Which KB articles resolve the most Directory Services issues?

Which KB articles resolve the most Directory Services issues?

  • Comments 10
  • Likes

Hi, Craig here. It can be frustrating to call support only to have your issue resolved by an article in the Microsoft Knowledge Base. Sometimes you are just happy to get the problem solved, but most people prefer to solve something themselves and avoid calling support. So it may be interesting to know which KB articles are used the most in Directory Services support to solve customer issues. By becoming more familiar with these articles you can improve your troubleshooting skills for the most common Active Directory-related issues.

When we resolve an issue using a specific KB article, we can link that article to the case for reporting purposes. We report on this to get an idea of which articles are most useful, as well as to help understand the types of issues we see the most. While there are other ways we report on top issues, this is one of the few that shows KB article usage.

Note that this is not a report on which KB articles get the most page views on Microsoft.com. Just because an article gets a lot of hits doesn’t mean it is particularly helpful. For example, many articles offer generic troubleshooting steps for common issues, so they come up high in search results, but they may not provide a complete solution to your problem. Also keep in mind that this report shouldn’t necessarily be seen as a list of the most common Directory Services issues. There are KB articles that customers use all the time to fix themselves without ever calling support. This list only shows articles that were used when someone called Microsoft product support.

Depending on how you slice it, we support about 30 different Windows components in the Directory Services specialty. But to give you a general idea of the types of articles that are included in the report, here is a more concise list of what technologies we support.

•    Active Directory
•    Authentication
•    Authorization
•    File Replication Service
•    DFS Namespaces
•    DFS Replication
•    Public Key Infrastructure
•    User Profiles
•    Terminal Server Licensing
•    Windows Time Service

Because most issues with those components are dependent on healthy network connectivity, the list includes some articles that deal with network issues that will impact Directory Services components. KB 936594 about the TCP offload features introduced in Windows Server 2003 SP2 is a good example of that. And since Active Directory is heavily dependent on DNS, there are some DNS-related articles listed as well.

Hopefully that puts it in the proper context. Here are the top 50 KB articles used to solve issues in Directory Services support during the first quarter of Microsoft fiscal year 2008 (July 2007 through September 2007).




How to remove data in Active Directory after an unsuccessful domain controller demotion


The function of Terminal Server CALs in Windows Server 2003


Windows Server 2003 Terminal Server licensing issues and requirements for deployment


Error message when you run the Active Directory Installation Wizard: "The version of the Active Directory schema of the source forest is not compatible with the version of Active Directory on this computer"


Using the BurFlags registry key to reinitialize File Replication Service replica sets


How to override the license server discovery process in Windows Server 2003 Terminal Services


Using Ntdsutil.exe to transfer or seize FSMO roles to a domain controller


How to rebuild Windows 2000 and 2003 Terminal Services Licensing database


You may experience network-related problems after you install Windows Server 2003 SP2 or the Scalable Networking Pack on a Windows Small Business Server 2003-based computer


"Directory Services cannot start" error message when you start your Windows-based or SBS-based domain controller


How to rebuild the SYSVOL tree and its content in a domain


How to activate a License Server by using Terminal Server Licensing in Windows Server 2003


How to restore deleted user accounts and their group memberships in Active Directory


How to force Kerberos to use TCP instead of UDP in Windows Server 2003, in Windows XP, and in Windows 2000


How to configure an authoritative time server in Windows Server 2003


Domain controllers do not demote gracefully when you use the Active Directory Installation Wizard to force demotion in Windows Server 2003 and in Windows 2000 Server


How to upgrade Windows 2000 domain controllers to Windows Server 2003


Applying Group Policy causes Userenv errors and events to occur on your computers that are running Windows Server 2003, Windows XP, or Windows 2000


You cannot deploy a Windows Server 2003 R2 x64 Edition-based domain controller in a Windows Server 2003 forest


A Windows Server 2003-based computer may stop responding when it is resumed from standby and events 1030 and 1058 are logged in the application log of a domain controller


