Jane Lewis's Weblog

Platforms, Active Directory,Administration, Management,Women in Technology, Random Thoughts

Jane Lewis's Weblog

  • Giving Non Administrators permission to read Event Logs Windows 2003 and Windows 2008

    Apologies for not blogging for sometime. I have been away on vacation, out of the country on training plus work commitments so add that up and it equals and enforced hiatus. Plus of course do not forget the Volcano :). Well I am back now and have an interesting...
  • Explaining Close_Wait

    I have been working with a customer recently who has a print server that has had its spooler crashing after a 3rd Party service running on it was locking up and freezing and falling over. One of the signs it was about to fall over was running the following...
  • The KRBTGT Account - What is it ?

    As part of the Active Directory Forest Recovery process the white paper talks about the KRBTGT Account. I often get asked what is this account and why do I need to reset its password twice ? Well here is the answer Key distribution service center account...
  • High CPU on Wmiprvse.exe caused by memory leak DNSPROV.DLL Windows 2003

    Certain customers have recently been experiencing an issue which I wanted to bring to your attention. Issue with Domain Controllers Windows 2003 sp2 Wmiprvse.exe consistently consumes a high percentage of CPU on Domain Controllers and svchost.exe...
  • Ports used in Active Directory Replication

    A customer the other day was looking to configure his Domain Controller in a remote Branch Office behind a firewall. The question was what ports are required for Active Directory Replication. The answer is the following; Port Assignments for Active...
  • How to modify a system owned object

    Hello, I had an interesting customer request recently that I thought I would share with you. Prior to an upgrade to 2003 they had an account which was used for Remote Desktop Users. On upgrading to 2003 this account became replaced by a System Owned Object...
  • Page File How big is Yours ?

    The Question around ideal sizing of a Page File has been a topic of conversation that Customers have been asking us recently. I am going to make a stab in this Blog to put together some of the current thinking around this as I think some of the documentation...
  • Know your Tombstones - The Basics

    The TSL (Tombstone Lifetime) of an object in the Active Directory is significant especially when related to Backups Restores and Lingering Objects So today I am going to give you the basics of what Tombstones mean. What is a Tombstone ? T he...
  • Schema - What is the Best Practise for Updating ?

    This has been a question that has come up with several of my customers recently. Therefore I thought this would be a good topic to discuss. Modifying the Schema is something that is a necessary action prior to carrying out installation of Directory Enabled...
  • D2 and D4 ;What is it for ?

    I have been recently doing quite allot of work with File Replication Service. The File Replication service is used to replicate the contents of your sysvol folder e.g. Group policies and Scripts. The difference between FRS and Active Directory Replication...
  • Optimizing and reducing the noise on Admin Packs Scom

    I have been working with my customer around reducing the noise and also optimising SCOM 2007 R2. The main emphasis of my work has been around the Active Directory Managment pack, but some of the techniques that I have highlighted and the links that I...
  • Modifying DisplayName Firstname Surname in Active Directory Users and Computers

    Well I was only aware of one particular way to modify the displayname in the Active Directory, and then this only worked for New users. How to change display names of Active Directory users http://support.microsoft.com/kb/250455/ Well a colleague of mine...
  • DCGPOFIX - to be used - only in the last resort.

    I have been working quite allot with Group Policy objects and have recently been involved in troubleshooting them. As a last resort if all else fails, and your Default Domain Policy and Default Domain Controller Policy is beyond repair,or somehow has...
  • Audit Changes to Group Policies

    An Interesting question came up at work this week. That was How do you Audit the fact that someone has modified a Group Policy ? Well the general concensus was the following; Check out the following excellent blog article Windows Security Logging and...
  • Enterprise Domain Controllers Group and Group Policies

    Myself and a colleague Mark Empson have been developing a New Service entitled a GPO Health Check that looks at every aspect of the health of your Group Policies. Well one of the tests involved was checking for any Group Policies that had only the Read...
  • Just to clarify

    I have been following through the Windows 2003 disaster recovery guide recently in preperation for some work I will be completing for a customer. And it talks about raising the available RID pool value. The reason for this is to ensure that no domain...
  • Women in Technology - A busy few weeks but inspiring and fun !

    One of the great things with my job is it gives me the ability to take part in activities outside of my normal job role. An area which I am passionate about is encouraging more girls , young women , returners to the workplace to consider a career in our...
  • Powershell script to help check WMI setting has been configured

    We all know how powerful Powershell is, so it is great to highlight an example of where it was showed to be very effective and really quick to create a positive result. Recently I highlighted and issue that affected 2003 Domain Controllers which caused...
  • Changing you Colour Scheme in Office and Outlook 2010

    Well my friend and Colleague Justin Zarb showed me something funky in Office2010 beta today. He was running his installation with a great “Black” colour scheme in Outlook, similiar to below; The way he set this up was to go into options in word and choose...
  • Merry Xmas Everyone

    Well I Know 2009 has been a busy busy year. And for some of you a tough year too. Therefore I wish you all the best and I am taking a break  for the Christmas Holidays. I would like to wish Everyone a Very Merry Christmas and a very Happy New Year...
  • KDC Event I.D. 11

    I was recently working on a customer site and notice in a significant number of System Event logs displayed the following error message. There are multiple accounts with name MSSQLSvc/ABCServer.contoso.com:1433 of type DS_SERVICE_PRINCIPAL_NAME. If you...
  • Gui for 2008 r2 Recycle Bin

    Hi just a quick post while I think of it. I have just found a GUI to our Recycle Bin Powershell command line. Check it out and download from  here. http://www.overall.ca/index.php?option=com_content&view=article&id=40:adrecyclebin&catid...
  • ISTG what happens when it Fails ?

    I had an interesting investigation the other day with a customer of mine with reference to the role and failover of the ISTG role. In the customers scenario they switch off the ISTG and several other servers in a very busy site to simulate a outage scenario...
  • Repadmin and friends My top Ten Commands

    I was working at a customer site the other day, and they were looking over my shoulder as I was typing in some Repadmin commands. They asked me the question what is your recommended top 5 Repadmin (plus friends) commands. Well that got me thinking and...
  • Group Policy Best Practise Analyzer - Not Sung from the Mountaintops

    I have been recently writing a Group Policy Course and have looked at in some detail the Group policy Best Practise Analyzer. I must admit I had let this pass me by a bit. It was released by us Last August 2007, with not much of a Fanfare. But I would...