Welcome to Dirteam.com/ActiveDir.org Blogs Sign in | Join | Help

Browse by Tags

All Tags » Field experiences   (RSS)

AutoEnrollment Control Access Right is missing in AD

A few days ago I was chatting with a colleague of mine in the UK about automated permissions assignment in AD through DSACLS. His reason to do this was because of CLM deployments where you had to use different kinds of Extended Rights that are defined Read More...
Posted Thursday, July 17, 2008 9:13 PM by Jorge | 0 Comments

Creating your own deprovisioning tool or script

What to do with user accounts that are or not mailbox enabled when the corresponding user(s) leave(s) the company. For that, and without buying a full blown solution you can create tooling in a simple way if the following process is sufficient for you. Read More...
Posted Saturday, November 03, 2007 3:18 AM by Jorge | 0 Comments

Granting admin level access for the OS on DCs but not for AD...

Yesterday and today I (and some other people) were involved in heavy discussion how you can accomplish: Granting Admin level access for the OS on DCs but not within AD The posts can be found in: NG: "microsoft.public.windows.server.active_directory" Post Read More...
Posted Thursday, December 28, 2006 8:01 PM by Jorge | 3 Comments

Migrating stuff with ADMTv3

ADMTv3 has been out for a while and is the free Microsoft Migration Tool available for use (besides other small tools that can help you during your migration like NETDOM, SUBINACL, ROBOCOPY, etc.). It can be downloaded here Besides the tool you can also Read More...
Posted Wednesday, December 27, 2006 1:46 PM by Jorge | 7 Comments

The link between a "DFS-R Diagnostic Health Report" and the month of December

Yes, it is true, there is a link! Let me guess.....until yesterday you were able to create DFS-R Diagnostic Health Reports and as of today you are not able to do that anymore... The error you receive is: <COMPUTERNAME>: The health report cannot Read More...
Posted Friday, December 01, 2006 8:41 PM by Jorge | 0 Comments

Disentaglements and Migration Scenarios

A major company is disentangling a part of its business and that part is continuing on its own. It will not be integrated into another company. Last week I was asked to review and advise several migration scenarios setup by a company's representative. Read More...
Posted Friday, December 01, 2006 6:37 PM by Jorge | 5 Comments

NT4, W2K3, Trusts and Security Policies

Last Tuesday (28-11-2006), almost at the end of the day, and old customer (Customer "X") called me and told me they were having issues with the interoperability between their NT4 environment (yes, they still exist! ;-) ) and their AD environment. As I Read More...
Posted Friday, December 01, 2006 1:08 PM by Jorge | 0 Comments

Another VMWare issue?

About a year ago I found two issues in conbination with VMWare Workstation and W2K3 SP1. Both cases are explained here: It works on physical hardware and it does not in VMware virtualization software Follow-up on "It works on physical hardware and it Read More...
Posted Friday, December 01, 2006 1:06 PM by Jorge | 1 Comments

VMWare and promoting DCs or creating TRUSTS

Remember these two posts? : It works on physical hardware and it does not in VMware virtualization software http://blogs.dirteam.com/blogs/jorge/archive/2005/11/14/60.aspx Follow-up on "It works on physical hardware and it does not in VMware virtualization Read More...
Posted Sunday, August 27, 2006 10:58 PM by Jorge | 1 Comments
Filed under:

Restoring a DC through the ASR method

Today I was testing a restore method within a test environment for a DC using the ASR method with a third party backup and restore tool. The restore went OK. The DC booted and everything was OK. Well, until other DCs were crying like: * RPC unavailable Read More...
Posted Tuesday, July 04, 2006 11:31 PM by Jorge | 1 Comments
Filed under:

Follow-up on "It works on physical hardware and it does not in VMware virtualization software"

Remember me writing about not being able to promote a new DC into the forest as an additional DC for an existing domoain or as a DC for a new child domain? (read more about it at: http://blogs.dirteam.com/blogs/jorge/archive/2005/11/14/60.aspx ) Well, Read More...
Posted Sunday, December 18, 2005 12:35 AM by Jorge | 3 Comments
Filed under:

Connecting the test environment to the production - what is your opinion?

As many of you already have done it, or are doing it right now, or better yet are still thinking about it! What? Well, migrating to Windows Server 2003 with AD. When planning migration, on of the important is topics is thinking about the test environment Read More...
Posted Thursday, November 24, 2005 1:39 PM by Jorge | 2 Comments
Filed under:

It works on physical hardware and it does not in VMware virtualization software

Have you ever been in the situation where you had to make a choice which Virtual Software to use for your own Infrastructure? I can imagine yes, because at this moment you can choose between a Microsoft solution and an EMC VMware solution. One of the Read More...
Posted Monday, November 14, 2005 2:53 PM by Jorge | 21 Comments
Filed under: