely a technicality; it’s a strategic choice impacting latency, data residency, and crucially, the very features available to your hybrid infrastructure. Let’s dive into the considerations and expert recommendations to ensure your Azure Arc deployment is optimally positioned for […]
- [Homelab - Build a robust DNS foundation - Part 2 using Technitium DNS Server on Windows](https://hartiga.de/tools/technitium-dns-server-on-windows/): Let’s create an improved version of the Technitium DNS server for Windows. Some time ago, I wrote a DNS guide to help you get started with your home laboratory. This guide is still valuable and can be found here. We will reuse quite a lot of content from that guide for this one. Last week, I started configuring Unbound on redundant Windows servers in this post. Today, we will add the Technitium DNS Server to provide additional conditional forwarding and DNS filtering functionality for my personal network. Goal – Build a Technitium DNS Server on Windows We want to create a […]
- [Homelab - Build a robust DNS foundation - Part 1 using Unbound on Windows](https://hartiga.de/windows-server/unbound-on-windows/): A while back i wrote a DNS guide to help you get started in your homelab. This guide is still valuable and available here. I recommend reading before you get started with this guide. We want to take things to the next level and improve our environment to be more robust, automated and provide a little bit more data privacy. Introduction – Our goals using Unbound on Windows If you are looking for a simple solution for your homelab, that has improved apps to give other household members access, I do recommend Pi-hole and a Raspberry Pi with PiHole plus a […]
- [T-Shaped Profile - My unique journey from Helpdesk to Enterprise Architecture](https://hartiga.de/it-architecture/t-shaped-profile-helpdesk-it-architect/): The Evolution of a T-Shaped IT Professional In the world of IT, specialization is often seen as the key to success. Yet, my career path has proven that breadth and depth—the essence of a T-Shaped Profile—are equally crucial. Over the past 30 years, I’ve transitioned from helpdesk support to server administration, then into team leadership, data center management, and ultimately into Enterprise Architecture consulting. This journey has shaped my ability to bridge technical expertise with strategic vision, making me a versatile and effective IT leader. What is a T-Shaped Profile? A T-Shaped Professional with a T-Shaped Profile combines deep expertise in […]
- [Tinyproxy on Hyper-V – new Ubuntu 24.04](https://hartiga.de/tools/tinyproxy-on-hyper-v-new-ubuntu-24-04/): A Linux VM with Proxy, such as tinyproxy, can be used to reduce bandwidth as it caches frequently requested websites. Today we want to configure a Linux VM with a Proxy and deploy it for troubleshooting. Why build a Linux VM with Tinyproxy on Hyper-V? This used to be a valid business scenario when bandwidth was still expensive, even for companies. Today, these costs no longer play a role, especially since a cache in the proxy tends to lead to problems (complexity). In times of encrypted connections via HTTPS for most websites, this is also rather impractical and not very efficient. I always need a […]
- [Windows - easy COM Port Management without Admin Rights with Windows 10 & 11](https://hartiga.de/tools/windows-easy-com-port-management-without-admin-rights-with-windows-10-11/): COM Port Management with no administrator rights is a challenge. You might have noticed that I am currently involved in IT and OT discussions. During OT modernization, I encountered a unique challenge in a transformation project. This short guide covers a tool for configuring COM Ports on clients without local admin rights. The tool is developed by Uwe Siebers and is available here. What is ComPortMan ComPortMan is a Windows service that allows for managing COM port assignments in Windows. Operating as a service grants autonomy from the permissions of the user currently logged in, eliminating the necessity for users to […]
- [Remote Desktop Connection Manager (RDCM) – A Must-Have for Homelabs](https://hartiga.de/tools/remote-desktop-connection-manager-rdcm/): Managing multiple remote connections efficiently is a challenge for IT professionals and homelab enthusiasts alike. Remote Desktop Connection Manager (RDCM) simplifies this process by providing a centralized interface for organizing and accessing remote desktops. Whether you’re running a homelab for testing, development, or administration, it can be a game-changer. Why is it Valuable in a Homelab A homelab often consists of multiple virtual machines, servers, and network devices that require remote access. RDCM offers several advantages: For homelab users, it eliminates the hassle of manually opening multiple RDP windows, making it easier to manage various environments from a single dashboard. IMPORTANT: […]
