• What to do with FSMO roles...

    We recently hired a new engineer to a team which manages some of the internal MS environments... We were discussing FSMO role placement and he sent me mail (snippet below slightly edited) which I thought was interesting... The reason why we separated...
  • Comment on ADFS Liability

    My favorite Calgary-ian Pam left the following comment on my last blog post: Hm. In a perfect world, there would need to be a contractual component to any and all technical federations, and those contractual components should go through review by...
  • AD and DC Builds, tweaks, configurations... (1)

    I received a mail from a blog reader (Jim) who asked: "Can you provide any insight regarding and tweaks or configuration settings you guys use on your DC builds?" Sure, I'm happy to do this, so here I am typing happily along, and realized that...
  • AD and DC Builds, tweaks, configurations... The Registry

    The first installment, what our hardware looks like, may have been useful...but I know that's not really the juicy gossip that everyone is looking for...so here's a quick and follow-up with the registry tweaks that we set internally... Strict Replication...
  • x64 Domain Controllers

    Had an e-mail thread with Joe recently, which also resulted in this blog entry . He's a consultant for another big tech company, and was working with a customer that was migrating a lot of non-domain joined machines to AD as well as deploying other AD...