I needed to change the way the DisplayName is automatically formatted in ADUC for a customer and was shocked to know they did not know of the createDialog propery in the CN=409 under DisplaySpecifier(s) in the Configuration partition. Below is a extract from the KB that shows you how to do this.
Category: Active Directory
Active Directory
How to lessen your PDC’s load
Most companies do not understand how important a PDC is in your environment. They often oversee this role and I think in a way it is our fault to make this single role “more important” than the other roles (** for those die hearts out there please note the quotes over “more important”). With this … Continue reading "How to lessen your PDC’s load"
Quick way to finding duplicate SPN's
I know that Kerberos delegation can be a pain in the A$$ one of the first steps is to see if the user/administrator has registered a Service Principle Name (SPN) if he has and Kerberos delegation is still not working then check if he has duplicate entries for that SPN entry.
Windows Server 2003 R2 Schema Updates
I was asked which components extended the schema with Windows Server 2003 R2 I always miss a small detail so below is a table explaining which components extend the AD schema for Windows Server 2003 R2
Save My Schema
So working a lot with customers and their *interesting environments I often get called in to fix blotched permissions on important aspects of Active Directory. Which important aspects you ask well how about THE SCHEMA NC! I have seen this in many news groups and many times I have had to fix this so to … Continue reading "Save My Schema"
One reason why Kerberos delegation wont work.
Doing a lot of work with Kerberos delegation over the past few years and I have encountered many reasons why the delegation won’t work. One reasons so often not thought of or left out is duplicate SPN entries. Now I know its easy to say who would add a duplicate entry but when administrators get … Continue reading "One reason why Kerberos delegation wont work."