May 21 2015
As you probably know, when you promote the first domain controller in a forest, is granted five Operations Master or Flexible Single Master Operations (FSMO) roles, pronounced “fizz-moe”. Two of the roles are forest wide and the rest of them are domain specific, meaning if you have multiple domains, every domain will get the three domain specific …
Feb 18 2015
Just when you think everything is going well, disaster happens, and one or more of your domain controllers gets offline. This can happen due to a hard disk crash, a bad network card, file system corruption or corruption of the Active Directory database. Even if you have good backups somewhere on the shelf that’s only …
Dec 15 2014
Until server 2008 came out, every time you wanted to add domain users or groups to computers local groups you had to rely on scripts or use Group Policy Restricted Groups to make the changes. The last one worked great but it failed working when you wanted to modify those local groups on your client …
Sep 17 2014
You know that starting with Windows Server 2012 Hyper-V has a new feature that replicates VMs from one host to another for a disaster recovery scenario! I talked about it in this article; but configuring replication that way over non-trusted networks
Sep 02 2014
I don’t wanna be wrong here, but I think that one of the most common Active Directory disasters that administrators face is the accidentally deleted object(s). Even if you put a strong security in place, there comes a time when you need to delegate permissions and with that accidents happen.
Aug 06 2014
Managing certificates usually does not need to much intervention. Issuing and enrolling for certificates, again is a piece-of-cake… in a small environment. But if you are running more than let’s say 50 workstations and servers enrolling for certificates is a week job, if not more.
Jul 25 2014
We all know how important passwords are especially those for domain administrators accounts, because those accounts have rights to log in to domain controllers. If the password of one of those accounts is compromised, access to your domain controllers is granted. You know what could happen next.
Jun 19 2014
Until not long ago if you wanted to assign different passwords policies to different users, you were forced to create a new domain in the forest. Starting with Windows Server 2008, Microsoft came with fine-grained password policies (FGPPs) a functionality that will let you have different passwords policies in a single domain.
Oct 27 2013
Starting with Windows 2008 Microsoft has an Online Certification Status Protocol (OCSP) Responder feature. Many of you wonder what this is, and I’m going to explain this the best I can. Until OCSP came out, those companies that have their own Certification Authority had to publish to a web server or a LDAP path the …
Aug 18 2013
This is happening people ! Domain controllers need backups, like any other server in your infrastructure, even if they replicate with one another. Backing them up is an easy job, but you need to know what kind of backups you need to perform. I know you just want to create an image server backup of …
Recent Comments