Steven S. Wexler

Information Technology Professional




Projects and Case Studies

Microsoft MFA Update

As of February 1, 2027, Microsoft-provided SMS and voice authentication will be retired for all users except Global Administrators and external users. However, many of our staff and clients either can't or don't want to use a smartphone app to sign in. Enter the hardware security key. We are still in the testing phase, but we've had great results so far and things are looking very good for this project.

Active Directory Security Hardening

As an employee at an MSP, I've seen many new clients that had a previous IT person who did not follow best practices for securing Active Directory. Example: Using the domain admin account for everything... For each of these clients I started the task of reorganizing AD objects into new OUs to properly apply Group Policies such as blocking Domain Admins from logging into a workstation. This is still ongoing but we've completed several clients so far and made huge improvements to their AD security.

SSL/TLS Cert Automation

As of March 15, 2027, the maximum lifetime for a SSL/TLS certificate will be 100 days. Many of our clients have web applications that need SSL/TLS certs and we normally update them all manually. We tried using cert renewal automation tools but then ran into compatibility issues with older application servers. I decided to take a different approach and use a reverse proxy server that automatically handles the SSL/TLS certs for each web application. It took a bit more work initially, but it works quite well and we are rolling out this solution to all of our clients.

Smart Building Network Infrastructure Implementation

Our client purchased a class A property in midtown. The seller became a tenant in the building. However, all existing network infrastructure was maintained by the seller/tenant's IT team and needed to be replaced and/or bypassed. Our job was to design and implement a brand new Smart Building network infrastructure. I performed walkthroughs at the property with my team to gather information, had discussions with the client to confirm their needs, and submitted detailed diagrams for their review. After we all reached a consensus, we started the buildout. We delivered a Smart Building network with a fiber backbone, core network equipment on the upper floors, and handles all critical services for day-to-day building operations such as:

  • Access Control
  • Security Cameras
  • Voice Communications (VoIP)
  • BMS/BAS Management/Automation Systems
  • Utility Submeters
  • Energy Management Data Collection

This project has been completed and was a resounding success. Our client was very pleased and we support and maintain the network to this day.




Copyright © 2026 Steven S. Wexler