From the category archives:

Windows

Friday Mail Sack: Mostly Edge Case Edition

September 3, 2010

Hello all, Ned here again with this week’s conversations between AskDS and the rest of the world.  Today we talk Security, ADWS, FSMO upgrades, USMT, and why “Web 2.0 Internet” is still a poisonous wasteland of gross. Let’s do it to it. Question I am getting questions from my Security/Compliance/Audit/Management folks about what security settings [...]

Read the full article →

Microsoft’s Support Statement Around Replicated User Profile Data

September 2, 2010

[Note from Ned: this article was created and vetted by the Microsoft development teams for DFS Replication, DFS Namespaces, Offline Files, Folder Redirection, Roaming User Profiles, and Home Folders. Due to some TechNet publishing timelines, it was decided to post here in the interim. This article will become part of the regular TechNet documentation tree [...]

Read the full article →

The Case of the Enormous CA Database

September 1, 2010

Hello, faithful readers! Jonathan here again. Today I want to talk a little about Certification Authority monitoring and maintenance. This topic was brought to my attention by a recent case that I had where a customer’s CA database had grown to rather elephantine proportions over the course of many months quite unbeknownst to the administrators. [...]

Read the full article →

New Directory Services Content 8/22-8/28

August 31, 2010

KB Articles There are several articles below that are related to support of Single Label Domains, Disjointed Namespaces and Discontiguous Namespaces.  These will soon be linked to the DNS Namespace Planning Solution Center.  More on that here. Article ID Title 2273047 User Account Control (UAC) and Windows Explorer 2360265 KRB_AP_ERR_BAD_INTEGRITY error when server tries to [...]

Read the full article →

New Directory Services Content 8/8-8/14

August 30, 2010

KB Articles We have quite a few KB articles this week, so I would like to point out that some of these articles may be updates to existing content and not new.  We are working to get the reporting shored up for a better view of new content for a given period of time. Number [...]

Read the full article →

Fine-Grained Password Policy and “Urgent Replication”

August 29, 2010

Hi folks, Ned here again. Today I discuss the so-called “urgent replication” of AD, specifically around Fine-Grained Password Policies. Some background If you’ve read the excellent guide on how AD Replication works, you have probably come across the section around so-called “urgent replication”: Certain important events trigger replication immediately, overriding existing change notification. Urgent replication [...]

Read the full article →

Friday Mail Sack: Scooter Edition

August 28, 2010

Hi folks, Ned here again. It’s that time where we look back on the more interesting questions and comments the DS team got this week. Today we talk about FRS, AD Users and Computers, Load-Balancers, DFSR, DFSN, AD Schema extension, virtualization, and Scott Goad. Let’s ride! Question If you get a journal wrap when using [...]

Read the full article →

Moving Your Organization from a Single Microsoft CA to a Microsoft Recommended PKI

August 28, 2010

Hi, folks! Jonathan here again, and today I want to talk about what appears to be an increasingly common topic: migrating from a single Windows Certification Authority (CA) to a multi-tier hierarchy. I’m going to assume that you already have a basic understanding of Public Key Infrastructure (PKI) concepts, i. e., you know what a [...]

Read the full article →

New Directory Services Content 8/15-8/21

August 28, 2010

KB Articles Only one new KB article of interest this week: Number Title 2385108 Accessing a folder under a mapped network drive to a Distributed File System Namespace (DFSN) folder target may fail on Windows Vista and later with error “Access is Denied” Blogs Title Friday Mail Sack: Scooter Edition Fine-Grained Password Policy and “Urgent [...]

Read the full article →

Forcing Afterhours User Logoffs

August 28, 2010

Mike here and today I want to answer a common customer request—how to force users to logoff at the end of the day. The scenario requires a bit of an explanation, so let’s get started. Let’s recognize the value of forcing users to logoff at the end of their work day, rather than simply allowing [...]

Read the full article →