Welcome to Sign in | Join | Help
in
Home Blog Forums

Browse by Tags

All Tags » Windows Server » Directory Services   (RSS)
  • Recovering BitLocker keys from the Active Directory

    Here at the LazyAdmin we have talked quite a bit about using BitLocker with Windows Vista. With the introduction of Server 2008 you can now also leverage Bitlocker with your 2008 servers. This is particularly attractive when deploying Read Only Domain Controllers (RODC) to remote locations where physical security is questionable. One BitLocker ...
    Posted to The Lazy Admin (Weblog) by daniel.nerenberg on July 23, 2008
  • Extending your AD schema for Vista and Windows 2008

    We have talked about enabling BitLocker Active Directory integration in a previous post now we will take a look at prepping your domain to implement this integration.  To take advantage of the several of the more compelling feature such as RODCs and Windows 2008 domain controllers we first need to extend the AD schema in our current ...
    Posted to The Lazy Admin (Weblog) by daniel.nerenberg on July 21, 2008
  • Videocast - Securing Cached Credentials

    One of the nice things with RODCs is the ability to control cached credentials.  You can also pre-populate passwords for specific users, like a branch office user, in case the branch office connection goes down but this can be a security concern if that server gets stolen.  Server 2008 has a nice way of handling this so you can sleep ...
    Posted to The Lazy Admin (Weblog) by rodney.buike on June 23, 2008
  • Videocast - Creating a Read Only DC

    The next video in our Server Core series is going to cover making our demo server into a RODC or Read-Only Domain Controller.  One pre-requisite for a RODC is an existing Windows 2008 based DC in the domain.  You also need to run adprep /rodcprep before you can add the RODC.  Other than that it is pretty straight-forward but without ...
    Posted to The Lazy Admin (Weblog) by rodney.buike on June 19, 2008
  • View Additional Account Info with Acctinfo.dll

    Acctinfo.dll is a DLL included in the Windows 2003 Resource Kit. What it does is add a new property page, called Additional Account Info, to the user properties page in Active Directory Users & Computers. The page includes information is not typically available in Active Directory Users and Computers like the date when the user's password was ...
    Posted to The Lazy Admin (Weblog) by rodney.buike on August 26, 2005


All postings are provided "AS IS" with no warranties, and confer no rights.
Microsoft product screen shot(s) reprinted with permission from Microsoft Corporation.