Authentication mechanism assurance in Windows Server 2008 R2

I’ve seen several posts on the new “authentication assurance” feature coming in Windows Server 2008 R2. The term we decided to go with is authentication mechanism assurance because it is actually the authentication mechanism that is assured. Authentication mechanism assurance uses certificate policies that are mapped to security groups. The certificates that are issued from the policy grant…

1

When Internet Explorer is working slowly

I know this one isn’t about Active Directory, but every now and again, I feel the need to share something outside the little world of Active Directory. For example, a few days ago I received an update for a non-Microsoft program that is an add-on to Internet Explorer. Immediately, I noticed that it took a…

1

How to start in Directory Service Restore Mode (DSRM) in Windows Server 2008 and Windows Server 2008 R2

Here are two methods to enter Directory Services Restore Mode (DSRM) in Windows Server 2008 or Windows Server 2008 R2: From the Desktop use the graphical user interface (GUI) Msconfig tool. Click Start. In Start Search, type msconfig and then click OK. On the Boot tab, select Safe Boot, and then click Active Directory repair. (see attached figure) From a…

5

Check out the maximum limits of Active Directory

Did you know that there are certain pre-defined limits of Active Directory? For example, there is a maximum on the number of objects (users, groups, computers, organizational units, group policies, etc.) that can exist in Active Directory; specifically, not more than 2.15 billion objects can exist in the directory and only about 1 billion security principles…

1