Active Directory Documentation Team

Hypervisor is not running error: How to fix

Davanand Bahall - MSFT — Wed, 14 Oct 2009 19:25:39 GMT

Though this is not a direct Active Directory post, I think many of you will find this video I ran across, Hypervisor is not running error: How to fix ( http://www.microsoft.com/video/en/us/details/25d07f2e-b2e0-4c0c-b456-79b08bfe58be ), interesting. ...(read more)

New Fix it technology included in TechNet articles

Davanand Bahall - MSFT — Tue, 06 Oct 2009 22:59:48 GMT

Microsoft has released a new technology (maybe not so new to many of you) that is designed to automate fixes in KB articles. Instead of performing the manual steps to fix a problem (i.e. sound issues), you can click the Fix it button or link, and...(read more)

Guidance for placing several RODCs in the same site

Davanand Bahall - MSFT — Tue, 06 Oct 2009 22:29:16 GMT

Lately, there have been lots of questions around placing more than one RODC in the same site for load balancing and disaster recovery purposes. We, the AD UA team, recently published an article, Placing Several RODCs in the Same Site (http://technet.microsoft.com/en-us/library/ee522995(WS.10).aspx). ...(read more)

Mergers, acquisitions, or reorganizations may have you considering Active Directory restructuring

Kurt Hudson — Fri, 02 Oct 2009 03:49:40 GMT

Some people call it prune and graft, others call it breaking off a domain from the forest. These things are not supported by Microsoft in Windows Server 2008 R2 or earlier. You cannot move domains between forests, but you can migrate. For more information...(read more)

What is the Active Directory Management Gateway Service?

Kurt Hudson — Thu, 17 Sep 2009 22:21:17 GMT

The Active Directory Management Gateway Service could be referred to as the Active Directory Web Service (ADWS) for Windows Server 2008 and Windows Server 2003. Why? Well, Windows Server 2008 R2 domain controllers have a built-in service called the Active...(read more)

Announcing the availability of the RTM Version of Windows 7 RSAT Tools

Davanand Bahall - MSFT — Thu, 17 Sep 2009 05:07:00 GMT

You can find the RTM version of the Windows 7 RSAT tools at the following location: Remote Server Administration Tools for Windows 7 The download page gives instructions on how to install and configure the RSAT tools on Windows 7. The RSAT tools can be...(read more)

Where is the guidance for Active Directory in the DMZ?

Kurt Hudson — Wed, 19 Aug 2009 19:44:28 GMT

DMZ, which actually stands for demilitarized zone, is a very popular term to refer to the concept of a screened subnet, perimeter network, or essentially a network that is divided from your internal network by a firewall. The problem with the term DMZ...(read more)

Windows Server 2008 and Windows Server 2008 R2 and RSAT Active Directory Users and Computers Automate Metadata Cleanup

Kurt Hudson — Sat, 08 Aug 2009 05:14:00 GMT

Metadata cleanup is a required procedure after a forced removal of Active Directory Domain Services (AD DS). You perform metadata cleanup on a domain controller in the domain of the domain controller that you forcibly removed. Metadata cleanup removes...(read more)

Where is SYSPREP in Windows Server 2008 and Windows Server 2008 R2?

Kurt Hudson — Thu, 23 Jul 2009 02:22:00 GMT

If you are looking to sysprep your computers to remove the unique information, you can find sysprep in its new location under the %windir%\system32\sysprep folder. There isn’t much to the interface, but if you are just trying to remove the unique information,...(read more)

Active Directory Port Requirements

Davanand Bahall - MSFT — Wed, 24 Jun 2009 09:51:00 GMT

A few days ago we posted a document to TechNet that outlines some of the various port requirements for Active Directory. We gathered the port information from various KB articles and consolidated them into one document. I think it should serve as a great...(read more)

New Djoin.exe utility in Windows Server 2008 R2

Justin [MSFT] — Wed, 27 May 2009 07:35:00 GMT

Windows Server 2008 R2 domain controllers include a new feature named Offline Domain Join. A new utility named Djoin.exe lets you join a computer to a domain, without contacting a domain controller while completing the domain join operation, by obtaining...(read more)

"Account Ops-FC" access control entry (ACE)

gabag — Thu, 23 Apr 2009 07:53:00 GMT

Account Operators is a default groups located in the Builtin container. Members of this group can create, modify, and delete accounts for users, groups, and computers located in the Users or Computers containers and organizational units in the domain,...(read more)

When using Active Directory Recycle Bin to recover objects with a large number of link-valued attributes

gabag — Thu, 23 Apr 2009 07:45:00 GMT

When you delete or recover an Active Directory object with link-valued attributes, AD DS must process the object’s link value table to maintain referential integrity on the linked attribute’s values. Because deleting or recovering an Active Directory...(read more)

Active Directory Domain Services Database Mounting Tool (Snapshot Viewer or Snapshot Browser)

Davanand Bahall - MSFT — Tue, 21 Apr 2009 09:19:00 GMT

This posting is provided "AS IS" with no warranties, and confers no rights. In Windows Server 2008, there are new tools you can use to create a snapshot of your Active Directory database at a point in time, ntdsutil snapshot , and then you can view the...(read more)

Windows 7 User Account Control (UAC)

Kurt Hudson — Wed, 15 Apr 2009 21:05:00 GMT

UPDATE: A faster way to open the UAC settings in Windows 7 was just brought to my attention by Dean Wells. Click Start , type UAC and press ENTER. Thanks, Dean! If that doesn’t work for some reason, you can do the following: Run wscui.cpl from the Start...(read more)