Identity Cosmos
| Le blog francophone sur la gestion des identités et des accès | http://www.identitycosmos.com |
Blog CADIM- Gestion des privilèges sous WindowsAvecto Privilege Guard est une solution qui permet aux entreprises d’adopter le principe du minimum de privilèges rattaché aux utilisateurs.Il n’est en effet plus nécessaire de donner des droits administrateurs aux utilisateurs, alors que ces droits peuvent être donnés dynamiquement aux applications, tâches et scripts.Privilege Guard permet aux utilisateurs […]
- Tout part de la classificationAvez-vous déjà entendu parlé de classification documentaire ? Bien souvent cette notion est laissée de coté par les différents intervenants techniques, nous parlons plus volontier de GED, d'Archivage, de DRM, ou même de DLP, mais avons nous conscience que sans la classification des documents et des emails, ces briques technologiques travaillent en Aveug […]
- www.planetbiometrics.com: Nouveau portail sur la biométrieUn nouveau portail (site en anglais) vient de se mettre en place et propose un contenu de référence sur le thème de la biométrie. www.planetbiometrics.com Ce portail semble être promis à un bel avenir, car le contenu, bien que tout jeune est extrèmement bien renseigné et cohérent. […]
- Nouvel article sur la faiblesse des mots de passeLa faiblesse des mots de passe sur votre réseau vous inquiète ? je vous conseille la lecture de ce nouvel article IdentityCosmos, a consulter sur http://www.identitycosmos.com/http:/www.identitycosmos.com/non-classe/password-online pour plus d'information. […]
- Webinar sur la gestion des stations de travail via Active DirectoryScriptlogic organise un nouveau Webinar portant sur la gestion des stations de travail dans les environements Active Directory. L'inscription au webinar est ici: http://www.cerberis.com/actualite-webinar-script-logic---solving-desktop-management-challenges-with-desktop-authority--107.html La majeure partie de la présentation portera sur les aspects sécu […]
- Forefront UAG 2010 SP1Forefront UAG 2010 SP1 : Fonctionnalités nouvelles et améliorées de DirectAccess - Support de One-time-password incluant : agent RSA SecurID et le support des solutions OTP tierces partie basés sur RADIUS - Ajout de paramètres optionnels dans chaque étape des scenarios de déploiement avancés - Support du déploiement des GPO DirectAccess sur plusieurs domai […]
- Gestion des privilèges sous Windows
- Blog IAM-THE-FRENCH-BLOG
- Un token OTP pour jouer à Star Wars – The Old RepublicQuand la sécurité numérique s’immisce dans la vie quotidienne Les éditeurs du jeu en ligne Star Wars – The Old Republic proposent d’utiliser un token OTP pour sécuriser l’accés à votre compte en ligne lorsque vous jouer. En effet le principe de l’OTP fait que le code généré par le token que vous possédez est […]
- Visual Studio une application Steam ?Totalement inutile, donc indispensable ! Microsoft propose un Widget pour Visual Studio permettant de débloquer des badges au fur et à mesure d’accomplissements, histoire de prendre Visual Studio pour un jeu Steam Les badges sont rangés dans plusieurs catégories, un pop-up s’affiche dans Visual studio à chaque fois que vous gagnez un nouveau badge et […]
- Livre Blanc Microsoft sur leur offre de cloud privéUn livre blanc intéressant pour mieux comprendre les offres de Cloud Privé, ce que présentent ici Microsoft dans un livre blanc publié le mois dernier étant en effet assez simailaire aux offres des autres géants du cloud tels qu’IBM, Oracle ou Amazon. Bonne lecture à tous. Le livre blanc en téléchargement ici : Solutions de […]
- Protéger un objet des suppressions accidentelles avec PowerShellLorsque l’on utilise PowerShell pour créer des objets dans ActiveDirectory, il peut être intéressant dans le cas d’une OU ou d’un container d’appliquer le paramètres de Protection de l’objet des suppressions accidentelles, comme le fait si bien la case à cocher disponible dans la MMC. Bon, une case à cocher c’est très bien, mais quand […]
- Authentification SSH sans mot de passe par échange de clefs RSALorsque l’on se connecte en SSH sur une machine Linux (ou Unix) pour effectuer des commandes à distance depuis un script ou pour effectuer des tâches administratives, il peut être très intéressant d’éviter d’utiliser une authentification par mot de passes, souvent simplistes. D’autant plus dans le cas de script, ou même lorsque l’on utilise des […]
- FIM Custom Activity – Guide de création (partie 3)Voici la suite de mon article sur la création d’une Custom Activity pour FIM 2010. Cette activité a été créé dans la FIMCustomActivityLibrary préparée dans la première partie de ce guide : FIM Custom Activity – Guide de création (partie 1) Un deuxième article montre comment ajouter des activités et écrire le code source de […]
- Guide des bonnes pratiques des Stratégies de Groupes ou les GPO chez MSAprès le guide sur la fédération d’identité voici le tour des Stratégies de Groupes. Microsoft utilise évidement un grand nombre de GPO en interne pour des besoins diverses et variés, mais comment gérer efficacement des GPO pour un société internationale de cette taille ? Par exemple en suivant un ensemble de bonnes pratiques (et également […]
- Guide sur la fédération d’identité et le contrôle d’accèsSi vous vous intéressez de près ou de loin à la fédération d’identité avec ADFS, sachez que la version 2.0 du guide “A Guide to Claims-Based Identity and Access Control” écrit par l’équipe Microsoft Patterns and Practices est disponible en téléchargement sur le site de MS: A Guide to Claims-Based Identity and Access Control Merci […]
