Microsoft have stated for numerous years that anyone with Kerberos authentication issues often due to users being in multiple groups and commonly known as Token Bloat should increase the MaxTokenSize to 65535 bytes. Whilst reading Understand and Troubleshoot Dynamic Access Control in Windows Server 2012 guide, I read that “Previous versions of Windows had … Continue reading MaxTokenSize – Change of recommendation from Microsoft.
Microsoft have updated the must read Active Directory document on Active Directory Forest Recovery. “The guide contains best-practice recommendations for recovering an Active Directory forest if forest-wide failure renders all domain controllers in the forest incapable of functioning normally. The steps, which you must customize for your particular environment, describe how to recover the entire … Continue reading Active Directory: Forest Recovery – Whitepaper updated.
Microsoft have released a new document which contains best practice recommendations to assist organisations in enhancing the security of their Active Directory installations. Microsoft state that “In implementing these recommendations, organisations will be able to identify and prioritise security activities, protect key segments of their organisation’s computing infrastructure and create controls that significantly decrease … Continue reading Best Practices for Securing Active Directory
Impress your boss without having to put a dent in the training budget by winning tickets to TechEd Europe. It's the premier annual Microsoft event for IT professionals from the 25th to 28th June 2013. You'll be able to improve your knowledge, talk to leading experts face to face and gain valuable information that'll put … Continue reading Win a trip to TechEd Europe 2013 and be part of the TechNet team
I have just returned from the MVP summit in Redmond, where I spent the best part of a week with the Active Directory Product Group and other Directory Services MVP’s. In conversation with a fellow Directory Services MVP Microsoft PFE Mike Kline, I mentioned a way that I had spoofed a domain to ensure … Continue reading Active Directory: Mergers and Divestitures – Spoof a domain to implement a DFS Namespace.
Over the past view months I have been quietly working on the revised edition of the O’Reilly Active Directory Bible. I am pleased to say Brian has finished the book and it is now available. For further information checkout Brian’s Blog at http://briandesmond.com/blog/active-directory-5th-edition/
This guide follows on from the excellent Windows Server 2008 and 2008 R2 Performance Tuning Guidelines and describes important tuning parameters and settings that you can adjust to improve the performance and energy efficiency of the Windows Server 2012 operating system. It describes each setting and its potential effect to help you make an informed … Continue reading Performance Tuning Guidelines for Windows Server 2012