The Curious Engineer

All blogs / Windows internals

Ask the Directory Services Team

learn.microsoft.com/en-us/archive/blogs/askds

Microsoft's official enterprise support blog for AD DS and more

Windows internalsSecurityNetworkingMicrosoft blogsMSDN archive

’10’15’20’25
Posts
675 from 9 Aug 2007 to 26 Mar 2019
Posting
archived, read-only
Kind
company blog
Feed
https://learn.microsoft.com/en-us/archive/blogs/askds/feed.xml

2019 1

  1. AskDS Is Moving!

2018 1

  1. TLS Handshake errors and connection timeouts? Maybe it’s the CTL engine….

2017 2

  1. Introducing Lingering Object Liquidator v2
  2. Active Directory Experts: apply within

2016 7

  1. Troubleshooting failed password changes after installing MS16-101
  2. Access-Based Enumeration (ABE) Troubleshooting (part 2 of 2)
  3. Access-Based Enumeration (ABE) Concepts (part 1 of 2)
  4. Deploying Group Policy Security Update MS16-072 \ KB3163622
  5. The Version Store Called, and They’re All Out of Buckets
  6. Setting up Virtual Smart card logon using Virtual TPM for Windows 10 Hyper-V VM Guests
  7. Previewing Server 2016 TP4: Temporary Group Memberships

2015 9

  1. Speaking in Ciphers and other Enigmatic tongues…update!
  2. Using Repadmin with ADLDS and Lingering objects
  3. “Administrative limit for this request was exceeded" Error from Active Directory
  4. SHA1 Key Migration to SHA256 for a two tier PKI hierarchy
  5. Manage Developer Mode on Windows 10 using Group Policy
  6. Windows 10 Group Policy (.ADMX) Templates now available for download
  7. Troubleshoot ADFS 2.0 with these new articles
  8. A Treatise on Group Policy Troubleshooting–now with GPSVC Log Analysis!
  9. DFSR: Limiting the Number of Imported Replicated Folders when using DB cloning

2014 7

  1. Understanding ATQ performance counters, yet another twist in the world of TLAs
  2. Managing the Store app pin to the Taskbar added in the Windows 8.1 Update
  3. It turns out that weird things can happen when you mix Windows Server 2003 and Windows Server 2012 R2 domain controllers
  4. An Update about the Windows 8.1 Update
  5. Options for Managing Go to Desktop or Start after Sign in in Windows 8.1
  6. Our UK Windows Directory Services Escalation Team is Hiring – Support Escalation Engineers.
  7. Adding shortcuts on desktop using Group Policy Preferences in Windows 8 and Windows 8.1

2013 15

  1. An update for ADMT, and a few other things too.
  2. Important Announcement: AD FS 2.0 and MS13-066
  3. MD5 Signature Hash Deprecation and Your Infrastructure
  4. DFS Replication in Windows Server 2012 R2 and other goodies, now available on the Filecab blog!
  5. Roaming Profile Compatibility - The Windows 7 to Windows 8 Challenge
  6. Because TechNet didn't have enough Active Directory awesomeness already
  7. Interesting findings on SETSPN -x -f
  8. Windows Server 2012 R2 - Preview available for download
  9. Two lines that can save your AD from a crisis
  10. Back to the Loopback: Troubleshooting Group Policy loopback processing, Part 2
  11. AD FS 2.0 Claims Rule Language Part 2
  12. Circle Back to Loopback
  13. Distributed File System Consolidation of a Standalone Namespace to a Domain-Based Namespace
  14. Configuring Change Notification on a MANUALLY created Replication partner
  15. Intermittent Mail Sack: Must Remember to Write 2013 Edition

2012 49

  1. Revenge of Y2K and Other News
  2. ....And knowing is half the battle!
  3. Digging a little deeper into Windows 8 Primary Computer
  4. So long and thanks for all the fish
  5. AD FS 2.0 RelayState
  6. Windows Server 2012 Shell game
  7. Monthly Mail Sack: I Hope Your Data Plan is Paid Up Edition
  8. MaxTokenSize and Windows 8 and Windows Server 2012
  9. Windows Server 2012 GA
  10. Updated Group Policy Search service
  11. AD Replication Status Tool is Live
  12. Detaining Docs with DAC
  13. RSA Key Blocking is Here!
  14. Managing RID Issuance in Windows Server 2012
  15. Windows PowerShell remoting and delegating user credentials
  16. Shipped it
  17. Kerberos errors in network captures
  18. Common DFSN Configuration Mistakes and Oversights
  19. Dynamic Access Control and ISV Goodness
  20. Standardizing Dynamic Access Control Configuration – Exporting and Importing Dynamic Access Control objects between Active Directory Forests
  21. Managing the Recycle bin with Redirected Folders with Vista or Windows 7
  22. RSA Key Blocking is Coming
  23. I’m Baaaaaccccck
  24. An ADFS Claims Rules Adventure
  25. New Office 365 and AD FS/DirSync Information Available
  26. Important Information about Remote Desktop Licensing and Security Advisory 2718704
  27. What's Causing that DFSR Change Storm?
  28. The Mouse Will Play
  29. Come get Windows 8 Release Preview and Windows Server 2012 Release Candidate
  30. Do not skip the latest B8 boot post
  31. Dynamic Access Control intro on Windows Server blog
  32. New Slow Logon, Slow Boot Troubleshooting Content
  33. How to NOT Use Win32_Product in Group Policy Filtering
  34. Exclusive! Shocking New Windows Names Revealed!!!
  35. New USMT 5.0 Features for Windows 8 Consumer Preview
  36. Your 24 Month XP Warning
  37. Group Policy Management Improvements in Windows Server "8" Beta
  38. Gimme Some Sugar
  39. The yuck that is "PC Recycle Day" at Microsoft
  40. Unresponsive Servers due to DST and an unsupported registry key
  41. Windows Server “8” Beta announcements, availability (updated)
  42. Congrats Sean and Mark, the Newest Masters!
  43. Friday Mail Sack: VROOM VROOM Edition
  44. Purging Old NT Security Protocols
  45. Friday Mail Sack: Carl Sandburg Edition
  46. If you use Symantec Products, Read Me
  47. Friday Mail Sack: It’s a Dog’s Life Edition
  48. How to become a PFE (worth reading if you are job hunting)
  49. Understanding the AD FS 2.0 Proxy

