Welcome to TechNet Blogs Sign in | Join | Help

Jane Lewis's Weblog

Platforms, Active Directory,Administration, Management, Exchange, Powershell, LCS, Mobility
Digigirlz – WOW ! what a day

image

 

 

 

On the 19th of June I was very proud to be part of a “Digigirlz” day held at Microsoft. So what did this day involve ?

We invited 10 schools from around the local area of Reading and Bracknell of up to 20 girls per school to an Action Packed Day. The day was designed to inspire and enthuse Girls to consider I.T. as a potential career or subject choice to study further.

 

The day was kicked off by a great Inspirational Presentation by Natalie Johnston Director MSIT , who talked around the challenges and what motivated her to choose to work in I.T. and what a fufilling career I.T. . Also she talk about  how many different forms it takes whatever your interest is from Marketing to Programming to Sales and Support.

 

 

Then Andy Sithers and Mark A’Bear gave a great interactive demonstration around  Surface and great resources which are currently free out there on the Net to Manipulate your Digigital Media.

image image

It was fantastic hearing all the Ooohs and the Aaahs coming from the girls as the demonstrations and interactive activities were happening.

However we expected the girls to do some work too !.

They were sent away on a task divided down into teams of 10 girls each to think up the

“Next Big Accessory in Technology”

They were given a digital Camera plus lots of other resources and Photo Story to come back with a 3 minute pitch to explain their ideas. And boy did they ?. The ideas were brilliant and truely amazed us all. and the School that Waingels did a fantastic pitch based around the Environment and digital media. Queens Anne School came second with their Digital Wardrobe.

In the afternoon the day took and explosive turn. We had our very own Chris Bishop from Microsoft Research who earlier this year delivered the Royal Society Christmas Lectures give a series of fantastic demonstrations all around the theme of

“Computers of the Future”

I can truly say it was the most interesting presentation I have certainly ever seen The girls were absolutely captivated …as were all the Adults in the audience to.

The feedback  we have received has been excellent and we are looking to put on more days like these in the future.

Team Vista – ‘It’s a brilliant place and I would love to work here’

Team Live messenger – ‘Loved it, thought it would be boring but wasn’t’

Team Virtual earth – ‘Excellent, Fantastic, would love to work here’

Team Bing – ‘Good fun, I like technology more now’

Team Exchange – ‘I wish I could come here every year’

Team Lips – ‘I really enjoyed myself which was a surprise because I never used to be into this type of stuff’

This is what makes I.T. FUN !

WTech minus the Snow !

header

Hi in February I talked about a great Event which was happening at the Savoy in London.

http://blogs.technet.com/janelewis/archive/2009/02/01/w-tech-see-you-there.aspx

This was the WTECH event , which was a Women’s Recruitment Event. Microsoft and my specifically my division, Microsoft Premier Field Engineering were taking part and were acting as Headline Sponsors for the Day.

Well if you do not already know the event is happening on the 24th of June  and if you have not already registered register here.

This  will be an an exciting day  with a whole range of events happening throughout the day.

Premier Field Engineering are involved directly in two sessions.

 12pm - “Having fun and being a great technical Professional”

 This is being presented by Kate Stanton Davies  Beatrice Nicolini and Andy Gitsham.

2pm - “Interacting with Technology - by text, face, voice and touch”

Surfaceimage

 

 

 

 

 

Jane Lewis Premier Field Engineering  and Eileen Brown Microsoft Evangelist

So I look forward to seeing you there on the day. Hopefully the great British Weather is not going to stop this Event this time !!

DNS Devolution update 97188

I have been tracking this  for a while and I think it is important enough to bring this to your attention as the update has now gone live June 9th  and may when applied have an impact in your environment.

The original issue was brought to our attention and publicised by ourselves in this security advisory http://www.microsoft.com/technet/security/advisory/945713.mspx?info=EXLINK . This highlighted the following risk.

Potential Risk

A malicious user could host a system with a single-label name outside of an organization's boundary and due to DNS devolution may successfully get a Windows DNS client to connect to it as though it were internal to the organizational boundary.

