Each directory object contains security information in a structure called a security descriptor. This can contain the following: A Discretionary Access Control List (DACL), which comprises Access ...

To provide a consistent manner to identify the functional area responsible for a given object in the Active Directory, and to prevent collisions between objects in different organizational units (OUs) ...

That sure is a long title for a blog post. Anyhow, I seem to hear the following question a lot: “In Active Directory, how do I figure out which account objects are valid?” Well, first off, if you ...

Several years ago I documented Windows updates that needed additional registry keys to be set before you are fully patched. These updates can be hard to keep track of. Microsoft recently released ...

Understanding the ins and outs of AD and object permissions is no simple task, but your efforts can help avoid catastrophe. "I need more circuits in this room," I told him. "Oh, computers don't draw ...