IIS redirect HTTP to HTTPS but allow Let's Encrypt
Redirecting all HTTP to HTTPS in IIS breaks Let's Encrypt's renewal challenge. Two URL Rewrite rules fix it: let .well-known through, redirect everything else.
2 articles in the notebook
Security.
Enabling Windows Firewall on Windows 2003 Active Directory Domain Controller
Active Directory lets NTDS, NTFrs and NetLogon pick random ports, which makes firewalling a domain controller a pain. Here is how to pin them to fixed ports and finally enable the firewall.