Active Directory Documentation Team
Information for IT Professionals who work with Active Directory. All blog posts are provided "AS IS" with no warranties, and confer no rights.
Guidelines and Tutorials for installing Active Directory on Windows Azure Virtual Network
We want to make people aware of guidelines we have published for installing Active Directory on...
Author: Justin Hall MSFT Date: 12/28/2012
Configure Kerberos Forest Search Order (KFSO) topic on TechNet
Herbert from Microsoft support team has authored a great topic about Kerberos Forest Search Order...
Author: Justin Hall MSFT Date: 12/10/2012
New topic about upgrading domain controllers to Windows Server 2012: https://technet.microsoft.com/library/hh994618.aspx
We have published a topic about upgrading domain controllers to Windows Server 2012:...
Author: Justin Hall MSFT Date: 12/10/2012
Active Directory Replication Status (ADREPLSTATUS) tool available on Microsoft Download Center
Update Dec 12, 2012: Thanks to the users who reported this error regarding license expiration: "The...
Author: Justin Hall MSFT Date: 11/09/2012
Updated Active Directory capacity planning guidance published
We recently published Capacity Planning for Active Directory Domain Services. This is a a detailed...
Author: Justin Hall MSFT Date: 10/29/2012
Using PowerShell to clear or remove all AIA and CDP entries in Active Directory Certificate Services for Windows Server 2012
You may have already seen that you can deploy most Windows Server 2012 role services with Windows...
Author: Kurt.Hudson Date: 05/09/2012
Update for SetSPN - Syntax for SetSPN.exe
Breaking guidance change: Although you can use Setspn -A, you should use Setspn -S instead because...
Author: Kurt.Hudson Date: 04/20/2012
After enabling AD Recycle Bin, can you lower tombstoneLifetime value?
Here is a great question and reply from a lead developer for AD Recycle Bin. Q: After enabling the...
Author: Justin Hall MSFT Date: 04/19/2012
Resource for understanding NTLM MaxConcurrentApi problems and how to address them
Just want to make people aware of a new topic recently posted by colleagues: Configuring...
Author: Justin Hall MSFT Date: 04/19/2012
Deploying Active Directory Certificate Services (AD CS) PKI two-tier hierarchy
When I was first learning about Active Directory Certificate Services (AD CS), a colleague told me...
Author: Kurt.Hudson Date: 03/30/2012
Printing results from an Active Directory Administrative Center query
Recently a question was asked on the blog regarding printing queries from Active Directory...
Author: Davanand Bahall - MSFT Date: 10/05/2011
ADCS FAQ or AD CS FAQ?
I was recently alerted to the situation that not all of our Microsoft customers have adjusted their...
Author: Kurt.Hudson Date: 08/08/2011
Updates just posted to Active Directory Certificate Services (AD CS) documentation
A few updates were just posted, so I am putting out an FYI post. I should do this more often, so I...
Author: Kurt.Hudson Date: 08/03/2011
Finding the RIDs in your domain video
Here is a video I shot a while back that demonstrates how to use ADSI Edit to find the number of...
Author: Kurt.Hudson Date: 07/12/2011
Forest schema version 47: Windows Server 2008 R2 Adprep /forestprep
When you run adprep /forestprep, you are updating the Active Directory schema forest version....
Author: Kurt.Hudson Date: 07/07/2011
A delegation for this DNS server cannot be created because the authoritative parent zone cannot be found or it does not run Windows DNS server.
A common warning message for anyone who has installed Active Directory on Windows Server 2008 or...
Author: Kurt.Hudson Date: 07/07/2011
Important Security Update that affects sample pages in AD CS
An important security update, described in MS11-051 (https://go.microsoft.com/fwlink/?LinkId=217101)...
Author: Kurt.Hudson Date: 06/14/2011
Typo in the mnemonic of DCLocator DNS Record in Windows Server 2003 Active Directory Branch Office Guide
There is a typo in the Windows Server 2003 Active Directory Branch Office Guide that has affected...
Author: Justin Hall MSFT Date: 06/03/2011
Incompatibilities with CNG or V3 templates
If you have heard of Certificates Next Generation (silly name, I know), which is why people call...
Author: Kurt.Hudson Date: 05/06/2011
PKI Design "Brief Overview"
I am really trying to make this TechNet Wiki article PKI Design Brief Overview a place from which we...
Author: Kurt.Hudson Date: 05/05/2011
Troubleshooting Certificate Autoenrollment field notes posted on TechNet Wiki
If you have trouble with Certificate Autoenrollment or have ever had issues troubleshooting...
Author: Kurt.Hudson Date: 04/29/2011
Active Directory Troubleshooting
We are developing an Active Directory troubleshooting guide on the TechNet Wiki. Been working on it...
Author: Kurt.Hudson Date: 04/28/2011
Updates made to Certificates How To. based on your feedback
I just went through and updated 16 or more resources that were posted online a while ago regarding...
Author: Kurt.Hudson Date: 04/28/2011
How do I install Active Directory Certificate Services (AD CS)?
Be sure that you've planned your PKI. Then, see Offline Root CA. del.icio.us Tags: Active Directory...
