Tips

Tips

• When and how to use worker process recycling with IIS

  Configuring Internet Information Services to automatically reset worker processes can solve a lot of Web application issues, but it should only be used in certain situations.  Continue Reading

• Avoid DC restoration problems with authoritative restore

  Restoring a domain controller can be tricky business, but by performing an authoritative restore, administrators can sidestep most problems.  Continue Reading

• LocalSystem account in the AD forest is risky business

  Beware of the Windows LocalSystem account. It has total control over the computer and cannot be locked out or denied of any privilege.  Continue Reading

• How to manage and troubleshoot Microsoft Outlook rules

  Find out how to manage multiple Microsoft Outlook rules using the Outlook Rules Wizard to prevent potential email message processing conflicts.  Continue Reading

• Kerberos authentication for network login on non-Windows networks

  Windows can be configured to use Kerberos authentication for network login on non-Windows networks. Find out how in this tip.  Continue Reading

• Exploring the Windows Server 2003 Resource Kit: Compress.exe and Expand.exe

  Have you ever had to make a compressed copy of a file via a script or the command line? We demystify the tools in the Windows Server 2003 Resource Kit -- namely, Compress.exe and Expand.exe -- to make such tasks less tedious.  Continue Reading

• Managing Microsoft Outlook search folder functionality

  Discover the pros and cons of using Microsoft Outlook search folders and learn how to configure group policies that control search folder usage.  Continue Reading

• Exploring the Windows Server 2003 Resource Kit: Clusterrecovery.exe

  The free Clusterrecovery.exe tool from Microsoft helps restore server cluster resources, replace failed disks, recover from disk signature changes and migrate data to a different disk on the shared bus.  Continue Reading

• Windows Process Activation Service in IIS 7.0

  In this excerpt from Introducing Windows Server 2008, read about WPAS, which manages application pool configuration and worker processes.  Continue Reading

• Configure Windows Mobile devices to local wipe after failed logons

  Learn how to configure security policies on a Windows Mobile device to local wipe Exchange Server data after several failed logon attempts have occurred.  Continue Reading

• For Active Directory performance gains, delegate the _MSDCS DNS zone

  Directory services expert Gary Olsen explains how to delegate the _MSDCS zone, which contains the CName records and GC records, to ensure better Active Directory performance.  Continue Reading

• Unwinding USN rollback when faced with AD replication failure

  No matter what the cause, solving Active Directory replication failure can be a difficult task. When USN rollback is involved, however, it presents even more of a challenge.  Continue Reading

• When to use third-party tools in place of NTBACKUP

  NTBACKUP can be unreliable when you need to perform a restore or large-scale backup operation. Learn about the the third-party backup software programs, Like Backup Assist, that admins can use instead of NTBACKUP.  Continue Reading

• Solving Active Directory replication failure

  Every now and then, admins are faced with unintentional replication failure. While fixing the error is critical, knowing how to find the cause of the failure can be just as important.  Continue Reading

• Accessing a Microsoft Outlook mailbox from multiple machines

  Users can access a Microsoft Outlook mailbox from multiple machines, but problems may arise if they're using different versions of the Outlook email client.  Continue Reading

• Avoid print queue overload with priority printing

  What Microsoft Windows admin hasn't dealt with the issue of printer queue overload caused by frivolous end users who tie up network resources for hours on end with large and non-essential print jobs? Here's a simple workaround to this perennial ...  Continue Reading

• Use SLAs to assign help desk incident priorities

  Service-level agreements help service desks categorize and prioritize IT incidents according to an organization's strategic plan.  Continue Reading

• Access contacts in an LDAP or X.500 directory from OWA

  Access contacts in an LDAP or X.500 directory from Outlook Web Access with a third-party OWA add-in called MasterKey.net.  Continue Reading

• How to automate Windows Server 2003 defrag

  Learn how to set up Windows Server 2003's DEFRAG command-line tool so it runs without the need for manual administrative maintenance.  Continue Reading

• Sysinternals TCPView monitors network connections on Windows systems

  Learn how to use Sysinternals TCPView 2.51, the network monitoring tool from Mark Russinovich that keeps track of endpoint connections and processes on your Windows desktop and server systems.  Continue Reading

