Browse by Tags

Tagged Content List
  • Blog Post: Getting a CMD prompt as SYSTEM in Windows Vista and Windows Server 2008

    Ned here again. In the course of using Windows, it is occasionally useful to be someone besides… you. Maybe you need to be an Administrator temporarily in order to fix a problem. Or maybe you need to be a different user as only they seem to have a problem. Or maybe, just maybe, you want to be...
  • Blog Post: Headache Prevention: Install Hotfix 953317 to Prevent DNS Records from Disappearing from Secondary DNS Zones on Windows Server 2008 SP1

    Craig here. We’ve had some nasty cases related to this bug, so it seemed prudent to do our best to increase the awareness of this issue. In a nutshell, the DNS Server service in Windows Server 2008 has a bug that can result in a large number of DNS records disappearing. When those records go missing...
  • Blog Post: Friday Mail Sack: Newfie from the Grave Edition

    Heya, Ned here again. Since this another of those catch up mail sacks, there’s plenty of interesting stuff to discuss. Today we talk NSPI, DFSR, USMT, NT 4.0 (!!!), Win2008/R2 AD upgrades, Black Hat 2010, and Irish people who live on icebergs. Faith and Begorrah! NSPI max sessions per...
  • Blog Post: Auditing Password and Account Lockout Policy on Windows Server 2008 and R2

    Ned here again. Let’s talk about auditing your domain for changes made to Password and Account Lockout policies. Frankly, it’s a real pain in the neck to figure out Password and Account Lockout auditing and there are legacy architectural decisions behind how this all works, so I’ll...
  • Blog Post: Customizing file compression in DFSR on Windows Server 2008 (no, not RDC)

    Hi, Ned here. If you’re a regular reader of the Filing Cabinet , you’ve probably already read about all the new features for DFS Replication (DFSR) added in Windows Server 2008. If not, trot on over here and drink your fill. Just to summarize some of these cool new features: ...
  • Blog Post: One-Stop Shop for Auditing in Windows Server 2008 and Windows Vista

    Hi, Ned here again. I am frequently asked by customers (and Microsoft employees!) where they can get to all the useful Windows Server 2008 and Windows Vista audit information. Unlike some of our other components, there’s no clear portal site on TechNet or MSDN that gives you everything in one fell...
  • Blog Post: New Functionality in Windows Server 2008 Terminal Service Licensing

    This is Paul Fragale , coming to you from my little corner of the world. With the launch of Windows Server 2008, there have been several cases around Terminal Server and Terminal Server License Server. I would like to take a moment to review with you some common steps that can help you resolve these...
  • Blog Post: Tuning replication performance in DFSR (especially on Win2008 R2)

    Hi all, Ned here again. There are a number of ways that DFSR can be tuned for better performance. This article will go through these configurations and explain the caveats. Even if you cannot deploy Windows Server 2008 R2 - for the absolute best performance - you can at least remove common bottlenecks...
  • Blog Post: Special Groups Auditing via Group Policy Preferences

    Ned here again. Today I’m going to talk about a new feature of Windows Server 2008 and Windows Vista called Special Groups auditing . While we’re in here, I’ll run through how we can use the new Group Policy Preferences (GPP) client-side extensions to make deploying this fast and easy...
  • Blog Post: Addendum: Making the DelegConfig website work on IIS 7

    Hi All Rob here again. I thought I would take the time today and expand upon the Kerberos Delegation website blog to show how you can use the web site on IIS 7. Actually, Ned beat me up pretty badly for not showing how to set the site up on IIS 7 [ I sure did. Rob’s revenge was to make a blog post...
  • Blog Post: Introducing Group Policy Preferences

    Hi, Mike here. Have you ever wanted to map a drive for specific users at logon—without using a logon script? Have you ever wanted to change the local administrator’s password on all your client computers? Have you ever wanted to add items to a user’s Start menu? Now you can with Windows...
  • Blog Post: Changes in Functionality from 2008 to 2008 R2 (mostly)

    Ned here again. We're all snowed in down in Charlotte today, but that doesn't stop the blogging. We've published a new TechNet guide to many of the changes between Windows Server 2008 and Windows Server 2008 R2; it's definitely worth a look and has good links to more details. This guide is not exhaustive...
  • Blog Post: New DNS and AD DS BPA’s released (or: the most accurate list of DNS recommendations you will ever find from Microsoft)

