Monthly Mail Sack: Yes, I Finally Admit It Edition

Heya folks, Ned here again. Rather than continue the lie that this series comes out every Friday like it once did, I am taking the corporate approach and rebranding the mail sack. Maybe we’ll have the occasional Collector’s Edition versions. This week month, I answer your questions on: The semi-myth of Kerberos time skew Finding… Read more

New Slow Logon, Slow Boot Troubleshooting Content

Hi all, Ned here again. We get emailed here all the time about issues involving delays in user logons. Often enough that, a few years back, Bob wrote a multi-part article on the subject. Taking it to the next level, some of my esteemed colleagues have created a multi-part TechNet Wiki series on understanding, analyzing,… Read more

How to NOT Use Win32_Product in Group Policy Filtering

Hi all, Ned here again. I have worked many slow boot and slow logon cases over my career. The Directory Services support team here at Microsoft owns a sizable portion of those operations – user credentials, user profiles, logon and startup scripts, and of course, group policy processing. If I had to pick the initial… Read more

Saturday Mail Sack: Because it turns out, Friday night was alright for fighting edition

Hello all, Ned here again with our first mail sack in a couple months. I have enough content built up here that I actually created multiple posts, which means I can personally guarantee there will be another one next week. Unless there isn’t! Today we answer your questions around: Detecting virtual machines with WMI Filters… Read more

Friday Mail Sack: Get Off My Lawn Edition

Hi folks, Ned here again. I know this is supposed to be the Friday Mail Sack but things got a little hectic and… ah heck, it doesn’t need explaining, you’re in IT. This week – with help from the ever-crotchety Jonathan Stephens – we talk about: Multiple WMI Filters LDAP MaxPoolThreads Many-to-one certificate mappings LinkID… Read more

Friday Mail Sack: It’s a Dog’s Life Edition

Hi folks, Ned here again with some possibly interesting, occasionally entertaining, and always unsolicited Friday mail sack. This week we talk some: DNS partition absence Controlling DCDIAG event messaging Inventorying SYSVOL replication architecture Weird WMI DFSR volume paths Tightening up your inactive user account queries More logon banner info Smart card logons working “too well“… Read more

Friday Mail Sack: Dang, This Year Went Fast Edition

Hi folks, Ned here again with your questions and comments. This week we talk: AD Garbage Collection behavior Applying Group Policy based on installed roles and features Apple hates .local domains More on auto site coverage from Lurch Fixing the mysteriously bad CPU performance of brand new servers DFSN and NetApp Hyper-V and AD/DFSR/FRS/etc. disk… Read more

Restrictions for Unauthenticated RPC Clients: The group policy that punches your domain in the face

Hi folks, Ned here again. Around six years ago we released Service Pack 1 for Windows Server 2003. Like Windows XP SP2, it was a security-focused update. It was the first major server update since the Trustworthy Computing initiative began so there were things like a bootstrapping firewall, Data Execution Protection, and the Security Configuration… Read more

Renaming a computer using WMIC and how to get around that aggravating “Invalid Global Switch” error

I’m guessing Ned will insert something like “Hello, Warren here again”. [Nope – Ned] The other day I was working with server core and wanted to rename my server. Recently I have been working more with WMIC to get data from the DFSR service so I thought why not try WMIC? Renaming a computer with… Read more

Configuring an Authoritative Time Server with Group Policy Using WMI Filtering

Hello everyone, Brian Singleton here. Here’s a question I often get from customer regarding Windows Time: “Is there a way I can configure the Windows Time settings via Group Policy and have it only apply to the domain controller that holds the PDC FSMO role?” This is a wonderful question to pose and there are… Read more