It turns out that weird things can happen when you mix Windows Server 2003...
UPDATE: The hotfix is now available for this issue! Get it at http://support.microsoft.com/kb/2989971This hotfix applies to Windows Server 2012 R2 domain controllers and should prevent the specific...
View ArticleHate to see you go, but it’s time to move on to greener pastures. A farewell...
Hi all, Jason here. Long time reader, first time blogger. AzMan is Microsoft’s tool to manage authorization to applications based on a user’s role. AzMan has been around since 2003 and has had a good...
View ArticleRemove Lingering Objects that cause AD Replication error 8606 and friends
Introducing the Lingering Object Liquidator Hi all, Justin Turner here ---it's been a while since my last update. The goal of this post is to discuss what causes lingering objects and show you how to...
View ArticleUnderstanding ATQ performance counters, yet another twist in the world of TLAs
Hello again, this is guest author Herbert from Germany. If you worked an Active Directory performance issue, you might have noticed a number of AD Performance counters for NTDS and “Directory Services”...
View ArticleDFSR: Limiting the Number of Imported Replicated Folders when using DB cloning
Hello! Warren here to talk about a very specific scenario involving the new DB cloning feature added to DFSR in Windows Server 2012 R2. The topic is how to limit or control which RFs you import on the...
View ArticleMigrating your Certification Authority Hashing Algorithm from SHA1 to SHA2
Hey all, Rob Greene here again. Well it’s been a very long while since I have written anything for the AskDS blog. I’ve been heads down supporting all the new cool technology from Microsoft.I wanted...
View ArticleA Treatise on Group Policy Troubleshooting–now with GPSVC Log Analysis!
Hi all, David Ani here from Romania. This guide outlines basic steps used to troubleshoot Group Policy application errors using the Group Policy Service Debug logs (gpsvc.log). A basic understanding of...
View ArticleTroubleshoot ADFS 2.0 with these new articles
Hi all, here's a quick public service announcement to highlight some recently published ADFS 2.0 troubleshooting guidance. We get a lot of questions about configuring and troubleshooting ADFS 2.0, so...
View ArticleWindows 10 Group Policy (.ADMX) Templates now available for download
Hi everyone, Ajay here. I wanted to let you all know that we have released the Windows 10 Group Policy (.ADMX) templates on our download center as an MSI installer package. These .ADMX templates are...
View ArticleManage Developer Mode on Windows 10 using Group Policy
Hi All, We’ve had a few folks want to know how to disable Developer Mode using Group Policy, but still allow side-loaded apps to be installed. Here is a quick note how to do this. (A more AD-centric...
View ArticleSHA1 Key Migration to SHA256 for a two tier PKI hierarchy
Hello. Jim here again to take you through the migration steps for moving your two tier PKI hierarchy from SHA1 to SHA256. I will not be explaining the differences between the two or the supportability...
View Article“Administrative limit for this request was exceeded" Error from Active Directory
Hello, Ryan Ries here with my first AskDS post! I recently ran into an issue with a particular environment where Active Directory and UNIX systems were being integrated. Microsoft has several...
View ArticleUsing Repadmin with ADLDS and Lingering objects
Hi! Linda Taylor here from the UK Directory Services escalation team. This time on ADLDS, Repadmin, lingering objects and even PowerShell…. The other day a colleague was trying to remove a lingering...
View ArticleSpeaking in Ciphers and other Enigmatic tongues…update!
Hi! Jim Tierney here again to talk to you about Cryptographic Algorithms, SCHANNEL and other bits of wonderment. My original post on the topic has gone through a rewrite to bring you up to date on...
View Article