Ask the Directory Services Team

Microsoft's official Enterprise Platform Support DS blog

Browse by Tags

  • Blog Post: Do not skip the latest B8 boot post

    Hey all, Ned here. The Building Windows 8 blog recently posted a new article from Chris Clark that you might have passed over due to the title, which sounds like another article on boot performance: Designing for PCs that boot faster than ever before Don’t skip it! A more descriptive title would have...
  • Blog Post: Dynamic Access Control intro on Windows Server blog

    Hey all, Ned here with a quick “xerox” post: the Dynamic Access Control developers have released a good intro on their octo-feature through the Windows Server Blog: Introduction to Windows Server 2012 Dynamic Access Control It’s written by Nir Ben-Zvi, a Program Manager on the Windows Server development...
  • Blog Post: Friday Mail Sack: Mothers day pfffft… when is son’s day?

    Hi folks, Ned here again. It’s been a little while since the last sack, but I have a good excuse: I just finished writing a poop ton of Windows Server 2012 depth training that our support folks around the world will use to make your lives easier (someday). If I ever open MS Word again it will be...
  • Blog Post: New Slow Logon, Slow Boot Troubleshooting Content

    Hi all, Ned here again. We get emailed here all the time about issues involving delays in user logons. Often enough that, a few years back, Bob wrote a multi-part article on the subject. Taking it to the next level, some of my esteemed colleagues have created a multi-part TechNet Wiki series on understanding...
  • Blog Post: Friday Mail Sack: Drop the dope, hippy! edition

    Hi all, Ned here again with an actual back to back mail sack. This week we discuss: Running out of USNs and Versions DFSR RDC LAN WAN FWIW AOK NPS and dotted NetBIOS domain names USMT and the case of the failing sourcepriority Revisiting NIC teaming Weird DFSR files MaxConcurrentAPI...
  • Blog Post: How to NOT Use Win32_Product in Group Policy Filtering

    Hi all, Ned here again. I have worked many slow boot and slow logon cases over my career. The Directory Services support team here at Microsoft owns a sizable portion of those operations - user credentials, user profiles, logon and startup scripts, and of course, group policy processing. If I had to...
  • Blog Post: Saturday Mail Sack: Because it turns out, Friday night was alright for fighting edition

    Hello all, Ned here again with our first mail sack in a couple months. I have enough content built up here that I actually created multiple posts, which means I can personally guarantee there will be another one next week. Unless there isn't! Today we answer your questions around: Detecting...
  • Blog Post: New USMT 5.0 Features for Windows 8 Consumer Preview

    Hi all, Ned here again. Frequent readers know that I’ve written many times about the User State Migration Tool; it’s surprising to some, but the Directory Services team owns supporting this tool within Microsoft in the United States (our European colleagues wisely made sure the Deployment...
  • Blog Post: Your 24 Month XP Warning

    Hi all, Ned here again with a public service announcement: On April 8 th 2014, Windows XP support ends For the temporally challenged, that’s exactly two years from today. Hopefully, some of you don’t care because you’ve already gotten off XP. After all, Windows 7 has a 41...
  • Blog Post: Group Policy Management Improvements in Windows Server "8" Beta

    Hi all, Ned here again. If you've been supporting group policy for years, you’ve grown used to its behaviors. For something designed to manage an enterprise, its initial implementation wasn’t easy to manage itself. The Group Policy Management Console improved this greatly after Windows Server...
  • Blog Post: Gimme Some Sugar

    Hi all, Ned here again. Like Bruce Campbell, we’ve been away for awhile, but you can always count on us to return for the sequel. Some of the Windows Server “8” Beta blogging rules have been relaxed and we’re ready to begin firing our boomstick. Look for the first one here in...
  • Blog Post: Windows Server “8” Beta announcements, availability (updated)

    Hi all, Ned here. For those who spent the day in a coma, Windows Server “8” Beta and Windows 8 CP are out. Make sure you start by visiting Bill Laing’s announcement on the Windows Server Blog. This morning he formally announced the availability of Windows Server “8” Beta...
  • Blog Post: Congrats Sean and Mark, the Newest Masters!

