Fix AADSTS293004 in Remote Desktop over a VPN
Fix AADSTS293004 when Remote Desktop rejects a PC’s fully qualified name over a VPN. Check DNS and Microsoft Entra ID, then set the PC’s primary DNS suffix.
Read the note// Technology, figured out one thing at a time.
Notes from
the command line
Practical fixes, experiments, and things learned along the way.
From Windows servers to the way the internet works.
matt@hdic ~ $ cat journal.txt
# Learning by doing.
# Keeping notes along the way.
- entries
- 37
- topics
- 7
- first entry
- 2012
matt@hdic ~ $
Latest entries
1 / 4Photoshop Lasso draws random diagonal lines on Windows
A client confirmed that UseSystemStylus 0 fixed stray diagonal Lasso selections in Photoshop 2026 on Windows. Their issue persisted in Photoshop 2027.
Read the noteDomain trust failures and the 40-minute replication delay that wasn’t
Two Windows 11 computers lost domain trust, and repadmin showed a worrying 40-minute delta. Live tests found replication working in seconds; reused computer names during rebuilding explained the failures.
Read the noteUniFi Protect DirectConnect fails across VLANs with Windows DNS
The UniFi gateway could resolve my Protect console's DirectConnect hostname, but Windows DNS returned NXDOMAIN. An AD-integrated conditional forwarder fixed it for both consoles.
Read the notewin-acme: Not enough memory resources on Exchange Server (with RAM to spare!)
win-acme couldn't renew an Exchange certificate, claiming there wasn't enough memory. There was RAM available — the useful clue turned out to be an October Windows Server update and an RPC workaround.
Read the noteDuo MFA Policy Analysis – Why is Entra still asking for Microsoft Authenticator?
Duo was configured, the user was registered, and Entra still wanted Microsoft Authenticator. A look at the policies applying to the sign-in uncovered an easily missed difference between requiring MFA and requiring an...
Read the noteGet Active Directory Password Change Dates – 60 second solutions
Here’s another very useful script which simply lists all of your users in Active Directory, sorted by when their passwords were last changed. Great for checking if your password policies are actually being enforced… Import-Module...
Read the note5 Free Exchange Security Tools You Probably Don’t Know About – Netwrix Guest Post
Have a look at my latest guest post on Netwrix: http://blog.netwrix.com/2016/08/09/five-free-exchange-security-tools-you-probably-do-not-know-about/
Read the noteExchange Online and Hybrid Exchange Auditing Configurations
Exchange is a very powerful piece of software. Unfortunately, misconfigurations, shared mailbox access, rogue admins and more can allow sensitive data to be viewed or deleted. I experienced this a few weeks ago where a member of a...
Read the noteFind Hyper-V Virtual Machine by MAC Address – 60 Second Solutions
Today I had to try and find a virtual machine given its MAC address on a non-clustered Hyper-V environment. Here’s a quick PowerShell script to do just that! import-module hyper-v $Servers = @(“server1”,“server2”,“etc”) $results =...
Read the note