The content below is taken from the original ( How to use Microsoft 365 Universal Print), to continue reading please visit the site. Remember to respect the Author & Copyright.

Brad Sams wrote earlier this year that Microsoft’s Universal Print was entering private preview. In Microsoft’s own words, here is a description of the service:

Universal Print, is a Microsoft 365 cloud-based print infrastructure that will enable a simple, rich and secure print experience for users and reduce time and effort for IT.

Windows 10 devices joined to Azure Active Directory (AAD) can already access printers installed on servers joined to Windows Server Active Directory (AD). So, where does Microsoft 365 Universal Print fit into the picture?

Accessing Windows Server Active Directory resources

In environments where Azure AD Connect is used to synchronize Windows Server Active Directory (AD) users to the cloud, devices joined to AAD can access AD resources. Windows 10 knows the AD domain name and uses it to search for available Windows Server domain controllers on the local network. If it finds one, Windows 10 is issued a Kerberos Ticket-Granting Ticket (TGT) so that it can access AD resources.

Users can authenticate and access AD resources if they know where to find them. For example, if they have the UNC path to a file share or URL of a webserver using Windows integrated security. But without knowing the location or at least a name, locating AD resources isn’t a smooth experience on AAD-joined devices because tools can’t use LDAP to query AD.

Hybrid Cloud Print

To partly address this issue, Microsoft developed a solution called Hybrid Cloud Print to connect Azure AD joined devices, or users with BYOD, to AD-joined print servers. Hybrid Cloud Print is supported in Windows 10 version 1703 and later and it requires Windows Server 2016 print servers. In addition to having an Azure AD tenant synchronized to AD using Azure AD Connect, a Mobile Device Management (MDM) service is required to configure print settings on each device.

Image # Expand

Microsoft 365 Universal Print simplifies cloud printing

Hybrid Cloud Print is a complex solution that requires several different components, including Azure AD Application Proxy, new Internet Information Services (IIS) service endpoints, a dedicated connector server and a dedicated print server.

But unlike Hybrid Cloud Print, Universal Print doesn’t need any on-premises infrastructure if you have Universal Print-compatible printers. Universal Print runs in Microsoft Azure, it is fully integrated with Azure AD, and it supports single sign-on. If non-Universal Print-compatible printers are used, then a Universal Print connector application must be deployed on premises.

Image # Expand

Printers registered with Universal Print work with Windows 10 version 1903 and later devices. During the preview, only Enterprise and Education SKUs are supported, although the supported SKUs might change once the product reaches general availability according to a post by Microsoft.

In-market printers don’t currently support connecting to Universal Print directly. But manufacturers are planning to release new models and updates to existing printer firmware to support the Universal Print protocol. In the meantime, the Universal Print connector is required to make the solution work. The connector should be installed on a computer running Windows where the printers you want to share are installed. Microsoft says that some of its partners are offering appliance devices that can be used instead of the Universal Print connector, but it doesn’t provide any further details.

Registering Universal Print printers in Azure Active Directory

Printers that support Universal Print directly can be registered with Azure AD by following the manufacturer’s instructions. For all other printers, the Universal Print connector must be used. The Universal Print connector can be installed on Windows 10 Pro or Enterprise version 1809 or later, or Windows Server 2016 or later. It requires the .NET Framework 4.7.2 or a later version.

• Download and install the Universal Print connector. It can be downloaded from Microsoft’s website here.
• Once the Universal Print connector is installed, sign into your organization’s Azure AD tenant using an account with the Printer Administrator or Global Administrator
• The connector name must then be registered in Azure AD. You need to provide a name for the connector and click Register.
• After the connector is registered, the connector shows a list of printers that can be registered with Universal Print.

Managing Universal Print printer settings and access control

Microsoft 365 administrators can define printer metadata settings and default preferences. For example, an administrator can set the printer location and color configuration. For a complete list of the settings and metadata that can be configured, see Microsoft’s website here.

By default, Universal Print only gives admins permission to access printers. Additional users or groups must be explicitly granted permission in the administrative portal. Printers are only discoverable by users once they have been shared. Again, this can be done in the admin portal by selecting the printer and then clicking Share Printer.

