<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://msmvps.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Directory Services/Active Directory - All Comments</title><link>http://msmvps.com/blogs/ulfbsimonweidner/default.aspx</link><description>Ulf B. Simon-Weidner&amp;#39;s Blog</description><dc:language>en</dc:language><generator>CommunityServer 2008 SP1 (Build: 30619.63)</generator><item><title>re: Back to live</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2008/05/13/back-to-live.aspx#1622422</link><pubDate>Wed, 14 May 2008 11:14:30 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1622422</guid><dc:creator>Luc Geurts</dc:creator><description>&lt;p&gt;Ulf, glad youre back. &lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1622422" width="1" height="1"&gt;</description></item><item><title>re: Back to live</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2008/05/13/back-to-live.aspx#1622418</link><pubDate>Wed, 14 May 2008 10:49:36 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1622418</guid><dc:creator>Tademos</dc:creator><description>&lt;p&gt;Hi Ulf&lt;/p&gt;
&lt;p&gt;Good to have you back!&lt;/p&gt;
&lt;p&gt;Tademos&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1622418" width="1" height="1"&gt;</description></item><item><title>2K3 - Register PTR nur unsicher m?glich - Seite 2 - MCSEboard.de MCSE Forum</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/03/26/39841.aspx#1572386</link><pubDate>Fri, 04 Apr 2008 22:09:33 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1572386</guid><dc:creator>2K3 - Register PTR nur unsicher m?glich - Seite 2 - MCSEboard.de MCSE Forum</dc:creator><description>&lt;p&gt;Pingback from &amp;nbsp;2K3 - Register PTR nur unsicher m?glich - Seite 2 - MCSEboard.de MCSE Forum&lt;/p&gt;
&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1572386" width="1" height="1"&gt;</description></item><item><title>http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/05/29/49659.aspx</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/05/29/49659.aspx#1544544</link><pubDate>Sun, 16 Mar 2008 20:26:55 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1544544</guid><dc:creator>http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/05/29/49659.aspx</dc:creator><description>&lt;p&gt;Pingback from &amp;nbsp;&lt;a rel="nofollow" target="_new" href="http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/05/29/49659.aspx"&gt;msmvps.com/.../49659.aspx&lt;/a&gt;&lt;/p&gt;
&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1544544" width="1" height="1"&gt;</description></item><item><title>http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/03/12/windows-server-quot-longhorn-quot-granular-password-settings.aspx</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/03/12/windows-server-quot-longhorn-quot-granular-password-settings.aspx#1544543</link><pubDate>Sun, 16 Mar 2008 20:26:43 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1544543</guid><dc:creator>http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/03/12/windows-server-quot-longhorn-quot-granular-password-settings.aspx</dc:creator><description>&lt;p&gt;Pingback from &amp;nbsp;&lt;a rel="nofollow" target="_new" href="http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/03/12/windows-server-quot-longhorn-quot-granular-password-settings.aspx"&gt;msmvps.com/.../windows-server-quot-longhorn-quot-granular-password-settings.aspx&lt;/a&gt;&lt;/p&gt;
&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1544543" width="1" height="1"&gt;</description></item><item><title>re: A Directory Services Geek's View on Active Directory Recovery in Windows Server 2008</title><link>http://msmvps.com/blogs/ulfbsimonweidner/pages/DS-Geek-On-AD-Recovery.aspx#1535518</link><pubDate>Thu, 06 Mar 2008 18:04:50 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1535518</guid><dc:creator>BrianB</dc:creator><description>&lt;p&gt;This was one of the most beneficial session of the conference. I can&amp;#39;t wait for the Slide Deck to come out. Thanks Ulf!&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1535518" width="1" height="1"&gt;</description></item><item><title>re: A Directory Services Geek's View on Active Directory Recovery in Windows Server 2008</title><link>http://msmvps.com/blogs/ulfbsimonweidner/pages/DS-Geek-On-AD-Recovery.aspx#1532605</link><pubDate>Tue, 04 Mar 2008 01:44:07 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1532605</guid><dc:creator>Danijel</dc:creator><description>&lt;p&gt;great Script :-)&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1532605" width="1" height="1"&gt;</description></item><item><title>re: HEROS happen {here}</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2008/02/21/heros-happen-here.aspx#1523299</link><pubDate>Sun, 24 Feb 2008 10:50:22 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1523299</guid><dc:creator>Joerg</dc:creator><description>&lt;p&gt;Hi Ulf,&lt;/p&gt;