2011 106

  1. Winter Break
  2. Slow-Link with Windows 7 and DFS Namespaces
  3. Effective Troubleshooting
  4. Friday Mail Sack: Dang, This Year Went Fast Edition
  5. More than you ever wanted to know about Remote Desktop Licensing
  6. Removing DFSR Filters
  7. DFS Override Referral Ordering, Messing with the Natural Order
  8. Oh man, I seriously overslept
  9. AD FS 2.0 Claims Rule Language Primer
  10. Advanced XML filtering in the Windows Event Viewer
  11. The PDCe with too much to do
  12. What the heck does /genmigxml do?
  13. Windows 8 for the IT Pro: The New Plumbing
  14. Active Directory Site Topology, Not Just for DCs
  15. Managing RID Pool Depletion
  16. Friday Mail Sack: Robert Wagner Edition
  17. The Security Log Haystack – Event Forwarding and You
  18. Cluster and Stale Computer Accounts
  19. Improved Group Policy Preference Targeting by Computer Group Membership
  20. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 20: Vista Section K)
  21. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 19: Vista Section J)
  22. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 18: Vista Section I)
  23. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 17: Vista Section H)
  24. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 16: Vista Section G)
  25. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 14: Vista Section E)
  26. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 13: Vista Section D)
  27. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 12: Vista Section C)
  28. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 11: Vista Section B)
  29. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 10: Vista Section A)
  30. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 9: XP Section H)
  31. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 8: XP Section G)
  32. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 7: XP Section F)
  33. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 6: XP Section E)
  34. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 5: XP Section D)
  35. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 4: XP Section C)
  36. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 3: XP Section B)
  37. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 2: XP Section A)
  38. Understanding what the USMT 4.0 CONFIG manifests migrate (Part 1: Introduction)
  39. Kerberos and Load Balancing
  40. AskDS is 12,614,400,000,000,000 shakes old
  41. Friday Mail Sack: Beard-Seconds Edition
  42. USMT x86 to x64 migration– Do not migrate COM+ setup manifest
  43. USMT and Converting Registry Data Types
  44. Friday Mail Sack: Anchors Aweigh Edition
  45. Troubleshooting SID translation failures from the obvious to the not so obvious
  46. How to Determine the Minimum Staging Area DFSR Needs for a Replicated Folder
  47. Windows Server 2008 SP1 and Windows Vista SP1 now UNSUPPORTED
  48. I’ll take NDES in the DMZ, for 1000 Alex
  49. Murphy Loves Migrations: USMT and the Case of the Missing Folders
  50. Forcing Domain Admins to use AGPM (but not really)
  51. Blog Email and Comment Alert Issues - (Updated)
  52. Under One Month Before Vista SP1 Support Ends
  53. What is the Impact of Upgrading the Domain or Forest Functional Level?
  54. Target Group Policy Preferences by Container, not by Group
  55. Friday Mail Sack: LeBron is not Jordan Edition
  56. RSA SecurID Do Over
  57. Blocking Wallpaper Migration with USMT (or: you are a jerk)
  58. Viewing ADLDS traffic with Netmon – where is my LDAP?
  59. LINKS! USMT 4 forgot my LINKS!!
  60. Certificate Authority disaster recovery steps when smartcard logon is required but no valid CRL can be published
  61. Understanding USMT Printer Migration (or the lack thereof)
  62. Friday Mail Sack: Goat Riding Bambino Edition
  63. Vista SP1 End of Support Reminder
  64. USMT and U: Migrating only fresh domain profiles
  65. Speaking in Ciphers and other Enigmatic tongues…
  66. USMT and Invalid User Mapping
  67. Sites Sites Everywhere…
  68. AGPM Operations (under the hood part 4: import and export)
  69. ADFS 2.0 Content Map now up on TechNet Wiki
  70. DFSN and DFSR-RO interoperability: When Good DFS Roots Go Bad…
  71. Friday Mail Sack: Now with 100% more words
  72. USMT pauses at "starting the migration process" for many minutes then works
  73. New KB Article for week of 4/3–3/9
  74. Your email’s legal disclaimer is meaningless
  75. You probably don't need ACCTINFO2.DLL
  76. Designing and Implementing a PKI - Series Wrapup and Downloadable Copies
  77. AGPM Operations (under the hood part 3: check in)
  78. SCM 2 CTP released (whoops, a month ago)
  79. RSAT for Windows 7 SP1 is now available
  80. Designing and Implementing a PKI: Part V Disaster Recovery
  81. Designing and Implementing a PKI: Part IV Configuring SSL for Web Enrollment and Enabling Key Archival
  82. AGPM Operations (under the hood part 2: check out)
  83. How to setup a federation with Automatic Data Processing, Inc (ADP) using ADFS 2.0
  84. What does DCDIAG actually… do?
  85. New DS Content for 3/13–3/19
  86. Hard Disk Failure Error Messages in AD Replication?
  87. Global Object Access Auditing is Magic
  88. New KB Articles 2/20–2/26
  89. The future is here. It's just not widely distributed yet.
  90. I moved my PDCE role and accounts started locking out!
  91. RTM RSAT and SP1 Win7 (shot, over)
  92. New Directory Services Content 1/30–2/5
  93. Service Pack 1 for Win7 and Win2008 R2 is RTM
  94. No Friday mail sack today
  95. KCC Offline Bridgehead Behaviors
  96. Monitoring and Maintaining DFS Namespaces
  97. So glad that I moved…
  98. USMT 4 Update Released to Support Office 2010 Migrations, Fix Other Goo
  99. AGPM Production GPOs (under the hood)
  100. Using ABE with DFS
  101. The Windows Server division wants your feedback
  102. Can Apple, Linux, and other non-MS operating systems connect to DFS Namespaces?
  103. SP1 and Directory Services: What’s New
  104. New Directory Services Content 1/2-1/8
  105. RunAs Radio Interview (or: Hear Monkey Boy Speak!)
  106. I’m Back

