Grab a cup.Let's take Windows apart, and put it back together, safer.

A quiet corner for IT security in Windows environments: how attacks work, and what actually stops them. Slow-brewed by Lukas.

Today's special Read the menu

37 articles, 13 Hack The Box write-ups, writing since 2023.

11.10.2026 · fresh off the pressBuild Your Own 2FA for the Windows Logon, Part 3: Gating Network Logons

today's roast:
Gating Network Logons, extra shotwinter special:
hot chocolate, Gating Network Logons on the sidespring special:
matcha, with Gating Network Logonstoo hot for coffee:
iced, with Gating Network Logonspumpkin spice season:
Gating Network Logons, extra cinnamonO'zapft is!
Gating Network Logons und a BreznFrohe Weihnachten!
Gating Network Logons mit Lebkuchenboo.
Gating Network Logons, if you dareProsit Neujahr!
stir the cup for confettiSamichlaus isch da!
Gating Network Logons und en Grittibänzhappy 1st of August!
Gating Network Logons and a WeggliÄndlich Fasnacht!
Gating Network Logons und ChüechliFrohe Ostern!
Gating Network Logons mit Osterfladenthe café turns today!
Gating Network Logons on the house

~~TODO: patch the DC~~ ✓

SALTfor your hashes

Today's special

fresh off the press

Today's brewFrench Press35 min read

The Daily Feed

“Freshly brewed IT security, since 2023”

Morning editionPrice: freewith every cup

Vol. IV · No. 37Sunday, 11 October 2026theadmincafe.ch · A1

Windows

Build Your Own 2FA for the Windows Logon, Part 3: Gating Network Logons

Part 2 refuses every network logon for an enrolled account, which makes the account safe and useless. Part 3 adds a gate you open once with a one-time code, so SMB, RPC and WinRM work again for a short window. In C++, with the full source.

By Lukas, staff writer