There is  now an update to the Microsoft Security Advisory 97188. If applied this will change the way clients resolve single-label and non-fully qualified queries via devolution. This affects the following Clients

Windows 2000,Windows XP,Windows 2003, Windows Vista, Windows 2008.

NOTE: In Windows 7 RTM and Windows 2008 R2 this is enabled  by default.

You can dowload it via this kbarticle http://support.microsoft.com/kb/957579

So what is DNS Devolution ?

Devolution allows clients in child namespaces within an Active Directory Environment to access resources in the parent namespace without the need to provide the fully qualified domain name of the resource. e.g. client.a.b.com

With devolution enabled, the resolver creates new FQDNs by appending the single-label, unqualified domain name with the parent suffix of the primary DNS suffix name, and the parent of that suffix, and will keep on going until the second-level domain name.

For example,

If an application specified the name mailserver13 and the primary DNS suffix is middle.toytown.com., the resolver will try the following to resolve the  following FQDNs 

  • mailserver13.middle.toytown.com
  • mailserver13.toytown.com.

The way that this devolution process functions enables devolution up to and including the 2nd level Domain.

The second level Domain in the Active Directory with the Forest Root Domain “Toytown.com”, “Toytown” is the defined boundary and is the 2nd level Domain Name.

However Dependant on how you have your environment configured your estate may be exempt from DNS Devolution. For Example the following situations means that devolution is not enabled in Active Directory domains.

· If a global suffix search list is configured via group policy.

· If the append parent suffixes of the primary DNS suffix check box is selected on the DNS tab in the Advanced TCP/IP Settings dialog box of the Internet Protocol (TCP/IP) component.

So you may be asking how does this affect me ?

· DNS queries for single label  and non-fully qualified names that used to work now will no longer work after the fix has been installed or and upgrade to the client  Windows 7

· There may be a disparity between certain OS versions working on some OS versions compared to later OS versions.

This is explained in great depth in the following KB Article http://support.microsoft.com/kb/957579

RODC Branch Office Guide Ready for download

I have been working with 2008 Forests and customers moving towards this environment quite alot recently. Therefore I would like to bring your attention to a newly completed and updated guide which is now available for download;

The Read-Only Domain Controller (RODC) Branch Office Guide is now live on TechNet and the Download Center!

· TechNet: http://technet.microsoft.com/en-us/library/dd734758(WS.10).aspx

· Download Center: http://go.microsoft.com/fwlink/?LinkId=153714

The guide covers the major considerations around deploying RODC’s in Branch Office scenarios.  Specifically, the topics include:

· Branch Office Environment Characteristics

· Deciding Which Type of Domain Controller Meets the Needs of a Branch Office Location

· Updates to Windows Server 2003 Branch Office Guide Recommendations

· Planning/Deploying/Administering RODCs in Branch Offices

· Monitoring Your Branch Office Environment

 

I recommend this as your next Bed time Reading if you are looking to utilise  RODC in your Enterprise environment.

“Badda Bing!”

http://www.bing.com

Ok I am looking for suggestions all clean please :). With the launch of Bing (Beta) in the U.K. we have caused quite flurry of responses across the I.T. press.

http://www.telegraph.co.uk/scienceandtechnology/technology/microsoft/5401325/Bing-takes-on-Google.html 

So I am sat here thinking it would be great to have a Bing speak competition. So if you can think of some cool clean ways of including the word Bing in your conversation then feedback to me with your suggestions.

e.g.

I am just going to start Binging for that”

“ Bing bang bong ….found it "!”

“ I am going to Bingle it “

“ I have been Bingled”

“ Bing is your friend”

“Bing to you hearts content”

But in all seriousness give Bing the attention it deserves and try some of the features that are available in the Beta Phase to you in the U.K.;

1. New Image Homepage – we’re using stunning high definition photography that differentiate us from the blank white page.

2. Best Match – the feature presents results for popular searches intuitively and this saves you clicks and gets you to your answer quicker

3. Ciao! Shopping Integration – we’re offering you the opportunity to shop directly from Bing using Ciao! product comparisons and user reviews (Ciao! is the shopping network Microsoft acquired in October -- read more about Ciao! here)

All the above features and more can be looked at here them http://www.discoverbing.co.uk

So go out today and have a Binging good day. :)

Run Run as fast as you can !

sands_logo_large Hi I would like to let you know about a charity event I am running in to raise Money for SANDS. This is a fantastic Charity that raises money for  Stillbirth and neonatal death .