- [IT and OT: Bridging the Gap with Modern Infrastructure Management](https://hartiga.de/it-architecture/it-and-ot-briding-the-gap/): For decades, Operational Technology (OT) and Information Technology (IT) have operated in parallel silos, each serving distinct purposes. However, the rise of IoT, Industry 4.0, and cloud-driven automation has forced organizations to rethink their approach to security, infrastructure, and data management. Understanding IT and OT Information Technology (IT) IT focuses on data processing, enterprise applications, and cloud computing, supporting business operations through: Operational Technology (OT) OT is device-centric, managing industrial automation, sensors, and control systems in sectors like manufacturing, energy, and transportation. It includes: IT and OT Overview There is an Overlap between IT and OT systems and responsibilities. No matter […]
- [Azure Service Lifecycles: Understanding Preview and GA Releases - 2025](https://hartiga.de/it-architecture/azure-service-lifecycles-explained/): Azure Service Lifecycles are an important part of your roadmapping. When using them you’ll often encounter terms like Private Preview, Public Preview, and General Availability (GA). Understanding these phases is crucial for making informed decisions about service adoption, support, and production readiness. Azure Service Lifecycle – Private Preview: Early Access for Select Users Private Preview is the first stage of a service’s lifecycle, where a limited group of customers is invited to test and provide feedback. These users work closely with the Product Group for example the Azure Product Gropup, to shape the service before broader release. Private Invite-Only Option Some […]
- [Windows Server Activation Error 0xC004FC07 & 0xC004F069](https://hartiga.de/windows-server/windows-server-0xc004fc07-0xc004f069/): You are receiving error 0xC004FC07 when trying to apply a license to your Windows Server 2022 / 2025? Maybe your server is randomly shutting down after a few hours? This could be related to an invalid license being installed or someone started with an evaluation license, which is now expired. Let’s fix that. Background on Error 0xC004FC07 An expired evaluation license can prevent Windows from activating properly, leading to errors like 0xC004FC07. If you’re using a Windows Server Evaluation version, it typically comes with a 90-day trial period, after which the system will display a license expired message and may shut […]
- [Azure architecture icons in your Documents](https://hartiga.de/it-architecture/azure-architecture-icons-in-documents/): If you need to document your Azure setup or showcase a new solution design, it’s best to utilize the official Azure Architecture Icons. Introduction Creating Azure architecture diagrams is essential for visualizing cloud solutions, and Azure Architecture Icons provide a standardized way to represent Azure services. This guide will walk you through where to find Azure icons, how to use them in draw.io, and reference a GitHub repository with similar content. Microsoft Azure Architecture Icons Microsoft provides official Azure Architecture Icons that can be used in documentation, presentations, and diagrams. You can download the latest icons from the Azure Architecture Center. […]
- [Azure Managed Disk Types - 2025](https://hartiga.de/azure/azure-managed-disk-types/): Azure offers a variety of managed disk types tailored to different workloads and performance needs. Azure Managed Disk Types Azure provides Standard SSD, Premium SSD, Standard HDD, and Ultra Disk managed disk types to cater to various workload requirements. Each disk type offers specific performance characteristics and price points. Standard SSD disks are suitable for a balance between performance and cost-effectiveness for general-purpose workloads. Premium SSD disks deliver high-performance storage for I/O-intensive applications and databases. Standard HDD disks offer economical storage for less demanding workloads, while Ultra Disk provides high-performance, low-latency storage for mission-critical applications. Ultra Disks: Ideal for IO-intensive workloads […]
