Windows Server 2008

SASL/LDAP Simple warning on Domain Controllers

SASL/LDAP Simple warning on Domain Controllers

I noticed that a couple of Domain Controllers started reporting Warning-messages. It turns out that one or more clients have been using LDAP binds that are performed on a clear text (non-SSL/TLS-encrypted) connection.

read more
Perfmon: How to record server performance

Perfmon: How to record server performance

A customer of mine was experiencing performance drops on their HR-server. They asked me to get to the bottom of it.

As always when working with Windows servers and performance I headed over to Perfmon…

read more
Windows 8 can’t find WSUS updates

Windows 8 can’t find WSUS updates

A customer of mine recently started deploying Windows 8 in their environment. MDT was set up and the deployment was working fine, but after deployment the Windows 8 machines wouldn’t connect to the WSUS server.

When trying to connect to the WSUS-server through the Control Panel I got an error message.

read more
Domain Controllers Warning Event ID 10154

Domain Controllers Warning Event ID 10154

I was getting an error at startup on a new Windows 2008 R2 Domain Controller. Apparently the WinRM attempts to create two SPNs after the startup process.

Since that WinRM runs under “Network Service” account, I was able to fix this warning by granting the “Validated Write to Service Principal Name” permission to the NETWORK SERVICE…

read more
AD Delegation: Default Permissions for GPOs

AD Delegation: Default Permissions for GPOs

When setting up Active Directory delegation, you want administrators to be able to maintain Group Policy without being a Domain Admin.

If you read TechNet, Microsoft tells you to use Group Policy Creator Owners. However CO does not have permissions to modify or edit any other group policy objects.

read more
Printer Problem 0x00000006 and 0x00000002

Printer Problem 0x00000006 and 0x00000002

I started my day troubleshooting a Windows 7 SP1 client which couldn’t install a specific printer. After verifying that the server was not the issue I started looking into the computer configuration…

read more
Windows 2008 wont use Trusted Sites

Windows 2008 wont use Trusted Sites

Today I ran into an issue with Internet Explorer on a Windows 2008 R2 server.
I have a GPO that pushes Local Intranet and Trusted sites but they would not be visible through the GUI in Internet Options.

read more
Auditing Group Changes in Active Directory

Auditing Group Changes in Active Directory

A customer of ours asked us to look into making their environment more secure. However we noticed that they did not audit Group/User changes in their Active Directory, we adjusted this and here’s a quick guide how to deploy it in your corporation.

read more