Ok, y'all, I heard you folx know your way around this "linux" thing, right?
-
@nyanbinary Weird. Maybe it's the inbound settings. Have you made sure to port forward a public IP to the DC? Make sure not to miss SMB and RDP as those are important.
@cR0w hm, I guess this would actually be easier if I enabled RDP instead of just using remote PS...
-
Ok, y'all, I heard you folx know your way around this "linux" thing, right?
For a first-timer, which WSL distro would you recommend to install on the domain controller?
@nyanbinary Aahh! You can't just ask what distro to use on fedi, you'll start a holy war! Run! Escape while you can!
-
@cR0w hm, I guess this would actually be easier if I enabled RDP instead of just using remote PS...
@nyanbinary Definitely but make sure to disable NLA.
-
@nyanbinary Aahh! You can't just ask what distro to use on fedi, you'll start a holy war! Run! Escape while you can!
@varx hm, I don't get it. Aren't they, like, all the same but just different skins?
-
Ok, y'all, I heard you folx know your way around this "linux" thing, right?
For a first-timer, which WSL distro would you recommend to install on the domain controller?
@nyanbinary DBAN (Darik's Boot And Nuke)
-
@nyanbinary Is gentoo available in WSL yet? That would be the ideal combination with a DC.
@cR0w @nyanbinary I’m sorry, but this is terrible advice. A DC is a highly privileged server, and installing any WSL on it would be a bad idea unless it’s Qubes.
-
Ok, y'all, I heard you folx know your way around this "linux" thing, right?
For a first-timer, which WSL distro would you recommend to install on the domain controller?
@nyanbinary Kali Linux. Goht quiet so can fight god
-
@nyanbinary Is gentoo available in WSL yet? That would be the ideal combination with a DC.
@cR0w @nyanbinary Be sure to use GCC flag -funroll-ldap for totally sick DC-specific optimizations.
-
@nyanbinary Kali Linux. Goht quiet so can fight god
@da_667 hm, this is a good point. Given my endpoint security monitoring tool doesn't capture WSL stuff this should help reduce false positives by offloading noisy workloads to WSL!
-
@nyanbinary Kali Linux. Goht quiet so can fight god
-
@cR0w @nyanbinary Be sure to use GCC flag -funroll-ldap for totally sick DC-specific optimizations.
@fuzzyfuzzyfungus @cR0w @nyanbinary USE="bluekeep kerberoast wannacry"
-
@da_667
cries holding picture of ScreamingGoat
@nyanbinary -
@da_667
cries holding picture of ScreamingGoat
@nyanbinary -
-
@cR0w @nyanbinary I’m sorry, but this is terrible advice. A DC is a highly privileged server, and installing any WSL on it would be a bad idea unless it’s Qubes.
@rgsteele @cR0w @nyanbinary Actual real DC or home lab you don't care about security on and you're OK if it implodes* when you patch it?
*More than usual
-
@rgsteele @cR0w @nyanbinary Actual real DC or home lab you don't care about security on and you're OK if it implodes* when you patch it?
*More than usual
@SmartAsABrick they don't even trust me with T2 admin accounts at work, I wonder why (homelab)
-
@SmartAsABrick they don't even trust me with T2 admin accounts at work, I wonder why (homelab)
@nyanbinary just skip to the end boss and run Server Core. You get all the usability of the Linux command line with all of the powerful shell features of the Windows Command Processor.
-
S skorpy@chaos.social shared this topic