Universal Print print job management

Universal Print lets admins see the status of print jobs. Reports showing print job history can also be downloaded. Reports include printer usage and user usage, both for the last 30 days. Admins can also cancel active print jobs.

Image # Expand

Adding Universal Print printers to Windows 10 devices

Users can add Universal Print printers to Windows 10 in the Settings app.

Universal Print versus Windows Print Server

As you can see, Universal Print is basic if you compare it to all the features available in Windows Server. A year after Microsoft first started talking about the service, there doesn’t seem to be any way to automatically add printers registered with Universal Print to Windows client devices. Or the ability to deploy the solution for high availability.

But at launch, organizations that have simple printing needs might find Universal Print an interesting alternative to Hybrid Cloud Print. And Universal Print could ultimately enable the removal of all on-premises Windows Server print infrastructure. Hopefully, Microsoft will gradually add more advanced functionality to Universal Print as interest in the service grows.

If your organization is interested in getting involved with the private preview, fill out this form here.

The post How to use Microsoft 365 Universal Print appeared first on Petri.

The content below is taken from the original ( Announcing Virtually Maker Faire), to continue reading please visit the site. Remember to respect the Author & Copyright.

A 24-Hour Global “Show and Tell” for Makers Featuring the Civic Response to COVID-19

Read more on MAKE

The post Announcing Virtually Maker Faire appeared first on Make: DIY Projects and Ideas for Makers.

The content below is taken from the original ( It has been 20 years since cybercrims woke up to social engineering with an intriguing little email titled ‘ILOVEYOU’), to continue reading please visit the site. Remember to respect the Author & Copyright.

Hahaha, we were pretty gullible

Twenty years have passed since cybercrooks demonstrated the role exploiting human psychology could play in spreading malware. Remember “ILOVEYOU”?…

The content below is taken from the original ( Introducing 3 new HP Chromebook Enterprise devices built to keep business running), to continue reading please visit the site. Remember to respect the Author & Copyright.

The content below is taken from the original ( How to use the DISM Tool to Manage Windows Features), to continue reading please visit the site. Remember to respect the Author & Copyright.

The Deployment Image Servicing and Management (DISM) command-line tool and associated Powershell module are powerful tools to manipulate Windows image .wim files, virtual hard disks .vhd files, and control of Windows features and drivers.

Even more powerful is the ability to service offline images. In the past, there were many utilities that were used, but DISM is intended to replace several such as PEimg, Intlcfg, ImageX, and Package Manager.

Using DISM

To start with, open an administrative command prompt and simply type dism. Initial output is the version and options available, of which there are many.

Image #1 Expand

In this article, we are focused on how to use DISM to specifically add or remove Windows features. With that in mind, let’s explore what functionality exists to enable this.

DISM Feature Functionality

There are four main functions that are used with managing features. Below we will run through each one and explore exactly how they are used.

• Get-Features
• Get-FeatureInfo
• Enable-Feature
• Disable-Feature

Get-Features

To understand what features are available, and the current state, we use the /Get-Features parameter. It’s important to note that we are using /Online for all of the commands here as we are operating on the current operating system and not an offline image.

dism /Online /Get-Features

Image #2 Expand

When this command is run, an output of all features and their current state is shown on screen. There are many and the default List view can be difficult to read. Thankfully there is a convenient format option that makes the output easier to parse.

dism /Online /Get-Features /Format:Table

Image #3 Expand

Now that we know what features are available, let’s pick one in particular to enable.

Get-FeatureInfo

To learn more about a specific feature, we need to use the Get-FeatureInfo option. This command requires an additional parameter as well, FeatureName that contains the name of the feature to query. In this case, we are looking for the BITS (Background Intelligent Transfer Service) feature.

dism /online /Get-FeatureInfo /FeatureName:BITS

Image #4 Expand

There are a couple of useful results returned. Notably, the Restart Required and Version properties. This is useful to know how installing the feature will affect the system and if you have the correct version. Next is enabling the feature on the system, to do that we use the Enable-Feature option.

Enable-Feature

If the feature that you want to enable has the sources already included in the operating system and is a stand-alone feature, such as BITS, then the command is very simple.

dism /Online /Enable-Feature /FeatureName:BITS

Image #5 Expand

There are a few other commands that are very useful.

