Password Policy FAQs
As I read through the Internet forums, I generally come across the same exact questions regarding the implementation of change in a domain password policy. Here is a list of the …
Delegating DNS Rights and Permissions to Users
The interesting question found on the Microsoft TechNet forums: “I want to delegate one of my users to manage the DNS records. But I don’t want him to have any …
Windows NT 4.0 and 2008 R2 Domain Trusts
If you are planning to upgrade your Active Directory infrastructure to 2008 R2 and you still have external NT 4.0 trusts in place, you’ll need to make some decisions before …
Preparing Your Active Directory Infrastructure for 2008
Preparing for an upgrade to Active Directory is not a trivial task. However, if you prepare for the upgrade properly, you will be able to take advantage of a newer …
How to Add a Secondary DNS Server
It is recommended that at least two DNS servers be used to host a Domain Name System (DNS) zone. Having at least two servers hosting a zone provides a highly …
The Domain Naming Master
The Domain Naming Master is one of the five Flexible Single Master Operations (FSMO) roles found in an Active Directory (AD) forest. There is only one Domain Controller (DC) in …
Configuring DNS Forwarding in Windows 2003
The concept of DNS forwarding is not a new feature in Windows Server 2003 but remains a very important one in your design. Forwarding can be used in instances where …
Designing Active Directory for a SOHO Network
If you are unfamiliar with the term SOHO, it is just an acronym for the phrase, Small Office/Home Office. This article will summarize some high-level considerations with regard to an …
AdminCount, AdminSDHolder, and SDProp
Have you noticed that some of your Active Directory user objects’ Access Control List (ACL) seem to be “resetting” on a continuous basis back to default settings? If so, it’s …
Windows 2008 Read-Only Domain Controllers
Read-Only Domain Controllers (RODC) is another type of domain controller that can be used in a Windows 2008 Active Directory (AD) Domain. RODCs host a read-only version of the AD …
Object Naming Convention
Active Directory is an LDAP-compliant directory service. Network clients use the LDAP protocol to query Active Directory for information. Every object in Active Directory is identified by one or more …
DNS Resolver Cache and Time-to-Live (TTL)
When you visit a website or access another computer on the network, the Windows Operating System will use a DNS Server to translate the hostname into an IP address. Since …