Documenting Active Directory Infrastructure the Easy Way

Hi, Ned here. From time to time customers ask us what their options are to document their Active Directory environments – site topologies, domains and trusts, where group policies are linked and what their settings are. Until recently we didn’t have an easy way to do this and they were forced to invest a lot… Read more

Top 10 Common Causes of Slow Replication with DFSR

Hi, Ned again. Today I’d like to talk about troubleshooting DFS Replication (i.e. the DFSR service included with Windows Server 2003 R2, not to be confused with the File Replication Service). Specifically, I’ll cover the most common causes of slow replication and what you can do about them. Update: Make sure you also read this… Read more

Not enough storage is available to complete this operation

Wait, don’t leave!!!  We get a lot of hits thanks to Live and Google searches sending people our way when they search on this error. We highly recommend you follow this link to find all the various causes of this error (it uses the option to narrow your results and the exact error verbiage) :… Read more

Where’s my file? Root cause analysis of FRS and DFSR data deletion

Hi, Ned here. In the Directory Services support space here at Microsoft, we are often contacted by customers for disaster recovery scenarios. We’re also brought in for deeper forensic analysis of what lead to a problem. Today we’re going to talk about a situation that covers both: A customer has seen some critical data go… Read more

Dynamic Ports in Windows Server 2008 and Windows Vista (or: How I learned to stop worrying and love the IANA)

Hi, Dave here. I’m a Support Escalation Engineer in Directory Services out of Charlotte, NC. Recently one of our consultants in the field deployed a Windows Server 2008 Beta 3 domain controller at a branch office to test management scenarios.  After doing this, they discovered that the server was not replicating with domain controllers at… Read more

Troubleshooting High LSASS CPU Utilization on a Domain Controller (Part 2 of 2)-

Last time I discussed troubleshooting the most common high CPU scenario within LSASS, which is the server being beaten up by a remote machine. Let’s talk now about the much less common but still possible: You find that the problem is coming from the DC itself. As I said in the previous post, this is… Read more

Troubleshooting High LSASS CPU Utilization on a Domain Controller (Part 1 of 2)

Hi, Ned here. Today I’m going to talk about troubleshooting Domain Controllers that are responding poorly due to high LSASS CPU utilization. I’ve split this article into two parts because there are actually two major forks that happen in this scenario: · You find that the problem is coming from the network and affecting the… Read more

Deploying Custom Registry Changes through Group Policy

Hi, Ned here. I’m a Technical Lead in Directory Services out of Charlotte, NC. Today I’m going to talk a little bit about a common customer question: how do I leverage group policy to deploy custom registry settings? I’ll be showing two ways to do this… the easier versus the harder. Why would you ever… Read more

Terminal Server Licensing Explained…

I am going to start off the technical topics with a fairly light yet very confusing topic- once it’s explained though it’s very simple. Terminal Server Licensing is probably among the easiest for us to troubleshoot, however, there are so many different scenarios it gets confusing FAST! The story on Terminal Server Licensing changes dramatically… Read more

Welcome to the Directory Service Team blog- Why are we here anyway!

Welcome to the Enterprise Platform Support Directory Services Team blog.<?xml:namespace prefix = o ns = “urn:schemas-microsoft-com:office:office” /> We are a team of folks who support Active Directory for Microsoft.  As our name implies, we support Active Directory and its associated components – Group Policies, Certificate Services, DFS and Kerberos, to name but a few –… Read more