• Source – /Source:X:\\WindowsSources\\SxSIf the sources are not available for the requested feature, you can specify a path. This is common for features such as .NET 3.5.
• LimitAccess – /LimitAccessIf you want to prevent DISM from querying Microsoft Update for sources, this will prevent DISM from doing just that.
• All – /AllWithout specifying /All, only the requested feature will be installed, but using All will allow all parent features to be installed as well. This can help with dependency management sometimes.

Finally, perhaps it’s been decided that using BITS is not necessary, therefore we need to remove the feature from the operating system.

Disable-Feature

To simply remove a feature, it’s essentially the same as Enable-Feature but the inverse.

dism /Online /Disable-Feature /FeatureName:BITS

Image #6 Expand

There is one additional option that can be used which is /Remove. This will remove the feature but not the features manifest. This is typically used to free up space in an image. Upon installation request, a remote source would need to be specified to install the feature.

DISM Powershell Module

Using PowerShell, you can access many of the same features of DISM but in a PowerShell, object-centric, manor. Specifically, the features map as below.

• /Get-Features → Get-WindowsOptionalFeature
• /Get-FeatureInfo → Get-WindowsOptionalFeature -FeatureName
• /Enable-Feature → Enable-WindowsOptionalFeature
• /Disable-Feature → Disable-WindowsOptionalFeature

Let’s quickly walk through how these features work in comparison to the standard command-line DISM tool.

You may have to import the DISM module, Import-Module DISM

Image #7 Expand

Once the module is loaded, there are many commands but we will focus on the four covered in this article.

Get-WindowsOptionalFeature

One immediate difference is that there is no Format parameter. This is because you are able to format the returned objects in any number of ways using PowerShell. The way to get a similar table view is to do the following.

Get-WindowsOptionalFeature -Online | Format-Table -AutoSize

Image #8 Expand

Next, we will want to learn more about an existing feature.

Get-WindowsOptionalFeature -FeatureName

You will notice that the cmdlet used is the same as before, but using a parameter instead. Due to how PowerShell is generally structured, this is the preferred method. To do this we will pass in the feature that we want to learn more about.

Get-WindowsOptionalFeature -Online -FeatureName BITS

Image #9 Expand

As you can see, the same information that was returned by DISM is contained in an object returned in PowerShell. Now that we have our feature to add, let’s Enable this feature.

Enable-WindowsOptionalFeature

There are several ways to use this command. The most analogous to the DISM command-line tool is the following.

Enable-WindowsOptionalFeature -Online -FeatureName BITS

Image #10 Expand

If you have a series of features or know the one you want, you can use the pipeline to pass these in. Below are two examples of how to do this.

# Pass an array of features to be enabled
@("BITS") | ForEach-Object { Enable-WindowsOptionalFeature -Online -FeatureName $_ }

# Retrieve the feature first and then Enable the feature
Get-WindowsOptionalFeature -Online -FeatureName BITS | Enable-WindowsOptionalFeature -Online

Finally, we need to disable BITS as it is no longer needed.

Disable-WindowsOptionalFeature

Just like the enable cmdlet, we simply need to pass the feature name to disable.

Disable-WindowsOptionalFeature -Online -FeatureName BITS

Image #11 Expand

Conclusion

Whether you use DISM through the command-line or through PowerShell, there is a lot of functionality available to manage Windows Features. Not only can DISM be used on a running system, but if you have offline images, it can be used to manage those as well!

The post How to use the DISM Tool to Manage Windows Features appeared first on Petri.

The content below is taken from the original ( BOINC Radio is discussing BOINC hardware this Friday. Let us know what you use to crunch and what you think about it!), to continue reading please visit the site. Remember to respect the Author & Copyright.

submitted by /u/jring_o to r/BOINC
[link] [comments]

The content below is taken from the original ( Google’s Web Vitals helps websites put visitors first), to continue reading please visit the site. Remember to respect the Author & Copyright.

