Aiden Arnkels-Webb

About

Sat, 13 Dec 2025 00:00:00 +0000

Hi, I’m Aiden Arnkels-Webb - I help professional services firms build secure infrastructure that enables growth, not friction.

I currently lead cybersecurity for a UK alternative network provider, where I spend my days ensuring systems stay secure, compliant, and actually work when people need them. But I also run Rootwire, where I help firms like yours implement the same thinking without needing a full-time CISO or CTO on staff.

Cybersecurity Isn't an IT Problem. It's a Leadership Failure.

Tue, 02 Dec 2025 18:42:35 +0000

Most breaches don’t start with a genius hacker in a dark room. They start with a leadership team that decided cybersecurity wasn’t their problem.

I’ve seen it dozens of times. A 40-person accountancy firm gets hit with ransomware. Client data gets encrypted. Three days of chaos and months of fallout. When the dust settles, the partners want to know what went wrong.

Create Dynamic User Pilot groups in Microsoft Entra

Wed, 29 Jan 2025 18:46:03 +0000

As IT professionals, we often find the need to push out changes to a small subset of our full user base. Manually maintaining pilot groups with users joining and leaving can create a lot of overhead.

Create a Debian Cloud-init Template on Proxmox

Sat, 16 Dec 2023 13:46:03 +0000

Cloud-init is the industry standard multi-distribution method for cross-platform cloud instance initialization. It is supported across all major public cloud providers, provisioning systems for private cloud infrastructure, and bare-metal installations.

Microsoft Office - Send a file as an Attachment

Wed, 14 Jun 2023 15:14:38 +0000

The Problem
#

Microsofts latest update to Office 365 has changed the way “Share” function operates. Previously, when you clicked the “Share” button, you were presented with a list of options, including sharing a link, or attaching a copy of your document instead.

How to Mount a qcow2 Disk Image

Fri, 02 Jun 2023 14:13:55 +0000

Here’s a streamlined guide on how to mount a qcow2 disk image on your host server/system, which can come in handy for tasks like resetting passwords, editing files, or recovering data without needing to run the virtual machine.

Install Tplink Omada on Debian 11

Wed, 05 Apr 2023 17:44:11 +0100

This guide covers installation of TP-Link’s Omada Software Controller on Debian 11.

At the time of writing, Omada Controller version is 5.9.31.

Update and Upgrade system
#

apt update && apt upgrade -y

Install omada dependencies
#

apt install -y openjdk-11-jdk-headless curl autoconf make gcc

Install MongoDB
#

Go to Mongo DB’s repository and select an appropriate server version. I’m using MongoDb Server 4.4.16

Cve-2023-23397 - Quickly Check Vulnerability Status and Trigger Updates

Wed, 15 Mar 2023 14:45:08 +0000

Yesterday Microsoft announced a new critical vulnerability CVE-2023-23397, a vulnerability in Microsoft Outlook that allows a threat actor to harvest NTLMv2 hashes via a specifically crafted Outlook appointment.

Microsoft state that attackers can exploit this vulnerability by sending an email that triggers automatically when it is retrieved and processed by the Outlook client. This can lead to exploitation BEFORE the email is viewed in the Preview Pane.

How to recusively apply NTFS permissions faster using PowerShell multithreading jobs

Fri, 10 Mar 2023 14:49:09 +0000

Do you relate to the cover photo? Have your NTFS permissions just bombed out and you can’t bare the idea of waiting hours or days for your new permissions to apply?

How to set up K-9 Mail With Office 365

Sat, 05 Nov 2022 10:12:52 +0000

I have a hell of a lot of mail accounts, K-9 Mail on Android helps me manage them all. Here’s how to set up K-9 Mail with Office 365.

You will first need to set up SMTP Auth on your Exchange Tenant. This is a simple process, but it does introduce security risks and will require you to have access to the Exchange Admin Centre. If you don’t have access to the EAC, you’ll need to ask your Exchange Admin to do this for you.

Standard list of software I install on my mums computer and phone

Sat, 05 Nov 2022 09:20:26 +0000

You know the drill, as the kid with the tech skills you get roped into helping your parents and other family members with their busted tech. I notice that every time I ressurect or reincarnate the treasured device of a family member I end up installing much of the same software. I wrote this to save me some time, and to help others who are in the same boat.

