15,648 reputation
31435
bio website
location Germantown, MD
age
visits member for 5 years, 1 month
seen 1 hour ago

Enterprise Administrator at one of the largest Microsoft Active Directory installations in the world. In addition to most things Microsoft and Windows, I also maintain IIS/SQL Servers and write code for managing the infrastructure of the organization.


Oct
17
comment New SSL Cert causes no connection to website on POST from web application
I don't know, but if you can view the cert in question you can probably save it off somewhere.
Oct
12
comment Set SPN for all users in domain
@Stef: Normal user accounts rarely need an SPN. Service Principal Names are typically assigned to service accounts for authentication with applications such as IIS, so that impersonation and delegation can work correctly.
Oct
9
comment Replication Issues in Active Directory - Computer Objects showing up in multiple OUs
Any event id 1988 events in the Directory Service event logs on the DC's?
Oct
6
comment Control Panel Empty on Windows Server 2008 R2 DataCenter
What does the output from gpresult /h gpresult.html show for the control panel settings?
Aug
28
comment Windows 8.1 TPM ownership on Server 2008 R2 schema - not to spec?
Ok, that was unclear because you said you encrypted the drive and "it" succeeded. If this is a bug, it would be in 8.1/2012 R2, not 2008 R2. You may want to reach out to Microsoft.
Aug
27
comment Why doesn't the time match on two Windows Domain Controllers despite resync?
s32tm /query /status /verbose - confirm where the machines are synchronizing their time and if the last time sync was successful.
Aug
26
comment Cross-server NTLM authentication failing
ETW - Event Tracing for Windows. You can't debug a WCF application without it.
Aug
25
comment Cross-server NTLM authentication failing
Did you enable event tracing for windows on ws1? That usually has the best goto first debug info.
Aug
20
comment Performance associated with storing millions of files on NTFS
Related: stackoverflow.com/questions/197162/…
Aug
14
comment Allow ActiveSync to former domain administrator in Exchange 2010
ArtK: Domain Admins are not by default members of Schema Admins. There should only be one account in Schema Admins, the builtin Administrator account. There is no reason to have any other account member of Schema Admins.
Aug
7
comment Are there any standalone Windows debug/query tools that use ADSOpenObject?
Seems like a packet capture would reveal what you need.
Aug
6
comment Troubleshooting High TCP Retransmit Rate
Actually using the largest size payload is to determine the actual MTU, not what the client os thinks the MTU is. If you get a timeout or a DF warning, drop the payload size until it works. That is the actual MTU.
Aug
6
comment Troubleshooting High TCP Retransmit Rate
A standard MTU on a LAN is 1500. If you subtract 28 from that, you should be able to ping a remote host with ping -f -l 1472 n.n.n.n with no timeouts or DF warnings. I have to say that "hundreds of clients" sharing a 1Mbit down/512 kbps up connection I would expect to see a lot of retransmits though.
Aug
6
comment Troubleshooting High TCP Retransmit Rate
Forgetting the Google ping test, what is the MTU of the link to the hosts where you are experiencing retransmits? Also, can you provide the output of the command: netsh interface tcp show global
Aug
6
comment Troubleshooting High TCP Retransmit Rate
What version of tcpip.sys do you have on the client (and target host if Windows)?
Aug
4
comment How to locate the cause of a excessive memory in ms sql
The "server crashes"? Sounds like you aren't limiting the maximum memory available to SQL server. You also need to specify if you are running x86 or x84 SQL/Windows, and the total amount of system memory.
Jul
31
comment DNS update port(s)?
@ethrbunny: Does nltest /dsregdns create the records?
Jul
31
comment Force active directory replication after joining a server to a domain?
@ChrisMonteiro: Why not just enable site link notification between their site and the corporate site?
Jul
29
comment FRSDIAG / NTFRSUTL looking for servers which don't exist
The stale ntfrs member and subscriber references should be removed during metadata cleanup. If not, you would need to manually delete them.
Jul
26
comment Method of deploying a VB6 app to a Windows server 2012 RDS server
Many VB6 apps should work on 2012. It is possible that you may need to select a compatibility mode.