Browsing the internet might be lightning fast compared to the clunky dial-up days of yesteryear, but for many of us it’s still not fast enough. Now, Google is introducing a new initiative that will help developers make sure their pages load swiftly,…

The content below is taken from the original ( Introducing Our Newest Lab Environments: Lab Playgrounds), to continue reading please visit the site. Remember to respect the Author & Copyright.

Other labs

Cloud Academy is constantly growing the number of hands-on labs to guide you in active learning, plus lab challenges to test you in real deployments without (too much) hand-holding.

What’s the difference between hands-on labs, lab challenges, and lab playgrounds?

Hands-on Labs

Lab Challenges

• Validate your technical problem-solving skills in a real environment
• Troubleshoot complex scenarios to practice what you learned
• Develop production experience that translates into real-world expertise

Lab Playgrounds

Lab playgrounds provide a safe and secure sandbox environment for you to explore your own ideas, follow along with Cloud Academy courses, or answer your own questions — all without having to install any software on your local machine. You should feel free to take risks and try unfamiliar tools and commands to learn more about working in a live environment — even if it means running into a dead end and needing to start the lab over.

• Explore and experiment in live environments without a set of objectives or checks to complete
• No software installations or account credentials needed — the system automatically launches all the necessary resources
• Use for an extended duration with an average duration of four hours

Go ahead, take a guided, hands-on lab, a non-guided lab challenge, or explore a lab playground, and tell us what you think in the comments below.

The post Introducing Our Newest Lab Environments: Lab Playgrounds appeared first on Cloud Academy.

The content below is taken from the original ( Are you fixing that switch? Or setting it up as a Minecraft server?), to continue reading please visit the site. Remember to respect the Author & Copyright.

Cisco shows Cisco’s shown off how you can brick it on a Catalyst 9300

Cisco has Cisco’s published a guide to running Minecraft on its switches.…

The content below is taken from the original ( Something a bit phishy in your inbox? You can now email suspected scams straight to Blighty’s web takedown cops), to continue reading please visit the site. Remember to respect the Author & Copyright.

National Cyber Security Centre publishes scam-busting address

The National Cyber Security Centre has launched the Suspicious Email Reporting Service: a new email address for reporting scam mails to a government department that might actually do something about it.…

The content below is taken from the original ( Arm is offering early-stage startups free access to its chip designs), to continue reading please visit the site. Remember to respect the Author & Copyright.

The year’s already off to a rocky start for hardware companies, and we’re only beginning to see the true impact COVID-19 will ultimately have on the market. Arm — the U.K. UK company behind the designs of chips for everyone from form Apple to Qualcomm to Samsung — is hoping to kickstart developing by offering up access to around 75% of its chip portfolio for free to qualified startups.

The move marks an expansion of the company company’s Flexible Access program. With it, Arm will open access to its IP for early-stage early stage startups. While some of the biggest companies pay the chip designer big bucks for that information, the cost can be prohibitive for those just starting out.

“In today’s challenging business landscape, enabling innovation is critical – now more than ever, startups with brilliant ideas need the fastest, most trusted route to success and scale,” SVP Dipti Vachani, said in a statement. “Arm Flexible Access for Startups offers new silicon entrants a faster, more cost-efficient path to working prototypes, resulting in strengthened investor confidence for future funding.”

It’s a nice bit of access for up and coming startups. Of course, Arm’s not simply doing this out of the goodness of its heart. The company certainly has a vested interest interested in helping foster hardware startups amid what could shape up to be an unprecedented slowdown slow down for the industry after a few years of rapid funding and growth.

Interested parties can access the full list of available IPhere. Arm believes the launch of Flexible Access for Startups could help companies accelerate time to market by up to a year.

The content below is taken from the original ( Who’s still using Webex? Not even Cisco: Judge orders IT giant to use rival Zoom for virtual patent trial), to continue reading please visit the site. Remember to respect the Author & Copyright.

It would be rather awkward if Switchzilla’s own video-link app fell over mid-proceedings, wouldn’t it?

A judge has ordered Cisco to use arch-rival Zoom rather than its own video-conference offering Webex to virtually attend a patent-infringement trial.…

The content below is taken from the original ( Tesla pushes Tesla Semi deliveries to 2021), to continue reading please visit the site. Remember to respect the Author & Copyright.