I was inspired as part of my involvement with the Connected Women In Technology by Sarah's Speakes story of her precious daughter Amelie, who died from neonatal death 4 years ago. Therefore as a team we are committed to raising money for this great cause. SANDS helps bereaved parents in learning to cope with the loss of their baby / babies. They also work closely with local hospitals to improve medical and maternity services and are making a difference in tackling this difficult topic. Please if you feel you can donate a big THANK YOU for your donation - we really appreciate it, The Connecting Women Runners.

http://www.justgiving.com/cwit

 Connecting Women in Technology March 2009

MCT Virtual Conference - See you Virtually There !

 

On the theme of going Virtual and saving all those expensive Travel Costs. Then MCT (Microsoft Certified Trainers) checkout this opportunity to get some excellent online technical and professional training. Being an MCT since 1996  …. :).  I know the value of keeping your skillset up to date. There are some great sessions lined up so see below for more details.

www.MCTSummit2009.com

MCT Virtual Summit--Register Today (Worldwide)

The MCT Summits are a great way of preparing for training on new technology. Following successful events in January, we are now proud to announce our first Virtual MCT Summit: 2 days, 48 hours straight of online trainer readiness!

The MCT Virtual Summit will be the place to get updates on Microsoft technology, courseware training tips, Train the Trainer and Instructor Development sessions. These sessions are going to be presented by Microsoft Evangelists and Expert MCTs. Participating in the Virtual Summit is a key opportunity to share information with MCT Colleagues from around the world in our Virtual Coffee Bar.

MCTs should not miss our great content:

Microsoft technology deep dives. These deep dives will provide you with much more background, so students can enjoy your deeper knowledge in classroom sessions.
Soft skills classes. Brush up your soft skills and create powerful presentations. Present with more impact and extend your training styles.
Sessions on publishing through Microsoft Courseware Library. Get the tools and skills you need to review or to write and publish through Microsoft.

Plus some special content you won’t want to miss:

Windows 7: Train the Trainer sessions on 6291 and 292. Technology Deep dives into Windows 7 and Networking, Deployment, Security.

Microsoft Exchange 2010: What every trainer needs to know about Microsoft Exchange 2010, Train the Trainer content from Exchange Ignite and more.

Microsoft Windows Server 2008 R2: Server software is at the core of what many of us do—these are essential sessions.

Microsoft Office Communication Server 2007 R2: Train the Trainer content from OCS Ignite

Microsoft Visual Studio 10: Microsoft Visual Studio Team Systems, Microsoft Visual Studio 10 First Look.

Virtual Instructor Led Training: Tips and Tricks for Delivery in the Digital World

Live sessions will be held between June 17 and 20, 2009, depending on your time zone but that doesn’t mean that you have to wait until then to have a discussion and ask specific questions. Use the great opportunity to address your questions directly to our Microsoft contributors in the Expert Chat available from May 20th 2009.

All of the content sessions are going to be recorded so if a trainer has a conflict or wants to see multiple sessions at the same time they will be able to review any session.

You will also find a full library of On-Demand sessions recorded during the MCT Summit in January. Have a look at our speakers and find all their related sessions easily or check out the Session list and filter on Tracks you are interested in. Sessions will be streamed live within the Virtual Conference Area but you can also save all content directly to your Virtual Backpack for Download.

At the Virtual Summit you will be able to join into the conversations happening in our Virtual Coffee shop. Meet your colleagues in the discussion room of your choice. There are 4 discussion rooms available the MCT.Cafe, The Window Bar, Code Central and the Data Underground.

Call To Action:
Register Now at www.MCTSummit2009.com

Price $35.00 USD

Contact us at MCTEvent@microsoft.com

Current Confirmed Sessions:

Train the Trainer 6291 Your Technology Skills from Microsoft Windows XP to Windows 7

Train the Trainer 6292 Windows 7 Configuring, Technology Specialist Course

Technical Deep Dive Microsoft Windows 7 and Networking

Technical Deep Dive Microsoft Windows 7 Security and Control

Technical Deep Dive Microsoft Windows 7 Deployment and Application Compatibility

Train the Trainer 6419 Configuring, Managing & Maintaining Microsoft Windows Server 2008

Introduction to Microsoft Office Communication Server 2007 R2

Technical Deep Dive Microsoft Office Communication Server 2007 R2 Remote Access

Technical Deep Dive Microsoft Office Communication Server 2007 R2 Voice Scenarios

Introduction to Microsoft Exchange 2010

Train the Trainer on Upgrading to Microsoft Exchange 2010 with David Elfassy

Technical Deep Dive on High Availability in Microsoft Exchange Server 2010

Soft Skills Presentation on Virtual Instructor Led Training Overview

Soft Skills presentation Virtual Labs On Line Overview

Soft Skills Presentation on Digital MOC

Introducing Visual Studio Team System and Team Foundation Server 2010 for MCTs

First look at Visual Studio 2010

Sneak Preview of Microsoft Office 14

How to prepare for the Microsoft Office MCAS Certification exams

More sessions being added every day make sure you check www.MCTSummit 2009.com for updates.

TechNet Conference Virtual Event 19th June 2009

 

IT Pro virtual event_banner_911x170

Hi ,

I think this is definitely worth a mention. I know that many of your are experiencing very restricted travel limitations due to the current Economic Climate.

Well to help you maintain and grow your skills we are running a Virtual Technet Conference.

Some of the highlights are as follows;

The Technology sessions, selected by the readers of the UK TechNet Flash, feature key products including:

Windows 7 – Deployment and Management

Windows Server 2008 R2 - 10 things to make life easier for IT Pros

An overview of Office Communications Server R2 and voice capabilities

The trials and tribulations of SharePoint implementation

   
There is also exclusive Keynote featuring Mark Russinovich, Microsoft Technical Fellow specialising in the Windows platform. If you have not had the opportunity to hear him present previously I would thoroughly recommend it.

So see below for all the information you need to sign up.

Event title: TechNet Virtual Conference 2009

Date: June 19th 2009

Overview: TechNet Conference Goes Virtual

The very first TechNet Virtual Conference will be going live on June 19th 2009. It features a dedicated IT Management auditorium, including sessions on How IT will change over the next 10 years and Growing Business and Managing Costs, as well as sessions on Windows 7 and other Microsoft technologies and product overviews from the experts.

Date: June 19th 2009

How to Register: For the full agenda and to register visit www.microsoft.com/uk/technet/govirtual)

Competition – Enter the free prize draw to win one of 500 goody bags, which is a snazzy laptop bag with some great event swag, terms and conditions apply.

New Planning for Active Directory Forest Recovery Guide for Active Directory 2008 Now available for Download !

Hi Everyone,

Hot of the press is the new Active Directory Disaster Recovery Guide which has been updated to reflect new features and functionality you can leverage with 2008.

Download it from Here 

In particular it talks about;

1. Read Only Domain Controllers considerations for rebuild and recovery

2. Using Wbadmin

3.  Global Catalog recovery considerations

4. Excellent Reference and  FAQ section

This is a very welcome addition to our portfolio of white papers and technical documents in this arena. If you are in the U.K. you can hear a more detailed discussion around this topic area by Richard Diver who is presenting with myself at the next ADUG user group on June 15th.

http://blogs.technet.com/janelewis/archive/2009/05/06/upcoming-event-adug-active-directory-user-group.aspx)

Have a super Weekend, and if you are in the U.K. enjoy the Bank Holiday and lets hope it does not rain too much :).

Microsoft Security Advisory 971492 this may help

Hi Everyone,

If you have received this Security Alert 971492 and you wish to verify whether your IIS 6.0 Web Servers have the Webdav Extension enabled, then please see below for a useful script which you can run across your environment. Please of course test this in a pre-production environment prior to deployment in your live production environment.

cscript adsutil.vbs get w3svc/WebSvcExtRestrictionList –s:ServerName

"0,<windir>\system32\inetsrv\httpext.dll,0,WEBDAV,WebDAV" means webdav is disabled,

"1,<windir>\system32\inetsrv\httpext.dll,0,WEBDAV,WebDAV" means webdav is enabled

Some more Windows 7 Learning Resources

Hello,

Microsoft Learning has made available some great Windows 7 Learning resources.

