Some time ago one of my friends at MCS had come across a problem while promoting RODC in a multi domain forest. This problem was ''access denied'' error when new RODC was promoted in one of child domains. This problem was solved thanks to discussion and involvement of few different individuals and I had a pleasure also to involved in this ...

Another short download information: RODC Deployment Guide just hit TechNet web pages, so anyone interested in deploying Windows Server 2008 with this role have something to read while servers will do its daily business. This part of this guide deals only with deploying RODC in branch office scenario. Other planned parts of this document will ...

Number of RODCs in a production environment is probably not very high now but many peoples and organizations are thinking about it. For those I have good news that new KB article 944043 was published which is delivering RODC compatibility pack for down level clients. In this case 'down level' means XP and 2003.  This fix is fixing (ok, at ...

Have you ever wondered how many objects You can create in Your DIT (actually this was showed some time ago by ~Eric) ? Or how many DC is to many in a domain?  For some time now on one of MS internal distribution groups group of folks were discussing document which describes such limits related to AD (BTW - possibility to be a part of such ...

Handling time is somehow challenging task. It can;t be stopped so far so we have to live with schedules and clocks. But this won't be about time physics but more mundane thing. One of my friends has asked me question how to translate pwdLastSet attribute value to some more readable value. My first answer was - what a suprise - adfind.exe. Adfind ...

In case somebody missed it - Microsoft has published lately technical specification for its products. Result of some trials before European Union Committee (I still don't like this institution).  Among other documents you can find there Active Directory Technical Specification. And now everything is clear about AD ... isn't it :). Time to ...

My post about confidential attributes is one of most popular on this blog. So far it had 2950 views. By the way, most popular posts are about drink attribute in AD (4118 views, taking under consideration subject of this post it is not surprising ) and my notes about extending schema in AD (5523 views). So it looks like most or readers of this ...

Some time ago I've discussed with Jorge some disaster recovery scenarios. At the end of this MSN chat Jorge said - great topic for blog post, and here it is. As always he wrote excelent entry about it and I don't want to repeat these informations. Anyone interested in how to recover deleted object from a bit old backup should read Jorge blog ...

Few days ago on a newsgroup (yes, Usenet still lives :) ) somebody asked question what CN=Infrastructure is and if it can have something to do with GPO problems which are affecting his AD infrastructure. So ... can it be a cause of such problems? I was thinking about describing some case related to objects recovery which is ...

It looks like we have to remeber new acronym for tool name - ADTD which stands for Active Directory Topology Diagrammer is, as I see it, replacement for older tool known for some people like ADMap. It allows You to build Visio diagram representing Active Directory configuration based on data from catalog itself. ADTD can do this through ...