Looks like Facebook might be coming to its senses…
http://www.theverge.com/2014/5/22/5739744/facebook-changes-default-privacy-of-posts-from-public-to-friends
Apr 29 2014
AD Reading: How Key Active Directory Components Work
The following links provide in-depth information on how key Active Directory components work.
- AD Data Store
- Windows Server 2003 Active Directory Branch Office Guide
- Bridgehead Server Selection (Windows 2008 R2)
- AD Replication Model
- Certificate Revocation & Status Checking
- Core Group Policy
- DNS
- How DNS Support for AD works
- Windows 2000 DNS
- DFS
- Fine-Grained Password Policy
- Foreign Security Principals & AD
- FRS
- FSMOs
- Kerberos 5
- Kerberos for the Busy Admin
- Windows 2000 Kerberos Authentication
- Managed Service Accounts
- TCPIP
Apr 29 2014
AD Reading: Windows Server 2012 Active Directory Features
The following are extremely useful resources for Windows Server 2012 Active Directory Features.
Windows 2012 Features
- TechED: What’s New in Active Directory in Windows Server 2012 (Dean Wells’ presentation at TechEd)
- How many Windows Server 2012 domain controllers do I need initially and where should I put them?
- PowerShell version 3 commandlets including Active Directory Replication and Topology:Introduction & Advanced Topics
Group Managed Service Accounts (gMSA)
- Getting Started with Group Managed Service Accounts
- Group Managed Service Accounts Overview
- Windows Server 2012: Group Managed Service Accounts
RID Protection
- TechNet Article: Managing RID Issuance
- ASKDS Blog Article: Managing RID Issuance in Windows Server 2012
DC Cloning & SafeGuarding
- Virtual Domain Controller Cloning in Windows Server 2012
- Microsoft Article: Introduction to Active Directory Domain Services (AD DS) Virtualization (Level 100)
- Microsoft Virtual Machine Generation ID Whitepaper document
- Virtualize your Windows Server 2012 domain controllers
- Things to consider when you host Active Directory domain controllers in virtual hosting environments
- Virtualized Domain Controller Deployment and Configuration
- ms-DS-Generation-Id Attribute
- Virtual Domain Controller Cloning in Windows Server 2012
- Safely Cloning an Active Directory Domain Controller with Windows Server 2012 – Step-by-Step
- Virtualized Domain Controller Deployment and Configuration
- New-ADDCCloneConfigFile
Dynamic Access Control (DAC)
- Introduction to Windows Server 2012 Dynamic Access Control
- Understand and Troubleshoot Dynamic Access Control in Windows Server 2012 (Word doc download)
- Getting started with Central Access Policies – Reducing security group complexity and achieving data access compliance using Dynamic Access Control
- MSDN Article on Dynamic Access Control (DAC)
- DAC Scenario
Kerberos FAST
- RFC6113 A Generalized Framework for Kerberos Pre-Authentication
- What’s New in Kerberos Authentication
- Access Control and Authorization Overview– covers domain requirements for Kerberos armoring and group policy settings.
Kerberos Constrained Delegation Enhancements
- Kerberos Constrained Delegation Overview
- How Windows Server 2012 Eases the Pain of Kerberos Constrained Delegation
o Part 1
o Part 2
Kerberos Proxy
Apr 29 2014
AD Reading: Active Directory Group Policy
The following are extremely useful resources for understanding the Active Directory Group Policy.
Group Policy
o Core Group Policy Architecture
o Core Group Policy Physical Structure
o Core Group Policy Processes and Interactions
o Network Ports Used by Group Policy
o Change and Configuration Management
o Core Group Policy Infrastructure
o Core Group Policy Dependencies
- Group Policy Components
- Group Policy Preferences Overview Whitepaper (download)
- (Vista) – TroubleshootingGroup Policy Using Event Logs
- Interpreting Userenv log files
- Designing a Group Policy Infrastructure
o Planning Your Group Policy Design
o Designing Your Group Policy Model
o Additional Resources for Group Policy Infrastructure
o What Is Group Policy Management Console?
o How Group Policy Management Console Works
o Group Policy Management Console Tools and Settings
o What Is Group Policy Object Editor?
o How Group Policy Object Editor Works
o Group Policy Object Editor Tools and Settings
- Group Policy Loopback processing
o Part 1: Circle Back to Loopback
o Part 2: Back to the Loopback: Troubleshooting Group Policy loopback processing
Apr 29 2014
AD Reading: Active Directory Read Only Domain Controller
The following are extremely useful resources for the Active Directory Read Only Domain Controller (RODC).
Read Only Domain Controller
o Understanding Planning and Deployment for Read-Only Domain Controllers
o Appendix A: RODC Technical Reference Topics
o Appendix B: RODC-Related Events
o Appendix C: Acronyms Used in This Guide
o Installing Remote Server Administration Tools
o Administering the Password Replication Policy
o RODC Placement Considerations for Windows Server 2003 Domains
o Prerequisites for Deploying an RODC
o Known Issues for Deploying an RODC
o Steps for Administering an RODC
o RODC Frequently Asked Questions
o Appendix A: Client Operations
o Appendix B: How the Authentication Process Works with RODCs
o Appendix C: Application Compatibility with RODCs
o Appendix D: Steps to Add an Attribute to the RODC Filtered Attribute Set
- RODC Frequently Asked Questions
- Adding Attributes to the RODC Filtered Attribute Set
- Description of the Windows Server 2008 read-only domain controller compatibility pack for Windows
- Adding Attributes to the RODC Filtered Attribute Set
- Using the confidentiality bit in 203 SP1
- RODC DNS Client Update Mechanism
- The RODC requests the updateusing aspecial operation calledreplicateSIngleObject:
- BitLocker implementation for RODC.
