Quest’s Spotlight on Active Directory offers proactive performance monitoring and real-time diagnostics for detecting, troubleshooting, and resolving a number of issues (performance, replication, availability, etc).

Read more >>

When you just created your SharePoint Shared Services Provider (SSP) and are trying to navigate to the admin page through Central Administration you can get prompted for credentials… The problem is, even using the Farm adminstrator credentials do not work and it results in a HTTP 401.1 unauthorized error. Not to worry, the fix is easy. The issue is a default security setting in Windows 2003. Open up your registry editor (regedit.exe) and go to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa. Add a new DWORD value called “DisableLoopbackCheck” and set the value to 1. Close out of the registry editor and restart IIS. Go back to your SSP admin site and you should be able to login now.

There are five roles in a Domain Controller:

• FSMO
• Schema
• Domain Naming
• RID
• PDC
• Infrastructure

When removing a domain controller you need to make sure you move the roles first (if that domain controller has one of those roles.  To do so:

Read more >>

So you want to modify the ICA Client but you want to do it once and have it affect everybody.  Maybe you need to change the URL of your PNAgent site (in which case I’d just change the dns entry), I don’t know your reasons but the answer is simple.  Use Group Policy and a special ADM which can be found here:

Read more >>

If you ever run into issue while attempting to setup Outlook for a user but you run into the following error: “The name could not be resolved. The action could not be completed”

Be sure to check Active Directory replication (Sites and Services). If you notice that you are unsuccessful when manually replicating you more than likely have found your issue. Rebooting the Domain Controller experiencing the replication issues was the fix for me.

Replication Error 2108

You might find it helpful for you as well.

Say you need to make a change to a group of users in your AD environment.  Maybe this change isn’t simple, such as removing an old  SMTP email address from every user in your domain.  Here is a great tool that can do this and more:

ADModify

This utility is very powerful and can make mass AD changes take seconds.  I highly recommend it!