RE: [ActiveDir] DC-side auditing of GPO client access due to slow
boot-up timesby CommunityAdmin on Fri 21 May 2010
Pity, I have seen a similar problem but I'm having a bit of a senior moment about how I fixed it. It was either a service bl... continue reading "RE: [ActiveDir] DC-side auditing of GPO client access due to slow boot-up times" [ActiveDir] Running Exchange on Principle of least privilegeby CommunityAdmin on Fri 21 May 2010
Hi Folks... Security minded question here... I was told that a common exploit to access DCs are by elevating privileges... continue reading "[ActiveDir] Running Exchange on Principle of least privilege" Re: [ActiveDir] GPO not applied on some clients only (Registry key
security)by CommunityAdmin on Fri 21 May 2010
Hi Darren, I did run GPOTOOL and everything is fine for the GPO i am working on, output is: ==========================... continue reading "Re: [ActiveDir] GPO not applied on some clients only (Registry key security)" RE: [ActiveDir] GPO not applied on some clients only (Registry key
security)by CommunityAdmin on Fri 21 May 2010
OK. Some other things to look for include the existing permissions on that reg key on the problem machines are such that they... continue reading "RE: [ActiveDir] GPO not applied on some clients only (Registry key security)" RE: [ActiveDir] GPO not applied on some clients only (Registry key
security)by CommunityAdmin on Fri 21 May 2010
I have ran into this issue of a GPO not being applied to some clients before. An article that helped me was located here: htt... continue reading "RE: [ActiveDir] GPO not applied on some clients only (Registry key security)" Re: [ActiveDir] DC-side auditing of GPO client access due to slow
boot-up timesby CommunityAdmin on Fri 21 May 2010
Darren, that's what the Microsoft consultant is having them do with userenv.log. Thanks for the confirmation about the 2008... continue reading "Re: [ActiveDir] DC-side auditing of GPO client access due to slow boot-up times"
Update Group Membershipby JeffHicks on Tue 18 May 2010
I love the delegation features in Active Directory. With proper planning and training IT can delegate a myriad number of sim... continue reading "Update Group Membership" [ActiveDir] Help with admod and adfindby CommunityAdmin on Sun 16 May 2010
Is it possible to use admod to reapply permissions that were previously exported by adfind (adfind -b "someou"-s subtree -f... continue reading "[ActiveDir] Help with admod and adfind" [ActiveDir] COMPANY CONTACTS, PUBLIC FOLDER VS AD CONTACTSby CommunityAdmin on Sun 16 May 2010
I apologize if this question has come up before, I would like to know what is the industry standard ( or what SA are doing) i... continue reading "[ActiveDir] COMPANY CONTACTS, PUBLIC FOLDER VS AD CONTACTS" RE: [ActiveDir] a New DC with dns sync to the root adby CommunityAdmin on Fri 14 May 2010
Hi Rick, While promoting the server to domain controller for the new domain 'r3' do you want a separate DNS zone to crea... continue reading "RE: [ActiveDir] a New DC with dns sync to the root ad" [ActiveDir] Brian P. is old :-)by CommunityAdmin on Fri 14 May 2010
http://blogs.technet.com/askds/archive/2010/05/07/friday-mail-sack-tweener-clipart-comics-edition.aspx ###################... continue reading "[ActiveDir] Brian P. is old :-)" [ActiveDir] ADMT for SQL/Application serversby CommunityAdmin on Fri 14 May 2010
Hi there, we are about to embark on an interforest migration: source & target domains are both 2003 DFL. We ... continue reading "[ActiveDir] ADMT for SQL/Application servers" [ActiveDir] Query Based Security Groupby CommunityAdmin on Fri 14 May 2010
Does anyone know if it's possible to create a Query-Based Security Group? We're trying to dynamically grab users from multip... continue reading "[ActiveDir] Query Based Security Group" Re: [ActiveDir] a New DC with dns sync to the root adby CommunityAdmin on Fri 14 May 2010
If R3 is the name of this new DC of yours [1], then it needs to be dcpromo as "create new domain within an existing forest i... continue reading "Re: [ActiveDir] a New DC with dns sync to the root ad" Re: [ActiveDir] a New DC with dns sync to the root adby CommunityAdmin on Fri 14 May 2010
Thanks Rick , Sorry about the terms . The requirement is the new server (r3) must have an AD as r3.r2.r1.xyz.com and the ... continue reading "Re: [ActiveDir] a New DC with dns sync to the root ad" Re: [ActiveDir] a New DC with dns sync to the root adby CommunityAdmin on Fri 14 May 2010
Parent and root domain are usually indifferent (unless trees are in pictures). You reference seems to be for two different f... continue reading "Re: [ActiveDir] a New DC with dns sync to the root ad" [ActiveDir] AD and File server accountabilityby CommunityAdmin on Fri 14 May 2010
Hi All, The company I work for is looking for a solution to monitor all changes to the state of AD objects, deleting... continue reading "[ActiveDir] AD and File server accountability" Multi-domain computer membershipby GilK on Thu 13 May 2010 · Liked by 1 person · 3 replies
I’ve participated in several AD requirements development sessions with the DS product team, and one feature that consistent... continue reading "Multi-domain computer membership" Results of FIM 2010 Customer Focused Design Sessionby GilK on Tue 11 May 2010
Robert DeLuca passed along the weighted results of the Forefront Identity Manager 2010 customer-focused design session. The... continue reading "Results of FIM 2010 Customer Focused Design Session" Get RSOP Planningby JeffHicks on Tue 11 May 2010
The GroupPolicy module from Microsoft includes a cmdlet, Get-GPResultantSetofPolicy, which you can use to generate RSOP repo... continue reading "Get RSOP Planning"
New Articles Feed
E-mail new articles to me