Ask the Directory Services Team
Microsoft's official enterprise support blog for AD DS and more
DC’s and VM’s – Avoiding the Do-Over
Hello everyone, Mark from DS again. With more and more companies using virtualization, such as...
Author: NedPyle [MSFT] Date: 06/05/2009
The Case of the Random DFS Access Denial
Hi, this is Bobby from the Microsoft Directory Services support team. Today we are going to discuss...
Author: NedPyle [MSFT] Date: 06/04/2009
New Directory Services Content 5/24-5/30
New KB articles related to Directory Services for the week of 5/24-5/30. 971510 A .p7b certificate...
Author: Craig Landis Date: 06/02/2009
What occurs when the Security Group Policy CSE encounters a null DACL
Mike here. The Group Policy security client side extension can distribute security descriptors on...
Author: NedPyle [MSFT] Date: 06/02/2009
Null and Empty DACLs
Background Mike here. Windows uses the concept of a security descriptor to allow or deny security...
Author: NedPyle [MSFT] Date: 06/01/2009
New Directory Services KB Articles 5/10-5/23
New KB articles related to Directory Services for the week of 5/10-5/23. 971243 Gpresult.exe...
Author: Craig Landis Date: 05/28/2009
MS Security Intelligence Report Volume 6 Released
Ned here again. If you are at all interested in security, here is a must-read: Microsoft Security...
Author: NedPyle [MSFT] Date: 05/28/2009
ADMT 3.1 and Windows Server 2008 R2
Hello All, UPDATE June 19 2010 - stop reading and go here:...
Author: NedPyle [MSFT] Date: 05/22/2009
Temporary User Profiles and the Citrix ICA Client
Howdy folks, Scott Goad again to talk about an issue that I thought you might find useful. I...
Author: NedPyle [MSFT] Date: 05/21/2009
Understanding Password Policies
Hey everybody, its Randy again to discuss Password Policies. I recently had a case that required...
Author: NedPyle [MSFT] Date: 05/19/2009
New Directory Services KB Articles 5/3-5/9
New KB articles related to Directory Services for the week of 5/3-5/9. 969710 How to enable the...
Author: Craig Landis Date: 05/15/2009
Now we're multilingual
Translate this pageArabicBulgarianChinese SimplifiedChinese...
Author: NedPyle [MSFT] Date: 05/14/2009
Five common questions about AdminSdHolder and SDProp
Ned here again. After a few years of supporting Active Directory, nearly everyone runs into an issue...
Author: NedPyle [MSFT] Date: 05/07/2009
RSAT Release Candidate for Windows 7... ehh... Release Candidate
Ned here again. The Remote Server Administration Tools (RSAT) have been released for Win7 RC. Grab...
Author: NedPyle [MSFT] Date: 05/05/2009
New Directory Services KB Articles 4/26-5/2
New KB articles related to Directory Services for the week of 4/26-5/2. 970770 Differences in NTDS...
Author: Craig Landis Date: 05/05/2009
Printing and Active Directory
Some concepts and troubleshooting methods regarding printing and Active Directory from our friends...
Author: Craig Landis Date: 05/05/2009
Event ID 22 on a Windows 2008 Terminal Services Licensing Server
Hi all, Akhlesh here. Recently I’ve seen a few cases where the customers were getting event ID...
Author: NedPyle [MSFT] Date: 05/04/2009
SYSVOL migration from FRS to DFSR - Whitepaper Released
Ned here. It's done, it's out, come get it, stop yelling at me! :-) SYSVOL Replication Migration...
Author: NedPyle [MSFT] Date: 05/01/2009
Overview of New MPSReports Data Collection Tool
Here is a nice overview of the new MPSReports and what it collects. Proactively running this before...
Author: Craig Landis Date: 05/01/2009
8-bit Awesomeness
Ned here. If you're having a lazy friday and don't feel like working too hard (don't lie!), take a...
Author: NedPyle [MSFT] Date: 05/01/2009
SQL Bulk Insert - Access is Denied
Hey all, Mark from DS again. I have found that numerous cases have been opened where Microsoft...
Author: NedPyle [MSFT] Date: 04/30/2009
DelegConfig V2 Released
Hi all, Ned here again. Our compadre Brian Murphy-Booth has released the newest version of the...
Author: NedPyle [MSFT] Date: 04/30/2009
Office 2007 SP2 Administrative Templates Released
This download includes updated Group Policy Administrative Template and Office Customization Tool...
Author: Craig Landis Date: 04/30/2009
ADAM - Saved event logs show "The description for event ID... cannot be found"
Hi, Ned here again. Today’s post is a quickie, here’s the scenario: Summary You are...
Author: NedPyle [MSFT] Date: 04/29/2009
New Directory Services KB Articles 4/19-4/25
New KB articles related to Directory Services for the week of 4/19-4/25. 956114 You cannot use a...
Author: Craig Landis Date: 04/28/2009
Breaking Down DCDiag.exe to an Object with PowerShell
An interesting take on “parse and pray” with PowerShell against a DCDIAG output text...
