joeware - never stop exploring... :)

So while chatting with an admin this week he mentioned that his company synced data from their single domain forest into an external database with a primary key of sAMAccountName. This was a topic of interest for him because they had just learned it was possible to have two different objects in Active Directory with […]

Many moons ago I wrote a post about how a TechNet article on the default tombstone lifetime was wrong. That TechNet article eventually ended up getting corrected at some point though it doesn’t seem to be properly linked anymore to the GUID URL that I had for it – so much for theory of never […]

Is anyone out there using 2FA for AD as a best practice or their standard? I am not asking about things like VPN, I am simply meaning basic AD auth once you are already on the internal network.     joe Rating 3.00 out of 5

If you haven’t noticed, Radio Shack is making an honest attempt at wrangling in all the geeks/nerds that used to go hang out there back in the 80’s. Check out this DIY website they have set up, lots of cool Arduino projects. http://www.radioshackdiy.com/ If there were only more time in the days for me… I […]

I recently had a conversation with an Active Directory engineer who was working on some token bloat issues. As AD has pushed past the decade mark I seem to be seeing/hearing more and more of this bloat problem as many companies continue consolidating groups into and creating new groups in AD without cleanup or normalization. […]

As some of you may have noticed over the last few weeks as I found time I was posting test posts to the blog after several of the most recent "real"[1] posts got FUBAR’ed after posting and I wasn’t bright enough to go back and look at the post right away to validate that it […]

This is kind of interesting if you are into that sort of thing. http://fabiensanglard.net/quake2/index.php Rating 3.00 out of 5

So I had to write another C# program recently for work and my thoughts on C# is that it is growing on me, it reminds me very much of PERL actually. However I wish C# could be compiled directly to native machine code. If it could be compiled directly to native machine code, I would […]

So we have, I think, established that people didn’t think the HP TouchPad sucked… It was just priced a bit high. Now that the TouchPad fire sale is in full effect all of the main websites you could buy it through at the discounted price are either broken or out of stock. If they had […]

Need to check the ages on the trusts in your forest?[1] for /f "tokens=*" %i in (‘adfind -sc domainlist‘) do adfind -h %i -binenc -f "&(samaccounttype=805306370)(pwdlastset<={{CURRENT:-180d}})" canonicalname name pwdlastset -tdcd -csv -nodn -sort pwdlastset       joe     [1] If you don’t audit your trusts to see if they have gone stale, you certainly […]