Create a Group Managed Service Account (gMSA)

I have been using Group Managed Service Accounts (gMSA) more frequently and decided to post a refresher on the creation of gMSA accounts. I still find that customers are not making use of these service accounts and use standard accounts with fixed passwords instead. In this blog I will highlight the benefits of using a gMSA account and show the steps to create and update a gMSA account

Microsoft Edge: Viewing applied policies

The new Microsoft Edge browser based on Chromium was released in January 2020. Unlike the original Edge browser, which is only available for Windows 10, the new Microsoft Edge Chromium based browser can be installed on Windows 7/8/8.1/10 and is also available for MacOS. Microsoft Edge is ready for business and has dedicated deployment resources … Continue reading Microsoft Edge: Viewing applied policies

Downgrade Active Directory Domain and Forest Functional Levels (Part 3)

In part 2 of the series we've successfully lowered the Forest Functional Level (FFL) and Domain Functional Level (DFL) to Windows Server 2008. The demonstration was completed in a forest where the Active Directory Recycle Bin was not enabled. In this final part of the series, I will first raise the functional levels back to … Continue reading Downgrade Active Directory Domain and Forest Functional Levels (Part 3)

Field Notes: The case of the disappearing Name Server (NS) records

I recently assisted a customer with Name Server (NS) records in DNS, disappearing from their DNS zones. All of the Domain Controllers are configured as DNS servers, yet when viewing the NS records for the Active Directory-integrated DNS zones, only a few of these servers had NS records. The administrators manually re-added the NS records … Continue reading Field Notes: The case of the disappearing Name Server (NS) records

Downgrade Active Directory Domain and Forest Functional Levels (Part 2)

In part 1 of this series, we established in theory that we can lower the Active Directory functional levels from the latest functional level to Windows Server 2008 R2, or even Windows Server 2008 if the Active Directory Recycle Bin is not enabled. I will now demonstrate how to lower the functional levels from Windows … Continue reading Downgrade Active Directory Domain and Forest Functional Levels (Part 2)

Downgrade Active Directory Domain and Forest Functional Levels (Part 1)

With Windows Server 2008/2008 R2 approaching end of support, more organisations are upgrading their Operating Systems to the latest supported versions. Upgrading of Active Directory Domain Services (AD DS) requires a schema update, and ultimately raising the domain and forest functional levels. Customers are concerned that applications may stop functioning after raising the functional levels, … Continue reading Downgrade Active Directory Domain and Forest Functional Levels (Part 1)