See below for some more information. The great thing is that they are packaged up to suit different types of Audiences. So get ahead of the wave in Windows 7 and Enjoy !

These Clinics are geared towards three different audiences, and focus on introducing new features and functionality to those interested in simply learning more about the OS or those that are already considering deploying in the near future. 

What’s New in Windows 7 for Consumers (1 Hour)

What’s New in Windows 7 for IT Professionals (2 Hours)

What’s New in Windows 7 for Information Workers (2 Hours)

Windows 7 Learning Portal is now live as well! This site is currently showcasing great readiness content, including 7 Silverlight Learning Snacks, free sample chapters from upcoming MS Press Books, Learning Plans, links to clinics/HOLs and more. This page can be found here - http://www.microsoft.com/learning/windows-7/default.mspx

Schema - What is the Best Practise for Updating ?

This has been a question that has come up with several of my customers recently. Therefore I thought this would be a good topic to discuss. Modifying the Schema is something that is a necessary action prior to carrying out installation of Directory Enabled Applications whether they are Microsoft or 3rd Party. Plus of course if you are looking to Migrate from 2000, 2003 to 2008 you will need to firstly undertake a Schema Updates. Each Schema update whether it is big all small should have a consistent approach in dealing with it. This is because of the potential impact it has on your Active Directory if it goes wrong. Therefore great attention to detail should be applied to both process and procedure.

Check List for Good Practise for Schema Updates Process and Application.

Process and Procedure

Create a highly Structured Process to Schema Updates this involves;

  1. Validation and Justification of the Update – Remember this is a one time procedure affecting the entire Forest.
  2. What type of change is this (Update, Modification,Depreciation)
  3. What is the Risk ?
  4. Ensure if this is a customized update that you obtain a valid of .LDIF files to analyze with complete documentation
  5. Have complete explanation of the update written and approved
  6. Have a list of Roles and responsibilities for the Schema Update
  7. Is this schema update an update that is really required ?
  8. Is this the only way to effect your change ?
  9. Check whether base schema already has attributes or objects in it.
  10. Staging of Schema Changes (Pre-Production Forest to Production Forest). to test this out to ensure there are no problems thoroughly first.

One approach of sever that has worked for myself and colleagues with customers is as follows;

Suggested Schema Update Physical Process

1. Add new DC

2. Allow to replicate

3. Transfer Schema role to new DC

4. Allow to replicate

5. Check its replicated and the fact that this DC holds this role has replicated throughout the Forest

6. Make sure you have a verified backup of at least one Domain Controller per Domain in the Forest prior to the Schema Update.

7. Isolate the new DC (remove network cable) and to ensure it is not replicating due to accidential re-insertion of the cable

 Repadmin /options <dcname> <+/-> <DISABLE_INBOUND_REPL/DISABLE_OUTBOUND_REPL

8. Update schema

9. If the Schema update is verified as being OK allow to replicate by reversing the Steps in step 7.

10. Transfer role to old DC and remove new Domain Controller


11. if not OK , destroy DC and remove it from config and DNS (metadata cleanup)

There are other approaches. For example by doing the schema update on the Server that holds the role and not introducing a New Domain Controller into the Forest for just this action. Both ways I have worked with successfully.

The key to the success of a Schema Update is to ensure you THOROUGHLY test it prior to deployment in a pre-production environment. Plus also ensure the update is well written and checked prior to deployment on the Domain Controllers.

I recommend watching the WebCast on this subject see below for link. Also the picture below is a screenshot from the verification process MSIT go through prior to applying a Schema Update to our Live Environment.

FLowControl

Some Excellent References for this are;

http://msevents.microsoft.com/cui/WebCastEventDetails.aspx?culture=en-US&EventID=1032381512&CountryCode=US

How Microsoft does IT: Structured Active Directory Schema Management at Microsoft

http://technet.microsoft.com/en-us/library/bb687810.aspx

 http://blogs.technet.com/btrst4/archive/2004/10/13/242064.aspx

ISTG what happens when it Fails ?

I had an interesting investigation the other day with a customer of mine with reference to the role and failover of the ISTG role.

