Finding Pesky Stale DNS SRV Records

  Good day to you all – Dougga here with a simple post today using tools you know.   Stale DNS SRV records are common due to no scavenging on DNS zones and each zone has to be setup correctly to have this happen. So, I have often found the "" setup correctly, but the… Read more

Windows Server DHCP Server Migration – Two Issues from the Field

Hey folks – Hilde here with a post about some DHCP migration snafus I've bumped into recently. Many of my large, enterprise customers have DHCP servers that were deployed over a decade ago, humming along on some flavor of the Windows Server 2003 OS (WS 2003). For the most part, those DHCP services have been pretty much… Read more

Guidance on Deployment of MS15-011 and MS15-014

Hi, my name is Keith Brewer and many of you will know of me from my other Active Directory related posts. A few folks have recently approached me about the recent security updates (The other week we released MS15-011 & MS15-014). Most of the questions were general in nature but a few were specifically in… Read more

Mailbag: New Year New Questions (Issue #5)

Hey y'all, Mark and Tom and some new members to AskPFEPlat to tackle your questions in the new year. Hope everyone was able to take some time off and re-charge. How are those new year's resolutions going? Be healthier? Read more? Learn a new technology? Get certified? More on that later. By this point in… Read more

Six Audit Mistakes Everyone Seems To Make With Windows Server

Hi, this is Richard Sasser 'Rick', MCM, Red shirted dude (security guy). This might seem like old data, but you’d be surprised how many people looked at Security Auditing in Windows Server 2008 and 2008R2, saw that the old policies applied, and subsequently just checked the box and moved forward. Auditing changed. Auditing changed a… Read more

Active Directory: Mixing Server 2003 DCs and Server 2012 DCs May Result In Kerberos Authentication Errors

Hey y’all, Mark here again with a  quick announcement. Our brothers in arms at AskDS have just posted something that you need to be made aware of if you have a mix of 2003 DCs and 2012 R2 DCs in your environment. Head over for all the details and we’ll keep you updated with any… Read more

It’s The End of FRS as We Know It (And I Feel Fine)

Hey y’all, Mark here with a quick post you should check out. Friend of the blog Ned “wears the black hat” Pyle has put up a post everyone needs to read, and subscribe to their blog while you’re there it’s quite good, on FileCab Read the full post above but a good snippet to… Read more

How To Split and Migrate Child Domain DNS Records To a Dedicated DNS Zone

Hello, my name is Pierre Ricca, and I am a Premier Field Engineer focused on Active Directory and PowerShell scripting. I started working at Microsoft France as PFE in November 2010. An important part of my job consists of delivering health checks, risk assessments, and knowledge transfer around those technologies for our Premier customers in… Read more

Comparing Hotfixes across Multiple Node Failover Clusters

Rick Bergman here with a post on gathering hotfixes from multiple node failover clusters ranging in OS version from Windows Server 2003 to Windows Server 2012. Recently, I reviewed a number of failover clusters for my customer and it was identified that they were struggling with keep the hotfixes the same across all the nodes… Read more

How a DFS Namespace change ruined my morning…

Hello! Jake Mowrer here to share an “experience” with you all that will hopefully help you avoid running into a nightmare the next time you add a DFS Namespace (DFS-N) server. I find that DFS-N in customer environments works well, so well that they require very little maintenance. This tends to lead to admins not… Read more