- [Windows Server 2025 - Change Version error 0xc004f050](https://hartiga.de/windows-server/windows-server-0xc004f050/): When updating a Windows Server 2025 from Windows Standard to Windows Server 2025 Datacenter edition using the GUI, you did receive error 0xc004f050? Fix for Windows Server license upgrade error 0xc004f050 We will start with the fix first as your search will have pointed you to this blog article and you are hopefully looking for a fix to upgrade from Windows Server 2025 Standard to Windows Server 2025 Enterprise. This is what worked for me when i had that error 0xc004f050. Make sure you put your Datacenter License key in the <product key> part. Downgrade from Windows Server Datacenter to Windows […]
- [AVMA - Simplifying Offline Device Activation](https://hartiga.de/azure/offline-device-activation-with-avma/): AVMA can help in the ever-evolving world of IT, where managing software licenses across virtual machines (VMs) can be a daunting task, especially when dealing with offline devices. Traditional methods like Key Management Services (KMS) or Volume Activation Services (VAS) have served us well, but they come with limitations, particularly in disconnected environments. Enter Automatic Virtual Machine Activation a streamlined, efficient alternative that simplifies activation while addressing the unique challenges of offline devices. The Challenge with Offline Devices Offline devices, by their very nature, lack direct internet connectivity, making traditional activation methods cumbersome. KMS, for instance, requires a Volume License Service […]
- [Azure Arc - ReservedResourceName issue Onboarding](https://hartiga.de/azure/reservedresourcename-azurearc/): On premise and Azure naming conventions and reserved resource names do collide, when you do an Azure Arc Onboarding with an ReservedResourceName error. It is important to remember the Azure naming convention / reserved resource names. Issue and symptoms If you are getting an error message during Azure Arc onboarding or create an Azure resource with this content “ReservedResourceName” or the message “The resource name or a part of the name is a trademarked or reserved word” you most likely encountered a rare issue. Some names or part of names cannot be used for Azure Resources. The full list is available […]
- [Overcome Technical Debt in IT Infrastructure 2025](https://hartiga.de/it-architecture/overcome-technical-debt-in-it-infrastructure/): Technical Debt lately is used mostly with Software Engineering and Software Architecture. It is also a critical component to IT Operations and Infrastructure Architectural work. In this article I will share my understanding, learning and best practices. What is Technical Debt? Technical debt is the cost of choosing an easy or cheap solution now instead of using the correct approach, whatever that means. It’ll probably cost you more in the long run. In my words, technical debt is the cost you have to pay for running or supporting an outdated technology. Two things were important for me to learn in my […]
- [Azure Arc - Secure a Tier 0 resource](https://hartiga.de/it-architecture/azure-arc-secure-a-tier-0-resource/): Understanding Tier 0 Assets In the landscape of IT security, understanding the classification of assets is crucial for effective security posture management. Tier 0 assets refer to the critical infrastructure components that are essential for organizational operations. These typically include domain controllers, identity management services, and other foundational systems that facilitate access to networks and data. The emphasis on Tier 0 cannot be overstated; a breach in these assets can lead to catastrophic consequences, including unauthorized access to sensitive information and the compromise of broader security measures. The importance of Tier 0 assets extends beyond their immediate function—they serve as the […]
- [Windows Server 2025 - Deploy your first AI Chatbot](https://hartiga.de/azure/windows-server-2025-deploy-your-first-ai-chatbot/): I do not work in software development; my focus is on the infrastructure and resources needed for deployments. AI and Chatbots are essential, motivating me to personally deploy one. I aim to do this on Windows Server 2025 without needing to pay for a subscription. Preperation For this scenario I will be using a virtual machine on my Lenovo P520 CAD Workstation that I use for testing in my homelab. We are running a Windows Server 2025 virtual machine on a Windows Server 2025 Hyper-V host. If you want to setup such an environment, please check how to deploy a hyper-v […]
