joeware - never stop exploring... :)

Information about joeware mixed with wild and crazy opinions...

5/9/2007

WTF WOW

by @ 5:06 pm. Filed under rants

I use the Wide Open West (WOW) Cable company for my internet. In general I love it. Great speeds, price was great, not so great anymore but ok.

Well today something occurred that could get me to switch providers regardless of cost at a moment’s notice, I sent an email to WOW to see what the explanation was and to express my displeasure.

I was looking something up for work and all of a sudden the direct URL I typed in that I know was correct (something seriously as simple as like www.google.com) was redirected to a page that said something like “WIDE OPEN WEST – An Amber Alert has been issued for your area”. Imagine zero to completely pissed off in a little less than .05 seconds…

My internet providers are an onramp to the internet, I do not expect them to do ANYTHING with the URLs I enter other than return the content. I am sitting in my house, I am not going to see anyone who fits the description there. I am not going to go out and start hunting. All you are doing is pissing me off by hijacking the service I am paying for.

If you work for WOW and can give a good explanation of this that truly and actually justifies it and shows where I might have signed off saying that I was fine with you messing with my onramp, then email me.

  joe

Rating 3.00 out of 5

5/7/2007

150,000 Layoffs for IBM Global Services…

by @ 9:26 pm. Filed under general

Full story here:

http://www.pbs.org/cringely/pulpit/2007/pulpit_20070504_002027.html

Snippet:

Last year I wrote a series of columns on management problems at IBM Global Services, explaining how the executive ranks from CEO Sam Palmisano on down were losing touch with reality, bidding contracts too low to make a profit then mismanaging them in an attempt to make a profit anyway, often to the detriment of IBM customers. Those columns and the reaction they created within the ranks at IBM showed just how bad things had become.

Well they just got worse.

This is according to my many friends at Big Blue, who believe they are about to undergo the biggest restructuring of IBM since the Gerstner days, only this time for all the wrong reasons.

The IBM project I am writing about is called LEAN and the first manifestation of LEAN was this week’s 1,300 layoffs at Global Services, which generated almost no press. Thirteen hundred layoffs from a company with more than 350,000 workers is nothing, so the yawning press reaction is not unexpected. But this week’s “job action,” as they refer to it inside IBM management, was as much as anything a rehearsal for what I understand are another 100,000+ layoffs to follow, each dribbled out until some reporter (that would be me) notices the growing trend, then dumped en masse when the jig is up, but no later than the end of this year.

LEAN began last week with a 10-city planning meeting for Global Services, which wasn’t, by the way, to decide who gets the boot: those decisions were apparently made weeks ago, though senior managers have been under orders to keep the news from their affected employees.

I have friends that work at IBM, or maybe I should say now, had friends that worked at IBM, I haven’t spoken to them recently, they may be gone now.

I think many, if not all, of the US based Service companies are likely in the same or a similar predicament.

Cringely further says

LEAN is about offshoring and outsourcing at a rate never seen before at IBM. For two years Big Blue has been ramping up its operations in India and China with what I have been told is the ultimate goal of laying off at least one American worker for every overseas hire. The BIG PLAN is to continue until at least half of Global Services, or about 150,000 workers, have been cut from the U.S. division. Last week’s LEAN meetings were quite specifically to find and identify common and repetitive work now being done that could be automated or moved offshore, and to find work Global Services is doing that it should not be doing at all. This latter part is with the idea that once extraneous work is eliminated, it will be easier to move the rest offshore.

As I have said before, I think Asian outsourcing is going to kill our IT and it isn’t going to help the companies very much long term either but then they aren’t looking long term, they are looking at short term gains to increase stock price and pad the pockets of executives and the top share holders. 

IMO, IT needs to work smarter with more automation, not find huge numbers of people on foreign third world or near third world soil who will work for dimes and pennies on the dollar. All using that cheap foreign labor is going to do is drive the true knowledge workers out of the business so that it will all go downhill and when it is absolutely necessary to have the really good IT workers to find the truly efficient methods of working.

The downsizing doesn’t surprise me, it doesn’t bother me “a lot”, it is probably necessary because we do stuff too manually and we are finding out it costs too much to do that. However, I would like to see intelligent downsizing, not sweeping downsizing of any “on shore” resources to be replace one for one or even higher ratios with cheap Asian labor to do the work manually. Doing this just time shifts the problem, instead of being today’s problem it is tomorrow’s problem, only there will be interest to pay as well then.

