Profile avatar
josephryanries.bsky.social
Windows Escalation Engineer @ MSFT. I debug Windows, with a particular fondness for Active Directory and coding. Expect ultra-nerdy tweets. https://ryanries.github.io
107 posts 304 followers 51 following
Regular Contributor
Active Commenter

I can't imagine anyone out there is still using DES encryption, and if you are, I imagine you'd be too embarrassed to admit it, but finally the official death of DES is at hand, finally: techcommunity.microsoft.com/blog/Windows...

Not sure if we're parenting correctly... the toddler is currently running around the house yelling "THIS IS SPARTA" and kicking us in the shins

This kind of escalation really warms my heart

I need this: For this:

Dear LORD msedge.dll.pdb is >5 GIGABYTES how did I not know this

Saw some $10 eggs at HEB today. The hens are like

The one thing I miss most from my old Twitter account I deleted is the thread where I asked what annoyances you have AD administration and especially ADUC in general. What features does it need? What does it do that annoys you?

cabbage with smoked beef brisket sausage and rice

Customer: AD replication is broken. RPC 1722. Me: Your event log says you hit port exhaustion. Cx: I don't think it's port exhaustion. Me: CSFalconContainer.exe is using 8000 network sockets. Cx: That's normal. Me: ಠ_ಠ

The folks that most recently migrated the TechNet blogs (such as AskDS, etc.,) when asked if they planned on restoring the images to the blog posts, responded with "Given the age of the content, how valuable is it to your customers today?" :(

So I don't know the exact scalability limits of Microsoft's NDES server, but today I learned it is significantly less than 13,000 simultaneous requests. (All certs on the customer's entire network all expired all at the same time.)

Stumbled upon this code today: EnterCriticalSection(&CriticalSec); Which, to me, has "int the_number = 0;" energy. The always say naming things is the hardest part of programming, don't they?

Are you ready for the strong certificate mapping changes coming tomorrow, or is this the first time you're hearing about this and you're just going to let it happen to you and hope for the best?

Ah, the old broccoli-haired 20 year old showing up and saying "hey the President told me to come jack into your network" social engineering technique. Gets 'em every time.

PassFiltEx v1.6.2 Sorry for the excessively-rapid release cycle, but I got another cool feature (ApplyToTheseGroupsOnly) I really wanted to get out there. Read more: ryanries.github.io?title=passfi...

I released PassFiltEx v1.5.55 today, with the new ability to add super-blacklisted tokens to the blacklist file. Any line in the blacklist file that starts with an exclamation mark (!) will be blocked, regardless of how long the overall password is. TokenPercentageOfPassword will be ignored.

Nasty gMSA case at work. New KDS root key mysteriously created on New Year's when no one was even working (allegedly.) Caused thousands of gMSA auth failures 2 weeks later when the gMSA rolled its pwd and apparently used old key to generate pwd but KDC validates using new root key.

Congress: today we swipe right on tiktok Zoomers: thats ... not how it ... what Congress: we flip the phone shut Zoomers: ...? Congress: with this bill we open up 'my computer' and drag the tiktok file to the recycle bin Zoomers: ITS ON A PHONE. Congress: we have degaussed the monitor of freedom

The symbolism of Trump having all his billionaire buddies nice and warm at his indoor inauguration while his supporters are literally left out in the cold is just too good.

Good news everyone! Now with Tiktok out of the way, there is no more data harvesting and selling going on. Everyone back to business.

Good news! We've added AI into everything to take away the drudgery of our daily jobs. For example, AI can automatically generate git commit messages for us using summaries of the code we've written! Downside is they're incorrect almost 100% of the time, but uh we're working on that!

Looking through some old photos. Found my Windows desktop from 2001. Explorer shell replaced with LiteStep. 256MB RAM... 1024x768 resolution...

I released an update to PassFiltEx today, v1.4.17 Added the 'BlockRepeatingChars' setting, which will block sequences of repeating characters in passwords, such as 'aaa', '111', etc. Free and open source, as always. github.com/ryanries/Pas...