cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Ask the Directory Services Team
Options
16.2K

Active Directory Web Services Event 1202

Ryan Ries on Jul 10 2020 07:07 AM
Hey there! Josh Mora here, with a brief post on an issue I recently had and wanted to make public, in hopes this will he...
22.5K

Deep Dive: Active Directory ESE Version Store Changes in Server 2019

Ryan Ries on Apr 04 2019 08:30 PM
First published on TechNet on Oct 02, 2018 Hey everybody.
32K

TLS Handshake errors and connection timeouts? Maybe it’s the CTL engine….

Ryan Ries on Apr 04 2019 08:29 PM
First published on TechNet on Apr 10, 2018 Hi There! Marius and Tolu from the Directory Services Escalation Team.
9,225

ESE Deep Dive: Part 1: The Anatomy of an ESE database

Lindakup on Apr 04 2019 08:28 PM
First published on TechNet on Dec 04, 2017 hi!Get your crash helmets on and strap into your seatbelts for a JET engine /...
8,282

Introducing Lingering Object Liquidator v2

Ryan Ries on Apr 04 2019 08:25 PM
First published on TechNet on Oct 09, 2017 Greetings again AskDS!Ryan Ries here.
3,573

Active Directory Experts: apply within

JustinTurner on Apr 04 2019 08:25 PM
First published on TechNet on Jul 26, 2017 Hi all! Justin Turner here from the Directory Services team with a brief anno...
8,136

Using Debugging Tools to Find Token and Session Leaks

Ryan Ries on Apr 04 2019 08:25 PM
First published on TechNet on Apr 05, 2017 Hello AskDS readers and Identity aficionados.
6,759

Troubleshooting failed password changes after installing MS16-101

Lindakup on Apr 04 2019 08:21 PM
First published on TechNet on Oct 13, 2016 Hi!Linda Taylor here, Senior Escalation Engineer in the Directory Services sp...
5,619

Access-Based Enumeration (ABE) Troubleshooting (part 2 of 2)

JustinTurner on Apr 04 2019 08:20 PM
First published on TechNet on Sep 21, 2016 Hello everyone! Hubert from the German Networking Team here again with part t...
19.9K

Access-Based Enumeration (ABE) Concepts (part 1 of 2)

JustinTurner on Apr 04 2019 08:20 PM
First published on TechNet on Sep 01, 2016 Hello everyone, Hubert from the German Networking Team here.
8,460

Deploying Group Policy Security Update MS16-072 \ KB3163622

JustinTurner on Apr 04 2019 08:20 PM
First published on TechNet on Jun 22, 2016 My name is Ajay Sarkaria & I work with the Windows Supportability team at Mic...
6,923

The Version Store Called, and They’re All Out of Buckets

Ryan Ries on Apr 04 2019 08:17 PM
First published on TechNet on Jun 14, 2016 Hello, Ryan Ries back at it again with another exciting installment of esoter...
15.6K

Setting up Virtual Smart card logon using Virtual TPM for Windows 10 Hyper-V VM Guests

JustinTurner on Apr 04 2019 08:16 PM
First published on TechNet on May 11, 2016 Hello Everyone, my name is Raghav and I’m a Technical Advisor for one of the ...
6,011

Are your DCs too busy to be monitored?: AD Data Collector Set solutions for long report compile times or report data deletion

JustinTurner on Apr 04 2019 08:13 PM
First published on TechNet on Apr 14, 2016 Hi all, Herbert Mauerer here.
4,212

Previewing Server 2016 TP4: Temporary Group Memberships

Ryan Ries on Apr 04 2019 08:11 PM
First published on TechNet on Mar 09, 2016 Disclaimer: Windows Server 2016 is still in a Technical Preview state – the i...
2,908

Does your logon hang after a password change on win 8.1 /2012 R2/win10?

Lindakup on Apr 04 2019 08:10 PM
First published on TechNet on Jan 11, 2016 Hi, Linda Taylor here, Senior Escalation Engineer from the Directory Services...
5,167

Speaking in Ciphers and other Enigmatic tongues…update!