Use intelligent downsizing to cut the fat, this includes any deadweight management as well as deadweight I.C.s. Keep the folks who actually work intelligently. Those who automate things where they can, those looking for efficiencies regularly. Done in that way, we may keep the more expensive IT folks but we also get to keep our knowledge and IT intelligence.

Of course Cringely hits on another good point… “bidding contracts too low”.  It seems the Services companies are so eager to get ANY business they will quote ridiculous pricing and then appear to be stunned when they can’t make any money and the customer truly does suffer with the poor to absolutely shitty service that they get for that horrendous pricing.

On the positive side, I will be retired before this completely screws our IT and probably don’t have to worry about my ability to be employed, but I tend to take longer term views on things whether I am involved in that future or not and this isn’t a good thing being done.

   joe

Rating 2.00 out of 5

5/4/2007

PSOMgr Released…

by @ 4:28 pm. Filed under tech

For those of you who don’t surf my free tools page on a daily basis, you will be happy to know that the world infamous and to date ONLY official tool to manage Password Setting Policy Objects in Longhorn Active Directory is now available as a free download from www.joeware.net.

This utility is a smash runaway hit even if it is me saying so myself. 🙂 It was heartily not approved nor disapproved by Nathan Muggli at the recent Directory Experts Conference 2007 who when asked about it could only say…. “well I can’t say anything about it one way or the other as I haven’t tried it…” or something there about.

I am going to do things a little differently with this utility or at least I expect to. I have it set up into three development channels, basic command line, command line extended, and GUI. The basic command line version will now and always be free, the extended command line and GUI versions will come later with more capability and have some price associated with them. The idea is that most everyone should be fully capable of working with the basic version but if they want some cool nifty extra features, they get to show their approval by paying for them. No release dates on the for pay versions yet, I am still trying to work out a nice logo and web site design for them as well as testing what I have. Since Longhorn won’t be officially released until at least the end of the year, I should have enough time to get things into place.

You can find PSOMgr on the page with all of my other free utilities here –> http://www.joeware.net/freetools/ or if you want to go directly to the utility and not see the wonderful picture of our Director of R&D, go here –> http://www.joeware.net/freetools/tools/psomgr/index.htm

 

All feedback, as usual, greatly appreciated.

 

  joe

Rating 3.00 out of 5

5/3/2007

Answers at the expense of Knowledge Part Deux

by @ 11:07 pm. Filed under general

Another example of someone looking for answers without knowledge that ran into in the newsgroups… I wish there was some way to determine what country was involved…

Subject: How to edit host file using GPO
Date: Wed, 2 May 2007 07:06:13 -0700
From: Shanthi <Shanthi@discussions.microsoft.com>
Newsgroups: microsoft.public.windows.server.active_directory

I want to add some more lines in all clients host file thru GPO. Please
advise me how to do

Shanthi

I followed up with

——– Original Message ——–
Subject: Re: How to edit host file using GPO
Date: Wed, 02 May 2007 14:16:37 -0400
From: Joe Richards [MVP] <humorexpress@hotmail.com>
Newsgroups: microsoft.public.windows.server.active_directory
References: <B839E076-5563-4E8D-8BD2-689759347A3F@microsoft.com>

I wouldn’t advise it…

But if you absolutely must, I would set up a startup script that piped
the additional lines into the file like

echo blah blah blah >>path_to_file

This should be more than enough for most any person who is minimally qualified to be a Domain Admin to follow, at least IMO. While there may not be enough to run there is at least enough to do a google and look for more help. The response back to me was

——– Original Message ——–
Subject: Re: How to edit host file using GPO
Date: Wed, 2 May 2007 22:42:35 -0700
From: Shanthi <Shanthi@discussions.microsoft.com>
Newsgroups: microsoft.public.windows.server.active_directory
References: <B839E076-5563-4E8D-8BD2-689759347A3F@microsoft.com> <OIKOHYOjHHA.5044@TK2MSFTNGP05.phx.gbl>

great. could you please explain in detail how to do this?

Shanthi

Seriously…. WTF.

