Welcome to Dirteam.com/ActiveDir.org Blogs Sign in | Join | Help

December 2006 - Posts

Today's IT Infrastructure

I found the following once in a presentation. It gives you an idea of "Today's IT Infrastructure". ;-) Cheers, Jorge ------------------------------------------------------------------------------------------------ * This posting is provided "AS IS" with Read More...
Posted Saturday, December 30, 2006 2:39 PM by Jorge | 0 Comments
Filed under:

NTLM and Kerberos authentication explained the easy way

Kerberos authentication is always used when: Both endpoints are at least W2K or higher AND In case of a trust, Kerberos is supported Kerberos is supported within an AD forest and between AD forests when a forest trust is used. In all other cases NTLM Read More...
Posted Thursday, December 28, 2006 9:29 PM by Jorge | 2 Comments

Granting admin level access for the OS on DCs but not for AD...

Yesterday and today I (and some other people) were involved in heavy discussion how you can accomplish: Granting Admin level access for the OS on DCs but not within AD The posts can be found in: NG: "microsoft.public.windows.server.active_directory" Post Read More...
Posted Thursday, December 28, 2006 8:01 PM by Jorge | 3 Comments

It's a "GO". I was selected to speak at the "Directory Experts Conference"

As you may have heard, Netpro is organizing the Directory Experts Conference again in april 2007 (22nd-25th) . Just like the last time it is in Las Vegas but now at the " Red Rock Las Vegas ". <QUOTE> Join NetPro and Microsoft in Las Vegas for the Read More...
Posted Thursday, December 28, 2006 7:59 PM by Jorge | 1 Comments

Are you using Windows Update Offline Scanning Features or Solutions?

If you are using the Windows Update Offline Scanning feature provided by the "Wsusscan.cab" file, make sure you update the software used before march 2007. Affected software needing an update is or might be : MBSA 2.0 SMS Inventory Tool for Microsoft Read More...
Posted Thursday, December 28, 2006 1:16 AM by Jorge | 0 Comments
Filed under:

Migrating stuff with ADMTv3

ADMTv3 has been out for a while and is the free Microsoft Migration Tool available for use (besides other small tools that can help you during your migration like NETDOM, SUBINACL, ROBOCOPY, etc.). It can be downloaded here Besides the tool you can also Read More...
Posted Wednesday, December 27, 2006 1:46 PM by Jorge | 7 Comments

Active Directory Component Jigsaw Poster

This jigsaw poster shows you in 9 components the basics of Active Directory. The components shown are: Site Topology Forest Operations Active Directory DNS File Replication service (FRS) Forest Topology Security Distributed File Systems (DFS) Client Interaction Read More...
Posted Wednesday, December 27, 2006 12:13 AM by Jorge | 0 Comments
Filed under:

!!! Happy Holidays Everyone !!!

Christmas is almost over and just a few days until the new year. I hope everyone had a great christmas (I did!), enjoys the last days of the year and has a great start with 2007. Be carefull with the fireworks! ;-) Cheers, Jorge -------------------------------------------------------------------------------------------- Read More...
Posted Tuesday, December 26, 2006 6:23 PM by Jorge | 0 Comments
Filed under:

"userAccountControl" attribute - It can be a pain to delegate!

Both a computer object and an user object have an attribute called "userAccountControl". The "userAccountControl" attribute is not an ordinary attribute like any other attribute (e.g. description) that represents just ONE meaning. No, the "userAccountControl" Read More...
Posted Tuesday, December 26, 2006 6:16 PM by Jorge | 1 Comments
Filed under:

Come again?!?!?! - "Name not valid"

A while ago I got myself an interesting tool for my laptop and a about a week or so ago, I decided to register that tool through the internet site of the supplier. During registration I got myself the following "error/message"... I think I need a rename... Read More...
Posted Saturday, December 16, 2006 11:58 PM by Jorge | 0 Comments
Filed under:

DC-GUIDs and Invocation IDs

Within Active Directory, each domain controller has two very important IDs, which are called the " DC-GUID " and " Invocation ID ". (DC-GUID can also be called the DSA-GUID, where DSA = Directory Service Agent. However DC-GUID is more common and you will Read More...
Posted Sunday, December 10, 2006 3:54 AM by Jorge | 6 Comments
Filed under:

Attachment(s): GUIDConverter.hta.txt

Troubleshooting AD Replication Issues

The following article is a great start to troubleshoot your replication issues you might experience in your environment. It explains possible causes and solutions to the problem. The second article also looks at other issues you might experience, as for Read More...
Posted Saturday, December 09, 2006 1:10 PM by Jorge | 0 Comments
Filed under:

Uninstalling Active Directory - Demoting a DC

This is an old one, but I thought I'd post it here for those ever having trouble demoting a DC to a member server or stand alone server. The 3 supported ways of removing AD from a server with W2K, W2K3 and W2K8 are: DCPROMO Used most of the times when Read More...
Posted Sunday, December 03, 2006 2:20 AM by Jorge | 6 Comments
Filed under:

The link between a "DFS-R Diagnostic Health Report" and the month of December

Yes, it is true, there is a link! Let me guess.....until yesterday you were able to create DFS-R Diagnostic Health Reports and as of today you are not able to do that anymore... The error you receive is: <COMPUTERNAME>: The health report cannot Read More...
Posted Friday, December 01, 2006 8:41 PM by Jorge | 0 Comments

Disentaglements and Migration Scenarios

A major company is disentangling a part of its business and that part is continuing on its own. It will not be integrated into another company. Last week I was asked to review and advise several migration scenarios setup by a company's representative. Read More...
Posted Friday, December 01, 2006 6:37 PM by Jorge | 5 Comments

NT4, W2K3, Trusts and Security Policies

Last Tuesday (28-11-2006), almost at the end of the day, and old customer (Customer "X") called me and told me they were having issues with the interoperability between their NT4 environment (yes, they still exist! ;-) ) and their AD environment. As I Read More...
Posted Friday, December 01, 2006 1:08 PM by Jorge | 0 Comments

Another VMWare issue?

About a year ago I found two issues in conbination with VMWare Workstation and W2K3 SP1. Both cases are explained here: It works on physical hardware and it does not in VMware virtualization software Follow-up on "It works on physical hardware and it Read More...
Posted Friday, December 01, 2006 1:06 PM by Jorge | 1 Comments