Reputation
119,402
Next tag badge:
985/1000 score
279/200 answers
Badges
10 125 264
Newest
 Revival
Impact
~8.6m people reached

Jul
14
comment Issues with using real domain for Active Directory domain?
@boflynn: You'd need to use a DNS server that supported "views" (i.e. returning different data in responses depending on the source IP address of the query), and Microsoft DNS doesn't (BIND 9 does). The _msdsc.company.com records provide lots of nice information to an attacker about your AD sites, domain controllers, and internal IP address scheme. You really shouldn't be showing that to the Internet.
Jul
14
comment Issues with using real domain for Active Directory domain?
@AdamB: I didn't think you were suggesting that, but thanks for the clarification. FYI, though, the user-principal-name (user@domain.com format) can be the same as the Internet domain name regardless of the DNS name of the Active Directory domain. Read up on UPN suffixes-- you can have as many as you want and they have nothing to do with DNS at all. Having suffered through Customers who insisted on using their Internet DNS name for their AD domain name I won't recommend to anyone that they do it (and won't do it for Customers).
Jul
14
revised Queries run extremely fast locally, extremely slow on remote machines
added 61 characters in body
Jul
14
answered Queries run extremely fast locally, extremely slow on remote machines
Jul
14
answered Are there any tools to analyze the usage of an Exchange mailbox?
Jul
14
comment Should a backup server use RAID?
Agreed re: "neither is better than the other for everything". I'm with you-- disk-to-disk is great for shrinking backup windows and quick restores. Getting data offsite and offline, though, is where tape excels. Disk-to-disk-to-tape is the best general "sweet spot" in backup today (with a deduplication step in there, if you can afford it).
Jul
14
revised High Physical Disk Queue on Exchange 2003 mail store
added 702 characters in body
Jul
14
comment Issues with using real domain for Active Directory domain?
Take one more look at my answer. I don't care about the "rep", but you're setting yourself up for a really, really miserable time if you try and host the DNS for Active Directory in an off-site name server.
Jul
14
revised Issues with using real domain for Active Directory domain?
added 1422 characters in body
Jul
14
comment Issues with using real domain for Active Directory domain?
It would. Microsoft and I both don't recommend using Internet-facing DNS servers as the DNS servers for Active Directory. What you're describing, though, wouldn't cause multiple DNS servers to believe they are authoritative for the same domain (which is a bad thing and not fun to have to deal with what w/ the manual labor involved).
Jul
14
answered High Physical Disk Queue on Exchange 2003 mail store
Jul
14
comment Issues with using real domain for Active Directory domain?
serverfault.com/questions/38208/…
Jul
14
comment Issues with using real domain for Active Directory domain?
You don't want to expose your _msdcs.company.com records to the Internet, so if you're going to put your AD into the same DNS as your Internet-facing DNS you'll want to create a "view" that hides the _msdcs.company.com records from the Internet.
Jul
14
answered Issues with using real domain for Active Directory domain?
Jul
14
comment Is it possible to create a faster computer from many computers?
Are you suggesting that "a custer" somehow can execute software that was otherwise written for a single computer "magically" in parallel w/o no modifications to the software? Have you ever actually used a cluster before?
Jul
14
answered Is it possible to create a faster computer from many computers?
Jul
14
comment Packets sent indiscriminantly out of switch
@Peter: +1 to you if I could. I get so sick of hearing bridge/MAC tables called "ARP tables".
Jul
14
comment Server 2003 remote desktop connections registry manipulation
It isn't "likely violating"-- it is violating the terms of the license agreement.
Jul
14
comment Server 2003 remote desktop connections registry manipulation
serverfault.com/questions/23545/…
Jul
14
answered Packets sent indiscriminantly out of switch