    Hi folks, Ned here again. We’ve released another wave of Best Practices Analyzer rules for Windows Server 2008 / R2, and if you care about Directory Services you care about these: AD DS rules update Info: Update for the AD DS Best Practices Analyzer rules in Windows Server 2008 R2 Download...
  • Blog Post: ADMT, RODC’s, and Error 800704f1

    Hello all, Jason here again. With this blog post, I just wanted to bring an ADMT issue to the masses’ attention, as I’ve experienced it multiple times within just the last couple of months. There’s an issue when attempting to migrate computer account objects into a Windows 2008 domain that had been...
  • Blog Post: Command-Line Compression in Core

    Hi, Ned here again. Today I’m going to talk about handling compressed files in Windows Server 2008 running as a Core server. You know, that thing with no pretty graphical interface and just a big command prompt that stares at you, daring you to try some successful administration. Core mode is...
  • Blog Post: Windows Server 2008 SP1 and Windows Vista SP1 now UNSUPPORTED

    Ned here with the last word on this: Windows Server 2008 SP1 and Windows Vista SP1 are no longer supported. You must install Service Pack 2 to get updates and support from Microsoft going forward with those OSes. But me no buts. I made a helpful diagram of how to resolve this - or indeed any - Windows...
  • Blog Post: Verifying File Replication during the Windows Server 2008 DFSR SYSVOL Migration – Down and Dirty Style

    Hi, Ned here again. You’ve probably already started reading about how Windows Server 2008 now supports using Distributed File System Replication (DFSR) technology to synchronize SYSVOL. This means that the legacy File Replication Service (FRS) is no longer necessary and all the DFSR advantages...
  • Blog Post: Deploying Legal Notices to domain computers using Group Policy

    Hi, Mike again. Every so often, I’ll talk with a customer wanting to deploy a legal notice to their workstations using Group Policy. Sounds simple, right? Well, it is actually a little tricky to make the legal notice work correctly. Here is a solution that I share with customers that want to do...
  • Blog Post: Windows Logon Options in Vista/2008: Part Two of Two

    Mike here. Blog time again… Previously, I wrote about two of the policy settings under the computer configuration. Today, I’ll finish writing about the Windows Logon Options policy category by covering the remaining policy setting under the computer configuration and all of the policy settings...
  • Blog Post: Cool Auditing Tricks in Vista and 2008

    Hi, Ned here again. Today I’m going to show some interesting new features of Auditing in Windows Vista and Windows Server 2008 that can be used for troubleshooting problems or seeing what’s happening in your environment. I’ll be building upon some of the basic information Dave Beach...
  • Blog Post: Netmon, MPS, RODC's, and that new OS you might have heard about

    Ned here. A few big pieces of news, in case you've been having a busy week: Netmon 3.3 has been released . You can download from here . Read more about the new features (such as autoscroll, frame commenting, experts, WWAN support, and more) right here . MPS Reports . They're back. They work...
  • Blog Post: Friday Mail Sack: They Pull Me Back in Edition

    Hiya world, Ned is back with your best questions and comments. I’ve been off to teach this fall’s MCM , done Win8 stuff , and generally been slacking keeping busy; sorry for the delay in posting. That means a hefty backlog - get ready to slurp. Today we talk: Weirdness with NETDOM...
  • Blog Post: Forced Demotion of a Windows Server 2008 Core Domain Controller

    Ned here again. Today's post is short and sweet, but when you need this one you will need it fast and we don't have this publically documented anywhere on TechNet (yet). Since Windows 2000 SP4, it has been possible to forcibly demote Domain Controllers using the DCPROMO /FORCEREMOVAL command. You...
  • Blog Post: Default Security Templates in Windows 2008

    Hi, David here again. You might be familiar with Security Templates that we use in Windows 2000 and 2003. The template is sort of the master set of security settings that we apply to a server when you either set it up or configure it using the Security Configuration and Analysis tool. Here in DS we often...
  • Blog Post: Last Week Before Vista and Win2008 SP1 Support Ends

    Last chance folks. Windows Vista and Windows Server 2008 Service Pack 1 support ends on July 12 . As in, one week from now. This means computers running SP1 won’t get security updates after the next Patch Tuesday. The bomb represents malware. Or your next review… For those not...