- [Windows Server 2025 - Hyper-V Import Error 0x80070057](https://hartiga.de/windows-server/hyper-v-0x80070057/): When exporting a Windows 10 / 11 VM from a Hyper-V Host and importing it, you can end up with error 0x80070057 “The key protector for the virtual machine ‘YourMachineName’ could not be unwrapped. Let’s see how we can fix or better said, avoid it. My Story – Windows 11 – Homelab – Error 0x80070057 I recently exported my Windows 11 lab and tried to import it to another Hyper-V host. The export from the old host and the import to the new one went well, but after I started the import of the virtual machine, I got an error message […]
- [Windows Server 2025 - Create bootable USB drives the easy way](https://hartiga.de/tools/bootable-usb-drives-windows-server-2025/): To get started with Windows Servers 2025 you need to create a bootable USB drive. This normally is done on a USB Stick. To create a bootable USB Device and copy the Windows Server 2025 ISO, i use Rufus. It is not using any installer. For me it has been working reliable over a long period of time. What is Rufus? Rufus is a utility that helps format and create bootable USB flash drives, such as USB keys/pendrives, memory sticks, etc.. It is my prefered tool to create a bootable usb drive. Rufus is a tool designed to format and generate […]
- [Azure Charts– Visualisation of Azure News](https://hartiga.de/azure/azure-newsroom-visualisation-of-azure-news/): The number of Azure products is now endless. It’s hard to get focused information. Alexey Polkovnikov, Microsoft Sr. Cloud Solution Architect, offers a refreshingly different solution. Azure has transformed the way businesses approach cloud computing, and with its continuous evolution, staying updated is crucial. The Azure ecosystem is vast, incorporating a plethora of services ranging from machine learning to data analytics. This article delves deeper into Azure Charts and provides insights into maximizing your use of Azure news for better decision-making in cloud architecture. What is Azure Charts Azure Charts is not just a tool; it’s a comprehensive platform that aggregates […]
- [Deploy your own File Converter - Part 1 Azure VM](https://hartiga.de/azure/deploy-your-own-file-converter-azure-vm/): When you need to convert files into another file type you very often end up with “free”, “advertised” and potentially not secure Web Sites or tools to install locally. Today I will introduce you a solution that is under your control and secure. We will deploy HRConvert2 by zelon88 in Azure and look into options to create an SSL Certificate and secure an Azure hosted Public IP. Installation Options You can use this installation guide for an Azure VM based solution, but also feel free to look into installing it locally on Linux or in a Docker container. Azure Preperation – […]
- [Maximizing Performance for Azure VMs: How to Optimize Azure Virtual Machines](https://hartiga.de/azure/optimize-azure-virtual-machines/): Azure Virtual Machines (VMs) are a key component of Microsoft Azure’s Infrastructure as a Service (IaaS) offerings, providing scalable, flexible, and cost-effective compute resources. However, to fully leverage the power of Azure VMs, it’s essential to optimize their performance and scalability. In this article, we’ll explore various strategies and best practices to maximize the efficiency of your Azure VMs and how to Optimize Azure Virtual Machines for Peak Performance. 1. Choose the Right VM Size and Type Selecting the appropriate VM size and type is crucial for optimizing performance. Azure offers a wide range of VM sizes and types, each designed […]
- [Windows LAPS and  Legacy LAPS - Key Differences](https://hartiga.de/windows-server/compare-laps-windows-laps/): Windows LAPS (Local Administrator Password Solution) is the successor to the legacy LAPS, offering significant improvements and new features while maintaining some of the core functionalities of its predecessor. Below is a detailed comparison of the two versions. Key Differences Between Legacy and Windows Windows Local Administrator Password Solution Feature Legacy Microsoft LAPS Windows LAPS Integration Requires separate installation via MSI Built into Windows 10, 11, and Server platforms (with updates from April 2023 or later) Password Storage Options Active Directory only Supports both Active Directory and Azure Active Directory for password storage Password Encryption Not available Supports encryption of passwords […]
