Welcome to BrianDesmond.com Sign in | Join

Browse by Tags

All Tags » Active Directory   (RSS)
Thought I'd post an informational post for folks who are moving an AD forest to Windows 2003 forest functional level (aka FFL2) as I realized today this piece of information might not be quite as well known as I might have thought. As an FYI, this change Read More...
I'm heading downtown in a bit for DEC 2008 and will be around all week. Please do say stop by and say hello and join in the conversations if you're there! If you're looking for suggestions on local things I can try and help since I'm from Chicago too. Read More...
There are a few things that you really have to consider when you're setting up your site links – the naming convention, cost relative to the underlying WAN transport, frequency of replication, and schedule (that is when replication can even occur). Naming Read More...
I thought I'd share the script attached at the end of this post as it's something I've seen requests for below. The script will take all of the users in a given OU (or really any subtree), and create a home folder for them and stamp the path and drive Read More...
A comment I received on a previous post on sites and subnets in Active Directory was "what benefit(s) does a dedicated Exchange site provide?". There's a couple things to consider here with the advent of Exchange 2007. The first is the great degree of Read More...
One of the common misunderstandings I see working with organizations and their Active Directory deployments is with regard to subnet definitions in Active Directory. This discussion came up recently on the ActiveDir.org mailing list so I thought I would Read More...
Out of the box, the Windows 2003 Adminpak tools do not run on Windows Vista. When they are loaded, MMC claims that "MMC could not create the snap-in.". This is due to some DLLs not being registered properly. To fix this, paste the following Read More...
A few months ago I posted an article with steps to configure Windows IAS and Cisco IOS for authentication to Active Directory via RADIUS. I wanted to follow up on that with a quick overview of how to setup a PIX for management access authentication via Read More...
Another one from the questions I answer all the time on the newsgroups – what do I do when a domain controller is permanently failed and needs to be removed from Active Directory? The first thing to do is to make sure the DC is really gone – wipe it. Read More...
A frequent question on the newsgroups is how do I know what domain controller logged me in? To find this out, open a command prompt and type " set logonserver ". echo %logonserver% has the same functionality. This is an environment variable Read More...
I answer this question a lot on the newsgroups - "How do I delegate enabling and disabling Active Directory accounts?". The long and short of it is you can't. More precisely you can't without delegating access to set a whole bunch of Read More...
A useful tip I've found people tend not to know about is that the Active Directory GUI tools (AD Users and Computers, Sites and Services, etc) are installed on every Windows 2000 and 2003 server regardless of whether or not the server is a domain Read More...
After a couple hours of customization, I activated a new theme for the BrianDesmond.com site. The old look was the same theme I had when I started a blog on weblogs.asp.net in 2003. I felt like it was kind of depressing to look at the old colors - there Read More...
This is an updated version of an article I wrote in March 2003 for ASPAlliance. I corrected some minor errors and updated the code samples a bit. C# and VB.Net samples are both attached at the bottom of the page. Introduction The Windows authentication Read More...
One of the things I’ve been spending a portion of my time focusing on for the past ten months is the networking side of the house, and more specifically Cisco. I’ve had the pleasure of working with a client who is a Microsoft shop to the max. Read More...