New Active Directory Documents for IT Pros Browse by Tags - Active Directory Documentation Team - Site Home - TechNet Blogs

Active Directory Documentation Team

Information for IT Professionals who work with Active Directory. All blog posts are provided "AS IS" with no warranties, and confer no rights.

Browse by Tags

Related Posts
  • Blog Post: Active Directory Troubleshooting

    We are developing an Active Directory troubleshooting guide on the TechNet Wiki. Been working on it since February, so it is ready for some feedback and feel free to help us out with comments, feedback, and so on. del.icio.us Tags: Active Directory troubleshooting , AD DS , AD troubleshooting , troubleshooting...
  • Blog Post: Introducing Active Directory Recycle Bin

    Accidental deletion of Active Directory objects is a common occurrence for users of Active Directory Domain Services (AD DS) and Active Directory Lightweight Directory Services (AD LDS). In Windows Server 2008 Active Directory domains, you could recover accidentally deleted objects from backups of...
  • Blog Post: DSForum: Event ID 5719 source Netlogon

    The DS forum posts, Netlogon error 5719 and Event 5719 Netlogon Problem , have been consolidated into the following TechNet Wiki article: Event ID 5719 source Netlogon (dsforum2wiki) Please look the article over and let us know what you think. You can edit the Wiki article directly or...
  • Blog Post: Producing a list of multivalued linked attributes

    Active Directory objects can have several different types of attributes. The two basic types are single valued and multivalued. The most frequently asked question regarding attributes that I have seen is that regarding the member attribute because it comes into play when discussing the maximum number...
  • Blog Post: TechMentor Conference Orlando 2009 (June 22-26)

    Kurt Hudson from the Active Directory documentation team will be presenting the session Best Practices for Virtual Domain Controllers at TechMentor in Orlando . See the conference ad video . LiveJournal Tags: conference , Active Directory Domain Services , Hyper-V , virtual directory services , best...
  • Blog Post: Finding the RIDs in your domain video

    Here is a video I shot a while back that demonstrates how to use ADSI Edit to find the number of RIDs remaining in your domain. However, you can do this more quickly by running the following command: dcdiag /test:ridmanager /v | find /i "available RID" How to find the RIDs left in your domain...
  • Blog Post: Introducing AD DS Best Practices Analyzer

    Active Directory Domain Services (AD DS) Best Practices Analyzer (BPA) is a server management tool that can help you implement best practices in the configuration of your Active Directory environment. AD DS BPA scans the AD DS server role as it is installed on your Windows Server 2008 R2 domain controllers...
  • Blog Post: New Djoin.exe utility in Windows Server 2008 R2

    Windows Server 2008 R2 domain controllers include a new feature named Offline Domain Join. A new utility named Djoin.exe lets you join a computer to a domain, without contacting a domain controller while completing the domain join operation, by obtaining a blob from a Windows Server 2008 R2 domain controller...
  • Blog Post: Other places to find good information

    I want to take the opportunity to thank the people who are out there providing information everyday to people using Active Directory. As I say thank you, I will link to their sites, so our readers can find them easily: ActiveDir.org Ask DS (Active Directory Customer Support Services blog) del.icio.us...
  • Blog Post: Active Directory Quotas

    You can use Active Directory and Active Directory Domain Services (AD DS) to implement limitations on the number of objects that a security principal (a user, computer, and group) can create in a directory node. You can define these limitations through Active Directory quotas. Quotas have been around...
  • Blog Post: Registering and Troubleshooting Service Principal Names (SPNs)

    Last night I published an article titled Service Principal Names (SPNs) on the TechNet Wiki. Actually, I've been working on it on and off this entire week. This is something I was asked to do a while ago by Customer Support Services (CSS). The goal of the article is help administrators resolve issues...
  • Blog Post: A delegation for this DNS server cannot be created because the authoritative parent zone cannot be found or it does not run Windows DNS server.

    A common warning message for anyone who has installed Active Directory on Windows Server 2008 or Windows 2008 R2, especially on the first domain controller in a forest or domain is: A delegation for this DNS server cannot be created because the authoritative parent zone cannot be found or it does not...
  • Blog Post: Alternate Credentials

    Launching Tools Using Alternate Credentials from a Command Prompt Window One of the easiest ways to launch tools using alternate credentials is to first launch a Command Prompt with the credentials you want to use. Once the Command Prompt is launched using the alternate credentials, all subsequent...
  • Blog Post: How many RIDs are left in your domain?

    del.icio.us Tags: RID , SID , Active Directory , maximum number of accounts Are you in danger of running out of relative identifiers (RIDs) in your domain? If you have not heard of this before, you should see Active Directory Maximum Limits - Scalability and read the section Maximum Number of Security...
  • Blog Post: Introducing Active Directory Administrative Center

    Active Directory Administrative Center provides network administrators with an enhanced Active Directory data management experience and a rich graphical user interface (GUI). Administrators can use Active Directory Administrative Center to perform common Active Directory object management tasks (such...
  • Blog Post: Update for SetSPN - Syntax for SetSPN.exe

    Breaking guidance change: Although you can use Setspn -A , you should use Setspn -S instead because -S will verify that there are no duplicate SPNs. However, if you are using Windows Server 2003 or earlier, you will not be able to use the -S switch because it is not available for that platform. In the...
  • Blog Post: Incompatibilities with CNG or V3 templates

    If you have heard of Certificates Next Generation (silly name, I know), which is why people call them V3 templates at Microsoft most of the time, then you might wonder or already know that there could be some compatibility issues - the same is true for all "new" things. Just like my new office power...
  • Blog Post: Active Directory Port Requirements

    A few days ago we posted a document to TechNet that outlines some of the various port requirements for Active Directory. We gathered the port information from various KB articles and consolidated them into one document. I think it should serve as a great reference guide for those of you configuring Active...
  • Blog Post: This condition may be caused by a DNS lookup problem (FWLINK 5171)

    I was reminded of the infamous forward link 5171 today. We had quite a time figuring out all the circumstances in which people were getting this message with the following words "This condition may be caused by a DNS lookup problem" and then displayed a link to the Microsoft Web site http://go.microsoft...
  • Blog Post: Forest schema version 47: Windows Server 2008 R2 Adprep /forestprep

    When you run adprep /forestprep, you are updating the Active Directory schema forest version. Several people have asked, what is the forest schema version for Windows Server 2008 R2. To learn more about adprep and forestprep and schema versions, read Running Adprep.exe ( http://technet.microsoft.com...
  • Blog Post: Active Directory Troubleshooting "Survival Guide"?

    This week we started pulling together resources that will hopefully become a central location to help people troubleshoot Active Directory issues in the Active Directory Troubleshooting Survival Guide . Right we've only just begun, but this will be an ongoing effort. Right at the start we had a discussion...