Sunsetting TMG with some (free!) Best Practices

Long and boring post ahead. So KITTENS! There. Fluffy now. As one of the Premier Field Engineers performing ISA Health Checks and then TMG configuration reviews (by default, from my long association with Proxy 2.0 and then ISA!), I was reviewing a document I put together for a customer just before shredding it, and thought:…


Simple IIS Kerberos Q&A

Posting a hopefully-useful tidbit. Hi Tristan, Do you have by any chance a guide on how to set up IIS for kerberos auth? I’m helping my customer and I’m a beginner with IIS. It is a farm of 6 IIS servers, they will be using a service acct. DNS is configured to do the following…


Tip: Check that your Offline Root CA is actually Offline, mmkay?

I spend a fair whack of time chatting PKI and certificates with customers, and tyre-kicking their environments as part of the Active Directory Certificate Services Assessment (or ADCSA – available via Premier Support). Many customers have a fairly standard design, often deployed by a partner (it’s the “off the shelf plus customize” option), which includes…



You find lots of draft posts when your user interface changes… Hi! I’ve been waiting for my blog to migrate for what seems like forever. Now it’s back, and Open Live Writer’s a thing, and so I guess I might be back too. Sweet. Somewhere to jot things and rant a bit. FAQ: Yep, still…


Hyper-V Synthetic Networking Is Much Faster

I decided it was time to look at upgrading my home broadband, mostly to get better-than-128KB upload speeds. After the ISP-side change had eventually wound its way through, I was interested to see that while my upload speeds had improved, my download speeds still seemed capped at about 25Mbits/s (rule of thumb: divide by 8 to get megabytes per…


MSDEToText for TMG sometimes produces negative IP addresses

… which can be annoying when you're trying to work out where your traffic's headed, with something like LogParser. I fixed my MSDEToTSV (note, I renamed it so that it reminded me what format it produces – I only need to use it once in a blue moon), and I'm posting the fixed version here…


Installing .Net 3.51 on Windows 8.1

(Can you sense flatten-and-reinstall time approaches?) Or Windows 8. Applies to .Net 3.51, 3.0, and 2.0. Works with or without Internet. Link: How To Activate the .NET Framework 3.5 on Windows 8 Without Internet Access


Installing Windows from a USB Stick (and copying it to that stick from an ISO)

(Quick public dump so I can find the tool link again easily)   Download the Windows 7 USB/DVD tool from here. (NB links to the page, not the EXE) Download ISO image from store or MSDN Run Win7 USB DVD Tool and point it to ISO and USB Stick Label stick Seriously Tristan, label the…


Office Web Viewer

While Skydrive’s been able to display Office documents in your web browser for what seems like ages now, check this out: Do you have Office documents on your website or blog that you want your readers to view even if they don’t have Office installed?  Would you rather view a document before downloading it?  To…


App Pool Recycling Defaults: Why 1740 minutes?

Without doubt, one of the most FAQ when discussing Application Pools in IIS Admin and Troubleshooting workshops! Scott Forsyth shares Wade’s answer In Wade’s words: “you don’t get a resonate pattern”. then follows up with useful advice on establishing your own best recycling interval: First off, I think 29 hours is a good default. For…