1. Moving and renaming Active Directory objects in LDIF using LDIFDE
(Blogs/paulw)

...cause there’s so little information on the subject of moving and/ or renaming objects using LDIF in Active Directory I thought I’d better get some information about this “out there&r...

2. Windows Server 2008 Active Directory Domain Services Last Interactive Logon Information Feature
(Blogs/paulw)

... reading through the Windows Server 2008 documentation or attending events discussing Windows Server 2008 Active Directory Domain Services (AD DS) you might have noticed that one of the new features t...

3. Finding the Virtual Server Hosts in your domain
(Blogs/paulw)

...tablished, but it did make me realise that there’s the answer to this persons question –query Active Directory for the Virtual Server 2005 SCPs... In summary, service connection point...

4. Querying for an InvocationID in retiredReplDSASignatures yields more than one result
(Blogs/paulw)

...on Keywords: Classic User: ANONYMOUS LOGON Computer: rwdc.idmgmt.int Description: Active Directory Lightweight Directory Services has been restored from backup media, or has be...

5. Creating an active directory test lab environment from your production AD forest
(Blogs/paulw)

The question of how can one create a copy of the existing production active directory environment for testing purposes is a frequent one in the forums and groups. There are several ways of doing t

6. Group Policy Restricted Groups
(Blogs/paulw)

...e anything to do with the memberOf [back-link] attribute that you’ll find on security principals in Active Directory (this isn’t really designed to be applied to domain-based groups but ca...

7. Find all read only domain controllers (RODC) in the domain
(Knowledge Base/Code)

...; ldapScope ' configure ADO connection.provider = "ADsDSOObject" connection.open "Active Directory Provider" command.activeConnection = connection command.CommandTe...

8. Ascertain whether or not a DC is read-only (RODC)
(Knowledge Base/Code)

... DS-Ex-IsDcRO.vbs Version: 01.00.00vbs Description: Example VB Script code that illustrates one (interactive) way of ascertaining whether or not a given domain controller is an RODC (read only dom...

9. HOW TO: Delegate the ability to add a domain controller to the domain (using minimum permissions)
(Knowledge Base/Articles)

... All Naming Contexts Monitor Active Directory Replication ...

10. INFO: Configure USERENV.LOG logging
(Knowledge Base/Articles)

The core Group Policy engine writes various, configurable types of information to its log file, which is stored under %windir%\debug\usermode. In Windows NT 5.x this file is called USERENV.LOG. In Win