In the customers scenario they switch off the ISTG and several other servers in a very busy site to simulate a outage scenario. This site is a main hub site in a very large enterprise environment Forest and has in excess of 200 sites hanging off it. Many of these sites are empty many have just 1 or 2 Domain Controllers in there.

So what should happen ?

When a Server that holds the ISTG is unavailable for a period of time then there is an inbuilt automated process which the Servers within the site go through to re-allocate this role to another server. The checking for the existence of a ISTG will effectively happen every 15 minutes as part of the KCC process.

So in the example I am about to make up with have 10 Domain Controllers in one site all servicing the Same Domain.

DC1, DC2, DC3, DC4, DC5 DC6 DC7 DC8 DC9 DC10  - All are Windows 2003 SP1 and we are running at 2003 FFL (Forest Functional Level)

DC1 is the ISTG

DC3 is the Bridgehead server to a second Site

For failover test we isolate the network which means that

DC1 , DC3 , DC5 DC6 DC 9 are all isolated.

DC2 and DC4, DC5 and DC7 and DC10 are still on the live network and can see the second site (network wise), however we now have no correct replication links and the ISTG is also unavailable due to it being part of the group that have been isolated

So what is the process by which the ISTG is reallocated and how long should it take ?

1. Generate a list of all domain controllers in the same site, in ascending order based on GUID, and by evaluating the msDS-Behavior-Version attribute on the NTDS Settings object of each DC, determine which ones have a version number greater than or equal to .NET Interim Forest Mode

2. With this list it determines which election algorithm to use by evaluating if we are 2003 or 2000.. in the example above I am using we are all W2003 so it uses this alogrithm to ascertain  we are at the correct Forest Level.

3. Another parameter will read the interSiteTopologyGenerator - this will give a result of in this example of  DC1 which is no longer available as it has been isolated.

4. Another parameter will determine if the DC (DC1)  is in the list of valid DCs from the previous step 1. In this case and in my example it is .

  The last synchronisation time is checked and compared to the following parameter,

interSiteTopologyFailover

CN=NTDS Site Settings,CN=SITENAME,CN=Sites,CN=Configuration

Default -> “not set” = 120min (W2003)

Eventually the 120mins period will fail and then :

5. We need to change the ISTG as too much time has past since the last successful synchronisation and we need to change to a new one.  (If the ISTG could not be determined from the NTDS Site Settings object, start at the beginning of the DC list created earlier in step 1. If the ISTG could be determined but was deemed invalid, start at that DCs position in the list. From either position, for each interval that has passed, skip one domain controller in the list. ). 

6.  The new ISTG is set ?

Where we have a potential weakness is the last statement in step 5

“If the ISTG could be determined but was deemed invalid, start at that DCs position in the list. From either position, for each interval that has passed, skip one domain controller in the list. ).”

The algorithm works fine with a maximum failover if left to the defaults of 2 hours (120 mins) to the next Domain Controller in the Guid List. However if there are several Domain Controllers switched off and they are sequenced in the GUID list created in Step 1 then the transfer of the ISTG role could potentially take a longer amount of time.

One approach would be  to reduce this time to lower the value from its 120 mins default.

interSiteTopologyFailover

CN=NTDS Site Settings,CN=SITENAME,CN=Sites,CN=Configuration

Default -> “not set” = 120min (W2003)

Also considering that the remaining Domain Controllers will be very busy recreating KCC connection objects plus also because of the consequence of that re-creation carrying out VVJOINS, it would be worth investigating the use of the following ;

Redundant connection mode or Branch Office Mode in Active Directory (AD)?

Normally, only one replication object is created per namespace between sites, which achieves the most efficient replication. In situations in which branch offices all connect to a hub location, if a domain controller (DC) at the hub goes down, all the remote locations must recalculate replication objects. This results in a huge amount of changes, which when the DC is back, won't fail back.

This mode requires two steps: Step one is to enable the redundant connection mode to have two connection objects to the hub location; the second step is to disable detection of failed connection objects because you're assuming a failed DC will be coming back so no need to modify the connection objects. You need to run the commands on all remote locations that will require the redundant connections.