How to replace SSL certificates for a custom domain in Self Hosted 3CX

Wed, 02 Nov 2022 09:22:23 +0000

3CX have updated their docs and removed help.3cx.com meaning the old documentation for updating SSL certs is now gone, or at least harder to find.

The original URL was https://help.3cx.com/help/en-us/33-installation/148-how-can-i-replace-the-ssl-certificates-for-a-custom-domain. If anyone has a copy of this page, please let me know.

Useful Tools for SysAdmins and Techies

Tue, 25 Oct 2022 14:33:04 +0000

I occurs to me that each time I set up a new system, or re-install my workstation, I often end up hunting down and redownloading tools and software that I use on a regular basis. So I thought I’d create a list of useful tools and pop it here on my blog for future reference and to share with others.

How to get FREE eBooks - All the Kindle Store free eBooks on one link

Wed, 31 Aug 2022 14:33:47 +0100

There are currently over 50,000 free books to choose from on Amazon’s Kindle Store. Just add a book to your library using the Buy now button (not Subscribe to Kindle Unlimited / Read for £0.00) and read with Amazon Cloud reader in a web browser or sync to your Kindle.

Dockers seven network types and when to use them

Thu, 25 Aug 2022 12:40:30 +0100

1. The Default Bridge
#

This is the default network that new containers will connect to. It’s a software bridge between your docker instance and your host system, providing isolation between the bridge network and other networks, including the host network and other bridge networks on the host. Docker best practices discourage using this network for containers, recommending User-Defined bridges instead, which we will get to in #4.

What's the difference between Authentication, Authorisation and Accounting? (AAA)

Wed, 27 Jul 2022 12:36:29 +0100

Authentication
#

Authentication is saying “I am me”. It validates who you are. When you go to a club and the bouncer stops you and you tell him you’re on the guest list, you then show him your ID and he says “Ahh! You’re that guy, come on in” - that’s Authentication

Git Remove Submodule

Tue, 26 Jul 2022 09:51:58 +0100

Submodules aren’t removed using git rm submodule-dir, they need to be removed in a far more thorough and annoying fashion. There are a number of unclear explanations at various sources so I decided to write my own findings.

Moving my blog to Hugo - Getting started with Hugo

Mon, 25 Jul 2022 22:01:11 +0100

Introduction
#

I recently came to the conclusion that I wasn’t posting on my blog nearly as much as I’d like to. My blog runs on WordPress, and I’ve felt for a while that the process of logging in, creating a post, fixing formatting in a WSYWGI editor and eventually posting was too much resistance when I commonly just write notes in plain text. So, why not just write posts in plain text and have something else do the work of turning that in to a post or a blog?

How to Hard Link Azure AD Connect On Prem Users to Azure AD Office 365 Accounts

Thu, 03 Mar 2022 10:36:09 +0000

The Problem
#

You’ve set up Azure AD Connect or Azure AD Connect Cloud Sync, but some users haven’t sync’d correctly. Trying to force a new sync / Soft Link based on SMTP or UPN matching doesn’t work. These sync’d users may have created new Azure AD accounts, or may have failed to create an Azure AD account altogether. Your internal users UPN matches a domain configured in Azure AD.

How to Fix Server 2019 Activation Error: Run “slui.exe 0x2a 0xC004F069”

Tue, 09 Mar 2021 13:17:55 +0000

The Problem
#

You’re unable to activate a copy of Windows Server 2019 or 2022 Evaluation edition with your VLSC MAK key

How to fix SB_BLOCK_NOT_PRESENT error in Veeam

Tue, 24 Nov 2020 18:58:26 +0000

The Problem
#

Veeam is failing to back up one of your Hyper-V VM’s and is throwing the error: VHDx:CVhdxDisk.InitialValidation: Invalid bitmap block (all bitmap block of fixed and dynamic disks must be in SB_BLOCK_NOT_PRESENT state) Agent failed to process method {VHDx.GetDiskInformation}

Traps and Dangers of Unmanaged Incidents and How to Solve Them

Mon, 14 Sep 2020 17:48:17 +0000

Introduction
#

ITIL defines an incident as “an unplanned interruption to or quality reduction of an IT service”.

