Reputation
21,724
Next privilege 25,000 Rep.
Access to site analytics
Badges
3 23 48
Newest
 Good Answer
Impact
~2.2m people reached

Apr
25
answered How do you get detailed information on Active Directory logon failures?
Apr
25
comment Noob Q: Active Directory GPO not applied immediately
Did gpresult /h show the policy as in scope?
Apr
21
answered Windows Server 2008 TS CAL Licensing
Apr
21
comment RPC Server is unavailable while trying to promote a domain controller. Open firewall
Those scans do not show all of the required ports. Instead of NMap, use PortQueryUI and provide the text results.
Apr
21
answered Internet Explorer maintenance is missing and proxy cannot be removed
Apr
20
comment Exchange 2013 running on 2012R2 changes time to about 5 hours ahead for a short time
I sure hope there aren't any NTP implementations that use/affected by time zones.
Apr
20
comment every 5th AD query is very slow, why?
Thanks, it's good to know that ldapsearch is broken and dysfunctional in that way when working with Active Directory :-)
Apr
19
comment IIS Windows Integrated Auth, not passing domain\user
You need to confirm with a packet capture or Fiddler if the server is sending the WWW-Authenticate response, and if the client is sending the Authenticate: XXX request. More info here: blogs.msdn.microsoft.com/benjaminperkins/2011/09/14/…
Apr
17
revised Suggestions For IT Staff Delegation
Elaborate on group granting access
Apr
17
answered Suggestions For IT Staff Delegation
Apr
15
answered Secure Administration AD Domain
Apr
13
comment IIS7 Digest authentication credentials forgotten between pages
Hopefully because Digest authentication is disabled in the operating system. Digest authentication is a terrible security practice due to it stores plain text credentials in memory. This should never be used.
Apr
11
comment How can a system hold more then 65535 concurrent TCP connections?
65,535 per tuple
Apr
10
revised Event 4740 not being logged on a domain server
Spelling
Apr
7
revised upgrade DC from 2008 to 2012 with exchange 2007 r2
Exchange 2007 on Windows Server 2012 R2 is a terrible idea
Apr
6
answered upgrade DC from 2008 to 2012 with exchange 2007 r2
Apr
6
answered Joining AD domain with Windows 10 using smart card
Apr
4
comment Active Directory User Attribute List
There's nothing inherently risky about doing it.. When the schema is updated, clients must download the updated ADSI schema cache (about 3 MB). If an organization has a lot of clients with a low-speed connection to a remote domain controller, the additional utilization may saturate their connection if there are many concurrent logons.
Apr
4
revised Restrict sender and recipient with postfix
Spelling
Apr
1
answered roaming profiles for remote users