On ActiveDir.org a couple of weeks ago, there was a discussion around the fact that Microsoft now have hardcoded LDAP limits for Active Directory. This may not directly affect you in a Windows 2003 forest - but if you have changed your LDAP Policies to make a poorly written application work in Windows Server 2003 then … Continue reading LDAP Limits – Are now hardcoded in Active Directory.
If you are looking connect with fellow Active Directory administrators, architects or perhaps the people that design the product, then I would strongly urge you to check out Tony Murray's ActiveDir.org mailing list. The list which started back in January 2001 provides a forum for discussing various aspects of Microsoft’s Active Directory technology. Tony Murray has provided … Continue reading Active Directory: Issues and looking for a helping hand?
The Windows Sysinternals team have updated the excellent Active Directory Explorer tool to version 1.3 AD Explorer can be used to navigate the AD database; view object properties and attributes; modify permissions; view an object's schema properties and create sophisticated searches that can be saved for regular use. AD Explorer has the ability to save snapshots … Continue reading Active Directory Explorer v1.3
If you are implementing DFS (Namespaces or Replication) then you should baseline your DFS environment to the levels detailed in these articles. KB 968429 List of currently available hotfixes for Distributed File System (DFS) technologies in Windows Server 2008 and in Windows Server 2008 R2 KB 958802 List of currently available hotfixes for Distributed File System (DFS) … Continue reading DFS Hotfixes for Windows Server 2003, 2003 R2, 2008 and 2008 R2.
One thing that still puzzles me is the fact that DFS Namespaces (DFS-N) still have to be configured manually before installation to utilise Fully Qualified Domain Names (FQDN's). The procedure is pretty painless but in the constant quest to eradicate WINS I do not know why this is not the default configuration. Working with DFS in … Continue reading Configure DFS-Namepaces to use Fully Qualified Domain Names – (It’s not the default).
This year there are a few versions of Windows which will go out of support. If you continue to use these version of Windows beware; it is effectively be the same as driving a Ford Capri around town; it works, everyone of a certain age knows what it is, but good luck if it goes wrong. Windows 2000 Professional … Continue reading Windows XP SP2 – The end is nigh.
Repadmin is a command line tool that is designed to assist in diagnosing, monitoring and troubleshooting Active Directory replication; additionally now that Microsoft have deprecated Replmon, it is critical that you understand Repadmin and all of its intricacies. Repadmin is one of the first utilities that I reach for when Active Directory appears to be having issues. The information in … Continue reading Repadmin – Monitoring and Troubleshooting Guide – updated.