If you work for the company who is actually paying Shanthi to be an “admin”, I recommend he be fired and you review your hiring practices.

   joe

Rating 3.00 out of 5

5/1/2007

And another thing…

by @ 12:50 am. Filed under tech

Just as I pointed out that GPOs aren’t AD in this post – http://blog.joeware.net/2007/04/20/852/

This also goes for DFS, NTFRS, DFSR, Terminal Server Licensing, MSMQ Queues, Exchange, SharePoint, MIIS, ADFS, PKI/CA, any of the techs, really, that MSFT marketing decided to slap “Active Directory” into the name of, and many other technologies that *use* AD but aren’t AD.

Of all of those the technology the closest I could see getting integrated directly into AD would be PKI/CA functionality followed by ADFS. How would you feel if every DC that came up could give out PKI certs for domain/forest/federation functions and those functions only. Say like the ability to sign/seal things within the forest was just there and worked, EFS or whatever follows it just worked, LDAPS just worked, wireless or other network filtering stuff based on certs just worked, etc. It all got configured as soon as you typed DCPromo and worked perfectly such that you had to think very little if at all about it. If you needed some special capability out of your PKI environment that wasn’t built in say like for special web certs, etc, you set up an official CA/PKI infrastructure based on any vendor you wanted specifically for that. But in the meanwhile, the majority of folks out there that just do it for some basic OS Level functionality like LDAPS, EFS, wireless, or other Windows system level stuff only don’t have to be bothered. Just think of the cool benefits to the OS guys and things they could move forward with in the realm of security because they know the infrastructure would absolutely exist for it and be set up properly and would work.

Can’t happen? Too difficult? MSFT doesn’t have the horsepower and brain power to pull it off??? Think about kerberos. How many of you were setting up kerberos realms prior to being able to do it as easy as falling off of a log by typing dcpromo? How many Windows admins have the slightest clue what is happening in Kerberos now? Can they tell you about pre-authentication and the TGT and TGS phases? If you know a lot of Admins that can talk to that stuff, you have some bright friends, I don’t know many at all that can speak to it. And the beauty is…. in almost all cases they don’t need to be able to. I’ve seen first hand how difficult kerberos can be on non-Windows platforms, it reminds me in a lot of ways of the complexity and fear around PKI/CAs.

ADFS… yeah I have spoken with several folks who have played with it, haven’t done it myself, as I like to say, until it does something other than the web, it just holds no interest for me. If I can access your SMB shares or query our LDAP server (with LDAP not any DSML crap) with ADFS, then we are talking about something I want to get involved with and understand. I thought about setting it up once… But then I saw the manual and said, “ah yeah, not today. And tomorrow isn’t looking so good either…”.

Let’s face it, if there is a complicated set of instructions for deployment of something, it isn’t going to penetrate very well in the Microsoft world despite any goals or dreams or aspirations of the folks at MSFT. This is a world where “experienced” admins even have trouble with AdPrep… If it doesn’t happen automatically and near magically but especially perfectly, it isn’t likely to spread to many places. For anyone at DEC, you know how strongly MSFT is pushing in the direction of ADFS. To go very far in that direction, what underpin technologies also have to be nailed down? PKI maybe?

In the chalk talk session at DEC, one of the Softies asked the question, “How many people here have deployed PKI/CAs?”. A good portion of the crowd raised their hand. I wanted the follow up question to be “How many people here who have deployed PKI/CAs are 100% sure they did it properly and there are no issues?” I expect the number of hands would have gone down, probably considerably. Another question “How many aren’t fully sure they did the right thing with PKI/CAs with design or implementation?” Wow I am on a role, here is another “How many people have had to redeploy PKI/CAs because it was done improperly?” A good wrap up question “How many have not deployed PKI/CAs due to fear or confusion or lack of understanding of the needs, requirements, concerns or even the understanding of the technology?”.  

I’ve set up CAs in labs, I am no where near close to stating that I understand it all 100% though or even enough to properly set up a CA / PKI infrastructure for a company. But then I am an honest bloke, there are a lot of consultants out there that know how to click on install and figure that is more than enough to install Cert Services…. You guys know who you are, you don’t need to lie.

  joe

Rating 3.00 out of 5

Replication of lastLogonTimeStamp

by @ 12:13 am. Filed under tech

It replicates normally just like any other attribute, it just isn’t updated all of the time.

I go bonkers every time I see someone trying to explain it doesn’t replicate all of the time (more accurately people say it only replicates every 14 days). That is because it is completely wrong… It replicates just like any other attribute when it is updated. How often that replication is done is completely based on your replication topology, not some arbitrary setting in the DS.

So repeat after me 10 times…

lastLogonTimeStamp does INDEED replicate, it just isn’t updated all that often.