- Centrify Suite 2012 Update 1 disponibleLa version 2012 de la suite Centrify est disponible depuis fin septembre, j’attendais la version mise à jour pour m’étendre sur le sujet. Voilà l’Update 1 disponible. La Suite 2012 intègre un grand nombre de nouveautés : DirectControl 5.0, DeployManager 2.0, DirectAudit 2.0, etc. Dans les nouveautés les plus attendues, on peut noter les Zones […]
- SQL Server 2012 en Release CandidateAprès FIM 2010, voici SQL Server qui obtient sa publication en RC.Cette version de SQL Server orientée « Cloud » apporte également sont lot de nouvelles fonctionnalités et d’amélioration du moteur. Un effort particulier sur la partie SaaS a été fait. Pour télécharger SQL Server 2012 RC : Download Microsoft SQL Server 2012 Release Candidate Pour en […]
- Un token OTP pour jouer à Star Wars – The Old Republic
- HotFixes FIM2010 en direct par l’équipe produit de Redmond
- FIM 2010 Hotfix Build 4.0.3594.2 ReleasedA hotfix rollup package for Forefront Identity Manager 2010 (FIM 2010) is now available. The hotfix (build 4.0.3594.2) addresses a number of issues and provides some feature improvements. See the KB article at http://support.microsoft.com/kb/2520954 for a complete list and full description of changes in this release. Notably, this package improves performanc […]
- FIM 2010 Hotfix Build 4.0.3547.2 ReleasedA hotfix rollup package for Forefront Identity Manager 2010 (FIM 2010) is now available. The hotfix (build 4.0.3547.2) addresses a number of issues and provides some feature improvements. See the KB article at http://support.microsoft.com/kb/2028634 for a complete list and full description of changes in this release. Notably, this package resolved a issues i […]
- FIM 2010 Hotfix Build 4.0.3558.2 ReleasedA hotfix rollup package for Forefront Identity Manager 2010 (FIM 2010) is now available. The hotfix (build 4.0.3558.2) addresses a number of issues and provides some feature improvements. See the KB article at http://support.microsoft.com/kb/2272389 for a complete list and full description of changes in this release. Notably, this package provides a new redu […]
- FIM 2010 Hotfix Build 4.0.3576.2 ReleasedA hotfix rollup package for Forefront Identity Manager 2010 (FIM 2010) is now available. The hotfix (build 4.0.3576.2) addresses a number of issues and provides some feature improvements. See the KB article at http://support.microsoft.com/kb/2502631 for a complete list and full description of changes in this release. Notably, this package improves the SQL MA […]
- FIM 2010 Hotfix Build 4.0.3573.2 ReleasedA hotfix rollup package for Forefront Identity Manager 2010 (FIM 2010) is now available. The hotfix (build 4.0.3573.2) addresses a number of issues and provides some feature improvements. See the KB article at http://support.microsoft.com/kb/2417774 for a complete list and full description of changes in this release. Notably, this package significantly reduc […]
- FIM 2010 Hotfix Build 4.0.3594.2 Released
- Blog MSDN AD RMS
- AD RMS FAQ update - Can encryption keys or certificates be stored on SmartCards or hardware service modules?The AD RMS team recently had some inquiries on behalf of our customers about how to design an AD RMS solution that supports client-side storage of encryption keys and certificates. So we looked into it and now have an update on this topic that was just added to our current AD RMS FAQ on the TechNet Wiki site. Big thanks to Kevin Miller for providing the deta […]
- Message truncation when decrypting Outlook .Personal Store (.pst) files using the AD RMS Bulk Protection ToolWhen using the ActiveDirectory Rights Management Services Bulk Protection Tool (http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=11122)with Microsoft Outlook 2007 or 2010 Personal Store (.pst) files, you mayexperience a file truncation problem if Microsoft Outlook is set to process filesasynchronously. To prevent this issue, you can co […]
- AD RMS FAQ posted to TechNet WikiThere is now an Active Directory Rights Management Frequently Asked Questions AD RMS FAQ on the TechNet Wiki. Please, feel free to review, contribute to, and update this FAQ. Great thanks to Enrique Saggese for answering the vast majority of these questions and to Jim Groves for collecting most of those questions, and Brad Mahugh for driving this forward! Th […]
- AD RMS under the hood: Client bootstrapping, Step 1Hello, Alexey here again. Today I want to start the deep diving into client bootstrapping. Client bootstrapping occurs the first time each AD RMS user tries to protect or consume protected content (such as documents or messages) on an AD RMS client computer or device and includes three consecutive steps: Security Processor Certificate (SPC) creation also kn […]
- AD RMS under the hood: Server bootstrappingToday I'm acting as a conduit for one of the many AD RMS experts at Microsoft. Thanks to Alexey for sharing his knowledge about the inner workings of RMS! First of all let me introduce myself. My name is Alexey Goldbergs and I’m a Technology Solutions Professional on Security from Microsoft Russia. With this blog post I want to start the series which I […]
- EZ federation in AD RMSService Pack 1 for Microsoft Windows Server 2008 R2 provides a very cool new feature in AD RMS: You can federate with organizations running Microsoft Exchange Server 2010 through the Microsoft Federation Gateway. In case you haven't heard about the Microsoft Federation Gateway, this is how it's described by MSDN (http://msdn.microsoft.com/en-us/lib […]
