AGPM Production GPOs (under the hood)
Hello, Sean here. I’m a Directory Services engineer with Enterprise Platforms Support in Charlotte. Today, I’d like to talk about the inner workings of Advanced Group Policy Management (AGPM). Let’s...
View ArticleAGPM Operations (under the hood part 2: check out)
Sean again, here for Part 2 of the Advanced Group Policy Management (AGPM) blog series, following the lifecycle of a Group Policy Object (GPO) as it transitions through various events. In this...
View ArticleAGPM Operations (under the hood part 3: check in)
Sean again, here for Part 3 of the Advanced Group Policy Management (AGPM) blog series, following the lifecycle of a Group Policy Object (GPO) as it transitions through various AGPM-related events. In...
View ArticleAGPM Operations (under the hood part 4: import and export)
Sean again, here for Part 4 of the Advanced Group Policy Management (AGPM) blog series, following the lifecycle of a Group Policy Object (GPO) as it transitions through various events. In this...
View ArticleForcing Domain Admins to use AGPM (but not really)
Hi folks, Sean Wright here for my final post. So, you have AGPM installed, but your Domain Admins continue using GPMC to create, delete, and modify Group Policy. You’ve asked nicely, but that hasn’t...
View ArticleAskDS is 12,614,400,000,000,000 shakes old
It’s been four years and 591 posts since AskDS reached critical mass. You’d hope our party would look like this: But it’s more likely to be:Without you, we’d be another of those sites that glow red...
View ArticleTroubleshoot ADFS 2.0 with these new articles
Hi all, here’s a quick public service announcement to highlight some recently published ADFS 2.0 troubleshooting guidance. We get a lot of questions about configuring and troubleshooting ADFS 2.0, so...
View ArticleWindows 10 Group Policy (.ADMX) Templates now available for download
Hi everyone, Ajay here. I wanted to let you all know that we have released the Windows 10 Group Policy (.ADMX) templates on our download center as an MSI installer package. These .ADMX templates are...
View ArticleManage Developer Mode on Windows 10 using Group Policy
Hi All, We’ve had a few folks want to know how to disable Developer Mode using Group Policy, but still allow side-loaded apps to be installed. Here is a quick note how to do this. (A more AD-centric...
View ArticleSHA1 Key Migration to SHA256 for a two tier PKI hierarchy
Hello. Jim here again to take you through the migration steps for moving your two tier PKI hierarchy from SHA1 to SHA256. I will not be explaining the differences between the two or the supportability...
View Article“Administrative limit for this request was exceeded" Error from Active Directory
Hello, Ryan Ries here with my first AskDS post! I recently ran into an issue with a particular environment where Active Directory and UNIX systems were being integrated. Microsoft has several...
View ArticleUsing Repadmin with ADLDS and Lingering objects
Hi! Linda Taylor here from the UK Directory Services escalation team. This time on ADLDS, Repadmin, lingering objects and even PowerShell…. The other day a colleague was trying to remove a lingering...
View ArticleSpeaking in Ciphers and other Enigmatic tongues…update!
Hi! Jim Tierney here again to talk to you about Cryptographic Algorithms, SCHANNEL and other bits of wonderment. My original post on the topic has gone through a rewrite to bring you up to date on...
View ArticleDoes your logon hang after a password change on win 8.1 /2012 R2/win10?
Hi, Linda Taylor here, Senior Escalation Engineer from the Directory Services team in the UK. I have been working on this issue which seems to be affecting many of you globally on windows 8.1, 2012 R2...
View ArticlePreviewing Server 2016 TP4: Temporary Group Memberships
Disclaimer: Windows Server 2016 is still in a Technical Preview state – the information contained in this post may become inaccurate in the future as the product continues to evolve. More specifically,...
View ArticleAre your DCs too busy to be monitored?: AD Data Collector Set solutions for...
Hi all, Herbert Mauerer here. In this post we’re back to talk about the built-in AD Diagnostics Data collector set available for Active Directory Performance (ADPERF) issues and how to ensure a useful...
View ArticleSetting up Virtual Smart card logon using Virtual TPM for Windows 10 Hyper-V...
Hello Everyone, my name is Raghav and I’m a Technical Advisor for one of the Microsoft Active Directory support teams. This is my first blog and today I’ll share with you how to configure a Hyper-V...
View ArticleThe Version Store Called, and They’re All Out of Buckets
Hello, Ryan Ries back at it again with another exciting installment of esoteric Active Directory and ESE database details! I think we need to have another little chat about something called the version...
View ArticleDeploying Group Policy Security Update MS16-072 \ KB3163622
My name is Ajay Sarkaria & I work with the Windows Supportability team at Microsoft. There have been many questions on deploying the newly released security update MS16-072. This post was written...
View ArticleAccess-Based Enumeration (ABE) Concepts (part 1 of 2)
Hello everyone, Hubert from the German Networking Team here. Today I want to revisit a topic that I wrote about in 2009: Access-Based Enumeration (ABE) This is the first part of a 2-part Series. This...
View Article