Browse by Tags

• Active Directory
• Group Policy

• Event logs and the "Maximum security log size" Group Policy setting

  A post yesterday on ActiveDir.org reminded me of something I learnt recently about event logging and, in particular, how certain Group Policy settings can cause problems and inconsistencies. The customer I was working with had implemented an entry in Read More... Posted Friday, September 01, 2006 12:22 PM by tonymurray | 1 Comments Filed under: Group Policy, Active Directory

• Troubleshooting LDAP issues with Server Performance Advisor (SPA)

  Tracking all LDAP activity on a specific DC is not trivial to achieve with the native toolset. I recently posted an article over at ActiveDir.org that showed how to log all LDAP activity by enabling diagnostic logging and tweaking the inefficient and Read More... Posted Friday, August 25, 2006 3:15 PM by tonymurray | 0 Comments Filed under: Active Directory

• New ActiveDir.org RSS Feed

  We recently added a new RSS feed on ActiveDir.org for the mailing list. http://www.activedir.org/Rss/Rss.aspx?opt=ml It's updated hourly with newly archived mailing list posts. I realise that this is not going to be very everyone, especially those Read More... Posted Wednesday, August 23, 2006 1:51 PM by tonymurray | 0 Comments Filed under: Active Directory

• Restricted Groups Quirkiness

  I was recently asked whether it is possible to add users to groups using the Restricted Groups feature of Group Policy using the Member Of feature. Now, unlike Darren Mar-Elia ( http://www.gpoguy.com/ ), I am no Group Policy guru, so I was forced to visit Read More... Posted Thursday, August 17, 2006 8:36 PM by tonymurray | 0 Comments Filed under: Group Policy

• How to search for groups of different type and scope

  Searching AD for groups using LDAP can be tricky as it often involves using the groupType attribute, which requires a bitwise filter. Another attribute that can be useful is the sAMAccountType attribute, but you need to be careful as Universal and Global Read More... Posted Tuesday, August 08, 2006 1:51 AM by tonymurray | 0 Comments Filed under: Active Directory

• Enabling a new DC as a DNS Server - a cautionary tale.

  I recently came across a fairly serious DNS issue. Here's what had happened. A customer had decided to add a new DC. They had run DCPROMO and everything ran without a hitch. After the reboot they thought that it would be good to enable the DC as a DNS Read More... Posted Monday, August 07, 2006 2:28 AM by tonymurray | 3 Comments