- [Unlocking Possibilities with Azure Arc: The Multicloud Connector](https://hartiga.de/cloud-computing/azure-arc-multicloud-connector/): Introduction to Azure Arc Azure Arc serves as a pivotal solution in Microsoft’s cloud strategy, facilitating the management of resources across various environments—both on-premises and multiple cloud platforms. With the increasing adoption of hybrid and multicloud architectures, the need for unified management tools has become essential. Azure Arc bridges these gaps by offering a consistent approach to resource management, security, and compliance, ensuring that organizations can effectively govern resources, irrespective of their physical location or cloud provider. The core features of Azure Arc include automated governance, resource organization, and policy enforcement—functionality that is extended to other clouds by the Multicloud Connector. […]
- [Azure Administrator AZ-104 - free training](https://hartiga.de/azure/az-104-free-training-options/): When seeking the most valuable Azure Hyperscaler certification, many individuals opt for the “The Microsoft Certified: Azure Administrator Associate (AZ-104)“. Obtaining this certification demonstrates your proficiency in managing cloud services that span storage, security, networking, and compute capabilities within the Microsoft Azure ecosystem. Introduction to AZ-104 The following resources are my favorites to get prepared for the AZ-104 and start my learning journey in 2025. I would highly recommend that you have at least 1 year of experience with Azure Cloud Services. It is also helpful to setup a homelab and get started with Azure Arc and extend your on premise […]
- [Windows Server 2025 – Part 7 (Active Directory Hardening)](https://hartiga.de/windows-server/active-directory-hardening/): In today’s world, cybersecurity is not just a necessity; it’s a foundation for your business’s integrity and trustworthiness. One of the key components of this foundation is Active Directory hardening. Think of Active Directory as the backbone of your network’s security. Without rigorous protection, it’s vulnerable to attacks that could compromise your entire system. Understanding and implementing AD hardening measures can be complex and technical. To help you navigate this journey, I recommend starting with an informative series of blog entries from the Microsoft Core Infrastructure and Security Blog written by Jerry Devore that break down some high priority tasks including […]
- [Azure Quick Review 2.04 - High Level Assessments](https://hartiga.de/tools/azure-quick-review/): With Azure Quick Review (azqr) you can quickly make a High Level Assessment of an “Azure Subscription” or “Resource Group”. Installation of Azure Quick Review You can download the files from Github Github for this Azure AZQR project. You can find the current releases here. I personally prefer to run the installation using Winget. In case you haven’t installed it, you will also require the Azure Developer CLI. Luckily this can be done using Winget too. Azure Login To run the tool you need to login to your Azure Tenant with an account that has minimum the Reader permissions on the subscription. For some […]
- [Windows EventLog for Windows LAPS Events](https://hartiga.de/windows-server/laps-events/): To monitor Windows LAPS (Local Administrator Password Solution) activities in the Windows Event Log, you can track specific Event IDs.  Key Windows LAPS Events IDs The following events provide critical information about LAPS operations, such as password updates, policy processing, and authentication actions. Below is a list of key Event IDs and their descriptions: Event ID Description 10003 LAPS policy processing is starting. 10004 LAPS policy processing succeeded. 10005 LAPS policy processing failed with an error code. 10018 Successfully updated Active Directory with the new password. 10020 Successfully updated the local administrator account with the new password. 10021 Policy configured to back up the password […]
- [Securing Local Administrator Accounts with Windows LAPS: A Get Started Guide for Windows Server Environments](https://hartiga.de/tools/windows-laps/): Managing local administrator accounts securely is a critical aspect of maintaining a robust and secure IT environment. With the introduction of the Windows Local Administrator Password Solution (LAPS) in newer versions of Windows, Microsoft has provided a modernized tool to centralize and automate the management of local administrator passwords for Windows Clients and Server Operating Systems. In this article, we will explore how to implement and use Windows LAPS as an addition to our HomeLab to secure your local administrator accounts, leveraging the latest features and best practices. What is Windows LAPS? Windows LAPS is an evolution of the traditional Local […]