Author: Craig Landis Date: 04/28/2009
Working with Certificates in Active Directory PowerShell
https://blogs.msdn.com/adpowershell/archive/2009/04/26/working-with-certificates.aspx
Author: Craig Landis Date: 04/27/2009
Recovering a Deleted Cluster Name Object (CNO) in a Windows Server 2008 Failover Cluster
Author: Craig Landis Date: 04/27/2009
Netmon, MPS, RODC's, and that new OS you might have heard about
Ned here. A few big pieces of news, in case you've been having a busy week: Netmon 3.3 has been...
Author: NedPyle [MSFT] Date: 04/25/2009
Command line guide for Server Core
Here is a nice primer on commonly used commands for Server Core. https://bsonposh.com/archives/710 Be...
Author: Craig Landis Date: 04/24/2009
Other Directory Services Blogs
There are quite a few people out there blogging about AD-related stuff. Below are some I know about....
Author: Craig Landis Date: 04/24/2009
How to configure the Windows Server 2008 CA Web Enrollment Proxy
Hi all, Rob here again. I had a case recently where the customer wanted to have the Windows Server...
Author: NedPyle [MSFT] Date: 04/22/2009
New Directory Services KB Articles 4/11-4/18
New KB articles related to Directory Services for the week of 4/11-4/18. 969299 A DNS zone transfer...
Author: Craig Landis Date: 04/20/2009
Conficker causes LSASS to consume CPU Time on Domain Controllers
Hi Gautam here, I wanted to blog about a high-impact problem we have been seeing recently. The...
Author: NedPyle [MSFT] Date: 04/16/2009
“The LastLogonTimeStamp Attribute” – “What it was designed for and how it works”
Warren here. In Windows Server 2003 we introduced the lastLogontimeStamp attribute. Administrators...
Author: NedPyle [MSFT] Date: 04/15/2009
New Directory Services KB Articles 4/5-4/11
New KB articles related to Directory Services for the week of 4/5-4/11. 968730 Windows Server 2003...
Author: Craig Landis Date: 04/13/2009
Happy birthday Redmond domain :-)
Ned here. From one of our MSIT bloggers-in-arms, Brian Puhl: 10 years ago, Microsoft’s largest...
Author: NedPyle [MSFT] Date: 04/10/2009
Name Suffix Routing
Hello, David Everett here. I recently encountered an issue where authentication was failing across...
Author: NedPyle [MSFT] Date: 04/10/2009
DFSR Debug Log Series Wrapup and Downloadable Copies
Ned again. As promised, here is the complete list of links for the recent 21-part DFSR Debug Log...
Author: NedPyle [MSFT] Date: 04/09/2009
Understanding DFSR debug logging (Part 21: File replication performance from throttling (uses debug severity 5))
In this final scenario we will see a file being replicated successfully, but where the replication...
Author: NedPyle [MSFT] Date: 04/09/2009
Understanding DFSR debug logging (Part 20: Skipped temporary and filtered files (uses debug severity 5))
In this scenario we will see a pair of files being created on an upstream server. One of the files...
Author: NedPyle [MSFT] Date: 04/09/2009
Understanding DFSR debug logging (Part 19: File Blocked Inbound by a File Screen Filter Driver (uses debug severity 5))
In this scenario we will see an attempted file replication. The downstream partner is running the...
Author: NedPyle [MSFT] Date: 04/09/2009
New Directory Services KB Articles 3/28-4/5
New KB articles related to Directory Services for the week of 3/28-4/5. 969535 Roaming user profiles...
Author: Craig Landis Date: 04/09/2009
Understanding DFSR debug logging (Part 18: LDAP queries failing due to network (uses debug severity 5))
In this scenario we will see a DFSR server attempt to contact its DC through LDAP to read the...
Author: NedPyle [MSFT] Date: 04/08/2009
Understanding DFSR debug logging (Part 17: Replication failing because of blocked RPC ports (uses debug severity 5))
In this scenario we will see a file created on the upstream server and attempted replication with...
Author: NedPyle [MSFT] Date: 04/08/2009
Understanding DFSR debug logging (Part 16: File modification with RDC in very granular detail (uses debug severity 5))
In this scenario we will see a file modified and how that change is replicated between servers,...
Author: NedPyle [MSFT] Date: 04/08/2009
Understanding DFSR debug logging (Part 15: Pre-Seeded Data Usage during Initial Sync)
In this scenario we will see a new replication group and replicated folder created, where data has...
Author: NedPyle [MSFT] Date: 04/07/2009
Understanding DFSR debug logging (Part 14: A sharing violation due to a file locked upstream between two Windows Server 2008)
In this scenario we will see file that is locked by an application, preventing replication from...
Author: NedPyle [MSFT] Date: 04/07/2009
Understanding DFSR debug logging (part 13: A New Replication Group and Replicated Folder between two Windows Server 2008 members)
In this scenario we will see a new Replication Group and Replicated Folder created. The upstream...
Author: NedPyle [MSFT] Date: 04/06/2009
Tell us how we've been doing
Ned here. Please take a moment to tell us how we've been doing over the past 18 months, and if...
Author: NedPyle [MSFT] Date: 04/03/2009