C:\>repadmin /siteoptions /site:London +IS_REDUNDANT_SERVER_TOPOLOGY_ENABLED

Branch10

Current Site Options: (none)

New Site Options: IS_REDUNDANT_SERVER_TOPOLOGY_ENABLED

C:\>repadmin /siteoptions /site:London +IS_TOPL_DETECT_STALE_DISABLED

Branch10

Current Site Options: IS_REDUNDANT_SERVER_TOPOLOGY_ENABLED

New Site Options: IS_TOPL_DETECT_STALE_DISABLED IS_REDUNDANT_SERVER_TOPOLOGY_ENABLED

Information on KCC Branch Office Mode

KCC Branch Office mode was created to provide an easily managed redundant
topology for branch office deployments . This mode reduces VV join load on FRS by maintaining a relatively static topology between hub and branch DC's. KCC Branch Office mode can be enabled on a per site basis after the Forest Functional Level has been raised to Windows Server 2003.Under this mode the KCC will build 2 redundant connections between a DC in a branch-site and 2 DCs in the hub site. KCC Branch Office connections are created on preferred bridgeheads if defined, otherwise a random dc will be selected.
Also, when these connections are made they are given staggered schedules. Once KCC creates these connections it treats them as though they were created manually and disables KCC failover as long as the metadata for the preferred Bridgehead or randomly selected server remains in AD. Gracefully demoting a DC using DCPROMO or removing its metadata with NTDSUTIL "remove selected server" will cause KCC to re-evaluate its redundancy requirements. A new DC will be considered in the redundant topology when promoted into the forest.

Upcoming Event @ ADUG (Active Directory User Group )

Hi myself and a colleague Richard Diver will be talking at the upcoming ADUG as run  Mark Parris on the 15th of June @6.15pm. http://adug.eventbrite.com/.

This will be held at our London Office

Microsoft (London)
Cardinal Place
100 Victoria Street
London, London, City Of SW1E 5JL
United Kingdom

We will be talking around the following subject areas.

Richard Diver - and Jane Lewis from Microsoft present Windows Server 2008 Forest Recovery and Advanced Group Policy Management 3.0.

Richard presents the forthcoming white paper from Microsoft on Windows Server 2008 Forest Recovery.

Jane presents "MDOP: Managing GPOs with Advanced Group Policy Management 3.0"

"In this session we will look at the AGPM version 3.0 and investigate and discuss some of its key features and how it can help customers manage and control and secure their Group Policy environment and lifecycle now and moving forward"

 

So I look foward to seeing you in person.

Windows 7 Release Candidate Resources

Hi,

windows_7.jpg

With the release of Windows 7 Release Candidate the back end of last week. Please find below a list of invaluable resources that Technet has made available.

Download Windows 7 Release Candidate now

The Windows 7 Release Candidate (RC) is now available to download for everyone, and is available until June 2009 to download.

Download the RC

So what’s new in the RC?  Check out this video explaining some of the enhancements introduced since the Beta release.

If you are considering deploying Windows 7 in an enterprise, try downloading Windows Server 2008 R2 to test out the ‘better together’ features such as Branch Cache.

Support for the RC is via the Windows 7 TechNet forums: Have questions? Need answers? Visit our Windows 7 Forums.

Important note to Windows 7 Beta users: The Windows 7 Beta will expire on August 1, 2009 so you must rebuild your PC with either Windows 7 Release Candidate (RC) or another valid version of Windows before July 1, 2009. You will receive a warning two weeks prior to July 1; after this date, your PC will reboot every two hours.

New resources for IT pros:

With the release of the Windows 7 there are also some new resources on the Windows 7 TechCentre. As well as the resources to guide you through your exploration of Windows 7, there is also now support on Piloting and Deploying Windows 7 and Managing Windows 7.

The new site  contains helpful information including:

Demonstration: Migrating from Windows XP to Windows 7

How to Start a Windows 7 Pilot Deployment

Windows 7 Manageability Overview

TalkingAboutWindows.com—where IT pros can hear the “back stories” from the leading engineers for Windows 7, discussing how and why they made the critical decisions and tradeoffs they did; along with videos of IT pros discussing Windows 7 in their environment

 

Hope you find the above useful and enjoy

More Posts Next page »
Page view tracker