Browse by Tags

Tagged Content List
  • Blog Post: Using AD Recycle Bin to restore deleted DNS zones and their contents in Windows Server 2008 R2

    Ned here again. Beginning in Windows Server 2008 R2, Active Directory supports an optional AD Recycle Bin that can be enabled forest-wide. This means that instead of requiring a System State backup and an authoritative subtree restore, a deleted DNS zone can now be recovered on the fly. However, due...
  • Blog Post: Understanding what the USMT 4.0 CONFIG manifests migrate (Part 1: Introduction)

    Hi folks, Ned here again. We've been asked many times to provide more specific information on what USMT migrates when using the included manifests and calling the OS' built-in manifests . We've touched on these details previously in the so-called " operating system components " listed under TechNet article...
  • Blog Post: I bet it runs Minesweeper like a sonofagun…

    Ned here. From the ‘holy smokes!’ file, here’s your chance to win a Cray desk-side supercomputer, MSDN subscriptions, or Xbox360 consoles: Super Duo Cray-Microsoft Contest Enter by January 31st, no purchase necessary – you just register and download the free datasheet and...
  • Blog Post: Getting a CMD prompt as SYSTEM in Windows Vista and Windows Server 2008

    Ned here again. In the course of using Windows, it is occasionally useful to be someone besides… you. Maybe you need to be an Administrator temporarily in order to fix a problem. Or maybe you need to be a different user as only they seem to have a problem. Or maybe, just maybe, you want to be...
  • Blog Post: Get Shiny with USMT: Turning the Aero Theme on During XP to Windows 7 Migration

    Ned here again. Today’s post is quick and dirty… and glossy! One thing users notice immediately about Windows 7 is the default Aero theme. Even if you‘re not a fan of eye candy, your users are – and in the end they run the show in most environments. Especially when their business...
  • Blog Post: Friday Mail Sack: Newfie from the Grave Edition

    Heya, Ned here again. Since this another of those catch up mail sacks, there’s plenty of interesting stuff to discuss. Today we talk NSPI, DFSR, USMT, NT 4.0 (!!!), Win2008/R2 AD upgrades, Black Hat 2010, and Irish people who live on icebergs. Faith and Begorrah! NSPI max sessions per...
  • Blog Post: Windows 7 for TechNet and MSDN Subscribers

    Ned here. Come and get it... :) Press Release TechNet Subscribers MSDN Subscribers For all others, you'll have to wait until Friday. Oh the humanity. Just a quick reminder - unless you are part of TAP, TechBeta, or OEM Beta, you cannot get support for Windows 7 . If you don't know what those...
  • Blog Post: Comment issues, continued

    Hey all. If you have a moment, please try and post a comment on this post. Especially non-Microsoft employees. We're still trying to see why comments stopped working. Update Nov 2: Well, it seems to be working now. :-) Thanks for all the help folks, it's much appreciated. Comment away, we'll see ...
  • Blog Post: Understanding DFSR debug logging (Part 4: A Very Small File Added to Replicated Folder on Windows Server 2008)

    In this scenario we will see a small file copied into the replicated folder and how it is replicated between two servers. This is useful to understand in order to troubleshoot issues where problems within the USN journal, the DFSR JET database, the staging folder structure, and the network (including...
  • Blog Post: Auditing Password and Account Lockout Policy on Windows Server 2008 and R2

    Ned here again. Let’s talk about auditing your domain for changes made to Password and Account Lockout policies. Frankly, it’s a real pain in the neck to figure out Password and Account Lockout auditing and there are legacy architectural decisions behind how this all works, so I’ll...
  • Blog Post: Not IT-related (but geeks will enjoy, regardless)

    Ned here. As you can tell, I’ve been gone for a bit – hang tight, I’m replying to all these emails. In the meantime, here’s what I was up to: San Diego Comic-Con 2011 Oh sure, now you’re interested. :) A sampling of what my Windows Phone 7 camera and I came up with during the four-day awesome-o-thon...
  • Blog Post: USMT 4.0: Cryptic Messages with Easy Fixes

    Ned here again. As you begin the process of moving off your older operating systems to Windows 7 you may end up using USMT 4.0 . With its powerful capabilities and intended audience of IT professionals, the tool can be unforgiving and often gives inscrutable messages. Today I’ll cover a few of...
  • Blog Post: Friday Mail Sack: Saturday Edition