Tesla is pushing back plans to produce and deliver its all-electric Class 8 truck until 2021, the company said in its quarter earnings report Wednesday. The move puts the Tesla Semi two years behind the automaker’s previous target.

“We are shifting our first Tesla Semi deliveries to 2021,” the company said without providing any more details.

The Tesla Semi was first unveiled in November 2017 in a splashy ceremony in Hawthorne, Calif. on the grounds of Tesla’s design studio and Musk’s other company, SpaceX . During the initial debut, Musk promised the truck would drive like its other passenger vehicles, the Model X,  Model S and Model 3. The truck also boasted some eye-popping specs that included the ability to travel 500 miles on a single battery charge when fully loaded and driving 65 miles per hour.

While the company had interest from customers with companies like Walmart and Anheuser-Busch putting in pre-orders, the vehicle program wasn’t hasn’t been able to meet the 2019 target.

Earlier this year in its fourth quarter earnings report, Tesla provided one of the first updates on the Tesla Semi in months, stating that it was “planning to produce limited volumes of Tesla Semi this year.”

The content below is taken from the original ( Tesla’s ‘full self-driving’ feature is coming in subscription form), to continue reading please visit the site. Remember to respect the Author & Copyright.

During the Q1 2020 earnings call on Wednesday, Tesla CEO Elon Musk confirmed that the company’s “Full Self-Driving” system will become available as a monthly subscription later this year.Tesla has been installing the necessary hardware for its autono…

The content below is taken from the original ( Below is a list of free courses that vendors have made available. Sign up and skill up), to continue reading please visit the site. Remember to respect the Author & Copyright.

submitted by /u/Chapungu to r/sysadmin
[link] [comments]

The content below is taken from the original ( [Showoff Saturday] I made a web app that allows you to watch YouTube coding tutorials undistracted and add notes to them.), to continue reading please visit the site. Remember to respect the Author & Copyright.

submitted by /u/PurpleNippies to r/webdev [link] [comments]

The content below is taken from the original ( Raspberry Pi’s improved camera module supports interchangeable lenses), to continue reading please visit the site. Remember to respect the Author & Copyright.

Raspberry Pi has launched a new high-quality, interchangeable lens camera for budding photographers or folks who want to learn how integrate a camera into their build projects. It comes with a 7.9mm (Type 1/2.3) Sony IMX477 12.3-megapixel back-illumi…

The content below is taken from the original ( Virtual meetings in Animal Crossing are so last month. Behold the virtual computer museum), to continue reading please visit the site. Remember to respect the Author & Copyright.

Social simulation in an era of social distancing

News reaches Vulture Central of more retro computing goodness courtesy of the hit game Animal Crossing and an enterprising member of staff at the currently shuttered Centre for Computing History.…

The content below is taken from the original ( Intel is offering more 14nm Skylake desktop processors, we repeat: More 14nm Skylake desktop processors), to continue reading please visit the site. Remember to respect the Author & Copyright.

10th-generation Core additions land 10th-generation Core series lands with up to 10 CPU cores, 5.3GHz max

Intel this week unveiled the desktop processors in its 10th-generation Core series, the headline component being the 10-core i9-10900K that can run up to 5.3GHz.…

The content below is taken from the original ( Fight off that virus on RISC OS!), to continue reading please visit the site. Remember to respect the Author & Copyright.

Well, in a game, anyway. Rick Murray has found himself inspired by the pandemic that has had such a dramatic effect on all our lives, and written a game for people to while away those lockdown hours – Virus! Rick Murray’s Virus! – title screen The game pits you as a single white bloodcell, in […]

The content below is taken from the original ( Deploying Gateway using a Raspberry Pi, DNS over HTTPS and Pi-hole), to continue reading please visit the site. Remember to respect the Author & Copyright.

Like many who are able, I am working remotely and in this post, I describe some of the ways to deploy Cloudflare Gateway directly from your home. Gateway’s DNS filtering protects networks from malware, phishing, ransomware and other security threats. It’s not only for corporate environments – it can be deployed on your browser or laptop to protect your computer or your home WiFi. Below you will learn how to deploy Gateway, including, but not limited to, DNS over HTTPS (DoH) using a Raspberry Pi, Pi-hole and DNSCrypt.

