From the Field: the Case of Display Issues (garbled or missing Text) in Active Directory Administrative Center

I’ve been working with Active Directory Administrative Center (ADAC) for a while now, but didn’t have time to look at Delegation of Control lately. Yesterday I finally came round to configuring it and was baffled by a serious issue

How to install a Server Core R2 Domain Controller

Server Core installations were a new feature in Windows Server 2008. Now, in Windows Server 2008 R2, it has been given a major upgrade. It now includes the .Net Framework, Active Directory Certificate Services, etc. (for a full list, see this blogpost) Over three years ago I showed you how to install a Server Core … Continue reading "How to install a Server Core R2 Domain Controller"

Active Directory Time Sync (broken by default)

Active Directory relies on accurate time for a number of reasons. One of this reasons is Kerberos authentication, which by nature can only cope with a difference in time (time skew) of five minutes between the Kerberos server and client. Now, don’t get me wrong. I think the time skew limitation and the overall Kerberos … Continue reading "Active Directory Time Sync (broken by default)"

Active Directory Domain Services Command Fu, Part 6

With Windows PowerShell Scripting being one of the requirements in the current Common Engineering Criteria (CEC), all Microsoft server products need to comply with having Windows PowerShell scripting support. While some Active Directory technologies have not yet adopted PowerShell (Active Directory Certificate Services, for example), Active Directory Domain Services has adopted this criteria wholeheartedly in … Continue reading "Active Directory Domain Services Command Fu, Part 6"

Active Directory Domain Services Command Fu, Part 3

As some systems administrators have already found out, on Microsoft Windows Servers some tasks cannot be performed using the Graphical User Interface (GUI). Although multiple vendors have released graphical tools to make these tasks even more tedious easier for the typical click-on-through Windows Admin, these tasks can easily be performed using the built-in command tools. … Continue reading "Active Directory Domain Services Command Fu, Part 3"

Active Directory Domain Services Command Fu, Part 1

As some systems administrators have already found out, on Microsoft Windows Servers some tasks cannot be performed using the Graphical User Interface (GUI). Although multiple vendors have released graphical tools to make these tasks even more tedious easier for the typical click-on-through Windows Admin, these tasks can easily be performed using the built-in command tools. … Continue reading "Active Directory Domain Services Command Fu, Part 1"

Active Directory Visibility Modes

While being involved with my company’s Hosted Messaging and Collaboration (HMC) implementation I ran into the Active Directory List Object Access Mode, set through the DS-Heuristics attribute. I decided to give you a little rundown of this mode and the other (default) Active Directory Visibility mode, how they’re different, how to enable (and disable) one … Continue reading "Active Directory Visibility Modes"

Active Directory in Hyper-V environments, Part 4

Hyper-V in Windows Server 2008 Enterprise and Datacenter Edition offers the ability to make virtual machines highly available by leveraging failover clustering. This however is not a good idea in the case of Active Directory Domain Controllers. In this post I’ll explain why Hyper-V High Availability for Domain Controllers is not a good idea and … Continue reading "Active Directory in Hyper-V environments, Part 4"