18,502 reputation
11545
bio website
location Auburn, NH
age 45
visits member for 5 years, 8 months
seen 4 hours ago
Experienced Microsoft solutions architect. I wish I had more time to answer questions.

Jan
24
comment Unable to Join Windows 8.1 Pro Clients to domain on windows server 2003
No errors in the event logs? How were they deployed (MDT, SCCM, ADK)?
Jan
23
comment Is Lync chat, or Persistent Chat a viable alternative to email based alerts?
Lync works regardless of hours...???
Jan
21
comment Best practice to disable SpeedStep for Hyper-V hosts?
not all UEFI firmware supports disabling speedstep
Jan
21
comment How can I remove the minimum password length for a specified user in an OU?
@ehsan you can't, FGPP was added to specifically address the need for multiple password policies.
Jan
21
comment Default mail registry
Have you tried deploying office click to run post sysprep?
Jan
21
comment Can I get all active directory passwords in clear text using reversible encryption?
This question does not pertain to reasonably accepted admin practices.
Jan
20
comment How to disable ipv6 support in Linux entirely?
it's not the "applications fault" programs can still load the module as they wish. You can check this by running lsmod or modprobe -l, you will still see the ipv6.ko kernel module. This allows user mode programs to access the kernel module in their code. If an admin is actually going to do this- they've instituted their own instability.
Jan
20
comment How to disable ipv6 support in Linux entirely?
the only reason an dual stack deployment would cause issues that I can think of is a 6to4 issue caused by using public IPs privately
Jan
20
comment GPO to map drives conditionally
why are you using WEBDAV at all? I don't believe you can map an HTTPS share
Jan
18
comment Windows Phone user-agents?
I thought you were presuming that there were only 2 UA strings
Jan
17
comment Windows Phone user-agents?
You've only found 2, keep looking for the others (or get more phones)
Jan
17
comment AD Existing Forests Best Practices Setup
Adfs is for claims based authentication (not sure where you got the separate org piece from) and if both orgs have their priority apps set up for claims, its far simpler, faster and more secure than doing a cross forest trust. Cross forest trusts are usually used when you trust the partner org, a dubious position and irresponsible position (potentially) in a merger, and could require infrastructure changes. The Cadillac route is a forest merge with ADFS to make app migration faster as well as have an agreed upon directory set, but like a Cadillac, isn't the cheapest.
Jan
15
comment AD Existing Forests Best Practices Setup
there are lots of answers here, cross forest trusts, adfs, or merge the forests. You need to choose a specific problem
Jan
15
comment How to disallow external access to 127.0.0.1?
@Johnny, however the community decided a long time ago to not follow the example of stack overflow. See stackoverflow.com/questions/1137158/what-is-a-variable for an example of what we decided we didn't want.
Jan
14
comment How to disallow external access to 127.0.0.1?
this is basic networking that should have been very easy to find
Jan
14
comment How to disallow external access to 127.0.0.1?
@phyrfox That's why it's a bug. You should not be able to put the loopback traffic on the physical nic regardless of OS
Jan
14
comment can I script leaving/joining a domain (and not have to reboot)?
Even better would be to use any of the automated scripted deployment tools in your template and avoid "cloning" the vm in the first place
Jan
14
comment Azure: What if a guest OS update breaks my application?
This belongs on SO where you can ask developers how to write the code to spec. In general windows infrastructure admins don't consider patching an optional exercise.
Jan
9
comment ProLiant DL320 G5p Server 2003 No longer boots
What does it say when you look at it in the lsi adapter setup?
Jan
7
comment Colossal Failure After Domain Rename
Renaming a dc at all costs should be bolded, highlighted, and underlined 3 times. The best way to rename a DC is to demote it, and rebuild it as a new DC.