Friday 24 November 2017

US-CERT Windows ASLR Vulnerability (registry fix)

Or, How to fix Windows ASLR vulnerability on multiple domain computers

Vulnerability Notification Summary

Original release date: November 20, 2017
The CERT Coordination Center (CERT/CC) has released information on a vulnerability in Windows Address Space Layout Randomization (ASLR) that affects Windows 8, Windows 8.1, and Windows 10. A remote attacker could exploit this vulnerability to take control of an affected system.

US-CERT encourages users and administrators to review CERT/CC VU #817544 and apply the necessary workaround until a patch is released.

How to fix this vulnerability?

Open a Notepad > Copy and Paste the contents given below:
----------------------------------------------------------------------------------------------------------------------
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel]

"MitigationOptions"=hex:00,01,01,00,00,00,00,00,00,00,00,00,00,00,00,00
--------------------------------------------------------------------------------------------------------------------------------









Save this notepad file as .reg (In my case, I saved this file with name as ASLAR.reg)

To deploy this registry setting on single computer, just double click on this file and Say Yes if prompted.

You can use the same registry key values in GPO to apply it on multiple domain computers.

GPO registry configurations should appear like below:

























Cheers, let me know if you have any query of feedback on this..

Thursday 21 September 2017

Export O365 mailboxes with assigned licenses types

Export O365 mailboxes with licenses types assigned
Or, PowerShell command to export O365 user’s mailboxes with license assignment details
Or, Export mailboxes with assigned license details

Descriptions: If you are looking for a simplest way of exporting all users’ mailboxes with license types assigned to them, this article is for you. You can use Azure Active Directory PowerShell command to export the mailboxes with licenses types assigned to them.

Steps:
Login to O365 server using Azure Active Directory PowerShell Administrative privileges.

Connect O365 Azure Active Directory
connect-msolservice

























Run below command to get the report:
Get-MSOLUser -All | select userprincipalname,islicensed,{$_.Licenses.AccountSkuId} | export-csv d:\temp\userslicense.csv

You can change the export folder path if you have a different one.

Cheers, please write me back if you have query of feedback on this.