Directory Services/Active Directory - All Comments

Using AD-Powershell to protect OUs from accidental deletion

Directory Services/Active Directory — Wed, 11 Nov 2009 14:30:52 GMT

If you use Active Directory-Users and –Computers from Windows Server 2008 or higher (also ships with

Windows Server 2008 R2: Active Directory Recycle Bin

DevAdmin Blog — Mon, 09 Nov 2009 23:07:28 GMT

Windows Server 2008 R2: Active Directory Recycle Bin

re: Powershell's social responsibility

Ulf B. Simon-Weidner — Wed, 16 Sep 2009 09:08:12 GMT

James - this is not serious - I just didn't think that a smiley is necessary ;)

re: Clarifications of a stopped Active Directory

Ulf B. Simon-Weidner — Wed, 16 Sep 2009 09:01:36 GMT

Hi Joe,

there are two many things about stopped DCs. Other DCs are getting events. DNS is not stopped and will respond with file-based entries but not domain based. Clients will find the DNS-Server but not the information they request. And the main one for me is "accidentally restarting it" - that's the reason why I wouldn't want to use the feature in a recovery scenario to ensure that I'm able to rollback. One Admin who things it should be running, one power-outage or anything else and it's starting again and replicating. To rely my recovery/roll-back-strategy on a volatile state like this ... without me ;)

For those cases I still prefer virtualization or completely powering down, sometimes even additional to stopping replication or disabling the network adapter (or network in virtualization). Just to make sure that it's not replicating at one point.

re: Powershell's social responsibility

Rob — Tue, 15 Sep 2009 20:53:27 GMT

-OrElse in place of -Force?

re: Powershell's social responsibility

June Blender — Tue, 15 Sep 2009 19:59:55 GMT

3. All shared PowerShell tools (scripts, functions, cmdlets, modules, and snap-ins should have help (with examples).

re: Powershell's social responsibility

James Pogran — Tue, 15 Sep 2009 14:25:47 GMT

No, not at all. The default function of an executable is to execute, not to ask permission. Cmdlets, functions, scripts, are all there to perform work. If you want to use whatif, use it. Don't force contrary behavior on the rest of the world.

re: Clarifications of a stopped Active Directory

joe — Tue, 15 Sep 2009 14:09:45 GMT

Hey Ulf,

Do we still recommend powered down recovery DCs anymore? I would think possibly for short terms unrecoverable mods but in that case, I may be missing something, but why isn't a stopped DSA good enough? Possibly this is reference to an enforced lag site? And even in that case I am not sure why a stopped DSA isn't just as effective. Have you hit specific issues that pop up with the DSA stopped for some prolonged period?

joe

re: Powershell's social responsibility

joe — Tue, 15 Sep 2009 14:04:58 GMT

Because the commands just aren't long enough already...

re: Powershell's social responsibility

BPuhl — Tue, 15 Sep 2009 13:43:46 GMT

I imagine this as the same world, where when you try to do something, the UI experience is like this:

"Are you sure?" [yes]

"Are you really sure?" [yes]

"Are you really, really sure?" [yes]

Having personally been responsible for multiple domain-wide issues, there is no amount of "social responsibility" that will prevent a determined administrator from doing something dumb.

Though I will admit, I'm a big fan of the -whatIf concept... :)

re: Exchange 2010 RC touches AdminSDHolder

Tomek — Fri, 11 Sep 2009 19:35:35 GMT

I don't know how it will be handled in RTM of Ex2010 - I know that product group is working on a solution for this one. In the meantime I think that Brian Puhl has described pragmatic approach to this change ... imav8n.wordpress.com/.../adventures-of-exchange-2010-and-adminsdholder

See You on TEC :).

Exchange 2010 RC touches AdminSDHolder

Directory Services/Active Directory — Wed, 09 Sep 2009 07:51:50 GMT

I was just pointed to the blog of David Loder who’s pointing out that the Release Candidate of Exchange

re: Back to live

Luc Geurts — Wed, 14 May 2008 11:14:30 GMT

Ulf, glad youre back.

re: Back to live

Tademos — Wed, 14 May 2008 10:49:36 GMT

Hi Ulf

Good to have you back!

Tademos

2K3 - Register PTR nur unsicher m?glich - Seite 2 - MCSEboard.de MCSE Forum

2K3 - Register PTR nur unsicher m?glich - Seite 2 - MCSEboard.de MCSE Forum — Fri, 04 Apr 2008 22:09:33 GMT

Pingback from 2K3 - Register PTR nur unsicher m?glich - Seite 2 - MCSEboard.de MCSE Forum

http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/05/29/49659.aspx

http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/05/29/49659.aspx — Sun, 16 Mar 2008 20:26:55 GMT

Pingback from msmvps.com/.../49659.aspx

http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/03/12/windows-server-quot-longhorn-quot-granular-password-settings.aspx

Sun, 16 Mar 2008 20:26:43 GMT

Pingback from msmvps.com/.../windows-server-quot-longhorn-quot-granular-password-settings.aspx

re: A Directory Services Geek's View on Active Directory Recovery in Windows Server 2008

BrianB — Thu, 06 Mar 2008 18:04:50 GMT

This was one of the most beneficial session of the conference. I can't wait for the Slide Deck to come out. Thanks Ulf!

re: A Directory Services Geek's View on Active Directory Recovery in Windows Server 2008

Danijel — Tue, 04 Mar 2008 01:44:07 GMT

great Script :-)

re: HEROS happen {here}

Joerg — Sun, 24 Feb 2008 10:50:22 GMT

Hi Ulf,

i was at Microsoft Launch Event in Frankfurt, too and visited 2 of your Session (grey Shirt in the 2 or 3d row).

I was very excited to hear your presentations and i learned much more about AD and how many i can do with scripts.

It was very nice to see and hear you and the Event was so big and very cool.

Many thanks and Kind regards

Joerg