- [Securing Client Passwords with KeePassXC: A Consultant's Guide to Autotyping and More](https://hartiga.de/tools/client-passwords-keepassxc/): As consultants, managing multiple clients and their respective passwords can be a daunting task, especially when security is paramount. In this article, we will explore how KeePassXC, a powerful and secure password manager, can help you handle client passwords efficiently and securely. We will also delve into the Autotyping feature, which can significantly streamline your workflow. Why KeePassXC? KeePassXC is an open-source, cross-platform password manager that offers robust security features, making it an ideal choice for consultants who need to manage a large number of passwords. Here are some key reasons why KeePassXC stands out: Setting Up KeePassXC Before we dive […]
- [Connect Ubiquiti UniFi UDM to Azure VPN](https://hartiga.de/azure/connect-ubiquiti-unifi-udm-to-azure-vpn/): My homelab and private network are segmented by a Ubiquiti Unifi UDM Pro for security and using some features like WAN port load balancing and failover. When setting up my home lab, integrating it with cloud services like Azure can further enhance its functionality and scalability. In this article, I will guide you through the process of establishing a site-to-site Azure VPN connection between your home lab, utilizing a Ubiquiti UDM Pro, and an Azure Virtual Network. I use the Ubqiuti UDM Pro SE and am very happy with the cloud management, it’s visibility into my LAN and Wi-Fi, and the […]
- [Repairing the Domain Trust Relationship - No Reboot](https://hartiga.de/windows-server/domain-trust/): When managing an Active Directory environment, one of the common issues you might encounter is a broken Domain Trust between a workstation, server and the domain. This can be frustrating, especially when domain users are unable to authenticate to the affected computer. Caused by periods of deactivation I face this issue with my test devices once in a while. In this article, I will share some of the reasons behind this issue and provide a detailed guide on how to repair the trust relationship using PowerShell, a method that is both efficient and does not require a reboot. Understanding the Domain […]
- [Windows Server 2025 - Microsoft.OSConfig](https://hartiga.de/it-architecture/windows-server-2025-osconfig/): With Windows Server 2025, Microsoft introduces significant advancements in security baselines and drift control through the Microsoft.OSConfig PowerShell module, ensuring systems remain compliant and secure. What is OSConfig? With Windows Server 2025 rollout, Microsoft Microsoft introduces a suite of enhanced security tools, with OSConfig taking center stage. OSConfig serves as a centralized tool to enforce security baselines and monitor configuration drift. OSConfig is a management tool designed to streamline the application of security baselines and maintain configuration integrity. It supports various deployment scenarios, offering flexibility in server roles, including Domain Controllers, Member Servers, and Workgroup Members. It ensures compliance by enforcing […]
- [Windows Server 2025 – Part 6 (Active Directory Design)](https://hartiga.de/windows-server/windows-server-active-directory-design/): When creating an Active Directory structure it is good to develop the Active Directory design with a focus for efficient management, delegation of administrative tasks, and application of Group Policies (GPOs). This can be done using a strcuture based on continent, country, and role (e.g., users, servers). Below is a recommended Active Directory design based on my experiences. Top-Level Active Directory Design Considerations: Continent/Region-Based OUs: This allows for easy delegation of administrative control by region. It is not unusual that you have different MSPs or Teams in charge of specific continents or regions. Depending on your organization you might want to […]
- [Easy Troubleshooting Common DNS issues in Home Labs](https://hartiga.de/it-architecture/troubleshooting-common-dns-in-home-labs/): Setting up a home lab is a fantastic way to experiment with networking, virtualization, and various IT services. However, one of the most common issues that can arise in a home lab environment is related to DNS (Domain Name System). DNS issues can manifest in various ways, such as slow name resolution, inability to access websites or services by name, or even complete network outages. In this blog post, we’ll dive into some of the most common DNS issues you might encounter in your home lab and how to Troubleshooting Common DNS effectively. Understanding DNS Basics to Troubleshooting Common DNS issues […]
