Deploy a new VLAN in production
Deploy a new VLAN end to end in production with an IP plan, switch trunks, gateway, DHCP or relay, firewall policies, a pilot access port, validation criteria, and a tested rollback.
View →
Library
Procedures
Des méthodes structurées, vérifications et commandes directement utilisables.
Diagnose degraded Active Directory replication
Diagnose degraded Active Directory replication by separating topology, DNS, network and RPC reachability, time and Kerberos, replication errors, and directory health before attempting intrusive repair.
View →Change the password of a Windows service account
Rotate the password of a Windows service account without causing an outage by inventorying services, scheduled tasks, IIS pools, and applications, coordinating the change, validating dependent services, and checking for failed logons afterward.
View →Respond to a suspected compromised Microsoft 365 account
Contain a suspected compromised Microsoft 365 account by collecting sign-in evidence, blocking access, revoking sessions, resetting credentials, reviewing MFA, mailbox rules, forwarding, consented applications, and validating the account before reactivation.
View →Properly offboard a Microsoft 365 user
Offboard a Microsoft 365 user without losing data by blocking sign-in, revoking sessions, preserving mailbox and OneDrive content, reviewing delegations, devices and groups, removing licenses at the correct time, and deleting only when retention allows it.
View →Create a dedicated vMotion network
Create a dedicated vMotion network on ESXi or vSphere with VMkernel interfaces, VLAN and MTU consistency, redundant uplinks, vmkping validation, and a pilot migration before production use.
View →Protect an API with rate limiting
Protect an API with rate limiting without blocking legitimate clients by measuring baseline traffic, choosing the right key, testing limits in dry-run mode, defining burst behavior and HTTP 429 responses, and adding observability.
View →Set up a systemd timer
Replace a fragile cron job with a controlled systemd timer using a oneshot service, OnCalendar scheduling, Persistent behavior when appropriate, systemd-analyze validation, journalctl logs, and a simple rollback.
View →Configure a Backup Copy to a second site
Configure a Veeam Backup Copy to a second site with a dedicated target repository, network window, independent retention, encryption where required, health checks, and a restore test from the copied backup.
View →Set up an immutable backup repository
Deploy an immutable backup repository using a dedicated hardened Linux server, one-time deployment credentials, immutability, role separation, restricted management paths, and tested deletion and restore behavior.
View →