Azure template to deploy a forest with two domains, part 1 — using the template

This is Part 1 in a series. This is the whole series: Part 1: using the template Part 2: Understanding the template structure Part 3: visualizing the template This blog has been a while in the making. For various reasons I needed a simple way to quickly create a test forest in Azure with two domains, and…

1

Why you can still have duplicate SPNs in AD 2012 R2 and AD 2016

As an AD admin you are probably familiar with the problem of duplicate Service Principal Name (SPN) attributes. Need a refresher on Kerberos and SPN? Read the famous blogpost over at askds: Kerberos for the busy admin. If you have these duplicates, Kerberos fails for the affected accounts. It always fails so there is no…

1

Uniqueness requirements for attributes and objects in Active Directory

If you are involved in writing or using provisioning code for Active Directory you will be aware of uniqueness problems. What do you do with an account for John Smith if he is the tenth of his name? It helps to know about the conditions that Active Directory imposes on you when you create or modify…

0