- AD RMS ReportingThere's a new article in the TechNet Wiki that explains the purpose of the various reports you can generate in AD RMS: http://social.technet.microsoft.com/wiki/contents/articles/ad-rms-reports.aspx. It's a start, but we've put it in the Wiki so you can share with others how you've found the AD RMS reports useful. […]
- Specifying a nonstandard SQL port when installing AD RMSThe AD RMS setup wizard assumes that the SQL database server you use for the AD RMS configuration and logging databases is listening on the standard SQL TCP port, 1433. If your SQL server is configured to use a different port, this can create problems when you install AD RMS. There are a couple ways to work around this. The first is simply to specify the por […]
- Getting involved with the RMS communityAs a technical writer assigned the task of creating and maintaining documentation for AD RMS in the TechNet Library (http://technet.microsoft.com/en-us/library/cc771234.aspx), I like to think that our docs are the best place to go to get information about RMS. And in many ways they are: We strive to create a comprehensive set of documents about RMS that have […]
- E_ACCESSDENIED Error in RMS v1When the RMS v1 SP2 client is installed the following folder is automatically created on the machine: %allusersprofile%\AppData\Microsoft\DRM\Server. This folder is created to allow non-admin users, such as Network Service, to create the folder and licenses in the folder. This information only pertains to organizations running RMS v1, it is not applicabl […]
- AD RMS FAQ update - Can encryption keys or certificates be stored on SmartCards or hardware service modules?
- ADFS Product Support Blog
- Office Integration with MOSS and ADFSPreviously, Office Integration with SharePoint secured by forms based authentication was not possible. The new ability of the Office client applications in Office 2007 SP2 to perform a forms login helps to solve this problem. You will need to install this post SP2 fix to your client machines to gain this functionality. What is needed in conjunction with i […]
- ADFSDiag has been updated again!The updated tool can be found here. The attachment contains both 32 and 64 bit installers. A cool new feature - Claim Flow Analysis has been added to this version. I'll write up a quick blog on how to use this feature soon. […]
- Adding an ADFS Proxy ServerI'm going on an hour trying to get the screen shots formatted correctly. Live Writer is making them too small. I'll just attach the word document to the end if you want to see the pictures better. I'm done messing around with this for now! If you know what I'm doing wrong - please send me a comment! In this blog, I will discuss the st […]
- Interesting problem when adding an ADFS ProxyI am working on a blog post (step-by-step) for the Proxy component and I ran into a problem yesterday that ran me around pretty good. We have seen this issue or variations of it on some support cases recently, so I thought the actual problem itself would make a good post. The problem is caused by permissions to the private key on the Client Authentication C […]
- Using ADFS with Constrained DelegationWith ADFS - the authentication token issued is good for the web server with the agent installed. It is a local RPC token and cannot go off the box. With some additional configuration, you can configure ADFS to go off the box and delegate with a kerbitized back-end. There are some caveats - namely, a shadow account must exist in the resource forest. If yo […]
- Script to configure SharePoint to use ADFS authenticationMore great tools by the ADFS team... Problems with the web.config files are one of the more common issues we see with ADFS/MOSS cases in PSS. Now there is a script with will make the modifications for you. It is located on the SharePoint team blog and can be accessed here. […]
- ADFS Diagnostic ToolA huge thanks to the ADFS test team for developing such a great tool. Here is a quick "how to" The tool is very simple to use and provides a graphical UI. In order to perform distributed diagnosis, i.e. diagnose failures based on the configuration of multiple machines in the scenario, it’s necessary to copy the out file generated by the tool e […]
- Enabling debug logging for Claims Aware ApplicationsPlace the following in your applications web.config file. Place this after the section of the file. […]
- Update on configuring MOSS as a claims aware application====================================================================================== UPDATE: I'm not going to remove this blog or the original blog on the web.config entries - but I do want to make note that these web.config files should not be modified directly anymore. Please use the SetupSharePointADFS.vbs file to configure the MOSS applications […]
- ADFS Certificates - SSL, Token Signing, and Client Authentication CertsWe are seeing quite a few support calls relating to certificate problems. Many of these are due to a misunderstanding of how the various certificates are used. ADFS/PKI issues are often very difficult to diagnose for the following reason – a lack of logging telling you what the problem is. For example – if the SSL certificate on your Web Server is incorrec […]
- Office Integration with MOSS and ADFS