User login

Ask the Directory Services Team

Syndicate content
Updated: 15 years 19 weeks ago

New Directory Services KB Articles 11/30-12/07

Mon, 12/08/2008 - 20:25
New KB articles related to Directory Services for the week of 11/30-12/07. 958876 When you try to update a file that has a newer version on a Windows Server 2003 R2-based DFSR server, the operation fails, the original file is deleted from the replication...(read more)

Why Are ADFS Binaries Installed on non-R2 Windows Server 2003 computers?

Mon, 12/08/2008 - 18:33
Hi, Warren here. I recently worked on a case where I got to do a bit of sleuthing. I found the results interesting and thought other Windows Server admins might notice the same thing this particular administrator had and wonder why. My customer has an...(read more)

One stop shopping for DFSR and DFSN recommended hotfixes

Tue, 12/02/2008 - 20:15
HI, Ned here again. We have put up a new(ish) KB article that will allow you to always see the latest recommended hotfixes for DFSR and DFSN. I also updated the ever popular 'Top 10 Common Causes of Slow Replication with DFSR ' blog post to reflect this,...(read more)

New Directory Services KB Articles 11/23-11/30

Mon, 12/01/2008 - 19:04
New KB articles related to Directory Services for the week of 11/23-11/30. Number Title 957553 How to free up client access licenses for Windows Server 2003 Terminal Licensing Server 953419 A Windows Server 2003-based DNS server does not forward a request...(read more)

Fun with the Kerberos Delegation Web Site

Tue, 11/25/2008 - 21:55
Hi, Rob here. First I want to thank you guys for reading and participating in our blogging efforts. I had one of you e-mail us and ask about the web site I used in the Kerberos Authentication Troubleshooting blogs and if they could get a copy of it. The...(read more)

How to Back Up and Restore NTFS and Share Permissions

Mon, 11/24/2008 - 20:22
From time to time we are asked how to backup and restore NTFS file system permissions as well as network share permissions. KB article 125996 talks about the network share piece of it, but it does not talk about NTFS permissions. One thing that has made...(read more)

New Directory Services KB Articles 11/16-11/23

Mon, 11/24/2008 - 15:13
New KB articles related to Directory Services for the week of 11/16-11/23. 957556 Repair options that you can use to recover if you accidentally make an incorrect Distributed File System Replication (DFSR) member authoritative in a Windows Server 2003...(read more)

ADFS: SAML Tokens and Validation Issues when Federated with TFIM

Fri, 11/21/2008 - 15:47
Hi all. This is Sean again and it’s ADFS blog time! Today I’m going to touch on Security Assertion Markup Language (SAML) tokens, and an issue we’ve run into when federating with Tivoli Federated Identity Manager (TFIM) . I’ll discuss what a SAML token...(read more)

Top AskDS Blog Posts

Wed, 11/19/2008 - 21:52
We’ve been at this for over a year (since August 2007), with more than 100 posts (127 to be exact), so maybe we can indulge in a little metablogging to look back on what we’ve done. First let’s look at the posts that sparked the most conversation – because...(read more)

Directory Services and more, from Madrid

Tue, 11/18/2008 - 22:34
Ned here again. I recently spent a week with Microsoft Support Engineers from all over the world, and bumped into a colleague that works in MS Spain, out of Madrid. She mentioned that they had a Spanish-language blog focused on Directory Services, networking,...(read more)

New Directory Services KB Articles 11/9-11/16

Mon, 11/17/2008 - 16:10
New KB articles related to Directory Services for the week of 11/9-11/16. 958802 List of currently available hotfixes for Distributed File System (DFS) technologies in Windows Server 2003 R2 960050 EFS may not be enabled expectedly after you disable a...(read more)

Follow up on lag sites... sort of.

Sat, 11/15/2008 - 20:25
Ned here again. We recently had a very lively discussion about 'Lag Sites' as a disaster recovery option. If you've been digging around the MS Download Center, you may have already come across Introduction to Windows Server 2008 R2 . After some digging,...(read more)

Using Network Monitor 3 to Troubleshoot a Domain Join Failure Caused by a Black Hole Router

Fri, 11/14/2008 - 15:24
This is Randy again with an interesting case that I had recently. We were having problems trying to join certain workstations to the domain. We would see that every workstation in one site would join successfully and all the workstations in another site...(read more)

Forced Demotion of a Windows Server 2008 Core Domain Controller

Fri, 11/14/2008 - 15:14
Ned here again. Today's post is short and sweet, but when you need this one you will need it fast and we don't have this publically documented anywhere on TechNet (yet - it's coming). Since Windows 2000 SP4, it has been possible to forcibly demote Domain...(read more)

Configuring an Authoritative Time Server with Group Policy Using WMI Filtering

Thu, 11/13/2008 - 20:43
Hello everyone, Brian Singleton here. Here’s a question I often get from customer regarding Windows Time: “Is there a way I can configure the Windows Time settings via Group Policy and have it only apply to the domain controller that holds the PDC FSMO...(read more)