- [Easy PowerShell Scripts for Windows Server 2025 Management](https://hartiga.de/windows-server/powershell-scripts-windows-server-2025/): As Windows Server 2025 continues to evolve, system administrators are faced with increasingly complex environments. Fortunately, PowerShell provides an efficient way to automate repetitive tasks, streamline management, and reduce human error. Whether you’re managing Active Directory, monitoring server health, or handling patch management, PowerShell scripts can significantly reduce your workload. In this blog post, I’ll walk you through some of the most powerful and useful PowerShell scripts that can help automate various aspects of Windows Server 2025 management. These scripts are designed to save time and improve the overall efficiency of your server administration. 1. Listing All Domain Controllers in Your […]
- [Windows Server 2025 - Part 1 (Preparation)](https://hartiga.de/windows-server/windows-server-2025-part-1-preparation/): Microsoft released the Windows Server 2025 and made it officially available on the 1st of November 2025. With the latest changes in the server and datacenter Virtualization market, i wanted to take a more detailed look at Hyper-V again. Let’s get started! I am fond of simple solutions. In this introduction part 1 will use my low-cost development environment. This should allow nearly everyone will be able to test and learn in their own lab. To get ready, there are a few simple steps. Whats new with Windows Server 2025 There is a lot of new things available with Windows Server […]
- [Becoming an IT Architect: A Comprehensive Guide](https://hartiga.de/it-architecture/becoming-an-it-architect/): How do you become an IT architect and what do you need to learn to fulfill this role and “earn” this “title”? Understanding the Role The title “IT Architect” is given to professionals like Enterprise Architects, Cloud Architects, Software Architects, and Business Architects. The role varies by company size and specialization, including System, Domain, and Enterprise Architects. Getting the title Depending on the size of the company, it may be more or less difficult to reach this level, and IT architects are divided according to their technical orientation, but also according to their role in the company. Often, the architecture in […]
- [What the best connection type to Azure Arc enable a server in 2024?](https://hartiga.de/azure/best-connection-to-azure-arc-enable-a-server/): There are several ways to connect servers to Azure and enable them with Azure Arc, including using the Azure Arc Gateway. Today we will look at the options and when to use each of these. Private Endpoints – Not an option? I’m not considering private endpoints in my article and don’t recommend them now (Q4/2024). I understand the arguments for them, but I focus on simplicity and rely on Zero Trust, Entra ID for security. I accept that public endpoints are secure enough. There is a full list of pro and cons shared by Microsoft in this article “https://learn.microsoft.com/en-us/azure/azure-arc/servers/private-link-security“, but I […]
- [Windows Server 2025 - Monitoring TCP/IP](https://hartiga.de/tools/windows-server-2025-monitoring-tcp-ip/): Monitoring open TCP/IP ports is crucial for maintaining the security and functionality of your Windows system. This article will guide you through using three powerful tools, netstat, powershell Get-NetTCPConnection and the sysinternal tool tcpview, to check open ports on your Windows machine. Basics about Network Monitoring TCP/IP When an applications is communicating over a network it will use IP addresses and Ports for this communication. The common protocols used are TCP and UDP. To troubleshoot communication on a Windows Client or Windows Server, we do need to be check what ports are used or open. You can find standard Windows Network […]
- [Easily manage Applications with WinGet v1.x](https://hartiga.de/tools/easily-manage-applications-with-winget-v1-x/): Microsoft has released WinGet, a package manager that is very well suited for installing and updating third-party applications. We are now installing applications with “WinGet” and learn how to manage applications with WinGet. *** Check for the updated version here *** WinGet with Windows 11 and Windows Server 2025 With Windows 11 and Windows Server 2025 WinGet is a pre installed component. The WinGet Tool will only be available after your first login as a Windows users. The first login will trigger the Microsoft Storage to register the Windows Package manager. If WinGet is not available after your first login run […]