    Ned here. As you may have noticed, it is not Friday. You may also have noticed that this post is awesome and packed with many weeks of delayed content goodness. This notice may extend to the fact that I have no life. You notice a lot, don’t you smarty? I cannot imagine someone looking...
  • Blog Post: Tracking a Remote File Deletion Back to the Source

    Ned here again. A long time ago, I blogged about how to track down file deletions in FRS and DFSR. At the end I casually mentioned that auditing should be used if you really want to see who deleted a file from a server. It’s not as easy as simply turning on some security policy, so today I will...
  • Blog Post: Customizing file compression in DFSR on Windows Server 2008 (no, not RDC)

    Hi, Ned here. If you’re a regular reader of the Filing Cabinet , you’ve probably already read about all the new features for DFS Replication (DFSR) added in Windows Server 2008. If not, trot on over here and drink your fill. Just to summarize some of these cool new features: ...
  • Blog Post: One-Stop Shop for Auditing in Windows Server 2008 and Windows Vista

    Hi, Ned here again. I am frequently asked by customers (and Microsoft employees!) where they can get to all the useful Windows Server 2008 and Windows Vista audit information. Unlike some of our other components, there’s no clear portal site on TechNet or MSDN that gives you everything in one fell...
  • Blog Post: DelegConfig V2 Released

    Hi all, Ned here again. Our compadre Brian Murphy-Booth has released the newest version of the Kerberos Delegation IIS Website that we have discussed previously here and here . You can grab it here: http://blogs.iis.net/brian-murphy-booth/archive/2009/04/22/delegconfig-v2-beta.aspx Brian really...
  • Blog Post: SYSVOL migration from FRS to DFSR - Whitepaper Released

    Ned here. It's done, it's out, come get it, stop yelling at me! :-) SYSVOL Replication Migration Guide: FRS to DFS Replication (TechNet Version) SYSVOL Replication Migration Guide: FRS to DFS Replication (Word Doc Version) Be sure to also run through some of these (possibly) useful accompanying...
  • Blog Post: Friday Mail Sack: Guest Reply Edition

    Hi folks, Ned here again. This week we talk: CA migration from 1 to 2 tier ADAM/ADLDS P2V ABC 123 Managing AGPM security filters Multiple IIS App pools and Kerberos AGPM multi-domain comparison ADUC domain password weirdness DFSR deletion conflict handling Stale account deletion...
  • Blog Post: Understanding DFSR debug logging (Part 9: File is Renamed on Windows Server 2003 R2)

    In this scenario we will see a file renamed and how that change is replicated between servers. This is useful to understand in order to troubleshoot issues where problems within the USN journal, the DFSR JET database, and the network (including RPC) are preventing replication from working correctly....
  • Blog Post: Tuning replication performance in DFSR (especially on Win2008 R2)

    Hi all, Ned here again. There are a number of ways that DFSR can be tuned for better performance. This article will go through these configurations and explain the caveats. Even if you cannot deploy Windows Server 2008 R2 - for the absolute best performance - you can at least remove common bottlenecks...
  • Blog Post: Global Object Access Auditing is Magic

    Hi folks, Ned here again. I mentioned this once in a Friday Mail Sack but today I circle around and explain a well-hidden security feature added in Windows 7 and Windows Server 2008 R2: Global Object Access Auditing Oh boy, auditing! I bet you are excited! What is it and how to enable it ...
  • Blog Post: Understanding DFSR debug logging (Part 7: Microsoft Office Word 2007 File Modified on Windows Server 2008)

    In this scenario we will see a Microsoft Word 2007 file modified and how that change is replicated between servers. This is useful to understand in order to troubleshoot issues where problems within the USN journal, the DFSR JET database, the staging folder structure, and the network (including RPC)...
  • Blog Post: Managing RID Issuance in Windows Server 2012

    Hi all, Ned here again to talk further about managing your RID pool . By default, a domain has capacity for roughly one billion security principals, such as users, security groups, managed service accounts, and computers. If you run out, you can’t create any more. There aren’t any domains with that many...
  • Blog Post: Designing and Implementing a PKI - Series Wrapup and Downloadable Copies

    Hi all, Ned here again. We usually get asked for a more portable version of our multi-part blog posts so - for once - I am creating it before the yelling starts. Chris’ “Designing and Implementing a PKI” series is included below in a few common file formats: Download in DOX format...