Fine-Grained Password Policy and “Urgent Replication”

re: Fine-Grained Password Policy and “Urgent Replication”

NedPyle [MSFT] — Wed, 18 Aug 2010 21:05:29 GMT

I figure by Win2043, our devs will do what all devs do: as hardware gets better, software gets bulkier. :) Remember when a webpage was designed to have the tiniest footprint imaginable because networks stunk? Now you get sent MB's of flash, png, html5, and other goo with every click. Gross.

I can hypothesize AD sending much more data someday - like what if we started handling more kinds of biometric logons that required way more data?

"Logon failed, please provide hair follicle with usable DNA sequencing chain for comparison to our records. Not supported on processors below 256-Bit, see your administrator for support."

:-D

re: Fine-Grained Password Policy and “Urgent Replication”

Mike Kline — Wed, 18 Aug 2010 20:53:57 GMT

If you turned on change notification by default would you worry about the locations with low bandwidth/slow links?

Many locations would have no issues today; and hopefully by Windows 2043 slow links will be a thing of the past.

re: Fine-Grained Password Policy and “Urgent Replication”

rsoe — Wed, 18 Aug 2010 20:41:04 GMT

Very nice reading!

and like your old boss said.. you are funny :)

Ned “don’t forget to turn that logging off when you’re done” Pyle

re: Fine-Grained Password Policy and “Urgent Replication”

NedPyle [MSFT] — Wed, 18 Aug 2010 19:46:47 GMT

My pleasure, thanks :)

re: Fine-Grained Password Policy and “Urgent Replication”

coderaven — Wed, 18 Aug 2010 19:39:10 GMT

FInally!!. Thank you!

I had always wondered what "Urgent" replication was used for other than account locks. It was a topic I had trouble explaining to users/administrators. Other than going through the USN on every possible change in a test environment, I thought I would never know.

Thanks for giving the details Ned.

re: Fine-Grained Password Policy and “Urgent Replication”

NedPyle [MSFT] — Wed, 18 Aug 2010 17:13:47 GMT

If only it were enabled by default, I'd be a happy man. But nope, you still have to go do it. Maybe in Windows 2043...

re: Fine-Grained Password Policy and “Urgent Replication”

Mike Crowley — Wed, 18 Aug 2010 17:10:13 GMT

Very Nice. I dont really care much about PSOs today, but this was a good background on how to watch this sort of thing. I also never really understood the breakdown between win2k's 5 minutes, the urgent and non-urgent 2k3+ traffic!

also - if Enable Change Notification is a best practice now, is it enabled by default in win2k8?