So the question is, when does it get updated?

I have looked into this a little, I recall some of it. It isn’t something I keep memorized as it really isn’t that exciting, if you are hanging on the attributes value to the daily interval, you really aren’t using it right. Think of this of being within a week, not being within a day, even if you modify the update frequency. Note that with Longhorn and RODCs, this attribute’s value is less useful since RODCs can’t replicate any attributes, not even lastLogonTimeStamp which means that the attribute will only be updated when an auth request has to be chained to a Full DC – i.e. when first used or anytime the password cache value needs to be updated.

So here we go…

o The lastLogonTimeStamp is driven by the lastLogon attribute. If an authentication occurs that doesn’t update lastLogon, there is no chance it will update lastLogonTimeStamp. Basically after lastLogon is updated, the system checks to see if the interval since the last update to lastLogonTimeStamp is sufficient to force it to be updated now. So for example, successful simple binds DO NOT update this set of attributes unless the last authentication failed. Don’t believe me, try it yourself, maybe it changed, I doubt it. The idea behind simple binds is to make them as lightweight and fast as possible, writing to the DS is neither lightweight nor all that fast relatively speaking.

[UPDATE: I have found that with S4U this is no longer the case. S4U will update the lastLogonTimeStamp value without touching lastLogon.]

o The default interval between updates is 14 days. However there is a swing period involved that changes how often the updates really occur.

o The swing period is up to minus five days. So the realistic period is 9-14 days between updates to the lastLogonTimeStamp. The swing period is randomly calculated. I do recall at one point doing a good number of tests and found that 10 days seemed to be pretty popular for the update frequency. So much so that for a long time I considered that to be the true value.

o The update frequency can be changed by modifying the NC Head Attribute called msDS-LogonTimeSyncInterval

o This attribute is specified in days. The minimum value on AD is 1 day, the minimum value on ADAM is 0 days [See http://blog.joeware.net/2006/06/22/420/] which means update the attribute for every successful authentication. The max value of this attribute comes out to be 274 years. Good luck testing that last. Would love to help but I have other plans that day.

o If the value of msDS-LogonTimeSyncInterval is set to less than 5 days (i.e. the random swing period), the swing period will not be used.

Now before you get all giddy and go and change the NC Head attribute on all of your domains, keep in mind that MSFT set it to a default of 14 days with a random swing period for a reason….. In larger environments this can cause ***A LOT*** of churn and replication traffic and it likely doesn’t have enough value to do so. If you need last logon tracking that is that granular, set up a logon script to update a database or send an email or something. Seriously.

joe

Rating 4.25 out of 5

4/30/2007

She never mentions the word addiction

by @ 1:57 pm. Filed under general

    In certain company

        She’ll tell you she’s an orphan

               After you meet her family…

That is what I will remember as the last moments of the Directory Experts Conference 2007. Officially the conference ended the day before but that was the song playing on the radio as I zipped up my suitcase and rolled out of the hotel room to go jump onto the airport shuttle; putting a fork in yet another DEC in a sad way. Should have left the radio on jazz. 🙂

I have attended the last four US based DEC’s. Those being

DEC 2007 Las Vegas, NV – Red Rock Casino Resort
DEC 2006 Las Vegas, NV – Green Valley Resort
DEC 2005 Vancouver, BC
DEC 2004 Reston, VA (Washington D.C)

They have all had their pluses and minuses, overall I have enjoyed each and I am happy to be what I consider a  “DEC Family Member”. I may be pushing it a little because I really don’t have much to do with the setup or running of the event, I just attend and have fun and talk to people. I consider myself a family member because I have presented but even before I presented I think I was in the family based on how other attendees treated me. I think folks like coming up and chatting with me but every year it seems there are a few more folks who are a little more tentative to do so unless they have someone officially introduce us, possibly they are scared or uncomfortable, I am not sure. If I am standing there, I am fair game, come chat. If I am engrossed in a conversation, come up but get a feel for the conversation before diverting it. If I appear to be making for a lavatory, point me in the right direction and heaven forbid, please don’t stop me. 😉

