1. Redmond Protocols Plugfest 2016 The role of the Message Analyzer parsers and network captures Windows Protocols Overview Documents Althea Champagnie, Senior Content Developer, Microsoft Paul Bartos, Senior Content Developer, Microsoft Randy Dong, Software Engineer II, Microsoft

2. Agenda What, why, where of Overview Documents Why were they created? What technology areas do they cover? How are use cases paired with their network captures? A look through an Overview Document How is it structured? What protocols does it cover? Demo of one of the examples and its associated network capture Wrap up Hands-on demo Q&A

3. What Are Overview Documents? “… illustrate how Windows protocols that are functionally related work together, with practical examples that demonstrate common usage scenarios.” Good resource for new developers getting into protocol implementation work Good for seasoned developers getting into a new technology area Includes sequencing diagrams of the examples Includes Network Captures of the examples Find them at https://aka.ms/odshttps://aka.ms/ods

4. Typical Outline of an OD

5. Where Can You Find Them?

6. What ODs Are Available? TechnologyOverview Document(s) File, Fax, and Printing Services MS-CCROD, MS-FASOD, MS-FSMOD, MS- PRSOD, MS-STOROD, MS-VSOD [prelim] Security and Identity Management MS-AUTHSOD, MS-AZOD, MS-CERSOD, MS-RMSOD Directory Services MS-ADOD, MS-ADFSOD Systems Management MS-GPOD, MS-WMOD, MS-WSUSOD Application Services MS-MQOD, MS-TPSOD Collaboration and Communications MS-MSSOD Networking MS-NETOD, MS-NAPOD Remote Connectivity MS-RDSOD

7. What Are The Network Captures?

8. Where Are The Network Captures? At https://aka.ms/ODCaphttps://aka.ms/ODCap

9. Next Up... An overview of an OD A sequencing diagram and network capture for one example in detail

10. The Active Directory Federation Services (AD FS) Protocols Overview Document [MS-ADFSOD] (https://msdn.microsoft.com/en-us/library/dn600411.aspx; short URL: https://aka.ms/adfsod)https://msdn.microsoft.com/en-us/library/dn600411.aspxhttps://aka.ms/adfsod A Brief Tour…

11. Scenario – User and Relying Party in Different Realms A user wishes to use a number of resources that are accessible through the Internet, but does not wish to log on to each resource separately. This example of single sign-on (SSO) uses security token service (STS) and WS-Federation

12. 3.1.1.1 User and Relying Party in Different Realms Example Environment User: Randy randy@idp.com p@ssw0rd

13. Prerequisites for TLS/SSL decryption on NDIS Disable DH in SSL cipher suite: ‐ “gpedit.msc” =>”SSL Cipher Suite Order” Disable extended master secret: ‐ HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL ‐ Client: add DWORD 'DisableClientExtendedMasterSecret' key with non- zero ‐ Server: add DWORD 'DisableServerExtendedMasterSecret‘ key with non- zero Disable TLS resume session: ‐ HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL ‐ Set DWORD 'ClientCacheTime‘ key with zero

14. Step 1

15. Step 3

16. Step 5

17. Step 7

18. Step 11

19. Step 12

20. Step 14

21. Step 16

22. Step 20

23. Wrap Up Hands-on demo available. Contact us – AltheaC@Microsoft.com, RanDon@Microsoft.com, Pbartos@Microsoft.com - if you're interested AltheaC@Microsoft.comRanDon@Microsoft.com Pbartos@Microsoft.com Feedback on MS-VSOD StSmit@Microsoft.comStSmit@Microsoft.com Feedback on the ODs (what additions you'd like to see in the current ones, which new ones we should create): AltheaC@Microsoft.com AltheaC@Microsoft.com Thank You!

24. Interoperability Resources