Apr 29 2014
AD Reading: Windows Server 2008 Active Directory Features
The following are extremely useful resources for Windows Server 2008 Active Directory Features.
Server 2008 AD Features
- Changes in Functionality from Windows Server 2003 with SP1 to Windows Server 2008
- AD DS Fine–Grained Password and Account Lockout Policy Step–by–Step Guide
- Fine-Grained Password Policy and “Urgent Replication”
- What’s New in AD DS: Active Directory Best Practices Analyzer
- AD DS Auditing Step–by–Step Guide
- Managed Service Accounts
- Managed Service Accounts: Understanding, Implementing, Best Practices, and Troubleshooting
- Changes in Functionality from Windows Server 2003 with SP1 to Windows Server 2008 (doc download)
- What’s New in Active Directory Domain Services in Win2008
- What’s New in Active Directory Domain Services in Win2008 R2
- Changes in Functionality from Windows Server 2008 to Windows Server 2008 R2
- Getting the Effective Audit Policy in Windows 7 and 2008 R2
- What’s New in AD DS: Active Directory Module for Windows PowerShell
Apr 29 2014
AD Reading: Active Directory Replication
The following are extremely useful resources for understanding the Active Directory Replication.
Replication
o Active Directory KCC Architecture and Processes
o Replication Topology Physical Structure
o Performance Limits for Replication Topology Generation
o Goals of Replication Topology
o Topology-Related Objects in Active Directory
o Network Ports Used by Replication Topology
o What Is the Active Directory Replication Model?
o How the Active Directory Replication Model Works
o Active Directory Replication Tools and Settings
o What Is Active Directory Replication Topology?
o How Active Directory Replication Topology Works
o Active Directory Replication Tools and Settings
- AD Branch Office Guide (download)
- Microsoft Active Directory Topology Diagrammer
- The Role of the Inter–Site Topology Generator in Active Directory Replication
- How to view and set LDAP policy in Active Directory by using Ntdsutil.exe
- How to configure the Windows Time service against a large time offset
- BridgeHead Server Selection
- Active Directory Load BalancingTool (ADLB)
- Configuring Change Notification on a MANUALLY created Replication partner
Apr 29 2014
AD Reading: Active Directory DNS & Name Resolution
The following are extremely useful resources for understanding the Active Directory DNS & Name Resolution.
DNS & Name Resolution
o DNS Processes and Interactions
o DNS Support for Active Directory Architecture
o DNS Physical Structure in Support of Active Directory
o DNS Support for Active Directory Processes and Interactions
o Network Ports Used by DNS in Support of Active Directory
o New Features of the Windows 2000 DNS
o Designing a DNS Namespace for the Active Directory
o Summary
o Glossary
o What Is DNS Support for Active Directory?
o How DNS Support for Active Directory Works
o DNS Support for Active Directory Tools and Settings
- GlobalNames Zone Deployment(document download)
- Description of the netmask ordering feature and the round robin feature in Windows Server 2003 DNS
- How to reconfigure an _msdcs subdomainto a forest–wide DNS application directory partitionwhen you upgrade from Windows 2000 to Windows Server 2003
- Event ID 4515 is logged in the DNS Server log in Windows Server 2003
- Tools / concepts to be familiar with: NSLOOKUP, DNSCMD (all), DNSLINT, etc
Apr 29 2014
AD Reading: Active Directory DFS & FRS
The following are extremely useful resources for understanding the AActive Directory DFS & FRS.
DFS Namespaces (DFSN) & DFS Replication (DFSR)
o DFS Client and Server Compatibility
o Characteristics of Namespace Types
o DFS Physical Structures and Caches
o DFS Processes and Interactions
o Enable Access-Based Enumeration on a Namespace
o Enable or Disable Referrals and Client Failback
o Change the Amount of Time That Clients Cache Referrals
o Set the Ordering Method for Targets in Referrals
o Set Target Priority to Override Referral Ordering
o Using Inherited Permissions with Access-Based Enumeration
- Common DFSN Configuration Mistakes and Oversights
- DFS Replication: What’s new in Windows Server™ 2008
- DFS Replication: Frequently Asked Questions (FAQ)
- Schema Extension Requirements for running Windows Server 2008 DFSR
- The Case for Migrating SYSVOL to DFSR
- SYSVOL Replication Migration Guide: FRS to DFS Replication
o SYSVOL Migration Conceptual Information
o Troubleshooting SYSVOL Migration
o SYSVOL Migration Reference Information
o 1: SYSVOL Migration Series: Part 1 – Introduction to the SYSVOL migration process
o 2: SYSVOL Migration Series: Part 2 – Dfsrmig.exe: The SYSVOL migration tool
o 3: SYSVOL Migration Series: Part 3 – Migrating to the Prepared State
o 4: SYSVOL Migration Series: Part 4 – Migrating to the ‘REDIRECTED’ state
o 5: SYSVOL Migration Series: Part 5 – Migrating to the ‘ELIMINATED’ state
File Replication Service (FRS)
Apr 28 2014
AD Reading: Active Directory Client Interaction
The following are extremely useful resources for understanding the Active Directory Client Interaction.
Client Interaction
o Domain Controller Name Registration
o Domain Controller Location Process
o Finding a Domain Controller in the Closest Site
- IP/DNS DC Locator Algorithm(This is also a great general DNS review, but review this specific named section)
- Domain Locator Across a Forest Trust
- How Domain Controllers are Located Across Trusts
- DsgetDCname – particularly the piece about the new stickiness feature
Recent Comments