118 reputation
7
bio website
location
age
visits member for 3 years, 7 months
seen Aug 9 at 13:55

Mar
3
awarded  Popular Question
Jul
6
awarded  Tumbleweed
Jul
4
comment Create subdomains in windows 2008 R2
Now don't this as "you should never ever have multiple domains/forests", that's not what I'm saying, just that their message is that if it does everything you need, then single-forest single-domain is the easiest to administer: technet.microsoft.com/en-us/library/cc737091(v=ws.10)
Jun
13
comment Active Directory Password Policy Problem
For the record, if the domain is >= 2008 R2, then you can implement what is called "Fine-grained password policies". It'll allow you to configure different password policies for different OUs, but it isn't straightforward, you really need to dig in Microsoft's documentation (don't just hope to create a GPO, link it to a GPO and be done with it :)
Jun
13
comment Are there any tools to do change management with Active Directory / Group Policy?
AGPM is very nice. It takes dedication because you cannot enforce its usage (thus domain admins have to play the game), but it's a very nice addition if you want to have serious change control in place. It's often overlooked and seen as a concept useful only to developers, but it's really worth it for group policies. If I'm not mistaken, it's part of the MDOP suite that is 'free' if you have a software assurance
Jun
13
comment Active Directory Group Policy Issue after Domain Rename
Wow, a domain rename tool exists, but I always wondered if anyone would be crazy enough to use it in a production environment ;-) As Rex said, it can have a H-U-G-E impact
May
20
comment Create subdomains in windows 2008 R2
Note that if it is sub-domains in the Active Directory sense, Microsoft does not recommend this anymore. They now recommend the single-forest single-domain topology.
May
16
awarded  Commentator
May
16
comment Allow Windows Domain users Local Admin rights on subset of Domain Computers
Great comment of BoxerBucks. Try to link group policies to organization units and don't go deeper (computer specific/wmi filtering). That way it'll stay manageable.
Jun
7
comment IT Documentation Platforms
We have Confluence at work and I'm very fond of it (I also use it at home). It's a really great product, with lots of features (most of which satisfy your requirements) and with a rich catalog of plugins (many of which are free of charge). You should definitely give it a try (and +1 also for JIRA and GreenHopper, two other great products from Atlassian).
Jun
7
comment Dual-homed server DNS registration issue
I've got informed via a guy at Microsoft that it is by design. Another customer requested a product modification but Microsoft decided not to implement it for various reasons. It's too bad, I would've been happy with a patch and a registry setting to configure ;-). It may be a sign that the design we're trying to implement is wrong...
Jun
7
comment Dual-homed server DNS registration issue
I've tried this setting, but from my understanding it completely disables DNS registration for the adapter?
Jun
7
comment Dual-homed server DNS registration issue
Both NICs have static IPs, we're not fond of using DHCP for servers. Another DNS server is not really an option.
Jun
7
awarded  Editor
Jun
7
revised Dual-homed server DNS registration issue
described IP settings
Jun
7
comment Dual-homed server DNS registration issue
Yes sorry I forgot to detail that, I'll edit my question. Both NICs are in different IP ranges
Jun
7
comment Dual-homed server DNS registration issue
I'm not sure I understood you correctly, but it's what we do now, we create the records manually and these are indeed not scavenged, but we would like to avoid the manual operation.
Jun
7
comment Dual-homed server DNS registration issue
The NICs are connected to two different firewalls. The idea is to only let the 'management' interface communicate with the DNS Servers (which happen to be AD-integrated) and also to be accessible for the backup solution. The security guys want to put network segregation in place. Both NICs are on different (and symmetric) private VLANs
Jun
7
awarded  Scholar
Jun
7
accepted Which tool to use for managing GPOs: AGPM or SCM?