JustinTurner on Apr 04 2019 08:10 PM
First published on TechNet on Dec 08, 2015 Hi! Jim Tierney here again to talk to you about Cryptographic Algorithms, SCH...
5,409

Using Repadmin with ADLDS and Lingering objects

Lindakup on Apr 04 2019 08:09 PM
First published on TechNet on Nov 06, 2015 Hi! Linda Taylor here from the UK Directory Services escalation team.
11.4K

“Administrative limit for this request was exceeded" Error from Active Directory

Ryan Ries on Apr 04 2019 08:08 PM
First published on TechNet on Oct 29, 2015 Hello, Ryan Ries here with my first AskDS post! I recently ran into an issue ...
53.2K

SHA1 Key Migration to SHA256 for a two tier PKI hierarchy

JustinTurner on Apr 04 2019 08:07 PM
First published on TechNet on Oct 26, 2015 Hello.
12.8K

Manage Developer Mode on Windows 10 using Group Policy

JustinTurner on Apr 04 2019 08:03 PM
First published on TechNet on Sep 22, 2015 Hi All, We’ve had a few folks want to know how to disable Developer Mode usin...
4,184

Windows 10 Group Policy (.ADMX) Templates now available for download

TechCommunityAPIAdmin on Apr 04 2019 08:02 PM
First published on TechNet on Aug 07, 2015 Hi everyone, Ajay here.
3,114

Troubleshoot ADFS 2.0 with these new articles

JustinTurner on Apr 04 2019 08:02 PM
First published on TechNet on May 06, 2015 Hi all, here's a quick public service announcement to highlight some recently...
41.7K

A Treatise on Group Policy Troubleshooting–now with GPSVC Log Analysis!

JustinTurner on Apr 04 2019 08:02 PM
First published on TechNet on Apr 17, 2015 Hi all, David Ani here from Romania.
16.8K

Migrating your Certification Authority Hashing Algorithm from SHA1 to SHA2

Jasben on Apr 04 2019 08:02 PM
First published on TechNet on Apr 01, 2015 Hey all, Rob Greene here again.
3,685

DFSR: Limiting the Number of Imported Replicated Folders when using DB cloning

JustinTurner on Apr 04 2019 08:01 PM
First published on TechNet on Feb 12, 2015 Hello! Warren here to talk about a very specific scenario involving the new D...
13.4K

Understanding ATQ performance counters, yet another twist in the world of TLAs

JustinTurner on Apr 04 2019 08:01 PM
First published on TechNet on Oct 24, 2014 Hello again, this is guest author Herbert from Germany.
11.6K

Remove Lingering Objects that cause AD Replication error 8606 and friends

JustinTurner on Apr 04 2019 08:00 PM
First published on TechNet on Sep 15, 2014 Introducing the Lingering Object LiquidatorHi all, Justin Turner here ---it's...
2,336

Managing the Store app pin to the Taskbar added in the Windows 8.1 Update

TechCommunityAPIAdmin on Apr 04 2019 07:57 PM
First published on TechNet on Sep 09, 2014 Update 9/9/2014Warren here yet again to update this blog to tell you that the...
3,093

Hate to see you go, but it’s time to move on to greener pastures. A farewell to Authorization Manger aka AzMan

Jasben on Apr 04 2019 07:57 PM
First published on TechNet on Aug 21, 2014 Hi all, Jason here.

Latest Comments

Frank Carius
in ADAMSync 101 on Aug 07 2022 05:42 AM
The "(|" is a logica OR and you add all thre expressions. The best approach: use AD USers&Computers with ac custom search to play with the LDP Filter. Try this "(&(|((objectCategory=Person)(objectCategory=OrganizationalUnit)(!(objectClass=contact))" For XML this may work (&(|((objectCa...
0 Likes
SyedYusuf
in Using Debugging Tools to Find Token and Session Leaks on Jul 29 2022 04:50 PM
Hi @Ryan Ries , This is awesome work !! Happy to see wonderful efforts you have put to simplify the explanation. Very informative and useful.Quick question though: How did you find session id - 0x29681a0 in the Figure 9? Is it through !session command or something? Thanks a lot,Syed Yusuf@SyedYusuf
0 Likes
jdotsec
in Understanding “Read Only Domain Controller” authentication on Jul 21 2022 09:00 AM
It would also be helpful to understand how these different authentication scenarios appear in the audit (event) logs on the both the RODC and writeable DC
0 Likes
Klintorp
in Troubleshooting failed password changes after installing MS16-101 on Jul 20 2022 05:37 AM
Sorry for having reported a problem a little too fast - I have now edited it out, because I found the culprit: a 3rd party program (fastpass interceptor) that had been left behind after we switched to another password sync solution. Once uninstalled, it no longer resulted in password reset delays.
0 Likes
imranonum
in Machine Account Password Process on May 24 2022 04:27 AM
Hi,What is when we restore the Active Directory environment to the older date than password expire age ? The client will loss the domain membership and need to re-join them manually? If this is the case, make sense to disable password reset for clients ? Thanks in advance.
0 Likes