Reputation
38,122
Next tag badge:
372/400 score
146/80 answers
Badges
18 94 197
Impact
~3.5m people reached

Mar
19
awarded  Popular Question
Mar
17
comment How to time-bomb a GPO?
Very clever, kudos to you.
Mar
17
awarded  Famous Question
Mar
16
comment Why can I not see a Computers GPO in my GPMC? How can I force a GP update without a Computers GPO?
And you can't see the "Computers" container in GPMC because it's a container, not a OU.
Mar
16
comment Why can I not see a Computers GPO in my GPMC? How can I force a GP update without a Computers GPO?
You can't link a GPO to a container. Only OUs or the domain root.
Mar
16
reviewed Approve Why can I not see a Computers GPO in my GPMC? How can I force a GP update without a Computers GPO?
Mar
16
comment Why can I not see a Computers GPO in my GPMC? How can I force a GP update without a Computers GPO?
You can force an update on all computers inside a OU. If you really have such a strong need to do it immediately, then you can simply create an OU, place all your computers in it and then force an update on that OU. Otherwise, just wait a couple of hours: GPOs are automatically refreshed every 60-90 minutes, there really is no need to force updates anywhere.
Mar
16
comment Why can I not see a Computers GPO in my GPMC? How can I force a GP update without a Computers GPO?
You can't see it because there is a container called "Computers", but that console doesn't display containers, it only displays OUs. Use ADUC and you'll see it.
Mar
16
comment Why can I not see a Computers GPO in my GPMC? How can I force a GP update without a Computers GPO?
You can only force a Group Policy update on a specific OU; if your computers aren't located inside OUs, you are out of luck. You should design a proper OU structure and use it to organize your domain and your GPOs.
Mar
16
comment Why can I not see a Computers GPO in my GPMC? How can I force a GP update without a Computers GPO?
Ok, I completely missed the blurring because he also referred to it as "Users" ("If I try to update the Users GPO...").
Mar
16
answered Why can I not see a Computers GPO in my GPMC? How can I force a GP update without a Computers GPO?
Mar
14
comment Authentication fails when using ARR to load balance Lync 2013 internal web services
I know I could use a computer name, but there's an additional catch here: there are two servers in the Lync Front-End Pool, and then there's the ARR server; all of them should use the same SPNs, but a SPN can only be associated with a single account, not three of them; and I can't use a user account to run the IIS application pools, because this is not configurable in Lync.
Mar
13
comment Reuse old domain controller IP address
Because that would leave you with a single DC, even if only for a short time. Good luck if it chooses exactly that time to fail...
Mar
13
answered Reuse old domain controller IP address
Mar
13
awarded  Nice Answer
Mar
12
answered What is a TXT record with the form ms=msXXXXXXXX used for?
Mar
12
accepted Authentication fails when using ARR to load balance Lync 2013 internal web services
Mar
12
answered Authentication fails when using ARR to load balance Lync 2013 internal web services
Mar
11
awarded  Notable Question
Mar
10
comment Authentication fails when using ARR to load balance Lync 2013 internal web services
There is no service account running Lync, and there can't be (it's automatically configured by the Lync setup to use several IIS application pools running as NetworkService and such, and it can't be changed); also, the URL for those web services are different than the server name(s), and there are multiple Lync servers. What and how should I configure there?