This year was a bit interesting for me…. I had people who wanted to take a picture of me with them, I had people who would just stare for 5,10,20 minutes[1] before approaching me (yeah I noticed), I was hugged, I was pecked on the cheek(s) in European high style, I might have been kissed on the lips by Ulf but maybe that was just a dream of mine, I was even bowed to by a couple of different people – none of whom were of Asian descent which is when I would expect it. On top of that I had a lot of people who asked when the joe and Dean Show was going to be and what room it was in as they didn’t want to miss it. This made me feel pretty good. I had someone I worked with in the past[2] who told me I changed his life for the better due to my guidance and I guess inspiration and pushing him to learning perl which he then parlayed into PowerShell knowledge; that made me feel great. I can’t count the number of folks who were just thrilled with my work in the newsgroups and/or the joeware utilities. I heard stories of my utilities saving tens if not hundreds of thousands of hours for companies globally. Admins who because of what I have done made their jobs easier so they could sooner go home to their wives, kids, bags of peanut M&M’s, whatever, you name it. How can I not feel on top of the world after all of that?

 

So lets get into the specifics…

The Resort

This year, for the second year in a row, DEC was held just outside of Las Vegas. Last year we were in Green Valley Resort, this year we were in Red Rock Casino Resort. I guess it is the same folks who run both but the Red Rock just smoked Green Valley. It was amazing, my nearest comparison would be a Yucatan Peninsula type resort. I mean it wasn’t the Aventura Spa Palace which will kill you with amazement, but it was trying awfully hard to be that good.

The resort is absolutely something I recommend. It had an amazing restaurant called TBones Chophouse which despite its unfortunate name was very very good. So good that Dean and I chose that place for our last meal at the resort. I admit, it was on the costly side. If costly isn’t your bag, they have an amazing $9.99 chicken fajita dinner right across the casino from TBones.

The casino itself was pretty nice, it got a little packed at times but it was no where near as bad or as, dare I say it, low class, as the casino’s on the strip. Not that the strip is a bad place, it is just that it is an entirely different feel. If you want the “experience” of Vegas, you want the strip. If you want Vegas without that experience, you want Red Rock – though you could always take a shuttle down to the strip and get that experience on your terms. I do have to say though that you can get outstanding accommodations on the strip as well, the Venetian for instance has some amazing rooms if you upgrade a level or two. However, when you hit the casino, you will be inundated with the experience again.

The Red Rock Shuttle from the airport was a gorgeous drive… We left the airport and drove on some highway that appeared to have been built yesterday with a ton of other new development. I saw mountains… Mountains I say.

[Picture courtesy of our friend Sean Deuby]

So yes, Red Rock was definitely gorgeous, go out to their website, you will see how gorgeous. Here is another photo from our resident MVP shutter bug, Sean.

 

The People

Amazing people. You had the NetPro folks like Gil, Stella and of course Christine who makes you feel like the party couldn’t start with out you. There was a new NetPro person I met this year who seemed to be helping Stella out quite a bit, the very lovely and talented Michelle Maloof. I saw Stella smiling considerably more this DEC than in previous years so hopefully Michelle will continue helping Stella out for the DEC 2008. 🙂  Admit it Stella, you love me while hating me at the same time. 😉

You also have the other “normal” attendees, many of whom have amazing stories and tell you of things that they have encountered that maybe you never saw yourself. I have learned a great deal just in casual conversations with folks. Both in terms of things that I haven’t ever seen but also in learning how others encounter and deal with issues and what kinds of issues they have. As I have said to many folks, the types of issues that I and folks like Dean run into tend to be quite different from the problems of most admins. I like understanding the problems most admins have. That helps me figure out what I can help with.

On top of that you have a whole metric ton of MVPs and folks who are MVPs in my own head who could have it any time they want they just haven’t taken the time to get off their butt and get the official award. The likes of Ulf, Jorge, Dean, Guido, Darren, Sean, Katherine, JoeK, Hunter, and Stuart Fuller, and even Laura Hunter and Mark Arnold the special Exchange MVP.