2010 132

  1. Important DFSR Hotfix for Mixed 2003, 2008 and 2008 R2 Environments
  2. Friday Mail Sack: Pew Pew Pew Edition
  3. iPad / iPhone Certificate Issuance
  4. Happy 25th Birthday Windows (tomorrow)
  5. Reading LDAP SSL Network Traffic with NetMon 3.4 and NMDecrypt
  6. New ADFS Content on TechNet Wiki (11/16/2010)
  7. New Directory Services KB Articles
  8. Yeowza, 0x1f4 articles!
  9. Think Positive
  10. Migrating DFS Namespaces to Preserve Old Domain Names
  11. New Directory Services Content 10/24-10/30
  12. Common DFSR Configuration Mistakes and Oversights
  13. New Directory Services Content 10/17-10-23
  14. Controlling USMT Desktop Shell Icon Behavior from XP (and how to create registry values out of thin air)
  15. Mythical Creatures – Corrupt User Profiles
  16. Hunting down DES in order to securely deploy Kerberos
  17. New Directory Services Content 10/10–10/16
  18. Two more positions opened
  19. RESTOREDFSR.VBS Version 3 now available
  20. Get-DFSRBacklog PowerShell Script Available
  21. Friday Mail Sack: Cluedo Edition
  22. New Directory Services Content 9/19-9/25
  23. AD LDS Schema Files Demystified
  24. New Directory Services related content 9/12–9/18
  25. New ADFS Content on TechNet Wiki
  26. Hear hear
  27. New Directory Services Content 9/5-9/11
  28. Series Wrap-up and Downloads - Replacing DFSR Member Hardware or OS
  29. Replacing DFSR Member Hardware or OS (Part 5: Reinstall and Upgrade)
  30. Replacing DFSR Member Hardware or OS (Part 4: Disk Swap)
  31. Replacing DFSR Member Hardware or OS (Part 3: N+1 Method)
  32. Replacing DFSR Member Hardware or OS (Part 2: Pre-seeding)
  33. Top Solutions RSS feeds for Windows Server and Client now available
  34. Multi-NIC File Server Dissection
  35. Replacing DFSR Member Hardware or OS (Part 1: Planning)
  36. Microsoft’s Support Statement Around Replicated User Profile Data
  37. The Case of the Enormous CA Database
  38. New Directory Services Content 8/22-8/28
  39. No more yellow banner (and the gallery of things that are not work)
  40. How Not to Interview
  41. Don’t mess about with USMT’s included manifests!
  42. Forcing Afterhours User Logoffs
  43. New Directory Services Content 8/15-8/21
  44. Friday Mail Sack: Scooter Edition
  45. Fine-Grained Password Policy and “Urgent Replication”
  46. AskDS is 0.03 Centuries Old Today
  47. New Directory Services Content 7/25-7/31
  48. New DNS and AD DS BPA’s released (or: the most accurate list of DNS recommendations you will ever find from Microsoft)
  49. Friday Mail Sack: Newfie from the Grave Edition
  50. Post-Graduate AD Studies
  51. New Directory Services Content 7/18-7/24
  52. Friday Mail Sack: Saturday Edition
  53. Service Pack 1 Beta out for Windows 7 and Windows Server 2008 R2
  54. No Friday mail sack
  55. Goodbye Windows 2000
  56. Migrating Vista and Windows 7 profiles with ADMT 3.2
  57. ADMT 3.2: Common Installation Issues
  58. Reminder: Windows 2000 Support ends July 13 (and other lifecycle stuff for 2003, XP, SfU)
  59. Announcing the Group Policy Search service
  60. We are hiring
  61. ADMT 3.2 released
  62. How to Virtualize Active Directory Domain Controllers (Part 2)
  63. Friday Mail Sack: Shut Up Laura Edition
  64. How to Virtualize Active Directory Domain Controllers (Part 1)
  65. Son of SPA: AD Data Collector Sets in Win2008 and beyond
  66. Friday Mail Sack: Walking Tall Edition
  67. New Directory Services Content 5/23-5/29
  68. One Stop Shop for Windows Time Information
  69. New Directory Services Content 5/16-5/22
  70. Designing and Implementing a PKI: Part III Certificate Templates
  71. FRS to DFSR Migration Tool Released
  72. Enabling CEP and CES for enrolling non-domain joined computers for certificates
  73. AD FS 2.0 and AD FS 1.x Interoperability
  74. File Services Management Pack has been released
  75. New Directory Services Content 5/9-5/15
  76. New Directory Services KB Articles/Blogs 5/2-5/8
  77. Friday Mail Sack – It’s About To Get Real Edition
  78. Validating your AD Schema Prior to Upgrade (a Followup)
  79. Migrated Users Get Prompted To Change Password at First Logon Even After Migrating Their Password with the PES
  80. New Directory Services KB Articles 4/25-5/1
  81. Friday Mail Sack – Cup Runneth Over Edition
  82. Win2008 R2 BPA Updates Released for April 2010 wave
  83. New Directory Services KB Articles/Blogs 4/18-4/24
  84. New Directory Services KB Articles/Blogs 4/11-4/17
  85. The Case for Migrating SYSVOL to DFSR
  86. FRS to DFSR migration guide published
  87. It’s our turn to ask you a question
  88. New Directory Services KB Articles/Blogs 4/4-4/10
  89. Friday Mail Sack – While the Ned’s Away Edition
  90. New Directory Services KB Articles/Blogs 3/28-4/3
  91. Friday Mail Sack – Marshmallow Bird Edition
  92. New Directory Services KB Articles/Blogs 3/21-3/27
  93. Event 17 errors in Terminal Services / Remote Desktop Services license servers
  94. Tuning replication performance in DFSR (especially on Win2008 R2)
  95. Best practices around Active Directory Authoritative Restores in Windows Server 2003 and 2008
  96. Friday Mail Sack – Missed Week Edition
  97. Group Policy Script Processing Behavior
  98. New Directory Services KB Articles/Blogs 3/14-3/20
  99. Background uploading of User Registry Settings
  100. New Directory Services KB Articles/Blogs 3/7-3/13
  101. Friday Mail Sack – Mogwai Edition
  102. USMT and /SF
  103. New Directory Services KB Articles/Blogs 2/28-3/6
  104. Read-Only Replication in R2
  105. Friday Mail Sack - Something Something Edition
  106. TechNet Wiki – Contribute Boldly!
  107. USMT 4.0 and Custom Exclusion Troubleshooting
  108. New Directory Services KB Articles/Blogs 2/21-2/27
  109. USMT 4.0: Cryptic Messages with Easy Fixes
  110. Get Shiny with USMT: Turning the Aero Theme on During XP to Windows 7 Migration
  111. New Directory Services KB Articles/Blogs 2/14-2/20
  112. Friday Mail Sack – Big Picture Edition
  113. AD’s Maybe Birthday
  114. USMT 4 and WinPE: Common Issues
  115. New Directory Services KB Articles/Blogs 2/7-2/13
  116. Strict Replication Consistency - Myth versus Reality
  117. USMT, OST, and PST
  118. USMT Custom XML the Free and Easy Way
  119. New Directory Services KB Articles/Blogs 1/31-2/6
  120. GP Editorial on the Group Policy blog
  121. Inventorying Computers with AD PowerShell
  122. New Directory Services KB Articles/Blogs 1/24-1/30
  123. Certificate Enrollment Web Services
  124. It’s Lucha Libre Friday
  125. DCDIAG Advertising test with error 81
  126. New Directory Services KB Articles/Blogs 1/10-1/23
  127. File Services Management Pack for System Center Operations Manager 2007 – Beta now open
  128. New Directory Services KB Articles/Blogs 1/3-1/9
  129. The importance of following ALL the authoritative restore steps
  130. Clustered Certification Authority maintenance tasks
  131. New Directory Services KB Articles/Blogs 12/20-1/2
  132. Understanding DFSR conflict algorithms (and doing something about conflicts)

