Documenting the IT Journey
Thoughts, tutorials, and updates from my journey
Attach to a logged-on user's desktop with mstsc /shadow instead of locking it: the one-time target setup, passwordless connecting with cmdkey and Shadow=2, reading session state with qwinsta, connecting over the LAN or Tailscale, and the credential-type gotcha that keeps RDP prompting.
A simple function that checks web, zone, mail routing, SPF, DKIM, DMARC, MTA-STS, TLS-RPT and BIMI records for a domain in one colour-coded report, with a two-step DKIM lookup, profile installation, and a concise guide to managing PowerShell functions
What it means to be a security-first IT support professional, with a worked example of securing a personal VPS and tenant, identity-based controls, defence in depth, AI-driven social engineering, network and physical controls, and how to deliver great support without adding friction
Why the security attributed to NAT is a side effect of state and policy rather than translation, with a packet-level flow through pfSense, why RFC1918 and bogon blocking are still required, and how ALGs bind firewall pinholes to payload content
Resetting a forgotten local account password on Windows 11 and Windows Server using the utilman.exe swap in WinRE, including BitLocker gating, Server and Server Core variants, and Domain Controller exceptions
Install guide for UniFi OS Server on Debian and Ubuntu, covering Podman dependencies, the installer binary, service management, port changes from Network Server, and migration from the legacy controller