    Hey all, Ned here again. You probably know our pals Sean Ivey and Mark Renoden from their AskDS blog contributions. Both of them were once Directory Services Support Engineers and are now Premier Field Engineers, traveling the globe to help solve your problems. Much like the A-Team. Or not. Anyway...
  • Blog Post: Friday Mail Sack: Get Off My Lawn Edition

    Hi folks, Ned here again. I know this is supposed to be the Friday Mail Sack but things got a little hectic and... ah heck, it doesn't need explaining, you're in IT. This week - with help from the ever-crotchety Jonathan Stephens - we talk about: Multiple WMI Filters LDAP MaxPoolThreads Many...
  • Blog Post: Purging Old NT Security Protocols

    Hi folks, Ned here again (with some friends ). Everyone knows that Kerberos is Microsoft’s preeminent security protocol and that NTLM is both inefficient and, in some iterations, not strong enough to avoid concerted attack. NTLM V2 using complex passwords stands up well to common hash cracking tools...
  • Blog Post: Friday Mail Sack: Carl Sandburg Edition

    Hi folks, Jonathan again. Ned is taking some time off visiting his old stomping grounds – the land of Mother-in-Laws and heart-breaking baseball. Or, as Sandburg put it: “ Hog Butcher for the World , Tool Maker, Stacker of Wheat, Player with Railroads and the Nation's Freight Handler;...
  • Blog Post: If you use Symantec Products, Read Me

    Ned here again, with a public service announcement similar to the previous one we did for RSA as it implicitly affects so many Microsoft customers. Symantec has announced: Symantec can confirm that a segment of its source code has been accessed. Upon investigation of the claims made by Anonymous...
  • Blog Post: Security Compliance Manager 2.5 Beta is out

    Hi folks, Ned here with a quickie advert: The Security Compliance Manager 2.5 beta released the other day, with a bunch of new features and other goo. Integration with the System Center 2012 IT GRC Process Pack for Service Manager-Beta : Product baseline configurations are integrated into the IT...
  • Blog Post: RPC over IT/Pro

    Hi folks, Ned here again to talk about one of the most commonly used – and least understood – network protocols in Windows: Remote Procedure Call . Understanding RPC is a foundation for any successful IT Professional. It’s integral to distributed systems like Active Directory, Exchange...
  • Blog Post: Friday Mail Sack: It’s a Dog’s Life Edition

    Hi folks, Ned here again with some possibly interesting, occasionally entertaining, and always unsolicited Friday mail sack. This week we talk some: DNS partition absence Controlling DCDIAG event messaging Inventorying SYSVOL replication architecture Weird WMI DFSR volume paths Tightening...
  • Blog Post: Friday Mail Sack: Best Post This Year Edition

    Hi folks, Ned here and welcoming you to 2012 with a new Friday Mail Sack. Catching up from our holiday hiatus, today we talk about: Disabling Administrative Shares Making Get-ADDomainController useful’er Kerberos group bloat USMT moving profiles back from other disks The DFSR...
  • Blog Post: Friday Mail Sack: Dang, This Year Went Fast Edition

    Hi folks, Ned here again with your questions and comments. This week we talk: AD Garbage Collection behavior Applying Group Policy based on installed roles and features Apple hates .local domains More on auto site coverage from Lurch Fixing the mysteriously bad CPU performance of brand...
  • Blog Post: Removing DFSR Filters

    Hi folks, Ned here again. DFSR administrators usually know about its built-in filtering mechanism . You can configure each filter based on file name and extension; by default, files named like “*.bak, *.tmp, ~*” are filtered, as they are unlikely to be permanent or useful between servers. You can also...
  • Blog Post: Friday Mail Sack: Guest Reply Edition

    Hi folks, Ned here again. This week we talk: CA migration from 1 to 2 tier ADAM/ADLDS P2V ABC 123 Managing AGPM security filters Multiple IIS App pools and Kerberos AGPM multi-domain comparison ADUC domain password weirdness DFSR deletion conflict handling Stale account deletion...
  • Blog Post: Friday Mail Sack: They Pull Me Back in Edition

    Hiya world, Ned is back with your best questions and comments. I’ve been off to teach this fall’s MCM , done Win8 stuff , and generally been slacking keeping busy; sorry for the delay in posting. That means a hefty backlog - get ready to slurp. Today we talk: Weirdness with NETDOM...
Page 1 of 13 (312 items) 12345»