Category Archives: Active Directory

Anyone Can Change a Distribution Group to a Security Group

Brief tidbit of information that I can’t believe I just found out today. As we all know, you may choose to use distribution groups if you don’t want to use a group to assign permissions to. Now I knew you … Continue reading

Posted in Active Directory, Exchange Server | Leave a comment

Using Dsamain to Find the Right Backup

Windows 2008 includes some new tools for working with backups of the Active Directory database. One of these is the Dsamain.exe tool which can create LDAP instances from snapshots of the Active Directory database that you can then browse with … Continue reading

Posted in Active Directory, Disaster Recovery | Leave a comment

Some Thoughts on Restoring System State

I’ve been looking a lot at backing up and recovering domain controllers from disaster lately. It is something I haven’t had to do a whole lot of (thankfully) in the past so I wanted to do some research and a … Continue reading

Posted in Active Directory, Disaster Recovery | Leave a comment

What is the _msdcs Subdomain?

Some of the materials I have read on Active Directory and DNS I feel have not done a clear job explaining exactly what the _msdcs subdomain is and how it is used in an Active Directory forest. The following is … Continue reading

Posted in Active Directory, DNS | 5 Comments

Is a Global Catalog Really Needed for User Logon?

I’ve read a lot of materials that when explaining global catalogs, emphasize that a global catalog must be available for a user to logon to the domain. I’ve seen a lot of these materials also state that even if another … Continue reading

Posted in Active Directory | Leave a comment

View Global Catalog Contents

You can use ADSIEdit to view the contents of a global catalog. This may be useful in troubleshooting scenarios or if you are just curious like me 🙂

Posted in Active Directory | Leave a comment

Initial Synchronizations of Domain Controllers

I have been trying to understand a domain controller’s initial synchronization requirements, which lead me to write up this post. See, I was reading the Microsoft Forest Recovery white paper, and they specifically state that when restoring a Windows 2008 … Continue reading

Posted in Active Directory | Leave a comment