"Kerberos delegation .. end to end" Part III

  When we last left off, we had just installed SQL.   Also my standard disclaimer for this series:   First off let me say that I am not a “SQL guy” nor am I an “IIS guy” .. I am primarily a platforms OS kinda guy.   However, I can wing my way  thru…

7

Set WMI namespace security via GPO (script)

    This was an example of setting WMI security via a script  – the specific question was: “Is there a way I can change the permissions on WMI (need to grant remote enable access) so I can grant a service account read access to certain machines via Group Policy?”   This came up on…

28

"Kerberos delegation .. end to end" Part II

    When we left off – I was about to install SQL.    Also my standard disclaimer for this series:   First off let me say that I am not a “SQL guy” nor am I an “IIS guy” .. I am primarily a platforms OS kinda guy.   However, I can wing my…

5

(OT) recent going ons

Way off topic.. Well lot’s of things been going on lately. First off I learned how to fly fish! Man it was awesome. I went on the Yakima and caught four fish in two days. I learned to “mend” my line, what “tippet” is… as well as “Nymphing” ( no it’s not what you think…

0

"Kerberos delegation .. end to end" Part I

      First off let me say that I am not a “SQL guy” nor am I an “IIS guy” .. I am primarily a platforms OS kinda guy.   However, I can wing my way  thru some of those two technologies.  This series of posts may not exactly follow best practices when it…

12

High CPU utilization.. revisited

Some of this post overlaps my previous CPU one, but the other one seemed a bit lopsided towards LSASS so I thought I would do another one which wasn’t.. Below is a perfmon log where the machine is 80-90 cpu utilized. The first thing to determine is if the CPU usage is in kernel mode…

3

Dr Watson knows best..

    I recently worked on a case which involved a crash  ( it was the MMC ) which didn’t have a lot of info attached to it.  There was no crash dump file, and no live debug to go on. All that I had was a Dr Watson log. Who’s that you say?  See…

3

A few handy queries to ask Active Directory

    I just wanted to do a random DS related post .   These are a few useful constructed attributes.  A constructed attribute is one which is not directly stored in the AD, but is constructed specifically when requested. More info on MSDN I’m sure..   Some useful ones are … AllowedAttributesEffective,  msds-replvaluemetadata, and…

1

AD insight released as free download

Some folks may  recall this from using the Winternals product,.. ADInsight is an LDAP (Light-weight Directory Access Protocol) real-time monitoring tool aimed at troubleshooting Active Directory client applications. Use it’s detailed tracing of Active Directory client-server communications to solve Windows authentication, Exchange, DNS, and other problems.   As long as I’m going on about AD…

0