We recently launched Cloudflare Gateway and shortly thereafter, offered it for free until at least September to any company in need. Cloudflare leadership asked the global Solutions Engineering (SE) team, amongst others, to assist with the incoming onboarding calls. As an SE at Cloudflare, our role is to learn new products, such as Gateway, to educate, and to ensure the success of our prospects and customers. We talk to our customers daily, understand the challenges they face and consult on best practices. We were ready to help!

One way we stay on top of all the services that Cloudflare provides, is by using them ourselves. In this blog, I’ll talk about my experience setting up Cloudflare Gateway.

Gateway sits between your users, device or network and the public Internet. Once you setup Cloudflare Gateway, the service will inspect and manage all Internet-bound DNS queries. In simple terms, you point your recursive DNS to Cloudflare and we enforce policies you create, such as activating SafeSearch, an automated filter for adult and offensive content that’s built into popular search engines like Google, Bing, DuckDuckGo, Yandex and others.

There are various methods and locations DNS filtering can be enabled, whether it’s on your entire laptop, each of your individual browsers and devices or your entire home network. With DNS filtering front of mind, including DoH, I explored each model. The model you choose ultimately depends on your objective.

But first, let’s review what DNS and DNS over HTTPS are.

DNS is the protocol used to resolve hostnames (like https://ift.tt/ghWyhd) into IP addresses so computers can talk to each other. DNS is an unencrypted clear text protocol, meaning that any eavesdropper or machine between the client and DNS server can see the contents of the DNS request. DNS over HTTPS adds security to DNS and encrypt DNS queries using HTTPS (the protocol we use to encrypt the web).

Let’s get started

Navigate to https://dash.teams.cloudflare.com. If you don’t already have an account, the sign up process only takes a few minutes.

Configuring a Gateway location, shown below, is the first step.

Conceptually similar to HTTPS traffic, when our edge receives an HTTPS request, we match the incoming SNI header to the correct domain’s configuration (or for plain text HTTP the Host header). And when our edge receives a DNS query, we need a similar mapping to identify the correct configuration. We attempt to match configurations, in this order:

1. DNS over HTTPS check and lookup based on unique hostname
2. IPv4 check and lookup based on source IPv4 address
3. Lookup based on IPv6 destination address

Let’s discuss each option.

DNS over HTTPS

The first attempt to match DNS requests to a location is pointing your traffic to a unique DNS over HTTPS hostname. After you configure your first location, you are given a unique destination IPv6 address and a unique DoH endpoint as shown below. Take note of the hostname as you will need it shortly. I’ll first discuss deploying Gateway in a browser and then to your entire network.

DNS over HTTPS is my favorite method for deploying Gateway and securing DNS queries at the same time. Enabling DoH prevents anyone but the DNS server of your choosing from seeing your DNS queries.

Enabling DNS over HTTPS in browsers

By enabling it in a browser, only queries issued in that browser are affected. It’s available in most browsers and there are quite a few tutorials online to show you how to turn it on.

* Chromium based browser. Same support as Chrome
** Most recent version of Edge is built on Chromium

Chromium based browsers

Using Chrome as an example on behalf of all the Chromium-based browsers, enabling DNS over HTTPS is straightforward, but as you can see in the table above, there is one issue: Chrome does not currently support custom servers. So while it is great that a user can protect their DNS queries, they cannot choose the provider, including Gateway.

Here is how to enable DoH in Chromium based browsers:

Navigate to chrome://flags and toggle the beta flag to enabled.

Firefox

Firefox is the exception to the rule because they support both DNS over HTTPS and the ability to define a custom server. Mozilla provides detailed instructions about how to get started.

Once enabled, navigate to Preferences -> General -> Network Security and select ‘Settings’. Scroll to the section ‘Enable DNS over HTTPS’, select ‘Custom’ and input your Gateway DoH address, as shown below:

Optionally, you can enable Encrypted SNI (ESNI), which is an IETF draft for encrypting the SNI headers, by toggling the ‘network.security.esni.enabled’ preference in about:config to ‘true’. Read more about how Cloudflare is one of the few providers that supports ESNI by default.

