Are your DCs too busy to be monitored?: AD Data Collector Set solutions for long report compile times or report data deletion

Hi all, Herbert Mauerer here. In this post we’re back to talk about the built-in AD Diagnostics Data collector set available for Active Directory Performance (ADPERF) issues and how to ensure a useful report is generated when your DCs are under heavy load. Why are my domain controllers so busy you ask? Consider this: Active Directory stands in the… Read more

Understanding ATQ performance counters, yet another twist in the world of TLAs

Hello again, this is guest author Herbert from Germany. If you worked an Active Directory performance issue, you might have noticed a number of AD Performance counters for NTDS and “Directory Services” objects including some ATQ related counters. In this post, I provide a brief overview of ATQ performance counters, how to use them and… Read more

Interesting findings on SETSPN -x -f

Hello folks, this is Herbert from the Directory Services support team in Europe! Kerberos is becoming increasingly mandatory for really cool features such as Protocol Transition.  Moreover, as you might be painfully aware, managing Service Principal Names (SPN’s) for the use of Kerberos by applications can be daunting at times. In this blog, we will not… Read more

Is this horse dead yet: NTLM Bottlenecks and the RPC runtime

Hello again, this is guest author Herbert from Germany. It’s harder to let go of old components and protocols than dropping old habits. But, I’m falling back to an old habit myself…there goes the New Year resolution. Quite recently we were faced with a new aspect of an old story. We hoped this problem would… Read more

AskDS is 12,614,400,000,000,000 shakes old

It’s been four years and 591 posts since AskDS reached critical mass. You’d hope our party would look like this:  But it’s more likely to be: Without you, we’d be another of those sites that glow red hot, go supernova, then collapse into a white dwarf. We really appreciate your comments, questions, and occasional attaboys…. Read more

Best practices around Active Directory Authoritative Restores in Windows Server 2003 and 2008

It’s your guest writer Herbert Mauerer again. A very common AD disaster is an unexpected deletion or modification of objects. Unlike a bad football match or family meeting, you can prepare for that and make the crisis more bearable. In this blog, I will discuss best practices of Windows Server 2003 and 2008 forest level… Read more

How do I find out what changes are going on in my Active Directory?

Herbert here. Here are some common questions asked by AD Administrators: – Why has my AD database size increased by 500MB in the last three weeks? – I see lots of AD replication in Domain Controller monitoring. What are all these changes? Both symptoms can be severe enough to impair the operations of your AD… Read more