Finally but not leastly (definitely not) you have the MSFT contingent… When I think of this group the first person who always comes to mind is my friend Stuart Kwan of the Ottawa Kwan Clan. And every time I think of Stuart I think of the first time I saw him back in the Whistler RAP in like 2002 or so maybe??? I went out to Redmond with some Ford folks and Stuart walked up to the front of the room and apologized that he was at low ebb due to being sick and then proceeded to blow my socks off with energy from I don’t know where. If his hands moved any faster I was afraid he would fly through the ceiling. Since then it has been one good experience after another. Outside of Stuart we had more MSFT participation this year than any other DEC I can recall. The amount of DS Dev Team folks was absolutely great. I hope they found enough value themselves in being there to do it again next year. I don’t think the “normal” attendees really understood the number and quality of people they had there. They had PMs for every major portion of AD in attendance and they had the luck to have Dmitri Gavrilov there as well. I expect the number of people who knew who he was was very small in relation to the number of people there, but someone that makes the MVPs all stand at attention should be a sign to anyone watching how major a role someone plays. We also were lucky to have a member of the Live team with us to present on AD (they’ll let anyone talk about it…). Well that member happened to be part of the AD BackSeat Architecture group (they have a DL and everything) – you will know him as ~Eric or Eric Fleischman. Eric is pretty well known in the AD Circles (and to readers of my blog) because he seems to be everywhere participating in every possible public communication channel. Dmitri on the other hand is out there as well, but he tends to be a little more focused on what he gets involved in. We also had the likes of Nathan Muggli, Stephanie Cheung, Moon, and Uday as well which may all be names you have heard of. Some of whom I was able to sit down and talk to at great length and some of whom I wanted to sit down with but couldn’t get untied enough to do so so folks expect me to be emailing you, especially you Stephanie. 🙂 The DS Platform team is really a very great team. Lots of very good people. I am proud to have some level of association with them. There were others there as well such as Brian Puhl, Robert DeLuca, Ulric, Nitin, and “Paul” Balarajan (Paul is quoted for inside joke) who were all great to chat with. I am not purposely trying to leave anyone out, my mind was shot by the time we got to Monday from lack of sleep.

 

 The Conference Facilities

Unfortunately I have to say I was less than thrilled here. I wasn’t too happy with the general layout, it was kind of spread out and too compressed all at the same time… Hard for me to explain it. Basically you had these semi-wide hallways that vendors tried to line up on the sides of with food/drinks in the middle and people had to sort of scoot past them. These hallways went off in different directions so either people gathered and it got to the point where no one could move or they went off into other areas. The big open hall in Vancouver and at Green Valley beat Red Rock here hands down. People could filter out of the sessions and mill around in the middle of the hall making many many magic conversation circles. They also had lots of sitting areas for people to sit around and chat if that is what they wanted too. There was also considerable issues with logistics in terms of what speakers were in what rooms and whether or not it made sense. Speakers with large crowds were stuck in smaller rooms, speakers with smaller crowds were in larger rooms. It was really quite frustrating. This hit the ultimate frustration when I went to go into the Stuart Kwan Keynote and instead of being in the big ballroom he was in a majorly reduced size room with a single entrance. I tried to get in but there were so many people already clustered around the doorway it just wasn’t going to happen. It was the only keynote I have missed from Stuart since attending DEC. I was extremely disappointed, especially as I look through the slide deck of his presentation and I see references to Dean and myself. I would love to have heard the context around that.

 

The Sunday Workshop

I have to say that this was rough. I showed up to check it out on Saturday afternoon and saw that there were “challenges”. On the positive side, there was hardware coming out of folks ears… A nice big HP SAN and a bunch of blades and memory enough to make a mainframe jealous. However the hotel power wasn’t quite up to the need initially and I distinctly recall one point where there was a lot of beeping from the SAN/Blade enclosure as someone ran a big heavy cart over the power lines and killed the power to the electronics. Yeah, not pretty. The MVPs working on the workshop guts kept a swinging though on through the night and stayed there the whole night trying to get things into place, knocking down one huge issue after another. Unfortunately, come the morning they still didn’t have it where they wanted so the session started out considerably less interactive than initially designed. That being said, I think the workshop as a whole was successful, I think a lot of people learned a lot of cool new stuff they didn’t know about before.

 