&lt;p&gt;i was at Microsoft Launch Event in Frankfurt, too and visited 2 of your Session (grey Shirt in the 2 or 3d row).&lt;/p&gt;
&lt;p&gt;I was very excited to hear your presentations and i learned much more about AD and how many i can do with scripts.&lt;/p&gt;
&lt;p&gt;It was very nice to see and hear you and the Event was so big and very cool.&lt;/p&gt;
&lt;p&gt;Many thanks and Kind regards&lt;/p&gt;
&lt;p&gt;Joerg&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1523299" width="1" height="1"&gt;</description></item><item><title>Congrats Microsoft: Windows Server 2008 is RTM</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/11/06/done-windows-server-2008-in-production.aspx#1496739</link><pubDate>Tue, 05 Feb 2008 07:13:30 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1496739</guid><dc:creator>Directory Services/Active Directory</dc:creator><description>&lt;p&gt;I cannot state it any better: the best Windows Server release ever has been released to manufacturing&lt;/p&gt;
&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1496739" width="1" height="1"&gt;</description></item><item><title>Congrats Microsoft: Windows Server 2008 is RTM</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/11/06/done-windows-server-2008-in-production.aspx#1496738</link><pubDate>Tue, 05 Feb 2008 07:12:23 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1496738</guid><dc:creator>Directory Services/Active Directory</dc:creator><description>&lt;p&gt;I cannot state it any better: the best Windows Server release ever has been released to manufacturing&lt;/p&gt;
&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1496738" width="1" height="1"&gt;</description></item><item><title>MAPI problems on a BES server - BlackBerryForums.com : Your Number One BlackBerry Community</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/05/29/49659.aspx#1476600</link><pubDate>Wed, 23 Jan 2008 15:49:41 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1476600</guid><dc:creator>MAPI problems on a BES server - BlackBerryForums.com : Your Number One BlackBerry Community</dc:creator><description>&lt;p&gt;Pingback from &amp;nbsp;MAPI problems on a BES server - BlackBerryForums.com : Your Number One BlackBerry Community&lt;/p&gt;
&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1476600" width="1" height="1"&gt;</description></item><item><title>faq-o-matic.net | Die technische Online-Community  &amp;raquo; BGInfo um eigene Datenfelder erweitern</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/01/24/bginfo-in-vista-and-longhorn.aspx#1446833</link><pubDate>Tue, 08 Jan 2008 10:15:03 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1446833</guid><dc:creator>faq-o-matic.net | Die technische Online-Community  » BGInfo um eigene Datenfelder erweitern</dc:creator><description>&lt;p&gt;Pingback from &amp;nbsp;faq-o-matic.net | Die technische Online-Community &amp;nbsp;&amp;amp;raquo; BGInfo um eigene Datenfelder erweitern&lt;/p&gt;
&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1446833" width="1" height="1"&gt;</description></item><item><title>consulting &amp;raquo; Done: Windows Server 2008 in production</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/11/06/done-windows-server-2008-in-production.aspx#1364852</link><pubDate>Wed, 28 Nov 2007 08:07:02 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1364852</guid><dc:creator>consulting » Done: Windows Server 2008 in production</dc:creator><description>&lt;p&gt;Pingback from &amp;nbsp;consulting &amp;amp;raquo; Done: Windows Server 2008 in production&lt;/p&gt;
&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1364852" width="1" height="1"&gt;</description></item><item><title>Feed Search Engine - All Fresh Articles And News Are Here</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/08/10/upcoming-conferences-aka-my-speaking-engagements.aspx#1355259</link><pubDate>Sun, 25 Nov 2007 13:42:37 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1355259</guid><dc:creator>Feed Search Engine - All Fresh Articles And News Are Here</dc:creator><description>&lt;p&gt;Pingback from &amp;nbsp;Feed Search Engine - All Fresh Articles And News Are Here&lt;/p&gt;
