Information about joeware mixed with wild and crazy opinions...
Try not to use Domain Local Groups to grant READ access to data in any partition that can replicate to domain controllers outside of the Domain Local Group’s scope. This can cause a very inconsistent experience and absolute chaos for anyone affected by that permissioning. Like data that can go into the PAS of a […]
I fail to see the benefit of changing from servermanagercmd –install adlds to import-module servermanager add-windowsfeature adlds Rating 3.00 out of 5
So I slipped a new version of AdFind and AdMod out to the web site in the last week, AdFind on the Ides of March and AdMod today. They were both minor updates though the AdMod update allows me to do something with clearing protected DACLs that I will try to write up in a […]
(I stole this from Brian’s blog, it is worth repeating…) Starting at 12:01 AM Pacific (GMT –7), O’Reilly will be offering the eBook version of my book, Active Directory, 4th Edition at 50% off. What’s more is they’ll be donating nearly all of the revenue to the Japanese Red Cross Society. If you don’t already […]
I finally moved my software dev machine from Vista to Windows 7. Specifically a Windows 7 SP1 x64 (Intel Core i5) laptop. All source code has been moved to the new machine and the old Vista laptop will be put into a box for a few months before I attempt to reload it with Windows […]
First and foremost… ADAM rocks. 🙂 With that being said… I regularly like to pull users and groups from AD and stuff them into ADAM. In general the normal ADAM schema is sufficient but for users and groups from an ADAM standpoint, ADAM is a positive step away from the SAM DB and as part […]
As mentioned previously, AdFind V01.43.00 had some issues with non-Microsoft LDAP directories due to a check I added to detect if paging was available[1]. I mistakenly assumed that RootDSE’s would all return the supportedControl attribute by default. I fixed that. 🙂 In the meanwhile I took the time to work on a few other things […]
As mentioned in the comment to the release blog entry, the newest released version of AdFind has an issue with LDAP directories that don’t return the supportedControl attribute by default in the standard RootDSE retrieval. If you only use AdFind for Active Directory or ADAM/ADLDS, that is not an issue for you. If you use […]
The Kleine Schmetterling release of AdFind/AdMod has hit the free tools portion of the web site. I will be back to write up more on the new features and fixes, right now I am going to go to bed, I just spent the last hour fighting with MSFT Expressions Web where it kept crashing on […]
I had an email from someone who needed to expire a bunch of userids immediately. They wanted to expire the accounts instead of disabling the accounts because they wanted the change to be “self-documenting” in terms of when it occurred. They also wanted to expire the accounts instead of the passwords because they didn’t want […]
[joeware – never stop exploring… :) is proudly powered by WordPress.]
