Comment issues, continued

Hey all. If you have a moment, please try and post a comment on this post. Especially non-Microsoft employees. We’re still trying to see why comments stopped working. Update Nov 2: Well, it seems to be working now. 🙂 Thanks for all the help folks, it’s much appreciated. Comment away, we’ll see ’em now. Thanks,… Read more

Troubleshooting failed password changes after installing MS16-101

Hi! Linda Taylor here, Senior Escalation Engineer in the Directory Services space. I have spent the last month working with customers worldwide who experienced password change failures after installing the updates under Ms16-101 security bulletin KB’s (listed below), as well as working with the product group in getting those addressed and documented in the public… Read more

Where’s my file? Root cause analysis of FRS and DFSR data deletion

Hi, Ned here. In the Directory Services support space here at Microsoft, we are often contacted by customers for disaster recovery scenarios. We’re also brought in for deeper forensic analysis of what lead to a problem. Today we’re going to talk about a situation that covers both: A customer has seen some critical data go… Read more

RSAT Release Candidate for Windows 7… ehh… Release Candidate

Ned here again. The Remote Server Administration Tools (RSAT) have been released for Win7 RC. Grab them from: Here are the installation requirements: Supported Operating Systems: Windows 7Remote Server Administration Tools for Windows 7 RC can be installed on computers that are running the Professional, Enterprise, or Ultimate editions of Windows 7 RC. Remote… Read more

ADMT 3.2 released

Come and get it. Especially you commenters that liked to swear at me anonymously :-). Besides now supporting Windows Server 2008 R2 and fixing some bugs, this version now supports Managed Service Accounts. Active Directory Migration Tool version 3.2 – download here.ADMT 3.2 Migration Guide (DOC) – download here System Requirements Supported Operating Systems: Windows Server… Read more

How to NOT Use Win32_Product in Group Policy Filtering

Hi all, Ned here again. I have worked many slow boot and slow logon cases over my career. The Directory Services support team here at Microsoft owns a sizable portion of those operations – user credentials, user profiles, logon and startup scripts, and of course, group policy processing. If I had to pick the initial… Read more

Using Group Policy Preferences to Map Drives Based on Group Membership

Hello AskDS Blog Readers, Mike here again! A common request we hear is how to automatically connect specific network shares to drive letters based on group membership. Mapping network drives based on group membership requires some programming knowledge– either VBScript or command shell (batch files). VBScript based logon scripts can require hundreds of lines of… Read more

Tuning replication performance in DFSR (especially on Win2008 R2)

Hi all, Ned here again. There are a number of ways that DFSR can be tuned for better performance. This article will go through these configurations and explain the caveats. Even if you cannot deploy Windows Server 2008 R2 – for the absolute best performance – you can at least remove common bottlenecks from your… Read more

We’re back. Did you miss us?

Hey all, David here.  Now that we’ve broken the silence, we here on the DS team felt that we owed you, dear readers, an explanation of some sort.  Plus, we wanted to talk about the blog itself, some changes happening for us, and what you should hopefully be able to expect moving forward.   So, what… Read more

Microsoft’s Support Statement Around Replicated User Profile Data

[Note from Ned: this article was created and vetted by the Microsoft development teams for DFS Replication, DFS Namespaces, Offline Files, Folder Redirection, Roaming User Profiles, and Home Folders. Due to some TechNet publishing timelines, it was decided to post here in the interim. This article will become part of the regular TechNet documentation tree… Read more