15,453 reputation
31232
bio website
location Germantown, MD
age
visits member for 4 years, 11 months
seen 1 hour ago

Enterprise Administrator at one of the largest Microsoft Active Directory installations in the world. In addition to most things Microsoft and Windows, I also maintain IIS/SQL Servers and write code for managing the infrastructure of the organization.


Aug
14
comment Allow ActiveSync to former domain administrator in Exchange 2010
ArtK: Domain Admins are not by default members of Schema Admins. There should only be one account in Schema Admins, the builtin Administrator account. There is no reason to have any other account member of Schema Admins.
Aug
7
comment AD/LDAP: User accounts lost “Change password” permission for SELF
That permission should be inherited. Do any of the affected account have inherited permissions removed?
Aug
7
comment Are there any standalone Windows debug/query tools that use ADSOpenObject?
Seems like a packet capture would reveal what you need.
Aug
6
comment Troubleshooting High TCP Retransmit Rate
Actually using the largest size payload is to determine the actual MTU, not what the client os thinks the MTU is. If you get a timeout or a DF warning, drop the payload size until it works. That is the actual MTU.
Aug
6
comment Troubleshooting High TCP Retransmit Rate
A standard MTU on a LAN is 1500. If you subtract 28 from that, you should be able to ping a remote host with ping -f -l 1472 n.n.n.n with no timeouts or DF warnings. I have to say that "hundreds of clients" sharing a 1Mbit down/512 kbps up connection I would expect to see a lot of retransmits though.
Aug
6
comment Troubleshooting High TCP Retransmit Rate
Forgetting the Google ping test, what is the MTU of the link to the hosts where you are experiencing retransmits? Also, can you provide the output of the command: netsh interface tcp show global
Aug
6
comment Troubleshooting High TCP Retransmit Rate
What version of tcpip.sys do you have on the client (and target host if Windows)?
Aug
4
comment How to locate the cause of a excessive memory in ms sql
The "server crashes"? Sounds like you aren't limiting the maximum memory available to SQL server. You also need to specify if you are running x86 or x84 SQL/Windows, and the total amount of system memory.
Jul
31
comment Use RSAT tools from an unprivileged account on Win8.1 with UAC on?
If you right-click the Server Manager shortcut > Properties > Advanced, it does not have "Run as Administrator" checked?
Jul
31
comment Use RSAT tools from an unprivileged account on Win8.1 with UAC on?
Shift right-click Run As A Different User works for me (at least on 2012 R2). What level is your UAC settings?
Jul
31
comment DNS update port(s)?
@ethrbunny: Does nltest /dsregdns create the records?
Jul
31
comment Force active directory replication after joining a server to a domain?
@ChrisMonteiro: Why not just enable site link notification between their site and the corporate site?
Jul
29
comment FRSDIAG / NTFRSUTL looking for servers which don't exist
The stale ntfrs member and subscriber references should be removed during metadata cleanup. If not, you would need to manually delete them.
Jul
26
comment Method of deploying a VB6 app to a Windows server 2012 RDS server
Many VB6 apps should work on 2012. It is possible that you may need to select a compatibility mode.
Jul
25
comment Method of deploying a VB6 app to a Windows server 2012 RDS server
What happens when you try to run the install/application on the 2012 server?
Jul
17
comment Search AD for empty sAMAccountName & userPrincipalName
Are you really expecting to find a user account with no samAccountName? That should not occur, and the system will not allow a user account to have an empty samAccountName if you try to clear it.
Jul
17
comment Is there a GPO to allow standard users to access Resource Monitor
Actually they need to run resmon.exe.
Jul
9
comment File transfering from Windows 2008 R2 to Windows 7 client is tremendously slow
@AgentK: What is the version of tcpip.sys on the client and server?
Jul
8
comment Password reset fails for end users when minimum password age set for more than 0 days
What tool are they using to reset the password?
Jul
8
comment Password reset fails for end users when minimum password age set for more than 0 days
@Shane Madden: That seems backwards. Setting pwdLastSet to zero sets the ADS_UF_PASSWORD_EXPIRED flag in UserAccountControl. That flag is read only and is only set by the system. msdn.microsoft.com/en-us/library/aa772300%28v=vs.85%29.aspx. They may be setting pwdLastSet to zero first, then setting the password to the temporary password value.