Author: Kurt.Hudson Date: 04/28/2011
Why do people use offline root certification authorities?
To get the answer to that and other questions, like "How do I patch an offline root CA?" see the new...
Author: Kurt.Hudson Date: 04/28/2011
DSForum: KDC Event ID 26
The DSForum post, EventID 26 & 27 : KDC: suitable keys, has been consolidated into the following...
Author: Davanand Bahall - MSFT Date: 03/22/2011
Problems running Active Directory Users and Computers due to a C++ runtime error?
Check out this TechNet Wiki article that describes a potential solution. Turns out that clearing out...
Author: Kurt.Hudson Date: 03/17/2011
DSForum: Event ID 5719 source Netlogon
The DS forum posts, Netlogon error 5719 and Event 5719 Netlogon Problem, have been consolidated into...
Author: Justin Hall MSFT Date: 03/15/2011
A new test lab guide (TLG) about securing DC communication was just published.
Test Lab Guide - Deploy Windows Firewall with Advanced Security to Protect Network Communication to...
Author: Kurt.Hudson Date: 02/25/2011
Active Directory Troubleshooting "Survival Guide"?
This week we started pulling together resources that will hopefully become a central location to...
Author: Kurt.Hudson Date: 02/21/2011
DS Forum: How to Disable SSLv2 on a Windows Server 2008 and Windows Server 2008 R2 Domain Controller
The DS forum post, Is it possible to disable SSLv2 on a Windows 2008 domain controller so that...
Author: Davanand Bahall - MSFT Date: 02/10/2011
Remote Server Administration Tools (RSAT) for Windows 7
There are a bunch of Microsoft forum questions related to installing the Remote Server...
Author: Kurt.Hudson Date: 01/31/2011
DS Forum: Windows Server 2008 and Windows Server 2008 R2 Support Tools
The DS forum post, Windows 2008 Kerbtray and/or ADSIEdit and other resource kit tools...
Author: Davanand Bahall - MSFT Date: 01/25/2011
NETDOM cannot be used to create forest trusts
del.icio.us Tags: netdom,forest trusts,limitation,limit,not supported,error The following note has...
Author: Kurt.Hudson Date: 01/17/2011
Kerberos error: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
A TechNet Wiki topic regarding Kerberos error 0x7 has just been posted...
Author: Kurt.Hudson Date: 01/14/2011
DNS Stops Working on Windows Server 2008 (Event ID 4000,4015,1053,1054)
The TechNet Wiki article DNS Stops Working on Windows Server 2008 (Event ID 4000,4015,1053,1054) has...
Author: Kurt.Hudson Date: 01/14/2011
Troubleshooting CSVDE error messages
There are several DS forum questions related to dealing with CSVDE errors. Typically these come from...
Author: Kurt.Hudson Date: 01/14/2011
Import mail contact into Active Directory using CSVDE
A TechNet Wiki article has been created to explain how to create a mail contact entry using the...
Author: Kurt.Hudson Date: 01/14/2011
Troubleshooting Domain Join Error Messages
I have just created a Wiki article, Troubleshooting Domain Join Error Messages...
Author: Davanand Bahall - MSFT Date: 12/14/2010
DS Forum: Domain Rename and IE 7 Home Page not Reflecting Group Policy
In our continuing effort to consolidate forum posts into TechNet Wiki articles, the following two...
Author: Davanand Bahall - MSFT Date: 12/06/2010
DS Forum: How to change the local Administrator password on domain member computers
In an effort to consolidate the great troubleshooting solutions offered in this thread, we have...
Author: Justin Hall MSFT Date: 11/22/2010
DS Forum: How to list Active Directory group members
In an effort to consolidate the great troubleshooting solutions offered in this thread, we have...
Author: Justin Hall MSFT Date: 11/22/2010
DS Forum Post: DCDiag error - failed test system log summarized in TechNet Wiki article
del.icio.us Tags: DCDIAG error,SystemLog,System Log,test failed,failed text systemlog In an effort...
Author: Kurt.Hudson Date: 11/04/2010
DS Forum: Win 98 wont connect to server 2008 to TechNet Wiki article
del.icio.us Tags: Windows 98 will not won't wont connect to Server 2008 In an effort to consolidate...
Author: Kurt.Hudson Date: 11/04/2010
Can't join domain error message and mapping a network drive using Group Policy
As mentioned in the previous blog post by Justin, we are converting the highest total viewed topics...
Author: Davanand Bahall - MSFT Date: 11/04/2010
New Wiki topics converted from forum threads
We are posting new articles to the TechNet Wiki that summarize questions and answers that appear in...
Author: Justin Hall MSFT Date: 11/01/2010
Parent Child Differencing Disks in Hyper-V
I searched and I could not find a step-by-step process that described how to setup a Parent Child...
Author: Kurt.Hudson Date: 09/16/2010
Conditions for Kerberos to be used over an External Trust
We have updated the TechNet article, Technologies for Federating Multiple Forests, to include the...
Author: Davanand Bahall - MSFT Date: 08/04/2010