The Conference Overall

Dean and I mentioned a couple of years ago when we were in Vancouver that we thought that DEC *might* be getting too large. I am not positive but I think we have hit that now. I understand that it was necessarily going to grow, that means that acceptance of the technology is taking off more and more. However the conference has also expanded into MIIS, ADFS, RMS, etc. While I am sure there were some or even many that appreciated that, I spoke to many who didn’t. It was sort of like diluting food coloring by adding too much water or blowing up a red balloon until it was pink. The magic circles which I loved about previous DECs were not as frequent, or at least I didn’t run into them as frequently which further enticed me to stay “closer to home” and hang with my normal clique of people. The circles I did walk up to were discussing ADFS/RMS/MIIS and quite frankly, I don’t care about those technologies in the slightest. The closest out of those is MIIS and as I keep saying to folks inside of MSFT, until it runs on ESE I don’t see myself using it much. Too many other products that can do what I need that don’t require SQL Server. As for ADFS… once it does fat clients I will find it more sexy and spend some time on it, until then, I don’t care. Stuart is one of the big guys in that space so it hurts me to say that but I really don’t care too much about the web stuff, Sharepoint is a big pain in the ass and I don’t do Web App Dev – so why should I care about ADFS. RMS…. Bah don’t get me started there but I have some songs I downloaded from Urge that I payed for that I can’t copy between machines and use unless I burn to CD and then rip back to MP3. To me RMS means, give up control of your PC, I have no desire to do that. Even though MSFT has seen fit to brand all of these things as “Active Directory” for a marketing edge, it doesn’t, to me, mean they should be full tracks at DEC.

Possibly the conference facilities are the issue that caused the loss of the magic circles? Possibly it was the dilution of the true AD technology? Possibly it was the overall size? I don’t know, I just know that family feeling I liked so much about DEC in the past was not there for me this year. Quite a few people I spoke with felt the same way. There were lots of people that I wanted to see, expected to see, that I never ran into. Looking over the list of attendees I saw even more people I wanted to see that I hadn’t seen in years and didn’t see them either.

Since reducing the size of DEC likely isn’t an option, I am hoping that the next forum will not have the same impact on extra-sessional gathering. I think possibly getting more segregation between the tracks may assist in removing some of the dilution. I would be curious to know how much cross track attendance there really was. The only cross-track session I saw that had any interest for me was about ADAM and quite frankly, that should have been in the AD Tracks, not MIIS/ADFS or wherever it landed.

 

Conference Sessions

As a whole, these were very good. There was a serious focus on RODCs and I think that bothered some people but the coverage doesn’t surprise me as it is the biggest feature to hit AD since AD itself hit. I don’t think some companies realize HOW much this will change how they deploy DCs or at least how I visualize they will deploy DCs. The security exposure of AD goes down considerably with RODCs and I expect to see far greater DC deployments with RODCs. RODCs have been discussed by MSFT since at least DEC 2004 in Washington DC when Stuart first started asking folks what they thought of the idea. The initial idea was caching DCs like caching DNS servers which I adored but that was quickly squashed and RODCs became the goal.

There were several sessions I wanted to attend but the rooms were just overpacked so I ended up in other sessions or just hung out chatting with folks in the halls. My favorite session was done by ~Eric Fleischman where he talked about scaling Active Directory. It was a good session. I tried to submit a few DCRs in the session as innocent questions. Dean ended up outing me on one of them. Eric speaks well, I can’t recall now how long I have known him but it has been an enjoyable experience overall and I have met with him personally on several occasions now and what people saw in the session is who Eric is though he did try to pin him down to the level of the session more than he might do in a real life conversation. You can be talking to Eric and all of a sudden have your eyes glaze over as he hits some level of abstraction that is so abstract you no longer can see the original problem. You want an interesting discussion, sit down and talk to Eric about what AD looks like 10 years from now.

Actually Dean, myself, and a couple of other MVPs sat down and spoke with Nathan, Eric, and Dmitri the last day over lunch about the next 10 years. They have some very interesting ideas on where it is going and interestingly they seemed to fall in line with where I thought they should be going though I was looking at a completely different form of implementation than they were as I was basing things on what I see today or small advances from what I see today whereas they build this stuff, they can make it look like anything they want and their 10 year thoughts illustrate that. To state my basic opinion, I see Centralized IT as being dead for managing policy and process in the future. It just doesn’t make sense, IT doesn’t have the knowledge to make the decisions so don’t own the decisions nor the resources, why are they in the middle of everything? Because that is the cheapest/securest model at the moment, or that is what we seem to think. IT should be running systems and making sure they function, period. That is where we have to go in the x years.

 

Next Year

As always, there is always a next year. I hope it will bounce back from what it was this year. I have heard the “tentative” city, I am not sure if it is something I can share. However I can say that I hope the real city ends up being in Hawaii or the Yucatan peninsula. That would rock. I loved sitting around the pool discussing super high level tech stuff with really intelligent people and those are two places I would really like to do it. I also wouldn’t mind being flown down to Australia for it. While I recently saw a show that makes Australia as one of the most dangerous places in the world in terms of small critters than can kill you in painful ways, I have heard so much about it from so many people and how they all think I would fit in so well that I would really like to check it out. My one fear is that I would go and then decide to never return though.

