The Life of Brian

Active Directory, Group Policies, Server Core and the Life of Brian

Email Notifications

Blog Search Form

Go

Recent Posts

Tags

Disclaimer

  • This blog is provided "AS IS" with no warranties, and confers no rights. This blog contains my own views and does not necessarily reflect the view of my employer.
    Locations of visitors to this page
    Add to Technorati Favorites

Sites I Visit

Archives

Browse by Tags

All Tags » Windows Server 2003 » Windows Server 2008 R2 (RSS)
A Couple Quick Active Directory One-Liners
Here is a few one-liner commands to help get info on your Active Directory environment.  I don’t think there is any mind blowing commands here but they’ve helped me out.  There are literally hundreds of these around the web as well as PowerShell...
Everything you wanted to know about Active Directory Replication but were afraid to ask
I was thinking about writing a post about Active Directory replication but thankfully soon realized that by doing so I could be severely depriving my kids and wife of a happy life.  Its not that Active Directory replication is bad or harmful, its...
Find and Disable Stale User Accounts
Stale user accounts can be a big problem…even more so when they are not disabled.  I’m a firm believer that if you have an account that is not being used it should be disabled.  However depending on the size of your Active Directory that can...
How to Delegate the Right to Delegate Kerberos Constrained Delegation
Wow, that is a lot of delegating…seriously how many times can you say it in one sentence.  Today’s post is one that threw me for a loop.  As a domain admin I have the right to configure constrained Kerberos delegation.  There may come a...
What are Service Principle Names (SPNs)?
SPNs seem to get more and more use these days so I thought it be nice to give an explanation of what SPNs are. SPNs are used for mapping a service to a user account. You will find SPNs used predominantly with Delegation and Impersonation and a lot of...
Lock Your Workstation
I’m sure you are like me when it comes to locking your desktop. You ALWAYS do it. Most if not all corporations today have a group policy in place that at least sets the Screen Saver on after a certain amount of time and requires a password for security...
Is my Active Directory Backed Up?
There are a ton of methods to backup Active Directory.  I’m not going to get into each method with this post.  What I am going to do is share another little command that can be run to check to see if your Active Directory was backed up and when...
Initiate Replication across all Partitions and DCs
It seems I'm always trying to remember this little command and its about time I put here where I can always access it in the future.  This isn’t a new command but it is a nifty little one that will initiate replication across your environment...
Windows Event log limitations
Not sure how many people modify the size of the Windows Event Logs but it is something that I like to do simply because the default sizes of most them is just not enough.  For example you may remember the default for your System and Application log...
Viewing your FSMO Role Holders Remotely
There are quite a few ways to view what your FSMO roles are.  You can use the GUI tools or even the following netdom command that I've shared in the past – netdom query fsmo However if you are working in a trusted multi-domain environment the...