wpad.dat and wspad.dat

Autoconfiguration on Windows clients with Winsock Proxy client - ISA firewall client, TMG firewall client looks for wspad.dat so if You have wpad configured in local DNS be aware that wspad.dat is required in this case.

SSLCertificateSHA1Hash by registry

I can't set from command line so the only way is through registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp

Value name: SSLCertificateSHA1Hash
Value type: REG_BINARY
Value data:

Thumbprint:

“SSLCertificateSHA1Hash"=hex:42,49,e1,6e,0a,f0,a0,2e,63,c4,5c,93,fd,52,ad,09,27,82,1b,01

And the reason is: missing Server Authentication in certificate template. I had template with only 1.3.6.1.4.1.311.54.1.2 without Server Authentication. When I set value by registry - value disappeared after creation.

ADFS - terms - just to remember

SSO URL: https://[your-adfs-domain.com]/adfs/ls

IDP Entity ID: http://[your-adfs-domain.com]/adfs/services/trust

Cetificates without DSA!

inplace upgrade Windows 2008 to Windows 2012r2 - no GUI

Finally I upgraded one of out-of-support servers - from Windows 2008 through Windows 2008r2 to Windows 2012r2. I had some issue with no boot device error (0x7b), but at the end upgrade of the server was finished. After logon - black screen, no GUI, I could run task manager, from task manager I could run explorer.exe (but only with the highest privileges) and Start Menu was strange.
I tried to make Windows Update, no effect - searching for updates (from WSUS) was never ending - few hours so I installed kb3138615, after restart and few minutes - voile la - there are - missing 202 patches, but every attempt to download and install patches failed - from GUI and command prompt.
Quick investigation - plenty of 10020 DistributedCOM Errors "The machine wide Default Launch and Activation security descriptor is invalid... The security permission can be corrected using the Component Services administrative tool."
I modified permissions and GUI came back after restart.

Remove and Add GUI Windows Server

Remove-WindowsFeature Server-Gui-Shell, Server-Gui-Mgmt-Infra Add-WindowsFeature Server-Gui-Shell, Server-Gui-Mgmt-Infra

Azure - missing resource and resource group

Strange - I have some resource on my billing but I can't find resource or resource group/type on the portal. Case is registered in Microsoft - I'm curious how it is possible and what are the ways to find it (by PowerShell?) and manage.