joeware - never stop exploring... :)

A lot of times when people run into issues with LDAP based apps, one of the troubleshooting steps I recommend is to do a network trace and look at the LDAP traffic and then I hear… Hey, I try to but it looks like gibberish and WireShark says it can’t be decoded or something… By […]

So I uninstalled Microsoft Expressions Web 1 and installed Microsoft Expressions Web 2 on my main workstation (SFMFXP32) this weekend. Then a familiar problem popped up which kind of ticks me off as I bugged this with Microsoft quite some time before and I know people have been complaining about it since at least 2006. […]

I saw a posting that had a piece on AdFind at ActiveDir.org that made me want to post something to my blog here for anyone who doesn’t read ADOrg… Basically one of the posters came up with a good way of setting local admin passwords on machines and part of the solution was to use […]

I was talking with a good friend this evening and he asked a question which I would normally consider trivial but the way he put it made me go, oh wow, put that way, that is kind of interesting… It should work the way you would intuit it to work… The question was, how do […]

In one of my old posts (September 2005) I had some vbscript code to convert an octet string GUID to a friendly GUID string. Well I recently received an email from fellow MVP Michael Smith letting me know he found a bug and a new function that was corrected. First thought in my mind was… […]

In my previous article on DN formats (http://blog.joeware.net/2008/05/03/1226/) I talked about the various Base DN shortcut formats available and hinted that AdFind has some shortcuts of its own. To me these are all, well they aren’t even second nature because I use them almost exclusively. I am bringing it up because even people who use […]

So Active Directory can do some cool things around distinguishedNames (DNs) that many developers even this long into the availability of the product don’t know or take advantage of. I mention this because yet again I ran into a case where some developer/application integrator was unhappy about how easy it is to move users around […]

I know some of you may read that and choke on your bagel or candy bar or coke or whatever else you were shoving down your throat as you relaxed and sat back to read what I have to say today… But I mean it! I had an unfortunate issue where one of my virtual […]

I received the following email: If I wanted to copy the IP Phone attribute of each user into Exchange Extension attribute13 for that user, would AdMod work?  and if so, can you point me to and example? This is actually extremely easy with adfind and admod since I added the -adcsv capability… This is however […]

This is a nice article on Active Directory Limits http://technet2.microsoft.com/windowsserver/en/library/d2fc40d8-50ba-450c-959b-28fd7e31b9961033.mspx?mfr=true   Summary Max Objects – 231 minus 255 or ~2.15 Billion or 2,147,483,394 Max SIDs – 230 or ~1 billion or 1,073,741,824 Max Group Membership for Security Principal – 1015 groups Max FQDN Length – 64 characters Max File Name Length – 260 characters [1] […]