Jane Lewis's Weblog

Platforms, Active Directory,Administration, Management,Women in Technology, Random Thoughts

Jane Lewis's Weblog

  • The KRBTGT Account - What is it ?

    As part of the Active Directory Forest Recovery process the white paper talks about the KRBTGT Account. I often get asked what is this account and why do I need to reset its password twice ? Well here is the answer Key distribution service center account...
  • Explaining Close_Wait

    I have been working with a customer recently who has a print server that has had its spooler crashing after a 3rd Party service running on it was locking up and freezing and falling over. One of the signs it was about to fall over was running the following...
  • Giving Non Administrators permission to read Event Logs Windows 2003 and Windows 2008

    Apologies for not blogging for sometime. I have been away on vacation, out of the country on training plus work commitments so add that up and it equals and enforced hiatus. Plus of course do not forget the Volcano :). Well I am back now and have an interesting...
  • High CPU on Wmiprvse.exe caused by memory leak DNSPROV.DLL Windows 2003

    Certain customers have recently been experiencing an issue which I wanted to bring to your attention. Issue with Domain Controllers Windows 2003 sp2 Wmiprvse.exe consistently consumes a high percentage of CPU on Domain Controllers and svchost.exe...
  • Ports used in Active Directory Replication

    A customer the other day was looking to configure his Domain Controller in a remote Branch Office behind a firewall. The question was what ports are required for Active Directory Replication. The answer is the following; Port Assignments for Active...
  • How to modify a system owned object

    Hello, I had an interesting customer request recently that I thought I would share with you. Prior to an upgrade to 2003 they had an account which was used for Remote Desktop Users. On upgrading to 2003 this account became replaced by a System Owned Object...
  • Page File How big is Yours ?

    The Question around ideal sizing of a Page File has been a topic of conversation that Customers have been asking us recently. I am going to make a stab in this Blog to put together some of the current thinking around this as I think some of the documentation...
  • Schema - What is the Best Practise for Updating ?

    This has been a question that has come up with several of my customers recently. Therefore I thought this would be a good topic to discuss. Modifying the Schema is something that is a necessary action prior to carrying out installation of Directory Enabled...
  • Know your Tombstones - The Basics

    The TSL (Tombstone Lifetime) of an object in the Active Directory is significant especially when related to Backups Restores and Lingering Objects So today I am going to give you the basics of what Tombstones mean. What is a Tombstone ? T he...
  • D2 and D4 ;What is it for ?

    I have been recently doing quite allot of work with File Replication Service. The File Replication service is used to replicate the contents of your sysvol folder e.g. Group policies and Scripts. The difference between FRS and Active Directory Replication...
  • Optimizing and reducing the noise on Admin Packs Scom

    I have been working with my customer around reducing the noise and also optimising SCOM 2007 R2. The main emphasis of my work has been around the Active Directory Managment pack, but some of the techniques that I have highlighted and the links that I...
  • Modifying DisplayName Firstname Surname in Active Directory Users and Computers

    Well I was only aware of one particular way to modify the displayname in the Active Directory, and then this only worked for New users. How to change display names of Active Directory users http://support.microsoft.com/kb/250455/ Well a colleague of mine...
  • Just to clarify

    I have been following through the Windows 2003 disaster recovery guide recently in preperation for some work I will be completing for a customer. And it talks about raising the available RID pool value. The reason for this is to ensure that no domain...
  • DCGPOFIX - to be used - only in the last resort.

    I have been working quite allot with Group Policy objects and have recently been involved in troubleshooting them. As a last resort if all else fails, and your Default Domain Policy and Default Domain Controller Policy is beyond repair,or somehow has...
  • Enterprise Domain Controllers Group and Group Policies

    Myself and a colleague Mark Empson have been developing a New Service entitled a GPO Health Check that looks at every aspect of the health of your Group Policies. Well one of the tests involved was checking for any Group Policies that had only the Read...
  • Audit Changes to Group Policies

    An Interesting question came up at work this week. That was How do you Audit the fact that someone has modified a Group Policy ? Well the general concensus was the following; Check out the following excellent blog article Windows Security Logging and...
  • Changing you Colour Scheme in Office and Outlook 2010

    Well my friend and Colleague Justin Zarb showed me something funky in Office2010 beta today. He was running his installation with a great “Black” colour scheme in Outlook, similiar to below; The way he set this up was to go into options in word and choose...
  • KDC Event I.D. 11

    I was recently working on a customer site and notice in a significant number of System Event logs displayed the following error message. There are multiple accounts with name MSSQLSvc/ABCServer.contoso.com:1433 of type DS_SERVICE_PRINCIPAL_NAME. If you...
  • Repadmin and friends My top Ten Commands

    I was working at a customer site the other day, and they were looking over my shoulder as I was typing in some Repadmin commands. They asked me the question what is your recommended top 5 Repadmin (plus friends) commands. Well that got me thinking and...
  • ISTG what happens when it Fails ?

    I had an interesting investigation the other day with a customer of mine with reference to the role and failover of the ISTG role. In the customers scenario they switch off the ISTG and several other servers in a very busy site to simulate a outage scenario...
  • Gui for 2008 r2 Recycle Bin

    Hi just a quick post while I think of it. I have just found a GUI to our Recycle Bin Powershell command line. Check it out and download from  here. http://www.overall.ca/index.php?option=com_content&view=article&id=40:adrecyclebin&catid...
  • Group Policy Best Practise Analyzer - Not Sung from the Mountaintops

    I have been recently writing a Group Policy Course and have looked at in some detail the Group policy Best Practise Analyzer. I must admit I had let this pass me by a bit. It was released by us Last August 2007, with not much of a Fanfare. But I would...
  • Ladies if you are interested in a Career at Microsoft read on

    8th of March 2010 HI Everyone, I have just come back from a busy week in Amsterdam and my Colleague Charna Westerhold has given me some more details about an exciting event I am taking part in . The event is entitled No Boundaries Only Unlimited Potential...
  • Recommendations for Running a Domain Controller Virtualized Environment using Virtual Server

    I have been visiting a few customer sites where they are virtualizing their Domain Controllers. This always makes me a little nervous as this should always be coupled with strong control and management of this environment. If this is not well managed...
  • Taking Snapshots of your AD DS in Windows 2008

    Apologies if you saw the earlier half completed post. F12 in Windows Live Writer I now know publishes your blog !. I have recently been investigating the new extended functionality of NTDSUTIL in Windows 2008. This now has the functionality built into...