18,692 reputation
11545
bio website
location Auburn, NH
age 45
visits member for 5 years, 10 months
seen 5 hours ago
Experienced Microsoft solutions architect. I wish I had more time to answer questions.

5h
comment Protecting AD object from being accidentally disabled?
ADminSDholder shouldn't affect user accounts
5h
comment DFS configuration through powershell in AWS
You have a directory service- you do not have an Active directory forest or an active directory domain. Their web pages mention it as "Active Directory compatible (Samba) directory" so I guess you have a Samba forest. You can integrate an AD Forest to AWS Directories so you could go that route.
1d
comment ADSI Linked Server: Why can I query AD in VBA, but not as a Linked Server?
Have you tried SO?
1d
comment Protecting AD object from being accidentally disabled?
Fixed that - thanks
1d
comment DFS configuration through powershell in AWS
Yup - No AD, No AD features- game over.
1d
comment IIS webserver 2008, fast on LAN but slow on WAN, why?
please don't put your DNS/DHCP/DC running IIS in the DMZ
1d
comment Why do files end up being filled entirely with null bytes after replication using DFSR?
my understanding is that 2003 has some issues, what happens with 2008 readers?
1d
comment “Allow the computer to turn off this device to save power” - Windows vNIC
if I didn't know what it did, I'd probably recommend turning it off too.
1d
comment How can we disable Windows PatchGuard?
easyhook is a library
Mar
27
comment Can I replace local Microsoft Active Directory with AWS Directory Service?
your question was about AWS AD- so make up your mind- either you want a directory or you don't. Azure AD IS email and password
Mar
27
comment Can I replace local Microsoft Active Directory with AWS Directory Service?
I think we are agreeing. There is no need for all these SaaS apps to use anything other than azure ad
Mar
26
comment Is it necessary to purchase an OID for ADCS?
Why did this get migrated from security?
Mar
26
comment How do you manually trigger the first sync for 'Internet Time' in Windows?
Note that if you have to do this it usually means something went wrong during the boot up. Check the eventlog
Mar
26
comment How do I use PowerShell GPO cmdlets to set up file security?
To be clear object SIDs are unique, but there are cases when the other SID from sidhistory isn't.
Mar
26
comment How do I use PowerShell GPO cmdlets to set up file security?
If you are getting "the SID" just ensure its the right "the SID" the #1 and 2 mistakes I see in scripts for AD user/group objects is the presumption that there is only 1 sid per object and that the SID is unique. Good Luck!
Mar
26
comment How do I use PowerShell GPO cmdlets to set up file security?
Just remember that Sid (depending on the environment) can be multiple values. You still might want to use the MDT scripts and editor to run after the infrastructure team is done with theirs, although I'm amazed they aren't doing this as part of the deploy. Its like having 1 guy write the letter, put it in the envelope, write the address, then making another guy run up hill to a well, to wet a sponge to get the stamp glued on.
Mar
26
comment How do I use PowerShell GPO cmdlets to set up file security?
Why are you not using the deployment tools to role out and configure the web servers? this is trivial rather than manage and maintain a GPO per deployment.
Mar
24
comment Configuring ADFS to pass SID as claim
What you really want then is objectguid, not the SID, not only can sid change but it can be multiple values.
Mar
24
comment Configuring ADFS to pass SID as claim
why would you need to pass the sid since the user is already authenticated at this point?
Mar
24
comment How do you determine over-provisioning settings for SSDs for Raid 1+0 use, and for single drive use in Windows Server 2012 R2?
if you don't comprehend the relationship between number of writes amount of free space and OP don't change anything. In short the more space you dedicate as non defragmentable scratch the higher the iops (up to IO max). In the case of the anandtech article they are providing worst case performance since they fill the drive then ad a random write workload. If you plan on doing the same then follow their numbers, otherwise you will need to determine your writes and fill ratio