Congratulations, you’ve configured Gateway using DNS over HTTPS! Keep in mind that only queries issued from the configured browser will be secured. Any other device connected to your network such as your mobile devices, gaming platforms, or smart TVs will still use your network’s default DNS server, likely assigned by your ISP.

Configuring Gateway for your entire home or business network

Deploying Gateway at the router level allows you to secure every device on your network without needing to configure each one individually.

Requirements include:

• Access to your router’s administrative portal
• A router that supports DHCP forwarding
• Raspberry Pi with WiFi or Ethernet connectivity

There aren’t any consumer routers on the market that natively support DoH custom servers and likely few that natively support DoH at all. A newer router I purchased, the Netgear R7800, does not support either, but it is one of the most popular routers for flashing dd-wrt or open-wrt, which both support DoH. Unfortunately, neither of these popular firmwares support custom servers.

While it’s rare to find a router that supports DoH out of the box, DoH with custom servers, or has potential to be flashed, it’s common for a router to support DHCP forwarding (dd-wrt and open-wrt both support DHCP forwarding). So, I installed Pi-hole on my Raspberry Pi and used it as my home network’s DNS and DHCP server.

Getting started with Pi-hole and dnscrypt-proxy

If your Raspberry Pi is new and hasn’t been configured yet, follow their guide to get started. (Note: by default, ssh is disabled, so you will need a keyboard and/or mouse to access your box in your terminal.)

Once your Raspberry Pi has been initialized, assign it a static IP address in the same network as your router. I hardcoded my router’s LAN address to 192.168.1.2

Using vim:
sudo vi /etc/dhcpcd.conf

Restart the service.
sudo /etc/init.d/dhcpcd restart

Check that your static IP is configured correctly.
ip addr show dev eth0

Now that your Raspberry Pi is configured, we need to install Pi-hole: https://github.com/pi-hole/pi-hole/#one-step-automated-install

I chose to use dnscrypt-proxy as the local service that Pi-hole will use to forward all DNS queries. You can find the latest version here.

To install dnscrypt-proxy on your pi-hole, follow these steps:

wget https://github.com/DNSCrypt/dnscrypt-proxy/releases/download/2.0.39/dnscrypt-proxy-linux_arm-2.0.39.tar.gz
tar -xf dnscrypt-proxy-linux_arm-2.0.39.tar.gz
mv linux-arm dnscrypt-proxy
cd dnscrypt-proxy
cp example-dnscrypt-proxy.toml dnscrypt-proxy.toml

Next step is to build a DoH stamp. A stamp is simply an encoded DNS address that encodes your DoH server and other options.

As a reminder, you can find Gateway’s unique DoH address in your location configuration.

At the very bottom of your dnscrypt-proxy.toml configuration file, uncomment both lines beneath [static].

• Change  [static.'myserver'] to [static.'gateway']
• Replace the default stamp with the one generated above

The static section should look similar to this:

Also in dnscrypt-proxy.toml configuration file, update the following settings:
server_names = ['gateway']
listen_addresses = ['127.0.0.1:5054']
fallback_resolvers = ['1.1.1.1:53', '1.0.0.1:53']
cache = false

Now we need to install dnscrypt-proxy as a service and configure Pi-hole to point to the listen_addresses defined above.

Install dnscrypt-proxy as a service:
sudo ./dnscrypt-proxy -service install

Start the service:
sudo ./dnscrypt-proxy -service start

You can validate the status of the service by running:
sudo service dnscrypt-proxy status or netstat -an | grep 5054:

Also, confirm the upstream is working by querying localhost on port 5054:
dig www.cloudflare.com  -p 5054 @127.0.0.1

You will see a matching request in the Gateway query log (note the timestamps match):

Configuring DNS and DHCP in the Pi-hole administrative console

Open your browser and navigate to the Pi-hole’s administrative console. In my case, it’s http://192.168.1.6/admin

Go to Settings -> DNS to modify the upstream DNS provider, which we’ve just configured to be dnscrypt-proxy.

Change the upstream server to 127.0.0.1#5054 and hit save. According to Pi-hole’s forward destination determination algorithm, the fastest upstream DNS server is chosen. Therefore, if you want to deploy redundancy, it has to be done in the DNSCrypt configuration.