2009 209

  1. New Directory Services KB Articles/Blogs 12/13-12/19
  2. Our Long Winter's Nap
  3. Troubleshooting Credential Roaming
  4. WDS and DFSR: Love at First Sync
  5. New Directory Services KB Articles/Blogs 12/6-12/12
  6. Windows XP Power Management and Group Policy Preferences
  7. Control Extended Protection for Authentication using Security Policy
  8. Windows 7, Windows Server 2008 R2 and the Group Policy Central Store
  9. New Directory Services KB Articles/Blogs 11/29-12/5
  10. Windows Event Log Service is Not Starting… and my domain is down!
  11. Link-Pairs and Configuring Bridgeheads in ADAM/ADLDS
  12. Understanding USMT 4.0 Behavior with UEL and UE
  13. New Directory Services KB Articles/Blogs 11/23-11/28
  14. New Directory Services KB Articles/Blogs 11/1-11/21
  15. Group Policy Preferences Logging and Windows 7
  16. Get a 90 day trial copy of Windows 7 Enterprise
  17. Implementing Content Freshness protection in DFSR
  18. I Hate Mondays
  19. New Directory Services KB Articles/Blogs 10/25-10/31
  20. Auditing Password and Account Lockout Policy on Windows Server 2008 and R2
  21. New Directory Services KB Articles/Blogs 10/18-10/24
  22. Comment issues, continued
  23. Explanation of the Remote Desktop Services CAL Upgrade behavior in Windows Server 2003 and Windows Server 2008
  24. DFS Referrals and IPv6: Outta site!
  25. Followup - more info on the new SCOM 2007 Management Pack for DFSR
  26. How to Decommission an ADAM/ADLDS server and Add Additional Servers
  27. Using ADMT 3.1 to migrate to Windows Server 2008 R2 domains
  28. Group Policy Slow Link Detection using Windows Vista and later
  29. Come and get it
  30. New Directory Services KB Articles/Blogs 10/11-10/17
  31. DFSR Monitoring Management Pack for System Center 2007 Released
  32. ADMT, RODC’s, and Error 800704f1
  33. Designing and Implementing a PKI: Part II Implementation Phases and Certificate Authority Installation
  34. New Directory Services KB Articles/Blogs 10/4-10/10
  35. New Directory Services KB Articles/Blogs 9/27-10/3
  36. NTLM Blocking and You: Application Analysis and Auditing Methodologies in Windows 7
  37. New Directory Services KB Articles/Blogs 9/20-9/26
  38. O’DFS Shares! Where Art Thou? – Part 3/3
  39. O’DFS Shares! Where Art Thou? – Part 2/3
  40. O’DFS Shares! Where Art Thou? – Part 1/3
  41. AzMan MMC with a sample application
  42. So you have a slow logon…? (Part 2)
  43. So you have a slow logon…? (Part 1)
  44. ADFS – Federated WebSSO with Forest Trust Scenario and its Limitations
  45. Understanding LDAP Security Processing
  46. I Hate Fridays
  47. Clarification on upgrading Windows Server 2003 to Windows Server 2008 R2
  48. ADWS has been released for Windows Server 2008 and Windows Server 2003
  49. Windows 2008 R2: Managing AD LDS using the AD PowerShell Module
  50. Managed Service Accounts: Understanding, Implementing, Best Practices, and Troubleshooting
  51. Comment problems
  52. Windows 2008 R2 Standard Edition supports Version 2 and 3 Templates
  53. New Directory Services KB Articles/Blogs 8/23-8/29
  54. New Directory Services KB Articles/Blogs 8/16-8/22
  55. The AD Recycle Bin: Understanding, Implementing, Best Practices, and Troubleshooting
  56. Happy Birthday Windows 95
  57. DFS Namespace performance Improvements in Windows Server 2008 and R2
  58. Designing DFSN Namespaces (by the guy that owns them)
  59. Implementing an OCSP Responder: Part VI Configuring Custom OCSP URIs via Group Policy
  60. Implementing an OCSP Responder: Part V High Availability
  61. BitLocker and Active Directory
  62. Extended Validation support for websites using internal certificates
  63. RSAT Released for Windows 7
  64. New Directory Services KB Articles/Blogs 8/2-8/8
  65. DFSR: From UID to File Path in One Easy Step
  66. Mapping One Smartcard Certificate to Multiple Accounts.
  67. CRM and Kerberos
  68. AskDS is 63,072,000,000 milliseconds old today
  69. New Directory Services KB Articles/Blogs 7/27-8/1
  70. Tracking a Remote File Deletion Back to the Source
  71. New Directory Services KB Articles/Blogs 7/12-7/26
  72. Active Directory Recycle Bin in Windows Server 2008 R2
  73. Done
  74. How to Migrate the AzMan Store
  75. Microsoft Assessment and Planning Toolkit is RTM
  76. Configuring DFSR to a Static Port - The rest of the story
  77. New Directory Services KB Articles/Blogs 7/5-7/11
  78. Important DFSR SYSVOL migration KB's you should be reading