Delegated permissions are not available and inheritance is automatically disabled


How to Activate a Terminal Services License Server and Install CALs Over the Internet


In Windows Server 2003 and in Windows XP, W32Time frequently logs Event ID 50, and poor time synchronization occurs


How to configure a firewall for domains and trusts


Description of the License Logging Service in Windows Server operating systems


How to reset security settings back to the defaults


Systems that have changed the default Access Control List permissions on the %windir%\registration directory may experience various problems after you install the Microsoft Security Bulletin MS05-051 for COM+ and MS DTC


Domain controller is not functioning correctly


You cannot host TCP connections when Receive Side Scaling is enabled in Windows Server 2003 with Service Pack 2


The Microsoft Windows Server 2003 Scalable Networking Pack release


How to detect and recover from a USN rollback in Windows Server 2003


Best practices for DNS client settings in Windows 2000 Server and in Windows Server 2003


How to Troubleshoot Black Hole Router Issues


How to use Netdom.exe to reset machine account passwords of a Windows Server 2003 domain controller


Establishing preferred Windows 2000 Terminal Services license server


Error Message "Target Principal Name is Incorrect" When Manually Replicating Data Between Domain Controllers


Replicated files are copied over the network when you use the Distributed File System (DFS) Replication feature on a Windows Server 2003 R2-based computer


Client, service, and program incompatibilities that may occur when you modify security settings and user rights assignments


How to perform an authoritative restore to a domain controller in Windows 2000


Troubleshooting journal_wrap errors on Sysvol and DFS replica sets


Event ID 1004 is logged when a thin client tries to obtain a Terminal Services license


Trust between a Windows NT domain and an Active Directory domain cannot be established or it does not work as expected


The "Send As" right is removed from a user object after you configure the "Send As" right in the Active Directory Users and Computers snap-in in Exchange Server


How To Use Netdom.exe to Reset Machine Account Passwords of a Windows 2000 Domain Controller


Some firewalls may reject network traffic that originates from Windows Server 2003 Service Pack 1-based or Windows Vista-based computers


Frequently asked questions about Windows 2000 DNS and Windows Server 2003 DNS


You experience slow TCP/IP performance and long data transfer delay times on a Windows Server 2003-based computer or on a Microsoft WindowsXP x64 version-based computer


How to enable user environment debug logging in retail builds of Windows


"Windows cannot unload your registry class file" error message when you log off Terminal Services


Service overview and network port requirements for the Windows Server system

- Craig Landis

  • PingBack from http://geeklectures.info/2008/01/02/which-kb-articles-resolve-the-most-directory-services-issues/

  • The Ask the Directory Services Team blog has a great post on the top 50 KB articles used to solve issues

  • The Sean Blog : The top Active Directory Issues Great link on Sean's blog about the Top Active Directory

  • http://blogs.technet.com/askds/archive/2008/01/02/which-kb-articles-resolve-the-most-directory-services

  • http://blogs.technet.com/askds/archive/2008/01/02/which-kb-articles-resolve-the-most-directory-services

  • Verifique um destes KBs, provavelmente resolverá o seu problema: Number Title 216498 How to remove data

  • Verifique um destes KBs, provavelmente resolverá o seu problema: Number Title 216498 How to remove data

  • Hey Craig thanks for all the links they are really helpfull.

    Sorry for the question in this article but I have no idea who else to ask this to:

    I'm having problems reading the IIS directory entries when I specify credential information. It seems that the credentials that I pass to the constructor are being ignored. Can you recommend any article where I can get some information?

    My Example looks like this:

    DirectoryEntry entry = new DirectoryEntry("IIS://localhost/W3SVC/AppPools", "username", "password", AuthenticationTypes.Secure);

    I get a COMException with "Access is denied." as a message.

    Thanks in advance

  • We’ve been at this for over a year (since August 2007), with more than 100 posts (127 to be exact), so

  • Ned,

    Any chance of updating this blog with 2009 data?