Almost done!

In Settings->DHCP, enable the DHCP server:

Hit save.

At this point, your Pi-hole server is running in isolation and we need to deploy it to your network. The simplest way to ensure your Pi-hole is being used exclusively by every device is to use your Pi-hole as both a DNS server and a DHCP server. I’ve found that routers behave oddly if you outsource DNS but not DHCP, so I outsource both.

After I enabled the DHCP server on the Pi-hole, I set the router’s configuration to DHCP forwarding and defined the Pi-hole static address:

After applying the routers configuration, I confirmed it was working properly by forgetting the network in my network settings and re-joining. This results in a new IPv4 address (from our new DHCP server) and if all goes well, a new DNS server (the IP of Pi-hole).

Done!

Now that our entire network is using Gateway, we can configure Gateway Policies to secure our DNS queries!

IPv4 check and lookup based on source IPv4 address

For this method to work properly, Gateway requires that your network has a static IPv4 address. If your IP address does not change, then this is the quickest solution (but still does not prevent third-parties from seeing what domains you are going to). However, if you are configuring Gateway in your home, like I am, and you don’t explicitly pay for this service, then most likely you have a dynamic IP address. These addresses will always change when your router restarts, intentionally or not.

Lookup based on IPv6 destination address

Another option for matching requests in Gateway is to configure your DNS server to point to a unique IPv6 address provided to you by Cloudflare. Any DNS query pointed to this address will be matched properly on our edge.

This might be a good option if you want to use Cloudflare Gateway on your entire laptop by setting your local DNS resolution to this address. However, if your home router or ISP does not support IPv6, DNS resolution won’t work.

Conclusion

In this blog post, we’ve discussed the various ways Gateway can be deployed and how encrypted DNS is one of the next big Internet privacy improvements. Deploying Gateway can be done on a per device basis, on your router or even with a Raspberry Pi.

The content below is taken from the original ( How to improve the delivery and ecommerce experience with Google Maps Platform), to continue reading please visit the site. Remember to respect the Author & Copyright.

The content below is taken from the original ( Enable remote work faster with new Windows Virtual Desktop capabilities), to continue reading please visit the site. Remember to respect the Author & Copyright.

In the past few months, there has been a dramatic and rapid shift in the speed at which organizations of all sizes have enabled remote work amidst the global health crisis. Companies examining priorities and shifting resources with agility can help their employees stay connected from new locations and devices, allowing for business continuity essential to productivity.

We have seen thousands of organizations turn to Windows Virtual Desktop to help them quickly deploy remote desktops and apps on Azure for users all over the globe. The service and its new updates available today in preview will simplify getting started and enabling secure access to what users need each day.

Get started quickly with the Azure Portal with a new admin experience to accelerate end-to-end deployment, management, and optimization.

Gain enhanced security and compliance using reverse connect technology, Azure Firewall to limit internet egress traffic from your virtual machines to specific IP addresses in Azure, and several other new additions.

Enjoy an upgraded Microsoft Teams experience coming in the next month with audio/video redirection (AV redirect) to reduce latency in conversations running in a virtualized environment.

Learn more about today’s announcement in the Microsoft 365 blog from Julia White and Brad Anderson.

Get started with Windows Virtual Desktop and connect with technical experts in the Windows Virtual Desktop Tech Community.

The content below is taken from the original ( Cross-region restore for Azure Virtual Machines using Azure Backup), to continue reading please visit the site. Remember to respect the Author & Copyright.

With the introduction of cross-region restore, you can now initiate restores in a secondary region at will to mitigate real downtime issues in a primary region for your environment.

The content below is taken from the original ( Get your free work-from-home IT security awareness training kit, courtesy of SANS), to continue reading please visit the site. Remember to respect the Author & Copyright.

Focus, train and engage your remote teams to stay safe, gratis

Promo As toilet paper stocks begin to recover, we all figure out the sweet spot for our government-mandated daily walk or trot, and fence off sections of our homes from our significant others for “me time,” it’s time to begin the next phase of social isolation: adjusting sensibly to our environment with an actual plan.…