  79. New Directory Services KB Articles/Blogs 6/28-7/4
  80. Getting Over Replmon
  81. New Directory Services KB Articles/Blogs 6/21-6/27
  82. Implementing an OCSP responder: Part IV - Configuring OCSP for use with Standalone CAs
  83. Deploying DFSR Clustering in Windows Server 2008 R2
  84. Implementing an OCSP responder: Part III - Configuring OCSP for use with Enterprise CAs
  85. Debunking the Vista Remote Differential Compression Myth
  86. Implementing an OCSP responder: Part II - Preparing Certificate Authorities
  87. RSAT and ADUC for Vista - Update to add tabs for Terminal Services Profile, Environment, Sessions, and Remote Control
  88. New Directory Services KB Articles/Blog Posts 6/14-6/20
  89. Implementing an OCSP responder: Part I - Introducing OCSP
  90. Recovering from Unsupported One-Way Replication in DFSR Windows Server 2003 R2 and Windows Server 2008.
  91. Internet Explorer behaviors with Kerberos Authentication
  92. Friday Silliness
  93. Migrating from PolicyMaker to Group Policy Preferences with GPPMIG
  94. Potential for Kerberos Issues When Using a Cisco VPN/ASA with Win2003 or later DC’s
  95. The Strange Case of Unenforced Password Complexity
  96. DFSRMIG and the Connection Gremlin
  97. Ghosts in the DFS Management Machine
  98. Using LDIFDE to Perform Post-Migration Clean-up Tasks
  99. New KB articles related to Directory Services for the week of 5/31-6/6.
  100. DC’s and VM’s – Avoiding the Do-Over
  101. The Case of the Random DFS Access Denial
  102. New Directory Services Content 5/24-5/30
  103. What occurs when the Security Group Policy CSE encounters a null DACL
  104. Null and Empty DACLs
  105. New Directory Services KB Articles 5/10-5/23
  106. MS Security Intelligence Report Volume 6 Released
  107. ADMT 3.1 and Windows Server 2008 R2
  108. Temporary User Profiles and the Citrix ICA Client
  109. Understanding Password Policies
  110. New Directory Services KB Articles 5/3-5/9
  111. Now we're multilingual
  112. Five common questions about AdminSdHolder and SDProp
  113. RSAT Release Candidate for Windows 7... ehh... Release Candidate
  114. New Directory Services KB Articles 4/26-5/2
  115. Printing and Active Directory
  116. Event ID 22 on a Windows 2008 Terminal Services Licensing Server
  117. SYSVOL migration from FRS to DFSR - Whitepaper Released
  118. Overview of New MPSReports Data Collection Tool
  119. 8-bit Awesomeness
  120. SQL Bulk Insert - Access is Denied
  121. DelegConfig V2 Released
  122. Office 2007 SP2 Administrative Templates Released
  123. ADAM - Saved event logs show "The description for event ID... cannot be found"
  124. New Directory Services KB Articles 4/19-4/25
  125. Breaking Down DCDiag.exe to an Object with PowerShell
  126. Working with Certificates in Active Directory PowerShell
  127. Recovering a Deleted Cluster Name Object (CNO) in a Windows Server 2008 Failover Cluster
  128. Netmon, MPS, RODC's, and that new OS you might have heard about
  129. Command line guide for Server Core
  130. Other Directory Services Blogs
  131. How to configure the Windows Server 2008 CA Web Enrollment Proxy
  132. New Directory Services KB Articles 4/11-4/18
  133. Conficker causes LSASS to consume CPU Time on Domain Controllers
  134. “The LastLogonTimeStamp Attribute” – “What it was designed for and how it works”
  135. New Directory Services KB Articles 4/5-4/11
  136. Happy birthday Redmond domain :-)
  137. Name Suffix Routing
  138. DFSR Debug Log Series Wrapup and Downloadable Copies
  139. Understanding DFSR debug logging (Part 21: File replication performance from throttling (uses debug severity 5))
  140. Understanding DFSR debug logging (Part 20: Skipped temporary and filtered files (uses debug severity 5))
  141. Understanding DFSR debug logging (Part 19: File Blocked Inbound by a File Screen Filter Driver (uses debug severity 5))
  142. New Directory Services KB Articles 3/28-4/5
  143. Understanding DFSR debug logging (Part 18: LDAP queries failing due to network (uses debug severity 5))
  144. Understanding DFSR debug logging (Part 17: Replication failing because of blocked RPC ports (uses debug severity 5))
  145. Understanding DFSR debug logging (Part 16: File modification with RDC in very granular detail (uses debug severity 5))
  146. Understanding DFSR debug logging (Part 15: Pre-Seeded Data Usage during Initial Sync)
  147. Understanding DFSR debug logging (Part 14: A sharing violation due to a file locked upstream between two Windows Server 2008)
