Security and Assurance
Security and compliance in datacenters, private cloud and hosting environments.
-
ADFS Management Console missing from RSAT
As Windows Server 2016 Core no longer supports Minimal UI I setup a management server for remote management. Installed all the management tools, but not there is no MMC for ADFS.
44 votes -
Provide easy to use PowerShell cmdlets for managing File and folder permissions (ACLs)
PowerShell Get-Acl and Set-Acl (to set permissions on folders/files) currently in Windows Server are extremely hard to use and do not offer nearly the same level of functionality in older commands like ICACLS.EXE. It would be great if you could manage ACLs for folders and files using an easier to use set of PowerShell cmdlets, like we can do with SMB shares. Something like Get-ItemAccess, Grant-ItemAccess, Revoke-ItemAccess, Deny-ItemAccess and Remove-ItemAccess would be great!
51 votes -
Fix secedit in nano server
secedit is broken in nano server (checked both TP3 and TP4) and it simply doesn't work. I have asked about it @nano server forum as well without any response so far.
https://social.technet.microsoft.com/Forums/windowsserver/en-US/894a3a8f-64f4-4605-b1ff-9698a53814db/issues-running-secedit-on-nano-server?forum=NanoServerThere is absolutely no way to harden a nano server once it is deployed. can it be fixed? or is there new way to work with local security policy on nano server that I am unaware of?
3 votesThanks for the feedback, we are looking into some options here.
-
Provide native PowerShell cmdlets for managing local security policy
There is no way to either view or manage local security policy using PowerShell. It is possible to install a utility such as secedit.exe and make calls out to it, but this should be functionality that resides within native PowerShell cmdlets.
This would greatly ease server management, and in particular allow for viewing settings that would otherwise not be available to people without using a GUI tool.12 votes -
Make a SUDO equivalent for elevating to an Administrator without runas.
Runas works OK, but SUDO on Linux works well for allowing administrators to elevate for a one time only commands.
14 votes
- Don't see your idea?