joeware - never stop exploring... :)

Not sure why they did this without making it so it works from legacy clients, seriously hampers the use of it for some time. Reminds me of the crap with doing admin work from XP, you couln’t with the normal tools until Server 2003 came along. It would be nice if those two sides of […]

This was sort of an aside to a question I discussed with a fellow MVP today… Get hex format of domain SID Send to new DC with operational attribute becomePDC Simple huh? Ok here is a little more detail.   Get hex format of domain SID adfind -b dc=domain,dc=com -s base objectsid -sidbinout Of if […]

Anyone recall that claim besides me. Oh no, not only will NTFS not fragment, it cannot fragment… Yeah, that was being said not too long ago really… I started thinking about that again when I ran an interesting little PC Pitstop program someone asked me about and it told me I was really fragmented… This […]

I was reading through some of the blogs I monitor and Larry Osterman’s blog referred to a blog entry from Dare Obasanjo (and another) talking about why Developers SHOULD NOT be doing your ops. I agree, dev should not be doing ops. As Larry says the skill sets are slightly different. More importantly, the goals […]

So how do I display what info is in the negative cache? From the command line… Also, the DNSCMD tool allows you to show the positive cache, but I don’t see how to have it show the entire positive cache versus just the cache for specific domains that you specify. I looked at what it […]

This question came in the newsgroups today and I thought it was a good one to show off an AdFind feature that you won’t find duplicated in many places… The ability to specify dates for those nasty Int8 fields… The question was (paraphrased)…. How do I find all accounts that have a specific Account Expires […]

admod -b dc=domain,dc=com lockoutThreshhold::[newvalue] ex: admod -b dc=domain,dc=com lockoutThreshhold::25   Rating 3.00 out of 5

I haven’t loaded E12 yet to play with it but if this is true… thank you! Much better than that horrendous dare I say, yes I dare, moronic naming in place now… Err let me start at the beginning… The EHLO blog mentions that since they reorganized things internally and Administrative Groups don’t need to be exposed […]

Scoble asks that question. My response like for a lot of things is “It depends… what for?”. For the most part, I can do days or weeks without tech. I hate phones and even though I have a cell phone I rarely carry it with me unless required. I don’t have a separate PDA. About […]

I was recently (summer 2006) going through a document produced by MCS (Microsoft Consulting Services) last year (fall 2005) for an Active Directory design and came across a remarkable statement. The statement was that if you take two forests and connect them with a forest trust, the two forests become a single forest. If you have […]