Important Announcement: AD FS 2.0 and MS13-066

Update (8/19/13): We have republished MS13-066 with a corrected version of the hotfixes that contributed to this problem.  If you had held off on installing the update, it should be safe to install on all of your ADFS servers now.   The updated security bulletin is here:   Thanks everyone for your patience with… Read more

Intermittent Mail Sack: Must Remember to Write 2013 Edition

Hi all, Jonathan here again with the latest edition of the Intermittent Mail Sack. We’ve had some great questions over the last few weeks so I’ve got a lot of material to cover. This sack, we answer questions on: Issues upgrading DFSR hub servers to Windows Server 2012 AD FS Sign-out behavior Dynamic Access Control… Read more

AskDS is 12,614,400,000,000,000 shakes old

It’s been four years and 591 posts since AskDS reached critical mass. You’d hope our party would look like this:  But it’s more likely to be: Without you, we’d be another of those sites that glow red hot, go supernova, then collapse into a white dwarf. We really appreciate your comments, questions, and occasional attaboys…. Read more

ADFS 2.0 Content Map now up on TechNet Wiki

Adam and co. have been busy beavers, creating a comprehensive AD Federation Services 2.0 content map over on the TechNet Wiki site. Being as this is a Wiki, they are encouraging you to contribute and edit. Considering the number of interop and customization scenarios inherent to ADFS, your experience can have a big impact on… Read more

New ADFS Content on TechNet Wiki (11/16/2010)

Hello everyone! Adam has published a new round of content for Active Directory Federation Services (ADFS) to the TechNet Wiki. These articles include troubleshooting information and how-tos to assist you when you are evaluating, implementing, or troubleshooting ADFS. AD FS 2.0 – How to change the Federation Service Name  AD FS 2.0 – How to… Read more

New ADFS Content on TechNet Wiki

Adam Conkle has published some great troubleshooting, tips and tricks and how to articles on TechNet that should help you in evaluating and implementing Active Directory Federation Services. AD FS – How to invoke a WS-Federation sign-out AD FS 2.0 – “An unexpected error has occurred” error or blank page displayed attempting to log on… Read more

ADFS – Federated WebSSO with Forest Trust Scenario and its Limitations

Hi, it’s Adam Conkle again. Today I’d like to talk about an ADFS case I had recently where the customer ran into some limitations with their Federated WebSSO with Forest Trust setup. They had their environment set up similar to what is described in the TechNet design article: As you can see, they implemented a… Read more

How to Properly Disable Offline Files in Windows Vista

Hi, it’s Adam Conkle again from the Directory Services team. Today’s posting covers how to correctly disable Offline Files in Windows Vista. I recently had a case where the customer was experiencing undesirable behavior with a file share only when the file server was accessed from their Windows Vista machines. The symptoms were: 1. Files… Read more

Are you backing up ADAM?

Hi, it’s Adam Conkle from the Microsoft Directory Services team. I recently encountered a disaster recovery situation with an ADAM instance where objects were accidentally deleted, and the customer required help performing the restore of those objects from backup. We ran into a major problem that I feel many administrators may be overlooking, so I… Read more