Malicious Software Removal Tool

As much as a bookmark blog as anything else so I know where to find it. You may have seen the malicious software removal tool come down through WindowsUpdate/MicrosoftUpdate. What I didn’t know was that a version with the latest updates is released on the second tuesday of every month, and can be run from…

2

Understanding Active Directory in the Real World

For those of you who are available on Monday (27th June), this is a reminder that there is an all-day Technet event running at Cavendish Conference Centre in London about how you can deploy, manage, migrate-to, secure and extend the value of your directory platform. Myself and two colleagues from Microsoft Consulting Services (MCS), Mark Cribben…

0

Windows Server Update Services (WSUS) Release Candidate is now available

Someone made a more appropriate choice of name (thankfully!) given some of the alternatives which have been on the table over the past few months. The next version of SUS (Software Update Services) will be officially called Windows Server Update Services (WSUS), or simply Update Services for short. Updates services is a free of charge…

0

Account Lockout Tools for Active Directory

I should have posted this previously, so apologies to those who attended my recent session on AD Troubleshooting, Diagnostics and Recovery. Relating to the demonstration for registering and using the AcctInfo.dll to add a new tab to the Active Directory Users & Computers tab for users, the account lockout tools can be downloaded from here….

2

Post domain migration – removing sidHistory

After a successful domain migration, you may be in a situation where it is necessary to remove the sidHistory attributes from objects in your new domain. There are many ways to do this, and many migration tools provide that capability straight out of the box. You could of course use something like ADSIEdit to manually…

1

Active Directory Database monitoring using ESENTPRF.DLL

One of the demonstrations at last nights “Active Directory Diagnosis, Troubleshooting and Recovery” Technet session included the steps to install esentprf.dll to allow monitoring of performance counters for the extensible storage engine (ESE) database underlying Active Directory. The steps to complete this can be found in Chapter 9 of the Windows 2000 Server Active Directory…

0

Active Directory diagnostic event logging in Windows Server

I mentioned at last nights “Active Directory Diagnosis Troubleshooting and Recovery” Technet session how to turn NTDS diagnostic logging on which causes the KCC to write events to the event log. All the information plus more besides is published in Knowledgebase article 314980.

0

Extending the Active Directory schema

There are occasions when you need to extend the Active Directory schema for applications. Besides the best practice of test, test and test again, and the alternative of using ADAM (Active Directory in Application Mode) to avoid changes to your corporate schema, sometimes needs must. In these occasions, you should apply for unique OIDs (Object…

2

Common mistakes when upgrading domains from Windows 2000 to Windows Server 2003

In my line of work, I talk to lots of people about the “hows” of upgrading to the latest and greatest technology. Consequently, I’ve referred many people to the link below which is a great source of tips and links to other information worth considering when upgrading your domain from Windows 2000 to Windows Server…

1

Scriptomatic (revisited)

The Scripting Guys released version 2 of their “Scriptomatic” tool a couple of weeks ago. Don’t be put off by the somewhat frivolous name – it has some very true value. One such example I frequently use is for the WQL queries in WMI filters when building Group Policy Objects – this tool saves a…

2