&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1355259" width="1" height="1"&gt;</description></item><item><title>Done: Windows Server 2008 in production</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/05/09/timetraveling-active-directory.aspx#1284909</link><pubDate>Tue, 06 Nov 2007 13:55:03 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1284909</guid><dc:creator>Directory Services/Active Directory</dc:creator><description>&lt;p&gt;I&amp;amp;#39;m working for Computacenter Germany . And - as you know - I&amp;amp;#39;m a beta-junkie and try to stay&lt;/p&gt;
&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1284909" width="1" height="1"&gt;</description></item><item><title>re: Protect Objects from accidential deletion</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/09/25/protect-objects-from-accidential-deletion-in-windows-server-2008.aspx#1219865</link><pubDate>Thu, 27 Sep 2007 20:00:59 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1219865</guid><dc:creator>marcus</dc:creator><description>&lt;p&gt;great suggestion. &amp;nbsp;i love it. &amp;nbsp;btw, if you have spaces in your OU names, you would want to execute the command as such:&lt;/p&gt;
&lt;p&gt;for /f &amp;quot;delims=&amp;quot; %i in (&amp;#39;dsquery ou -limit 0&amp;#39;) do dsacls %i /d everyone:SDDT&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1219865" width="1" height="1"&gt;</description></item><item><title>re: Protect Objects from accidential deletion</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/09/25/protect-objects-from-accidential-deletion-in-windows-server-2008.aspx#1214380</link><pubDate>Tue, 25 Sep 2007 07:53:56 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1214380</guid><dc:creator>Luc Geurts</dc:creator><description>&lt;p&gt;Nice article. Linked to it on my blog. Thx.&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1214380" width="1" height="1"&gt;</description></item><item><title>re: Security-Boundary: Forest vs. Domain</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/08/25/security-boundary-forest-vs-domain.aspx#1137448</link><pubDate>Sat, 25 Aug 2007 19:07:23 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1137448</guid><dc:creator>Tomek</dc:creator><description>&lt;p&gt;Hmmm ... I&amp;#39;m just thinking about your statement for domain as a security boundary:&lt;/p&gt;
&lt;p&gt;(...)&lt;/p&gt;
&lt;p&gt;The domain is the security boundary against (domain) administrative mistakes&lt;/p&gt;
&lt;p&gt;(...)&lt;/p&gt;
&lt;p&gt;I don&amp;#39;t think that this should be used in this way - if You need such level of security You can have it using OU and delegation. Best approach to avoid administrative mistakes is to &amp;nbsp;keep as low number of DA as it is possible. &lt;/p&gt;
&lt;p&gt;For most of the environments OUs and delegation will work just fine and will eliminate need for additional domain. With Windows 2003 and new password policy we will get rid of another reason for which domains are established now. &lt;/p&gt;
&lt;p&gt;My approach is: start with single forest \ single domain and then go through design process and look for reasons which may change this decission.&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1137448" width="1" height="1"&gt;</description></item><item><title>My devices just won't sync properly - BlackBerryForums.com : Your Number One BlackBerry Community</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/05/29/49659.aspx#1112790</link><pubDate>Wed, 15 Aug 2007 11:35:00 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1112790</guid><dc:creator>My devices just won't sync properly - BlackBerryForums.com : Your Number One BlackBerry Community</dc:creator><description>&lt;p&gt;Pingback from &amp;nbsp;My devices just won't sync properly - BlackBerryForums.com : Your Number One BlackBerry Community&lt;/p&gt;
&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1112790" width="1" height="1"&gt;</description></item><item><title>&amp;quot;send as&amp;quot; permission keeps unsetting - BlackBerryForums.com : Your Number One BlackBerry Community</title><link>http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/05/29/49659.aspx#1112766</link><pubDate>Wed, 15 Aug 2007 11:25:24 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1112766</guid><dc:creator>"send as" permission keeps unsetting - BlackBerryForums.com : Your Number One BlackBerry Community</dc:creator><description>&lt;p&gt;Pingback from &amp;nbsp;&amp;amp;quot;send as&amp;amp;quot; permission keeps unsetting - BlackBerryForums.com : Your Number One BlackBerry Community&lt;/p&gt;
&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1112766" width="1" height="1"&gt;</description></item></channel></rss>