16,051 reputation
31437
bio website
location Germantown, MD
age
visits member for 5 years, 2 months
seen 2 hours ago

Enterprise Administrator at one of the largest Microsoft Active Directory installations in the world. In addition to most things Microsoft and Windows, I also maintain IIS/SQL Servers and write code for managing the infrastructure of the organization.


6h
comment Main DC is no longer NTP or hold FSMOs
I was more interested in the details. There is definitely some caveats with the process.
15h
comment Main DC is no longer NTP or hold FSMOs
How did you p2v DC1?
Nov
15
comment gpupdate doesn't work on everything
Seems like you are confusing Group Policy with Account properties
Nov
14
comment Understanding LDAP traffic with ActiveDirectory
I added information about the ADSI schema cache download.
Nov
13
comment Windows Server 2008 R2 Enterprise does not recognize total of 20 GB of RAM
Can you try msconfig > Boot > Advanced, and set Maximum Memory to 20480?
Nov
11
comment cannot logon time and date do not match server 2008
Active Directory time synchronization is time zone/DST agnostic.
Nov
8
comment Events ID 4013 For DNS and 1844 for Active Directory
How many domain controllers are in the domain?
Nov
4
comment Minor CSS rendering difference on server vs Local
What IE version and what did you set the X-UA-Compatible flag to?
Nov
2
comment Enable RDP using WinRM or other alternatives to psexec
Try it without psexec: reg add "\\SERVERNAME\HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f
Oct
23
comment How to set up an authentication system to authenticate users against an existing SQL Server database
LDAP? Sounds more like a use case for a simple web service.
Oct
17
comment New SSL Cert causes no connection to website on POST from web application
I don't know, but if you can view the cert in question you can probably save it off somewhere.
Oct
12
comment Set SPN for all users in domain
@Stef: Normal user accounts rarely need an SPN. Service Principal Names are typically assigned to service accounts for authentication with applications such as IIS, so that impersonation and delegation can work correctly.
Oct
9
comment Replication Issues in Active Directory - Computer Objects showing up in multiple OUs
Any event id 1988 events in the Directory Service event logs on the DC's?
Oct
6
comment Control Panel Empty on Windows Server 2008 R2 DataCenter
What does the output from gpresult /h gpresult.html show for the control panel settings?
Aug
28
comment Windows 8.1 TPM ownership on Server 2008 R2 schema - not to spec?
Ok, that was unclear because you said you encrypted the drive and "it" succeeded. If this is a bug, it would be in 8.1/2012 R2, not 2008 R2. You may want to reach out to Microsoft.
Aug
27
comment Why doesn't the time match on two Windows Domain Controllers despite resync?
s32tm /query /status /verbose - confirm where the machines are synchronizing their time and if the last time sync was successful.
Aug
26
comment Cross-server NTLM authentication failing
ETW - Event Tracing for Windows. You can't debug a WCF application without it.
Aug
25
comment Cross-server NTLM authentication failing
Did you enable event tracing for windows on ws1? That usually has the best goto first debug info.
Aug
20
comment Performance associated with storing millions of files on NTFS
Related: stackoverflow.com/questions/197162/…
Aug
14
comment Allow ActiveSync to former domain administrator in Exchange 2010
ArtK: Domain Admins are not by default members of Schema Admins. There should only be one account in Schema Admins, the builtin Administrator account. There is no reason to have any other account member of Schema Admins.