Dean and I tentatively, yes TENTATIVELY, signed up for the “joe and Dean Show Part Deux”. The interest really did seem to be there for it. While I am not one who generally likes presenting, if we can figure out a way where we are all just chatting, that would be good. Dean and I discussed some ideas while sitting by the pool. Mostly I was thinking up humourous things that could be put into the slide deck, maybe I should leave tech entirely and just get into standup as I mostly just seem to want to make people laugh and smile. If you crack a joke poorly, the worse thing that can happen is they say you aren’t funny. But if you present something that isn’t right people can say you are an idiot. 🙂 I like to think my mom didn’t raise no idiots, stacks of evidence to the contrary aside… =)

 

   joe

 

 

[1] I presume to see if I tore anyone’s head off and ate their entrails. Note that it is entirely a rumour that I am that mean; I really am a pretty nice guy for the most part. I just happen to not hold back opinions when I have one and that can unnerve people. Not that I am always right, but if I don’t think something is correct and my opinion or level of caring is high enough I will counter. Don’t agree with me, argue, debate, tell me what you think.

[2] I didn’t work directly with him, we both worked for the same company supporting the servers for another company. I was in the US and he was in England but what I did was generally global in nature and definitely had impact on nearly everyone supporting servers for that company.

Rating 3.00 out of 5

4/28/2007

Good point… Abortion clinic bombers *ARE* terrorists…

by @ 7:18 pm. Filed under general

http://www.feministe.us/blog/archives/2007/04/27/the-terrorism-that-dare-not-speak-its-name/

Rating 3.00 out of 5

4/27/2007

Microsoft Windows Security Fundamentals: For Windows 2003 SP1 and R2

by @ 10:59 pm. Filed under tech

Are you a Windows admin? If yes, this book is for you. If it is too deep for you, you need to step up to a point where it isn’t – security is just that important.

I paged through the book on the flight back from the Directory Experts Conference. At first I thought I would be able to mostly “read” it because honestly most books I can skim through quickly and pick up what is being said but the depth of the material was such that “scanning” the book was the best I could accomplish in the four hours I had available to me. I have the Kerberos and AD sections tagged to go back through and read word for word but there are other sections that draw me as well.

You can find a link to the book on amazon over on my book recommendations page located here -> http://www.joeware.net/books/

Rating 3.00 out of 5

I admit it… I have Trouble in the LoveSac…. It is amazing.

by @ 1:20 pm. Filed under general

Most people won’t come right out and tell folks something like that. Me, I can do it. I will say it again, I have Trouble in the LoveSac and can honestly say I never thought I would see that happen.

Meet Trouble, she is lying in my giant bean bag (actually foam bag) from the LoveSac company. I love the LoveSac, not only can one person fit into it comfortably, but two people can, if you are really friendly you can get three people into it. The worst part of the LoveSac is that once you get into it, you really don’t want to get out of it. You give me a nice blast of sunlight coming through the window and a slight breeze following the sunlight and I am content and can spend the rest of eternity there.

As mentioned countless times now, I went out to Vegas for the Directory Experts Conference and when I came back I found that Trouble has taken to sleeping in the LoveSac. This confuses me. She is normally strictly a bed girl, she don’t want it any other way, you know the type. I have a king size bed of which I get about 1/4 of because of everyone else with Trouble taking up, by far, the most room if based on volume of creature versus surface area of bed.

Last night I went to bed and all was normal, I was crunched into my small area I get to sleep in and making sure I wasn’t annoying Trouble (she will take a swing at you) and finally got to sleep. In the middle of the night I have to get up to drink some water (I am drinking water like crazy since getting back but my lips are still super dry from the desert) and I realize that Trouble is missing, then I see her on the LoveSac. This just surprises the heck out of me. She refuses to walk on many surfaces because she doesn’t like the feel of it. She will jump up on the bed when the sheets have been pulled off during sheet changing day and she will look like she fell into a bucket of water and fly right back off the bed… Take the blankets off the bed and she will sit at the end of the bed and stare at you letting you know you better rectify the situation pretty darn ASAP. She used to walk around the edge of the LoveSac but NEVER into the middle of it, now I find her sleeping in it… Just amazing.

  joe

Rating 3.00 out of 5

[joeware – never stop exploring… :) is proudly powered by WordPress.]