  148. Understanding DFSR debug logging (part 13: A New Replication Group and Replicated Folder between two Windows Server 2008 members)
  149. Tell us how we've been doing
  150. Understanding DFSR debug logging (Part 12: Domain Controller Bind and Config Polling on Windows Server 2008)
  151. Understanding DFSR debug logging (Part 11: Directory created on Windows Server 2003 R2)
  152. Understanding DFSR debug logging (Part 10: File Conflicted between two Windows Server 2008)
  153. New steps for configuring Read-Only replication in Windows Server 2008 R2 Online
  154. Understanding DFSR debug logging (Part 9: File is Renamed on Windows Server 2003 R2)
  155. Understanding DFSR debug logging (Part 8: File Deleted from Windows Server 2003 R2)
  156. New Directory Services KB Articles 3/21-3/28
  157. Understanding DFSR debug logging (Part 7: Microsoft Office Word 2007 File Modified on Windows Server 2008)
  158. Understanding DFSR debug logging (Part 6: Microsoft Office Word 97-2003 File Modified on Windows Server 2008)
  159. New Directory Services KB Articles 3/14-3/21
  160. Understanding DFSR debug logging (Part 5: File Modified on Windows Server 2003 R2)
  161. Understanding DFSR debug logging (Part 4: A Very Small File Added to Replicated Folder on Windows Server 2008)
  162. Understanding DFSR debug logging (Part 3: The Log Scenario Format, File Added to Replicated Folder on Windows Server 2008)
  163. Understanding DFSR debug logging (Part 2: Nested Fields, Module ID's)
  164. Understanding DFSR Debug Logging (Part 1: Logging Levels, Log Format, GUID’s)
  165. Userenv 1054 events as a result of time-stamp counter drift on Windows Server 2003 guests running in Hyper-V
  166. Reminder: End of Life for Service Pack 1 in Windows Server 2003 Coming Soon
  167. How do I find out what changes are going on in my Active Directory?
  168. New Directory Services KB Articles 3/7-3/14
  169. How to Properly Disable Offline Files in Windows Vista
  170. DS Restore Mode Password Maintenance
  171. New Directory Services KB Articles 3/1-3/7
  172. The Missing Links
  173. Successful Errors Installing Windows Server 2008 Certificate Authority
  174. Welcome Jpntsblog!
  175. New Directory Services KB Articles 2/21-2/28
  176. Changes in Functionality from 2008 to 2008 R2 (mostly)
  177. A pair of useful AD books released
  178. New Directory Services KB Articles 2/14-2/21
  179. Understanding (the Lack of) Distributed File Locking in DFSR
  180. Renaming a computer using WMIC and how to get around that aggravating “Invalid Global Switch” error
  181. How to enable Event logging for Offline Files (Client Side Caching) in Windows Vista
  182. Are you backing up ADAM?
  183. New Directory Services KB Articles 2/7-2/14
  184. Headache Prevention: Install Hotfix 953317 to Prevent DNS Records from Disappearing from Secondary DNS Zones on Windows Server 2008 SP1
  185. “Configure slow-link mode” policy on Vista for Offline Files
  186. New Directory Services KB Articles 2/1-2/7
  187. HOW TO: Export the Configuration Container in ADAM & AD LDS Using LDIFDE
  188. How to Hide User Information When Computer is Locked
  189. New Directory Services KB Articles 1/25-1/31
  190. Machine Account Password Process
  191. Seeing the domains through the forest: What you need to know to build your career in Directory Services technologies
  192. I bet it runs Minesweeper like a sonofagun…
  193. Addendum: Making the DelegConfig website work on IIS 7
  194. New Directory Services KB Articles 1/18-1/25
  195. Windows Server 2008 R2 DFSR Features
  196. Using PORTQRY for troubleshooting
  197. Microsoft North Carolina, Directory Services Team 3 – Doh!
  198. Negotiate security support provider behavior
  199. Determine Applied Schema Extensions with AD DS/LDS Schema Analyzer
  200. New Directory Services KB Articles 1/11-1/17
  201. Understanding the behavior differences of SYSVOL replication in Windows Server 2008 RODCs
  202. New Directory Services KB Articles 1/4-1/11
  203. Remote Server Administration Tools (RSAT) Available For Windows 7 Beta
  204. Windows Server 2008 R2 Beta Available
  205. Windows 7 for TechNet and MSDN Subscribers
  206. Using Group Policy Preferences to Map Drives Based on Group Membership
  207. New Directory Services KB Articles 12/22-1/4
  208. Certs On Wheels: Understanding Credential Roaming
  209. DFSR SYSVOL Migration FAQ: Useful trivia that may save your follicles

2008 118

  1. New Directory Services KB Articles 12/14-12/21
  2. Understanding File Date/Time behavior in DFSR Replication (and better ways of knowing that a file has replicated)
  3. New Directory Services KB Articles 12/07-12/14
  4. AGPM Least Privilege Scenario
  5. Troubleshooting ADPREP Errors
  6. New Directory Services KB Articles 11/30-12/07
  7. Why Are ADFS Binaries Installed on non-R2 Windows Server 2003 computers?
  8. One stop shopping for DFSR and DFSN recommended hotfixes
  9. New Directory Services KB Articles 11/23-11/30
  10. Fun with the Kerberos Delegation Web Site
  11. How to Back Up and Restore NTFS and Share Permissions
  12. ADFS: SAML Tokens and Validation Issues when Federated with TFIM
  13. Top AskDS Blog Posts
  14. Directory Services and more, from Madrid
  15. New Directory Services KB Articles 11/9-11/16
  16. Follow up on lag sites... sort of.
  17. Using Network Monitor 3 to Troubleshoot a Domain Join Failure Caused by a Black Hole Router
  18. Forced Demotion of a Windows Server 2008 Core Domain Controller
  19. Configuring an Authoritative Time Server with Group Policy Using WMI Filtering
  20. So You Want to Upgrade to Windows 2008 Domain Controllers (ADPREP)
  21. Understanding How to Read a Userenv Log – Part 1
  22. DFSR Does Not Replicate Temporary Files
  23. New KB Articles 11/2-11/9
  24. Quick Fixes for Group Policy Issues
  25. New KB articles 10/26-11/2
  26. Troubleshooting KCC Event Log Errors
  27. Port Exhaustion and You (or, why the Netstat tool is your friend)
  28. File Server Migration Toolkit (FSMT) 1.1 Released
  29. New KB Articles 10/19-10/26
  30. SSL/TLS Record Fragmentation Support
  31. DFSDIAG in a nutshell
  32. New KB Articles 10/12-10/19
  33. Getting a CMD prompt as SYSTEM in Windows Vista and Windows Server 2008
  34. “Lag site” or “hot site” (aka delayed replication) for Active Directory Disaster Recovery support
  35. New KB Articles 10/5-10/11
  36. Preventing large time offset problems
  37. IE8 Group Policy
  38. New KB Articles 9/28-10/5
  39. Manually Clearing the ConflictAndDeleted Folder in DFSR
  40. ADFS Components missing after upgrading to Windows Server 2003 Enterprise Edition
  41. New KB Articles 9/21-9/27
  42. Command-Line Compression in Core
  43. Domain Locator Across a Forest Trust
  44. Fail to log Security Settings from Default Domain Policy
  45. Changes to Professional Level (Non-Premier) Support Model
  46. Service Connection Points (SCPs) and ADAM/AD LDS
  47. Third Party Application Fails Using LDAP over SSL
  48. Fun with WMI Filters in Group Policy
  49. Ultrasound released for Windows Server 2008 and SQL Server 2005
  50. Vista’s MoveUser.exe replacement
  51. New Functionality in Windows Server 2008 Terminal Service Licensing
  52. Aktives Verzeichnis (Sagen Sie Hallo!)
  53. Saving money and power with Group Policy
  54. Removable Storage, Group Policy and Windows Server 2008 and Windows Vista
  55. A test case for troubleshooting group policy application – Event ID 1085 and 7016
  56. What is the purpose of the 'Deleted' folder in DFSR?
  57. Network Properties in a hurry
  58. Event Logging policy settings in Windows Server 2008 and Vista
  59. MCS Talks Infrastructure Architecture
  60. PolicyMaker stops working after installing Windows XP SP3
  61. Network Browsing with Windows Server 2008
  62. Enabling Group Policy Preferences Debug Logging using the RSAT
  63. Five Common Causes of “Waiting for the DFS Replication service to retrieve replication settings from Active Directory”
  64. ADMT 3.1 Released
  65. Installing GPMC on Windows Server 2008 and Windows Vista Service Pack 1
  66. What are the Schema Extension Requirements for running Windows Server 2008 DFSR?
  67. Automatic creation of user folders for home, roaming profile and redirected folders.
  68. Custom Certificate Request in Windows Vista
  69. User Profile Policies in Windows Server 2008 and Windows Vista
