Welcome to Dirteam.com/ActiveDir.org Blogs Sign in | Join | Help

14 result(s) were found in 0,004 milliseconds

DC Locator Process in W2K, W2K3(R2) and W2K8 - PART 1

This is the 1 st part of "DC Locator Process in W2K, W2K3(R2) and W2K8" By default a client that knows in what AD site it is in, will ask for a DC in that same site by querying DNS with: _ldap._tcp.<SITE>._sites.dc._msdcs.<DOMAIN>.<TLD> Read More...
Posted zaterdag 30 juni 2007 17:07 from Jorge 10 Comments

DC Locator Process in W2K, W2K3(R2) and W2K8 - PART 2

This is the 2 nd part of "DC Locator Process in W2K, W2K3(R2) and W2K8" Looking at this all, the DC locator process as explained above still applies to Windows Vista and to Windows Server 2008 and later. Are there any differences or additions? Yes, there Read More...
Posted maandag 2 juli 2007 1:13 from Jorge 17 Comments

Locating Domain Controllers To Access The Default Domain DFS (SYSVOL/NETLOGON)

In the case of locating a DC to access the SYSVOL/NETLOGON, the authN DC creates two referral lists. The first list contains the DCs (in random order) from the same AD site of the AD client. The second list contains all the other DCs outside the AD site Read More...
Posted woensdag 19 mei 2010 12:41 from Jorge 1 Comments

Where is my (AD) web service?

Windows Server 2008 R2, among other changes, brings a new interface to access directory services – the Active Directory Web Service (ADWS) . It is also available for older systems – Windows 2003 and 2008 – as Active Directory Management Gateway (available Read More...
Posted dinsdag 30 maart 2010 11:27 from tomek 1 Comments

Domain Controller Stickiness Prevention

Domain Controller Stickiness is a problem which prevents Active Directory clients to be connected to the best Domain Controller they can be. The root cause of this problem is once an Active Directory client found a Domain Controller (using DNS) it would Read More...
Posted dinsdag 24 juni 2008 5:40 from Sander Berkouwer 0 Comments

DC Locator Process in W2K, W2K3(R2) and W2K8 - PART 3

This is the 3 rd and last part of "DC Locator Process in W2K, W2K3(R2) and W2K8" Until now I talked about locating a DC for authentication. What I did not talk about yet is locating the SYSVOL to apply GPOs and to use the legacy NETLOGON share. Let's Read More...
Posted maandag 2 juli 2007 5:36 from Jorge 13 Comments

AD Clients Not Authenticating to its Local Site

Ever have a Branch Office or Site that has clients that doesn't authenticate to the local dc? Adminstrators get confused and start looking at the client to try and figure out what is wrong, when it is most likely and incorrectly configured Sites and Services Read More...
Posted maandag 19 april 2010 7:53 from pbbergs 1 Comments

Speaking at TEC 2010 USA (Los Angeles)

Yes, it's that time of the year again! TEC 2010 USA is coming and is planned for the last week of April 2010. It is not is Las Vegas and it is not in Chicago. It is in Los Angeles this time. I'll be delivering two pre-conference workshops this year about Read More...
Posted maandag 8 maart 2010 4:19 from Jorge 1 Comments

How to cover un-covered – the case of missing subnet

Few days ago my colleague at work pointed me out that I had not created a follow-up to my article about site location which was requested by some users in comments on my Polish blog . When one started this whole blogging thing one has to deal with consequences Read More...
Posted woensdag 8 april 2009 11:36 from tomek 1 Comments

Different GPOs for HUBs and for Branch DCs

If you are using writable DCs (RWDCs) in Branch Offices you want to optimize authentication as best as possible by: Allowing HUB DCs (DCs in datacenters) to register ALL possible service records (domain-wide and site wide) and therefore service whatever Read More...
Posted woensdag 5 augustus 2009 11:22 from Jorge 0 Comments

Where is my DC?

It is common knowledge that in AD environment client (like workstation) will always (at least it should) try to connect to most optimal domain controller. Optimal from network and AD infrastructure configuration standpoint. This process is based on DNS Read More...
Posted vrijdag 15 januari 2010 12:28 from tomek 3 Comments

Restricted Groups policy and AD groups--not a good idea

A while back there was a thread on ActiveDir about Restricted Group policy--the security policy feature in GP that lets you manage group membership. Someone had suggested using Restricted Groups to manage AD group membership and I mentioned that it was Read More...
Posted maandag 21 augustus 2006 9:27 from dmarelia 3 Comments

Which DCs are used when promoting a server to a DC?

When running DCPROMO on a server to promote it to DC two possibilities exist what query is used by the server to locate a DC... --> The server is a STAND ALONE SERVER and is going to be promoted to a DC: In this case the server does not know to which Read More...
Posted woensdag 7 december 2005 12:19 from Jorge 11 Comments

Point your (web)finger at me

Well … at least in Poland we are saying that what happens once can happen again … like in Battlestar Galactica world. In last days it turned out that the same saying is true for network protocols. At least for one of them some time ago well known as Finger Read More...
Posted maandag 17 augustus 2009 12:52 from tomek 0 Comments