- [Deploy Azure Arc gateway (Limited preview 2024)](https://hartiga.de/azure/deploy-azure-arc-gateway-limited-preview-2024/): The Azure Arc Gateway introduces two new components to allow a communication between a local server to Azure using “only 7” endpoints. This is currently (09.09.2024) private preview. This requires some steps to enable it in your network. Requirements You need to apply for the private preview by completing the Azure Arc gateway Limited Public Preview Sign-up form. This will allow one or multiple subscriptions to install the Azure Arc Gateway feature. There is some network traffic that needs to be allowed. This is still quite a few URLs, but it significantly less compared to the 15 minimum Azure Arc Endpoints […]
- [Self Host DNS for Security and Privacy](https://hartiga.de/it-architecture/self-host-dns-for-security-and-privacy/): If you want to get more insight into your devices network traffic and increase your security and privacy, you will want to self host your own DNS server. There are several good options, i.e. pihole, but we want to run it on Windows Server 2025 to complement my home lab story and for this requirement we will use Technitium. Prerequisites to Self Host DNS For this installation to work, we do assume a few things. Important: Internet access is required to download the initial setup and some components during installation. To reduce complexity, this is for a home lab scenario. We […]
- [Use SFTP with Powershell](https://hartiga.de/tools/use-sftp-with-powershell/): If you want to use SFTP with Powershell to transfer files, you can do this with the Posh-SSH module. Installation of SFTP with Powershell To retrieve or copy data via Powershell using SFTP, you can use the Posh-SSH module. Installation is relatively simple on a standard Windows 11. Simply install the module with Install-Module and confirm the source as trustworthy. If the following error message appears in older versions of Powershell and Windows, you might need to activate TLS 1.2 This is usually necessary in older environments. Simply enter the following command in Powershell and try to install the module again. […]

## Pages

- [Fancy stuff to know about me in 2026 - Andreas Hartig](https://hartiga.de/about-me-andreas-hartig/): Hi, I am Andreas Hartig. You want to know more about me? I am an Enterprise Architect, Microsoft MVP, and a CGI Director Consulting Expert. If you are looking for sugarcoated IT advice or trendy buzzword chasing, you are in the wrong place. I value the foundational systems that built the modern enterprise, and I focus on how we can implement them in a more resilient, efficient, and automated way today. My passion lies at the intersection of traditional core infrastructure and modern hybrid cloud platforms. I look at IT architecture as a continuous stream of decisions, balancing what works reliably […]
- [VMware Alternatives - Broadcom Story - Links and more](https://hartiga.de/vmware-broadcom-links-to-alternatives/): Background Everyone is looking at VMWare Alternatives. Why? Here is a bit of background. Broadcom’s $61 billion acquisition of VMware in late 2023 has significantly impacted the tech industry. Post-acquisition, Broadcom rebranded VMware as part of its software group, focusing on private and hybrid cloud environments. This shift led to VMware discontinuing some products and transitioning others to subscription-based models, including VMware ESXi, a popular Type 1 hypervisor. The increased licensing fees and changes prompted many organizations to explore alternatives. Some viable options include Proxmox VE, an open-source platform integrating KVM and LXC, and XCP-ng, a high-performance hypervisor with enterprise features. […]
- [Free Favorite Links - Andreas Hartig - 2026](https://hartiga.de/favorite-links/): To support my stories I do gather a lot of links. If you want in depth knowledge around my topics, please take a closer look and enjoy my favorite links. Windows Server 2025 & Hyper-V – Favorite Links Fujitsu Q556/2 and Windows Server 2025 Windows Server Insider Preview 26040 is out – and so is the new name – Download and SMB changes Announcing Windows Server Preview Build 26040 – License Keys and cool updates to QUIC / Wifi / Bluetooth Windows Inside on Youtube Introducing Windows Server 2025! In case you missed it: Windows Server at Microsoft Ignite Get started […]

## Optional

- [Agent (MCP protocol)](websites-agents.hostinger.com/hartiga.de/mcp)

[comment]: # (Generated by Hostinger Tools Plugin)