  70. Understanding Kerberos Double Hop
  71. Kerberos Authentication problems – Service Principal Name (SPN) issues - Part 3
  72. Kerberos Authentication problems – Service Principal Name (SPN) issues - Part 2
  73. How to Enable Remote Administration of Server Core via MMC using NETSH
  74. How to get the most from your FRSDiag…
  75. Kerberos Authentication problems – Service Principal Name (SPN) issues - Part 1
  76. Default Security Templates in Windows 2008
  77. Verifying File Replication during the Windows Server 2008 DFSR SYSVOL Migration – Down and Dirty Style
  78. Bulk exporting and importing WMI filters for Group Policy
  79. Troubleshooting Kerberos Authentication problems – Name resolution issues
  80. The Security Descriptor Definition Language of Love (Part 2)
  81. Office 2007 Group Policy - Loads of useful, free stuff released
  82. Configuring Network Device Enrollment Service for Windows Server 2008 with Custom Certificates
  83. New KB Articles April 5-11
  84. The Security Descriptor Definition Language of Love (Part 1)
  85. New KB Articles March 22-April 4
  86. Group Policy Best Practice Analyzer
  87. Throw Away Your Mouse! A List of Windows Snap-ins and Applets
  88. Certificate Concepts
  89. New KB Articles March 1-21
  90. Directory Services Debug Logging Primer
  91. RSAT and ADUC: Getting the Terminal Services Tabs to Appear in AD Users and Computers
  92. One-Stop Shop for Auditing in Windows Server 2008 and Windows Vista
  93. Remote Server Administration Tools Released for Windows Vista SP1 (Hurray!)
  94. Managing Power with Group Policy: Part 3 of 3
  95. Managing Power with Group Policy: Part 2 of 3
  96. Managing Power with Group Policy: Part 1 of 3
  97. Update Released to Disable Scalable Network Pack
  98. Troubleshooting LDAP Over SSL
  99. New KB Articles February 23-29
  100. Kerberos for the Busy Admin
  101. Windows Logon Options in Vista/2008: Part Two of Two
  102. New KB articles February 10-16
  103. Windows Logon Options in Vista/2008: Part One of Two
  104. Read-Only Domain Controllers and Account Lockouts
  105. Deploying Legal Notices to domain computers using Group Policy
  106. New KB articles January 20-26
  107. Security Policy Settings and User Account Control
  108. New KB articles January 13-19
  109. Customizing file compression in DFSR on Windows Server 2008 (no, not RDC)
  110. Understanding “Read Only Domain Controller” authentication
  111. We're hiring!
  112. New KB articles January 5-11
  113. Migrating your DFS Namespaces in three (sorta) easy steps
  114. What’s in a Token (Part 2): Impersonation
  115. New KB articles December 22-28
  116. Replacing an Expired DRA Certificate
  117. New DFSR Data Restoration Script
  118. Which KB articles resolve the most Directory Services issues?

2007 19

  1. Troubleshooting networks without NetMon
  2. An old-new way to get Group Policy Results
  3. Introducing Group Policy Preferences
  4. Cool Auditing Tricks in Vista and 2008
  5. How to troubleshoot Certificate Enrollment in the MMC Certificate Snap-in
  6. What's in a Token
  7. Configuring your PDCE with Alternate Time Sources
  8. High Accuracy W32time Requirements
  9. Introducing Auditing Changes in Windows 2008
  10. Documenting Active Directory Infrastructure the Easy Way
  11. Top 10 Common Causes of Slow Replication with DFSR
  12. Not enough storage is available to complete this operation
  13. Where’s my file? Root cause analysis of FRS and DFSR data deletion
  14. Dynamic Ports in Windows Server 2008 and Windows Vista (or: How I learned to stop worrying and love the IANA)
  15. Troubleshooting High LSASS CPU Utilization on a Domain Controller (Part 2 of 2)-
  16. Troubleshooting High LSASS CPU Utilization on a Domain Controller (Part 1 of 2)
  17. Deploying Custom Registry Changes through Group Policy
  18. Terminal Server Licensing Explained...
  19. Welcome to the Directory Service Team blog- Why are we here anyway!