How to check if your CPU supports Virtualisation

Wed, 26 Aug 2020 13:42:09 +0000

Check Task Manager
#

The first, simplest option to check is to open task manager.
Click the performance tab
Check if Virtualisation is Enabled

If Virtualisation is not Enabled, this could be due to it being disabled in the BIOS. Before enabling it, check if your processor is compatible.

How to fix QNAP NAS web GUI interface timing out or never loading

Fri, 07 Feb 2020 20:55:29 +0000

The Problem
#

You’re trying to connect to your NAS’s web interface but it’s just spinning forever and not actually loading.

Why “traverse folder” and “execute file” is a combined NTFS permission

Tue, 03 Dec 2019 13:02:00 +0000

I’ve been asked why the Advanced Permissions dialogue on NTFS folders lists “Traverse folder / execute file” as one single permission.

On the surface it seems counterintuitive that you’d allow a user to navigate through a folder, or execute its contents.

How to enable/disable hardware devices using Windows Powershell

Mon, 02 Dec 2019 22:31:54 +0000

If you’re working on Windows Server Core or remotely on another computer and don’t have access to the Windows GUI, you might have trouble disabling a faulty or unwanted plug-and-play device. Thankfully PowerShell makes it easy to get, enable and disable devices in Device Manager using Get-PnpDevice, Enable-PnpDevice and Disable-PnpDevice

How to fix conflicting proxy addresses in O365 when creating a mailbox

Sun, 05 Aug 2018 01:11:51 +0000

The proxy address is already being used by the proxy addresses of another mailbox

Why can’t I create a mailbox at account@domain2.com if one already exists at account@domain1.com

The Problem
#

So, you have two (or more) domains associated with your Office 365 Exchange account. When you try to create a shared mailbox on one domain, you encounter an error stating the proxy address is already being used.

Aiden Arnkels-Webb

About

Cybersecurity Isn't an IT Problem. It's a Leadership Failure.

Create Dynamic User Pilot groups in Microsoft Entra

Create a Debian Cloud-init Template on Proxmox

Microsoft Office - Send a file as an Attachment

The Problem #

How to Mount a qcow2 Disk Image

Install Tplink Omada on Debian 11

Update and Upgrade system #

Install omada dependencies #

Install MongoDB #

Cve-2023-23397 - Quickly Check Vulnerability Status and Trigger Updates

How to recusively apply NTFS permissions faster using PowerShell multithreading jobs

How to set up K-9 Mail With Office 365

Standard list of software I install on my mums computer and phone

How to replace SSL certificates for a custom domain in Self Hosted 3CX

Useful Tools for SysAdmins and Techies

How to get FREE eBooks - All the Kindle Store free eBooks on one link

Dockers seven network types and when to use them

1. The Default Bridge #

What's the difference between Authentication, Authorisation and Accounting? (AAA)

Authentication #

Git Remove Submodule

Moving my blog to Hugo - Getting started with Hugo

Introduction #

How to Hard Link Azure AD Connect On Prem Users to Azure AD Office 365 Accounts

The Problem #

How to Fix Server 2019 Activation Error: Run “slui.exe 0x2a 0xC004F069”

The Problem #

How to fix SB_BLOCK_NOT_PRESENT error in Veeam

The Problem #

Traps and Dangers of Unmanaged Incidents and How to Solve Them

Introduction #

How to check if your CPU supports Virtualisation

Check Task Manager #

How to fix QNAP NAS web GUI interface timing out or never loading

The Problem #

Why “traverse folder” and “execute file” is a combined NTFS permission

How to enable/disable hardware devices using Windows Powershell

How to fix conflicting proxy addresses in O365 when creating a mailbox

The Problem #

Comment Policy

Search

The Problem
#

Update and Upgrade system
#

Install omada dependencies
#

Install MongoDB
#

1. The Default Bridge
#

Authentication
#

Introduction
#

The Problem
#

The Problem
#

The Problem
#

Introduction
#

Check Task Manager
#

The Problem
#

The Problem
#