https://www.apt-upgrade.me/tag/account-lockout/One nerd's homelab: Linux, Kubernetes, security, and the occasional disaster.en-USMon, 28 Sep 2026 14:57:03 +0200https://www.apt-upgrade.me/2026/09/28/day-two-operations-hardening-three-windows-domain-controllers-and-finding-a-clock-that-answered-to-nobody/Mon, 28 Sep 2026 14:57:03 +0200https://www.apt-upgrade.me/2026/09/28/day-two-operations-hardening-three-windows-domain-controllers-and-finding-a-clock-that-answered-to-nobody/<p>In <a href="https://www.apt-upgrade.me/2026/09/23/enough-yaml-for-now-three-servers-windows-server-2025-and-a-crash-course-on-the-dark-side/">the last post</a> three HP boxes became a Windows Server 2025 domain: AD, DNS, DHCP failover, Group Policy, BitLocker, Storage Spaces. That was day one: everything installed, everything green, everything &ldquo;works&rdquo;.</p> <p>This post is about <strong>day two</strong>, the part where you stop admiring the green checkmarks and start asking uncomfortable questions. What time is it, according to whom? Which services are running that nobody asked for? What happens if a server simply doesn&rsquo;t boot tomorrow? Spoiler: one of those questions had a <em>very</em> funny answer.</p>