"All my love's in vain." - "Love in Vain" , Robert Johnson (1911-1938) Hey folks, We know if you read this blog you love to find answers to all your Active Directory questions in our documentation on Microsoft.com. But before you can do that, you have to be able find it. As many of you know, that...

I have created this URL for Windows Azure AD cmdlets http://aka.ms/aadposh Some people might be searching for them under the name: AAD PowerShell or WAAD PowerShell , but those are not official titles or names. Other URLs created: Windows Azure Active Directory Community Information Center http...

We recently published TechNet topics about Adprep.exe for Windows Server 2012. Adprep has many changes for this release: Adprep runs automatically as needed as part of AD DS installation. For example, if you are installing AD DS on a server that runs Windows Server 2012 in a forest where all existing...

Check out this TechNet Wiki article that describes a potential solution. Turns out that clearing out the files saved in Active Directory Sites and Services might be the answer.

Test Lab Guide - Deploy Windows Firewall with Advanced Security to Protect Network Communication to a Domain Controller Description: This Test Lab Guide contains an introduction to Windows Firewall with Advanced Security (WFAS) and step-by-step instructions for extending the Base Configuration test lab...

del.icio.us Tags: netdom , forest trusts , limitation , limit , not supported , error The following note has been added to several articles on TechNet. Previously we had some conflicting information regarding the utility Netdom and the creation of forest trusts. Important Netdom cannot be used to create...

In an effort to consolidate the great troubleshooting solutions offered in this thread , we have summarized the information contained here into a TechNet Wiki article at the following location: How to change the local Administrator password on domain member computers (dsforum2wiki) Please feel...

In an effort to consolidate the great troubleshooting solutions offered in this thread , we have summarized the information contained here into a TechNet Wiki article at the following location: How to list Active Directory group members Please feel free to provide feedback on the article...

del.icio.us Tags: DCDIAG error , SystemLog , System Log , test failed , failed text systemlog In an effort to consolidate the great troubleshooting solutions offered the DS Forum thread: DCDiag error - failed test systemlog , we have summarized the information contained here into a TechNet Wiki article...

del.icio.us Tags: Windows 98 will not won't wont connect to Server 2008 In an effort to consolidate the great troubleshooting solutions offered in the DS forum thread: win 98 wont connect to server 2008 , we have summarized the information contained here into a TechNet Wiki article at the following location...

As mentioned in the previous blog post by Justin, we are converting the highest total viewed topics on the AD DS forum (http://social.technet.microsoft.com/forums/en-US/winserverDS/threads/?sort=viewsdesc) to Technet Wiki articles. We hope this will aid users in finding resolutions to some of our most...

We are posting new articles to the TechNet Wiki that summarize questions and answers that appear in the Directory Services Forum . This week, the following two new wiki articles were posted: Troubleshooting Adprep.exe errors (dsforum2wiki) How to block USB devices (DSForum2Wiki) These are the...

We have published a new topic and script about how to test an Active Directory schema extension for potential conflicts before you apply the extension. The topic is http://technet.microsoft.com/en-us/library/testing-for-active-directory-schema-extension-conflicts(WS.10).aspx . The script is for Windows...

Last night I published an article titled Service Principal Names (SPNs) on the TechNet Wiki. Actually, I've been working on it on and off this entire week. This is something I was asked to do a while ago by Customer Support Services (CSS). The goal of the article is help administrators resolve issues...

Windows Server 2008 R2 domain controllers include a new feature named Offline Domain Join. A new utility named Djoin.exe lets you join a computer to a domain, without contacting a domain controller while completing the domain join operation, by obtaining a blob from a Windows Server 2008 R2 domain controller...

Account Operators is a default groups located in the Builtin container. Members of this group can create, modify, and delete accounts for users, groups, and computers located in the Users or Computers containers and organizational units in the domain, except the Domain Controllers organizational unit...

When you delete or recover an Active Directory object with link-valued attributes, AD DS must process the object’s link value table to maintain referential integrity on the linked attribute’s values. Because deleting or recovering an Active Directory object results in modifications to the object’s link...

Kurt Hudson from the Active Directory documentation team will be presenting the session Best Practices for Virtual Domain Controllers at TechMentor in Orlando . See the conference ad video . LiveJournal Tags: conference , Active Directory Domain Services , Hyper-V , virtual directory services , best...

Active Directory objects can have several different types of attributes. The two basic types are single valued and multivalued. The most frequently asked question regarding attributes that I have seen is that regarding the member attribute because it comes into play when discussing the maximum number...