• Why detective controls are important in change management

  Change is a way of life in Windows IT shops. By using detective controls, Windows managers can minimize the risks associated with changes to production services.  Continue Reading

• How to set up an SSL certificate to encrypt OWA and ActiveSync traffic

  Learn step-by-step how to set up Windows 2003 as a certificate authority, create an SSL certificate and encrypt email traffic for OWA and Exchange ActiveSync.  Continue Reading

• How to reverse NTFS object ownership from administrators to object's creator -- and why

  When an admin adds their personal user account to the Administrators group and then creates an NTFS object, Windows sets the object's owner to the administrators and not to its creator's account. By completing these six simple steps, admins can ...  Continue Reading

• Troubleshooting account lockouts in Group Policy

  While the account lockout setting in Group Policy is designed to protect systems from attackers, it can also be an inconvenience to users. Directory services expert Gary Olsen explains how to troubleshoot account lockout issues and offers tips for ...  Continue Reading

• Manage folder permissions in Windows networks

  Learn how to prevent users from creating and deleting folders, and improve folder management and file management for Windows network security.  Continue Reading

• Error: 'The name of the security certificate is invalid or does not match the name of the site'

  When Microsoft Outlook 2007 users connect to an Exchange 2007 server, they may experience the error: The name of the security certificate is invalid or does not match the name of the site. Find out the cause of this problem and how to fix it.  Continue Reading

• Unlocking Group Policy account lockout secrets

  While Microsoft designed the account lockout settings to protect your environment from attackers, they can also be a real inconvenience for users. Directory services expert Gary Olsen explains how to get the security you want from the Account ...  Continue Reading

• How to create a network printer pool

  You can avoid congestion on a network printer by creating a printer pool -- a group of printers attached to a common print queue, so multiple documents can be printed simultaneously. Here's how to create a printer pool in a Windows Server 2003 ...  Continue Reading

• Demystifying the AutoExNT tool in the Windows Server 2003 Resource Kit

  The Windows Server 2003 tool AutoExNT lets admins start batch files or tasks in a certain order before they log on.  Continue Reading

• Tracking help desk tickets: Policies and procedures

  Your help desk gets a lot of requests, so how should you keep track of what's coming in and what gets the highest priority? Learn how to analyze data to create and implement a finely tuned help desk policy.  Continue Reading

• Turn any non-PostScript printer into a PostScript printer

  You can give any non-PostScript printer a PostScript front end from a Windows computer. You'll need to download three free utilities: Ghostscript, GSview and RedMon.  Continue Reading

• ReplMon still tops for troubleshooting Active Directory replication

  Though it's been around for nearly seven years, ReplMon is still a very powerful tool for monitoring and troubleshooting all aspects of Active Directory replication.  Continue Reading

• How to repair damaged Master Boot Records and boot sectors

  Boot problems can be relatively easy to fix and do not require reinstalling Windows. But you should understand how the boot process works in order to recognize circumstances that will cause problems.  Continue Reading

• Remotely manage Exchange Server 2007 from a 32-bit client

  Did you know that you can remotely manage Exchange Server 2007 from a 32-bit client? Learn about the 32-bit version of Exchange 2007's management tools and get the download here.  Continue Reading

• Building a Windows Server 2008 virtual test lab

  When it comes to preparing for a Windows Server 2008 migration, there is nothing like hands-on experience with the new server. Directory services expert Gary Olsen explains the quirks of creating a virtual test environment for Windows Server 2008.  Continue Reading

• Microsoft Office's CiceroUIWndFrame component crashes Outlook

  A Microsoft Office component called CiceroUIWndFrame can crash Microsoft Outlook. Find out how to fix the CiceroUIWndFrame issue with these steps.  Continue Reading

• Problems accessing encrypted files on remote servers

  If you use EFS, it's possible you could run into a situation where you are having trouble accessing encrypted files on a remote server. This tip outlines several troubleshooting steps to take, helping you to find out where the problem lies.  Continue Reading

• A guide to the Microsoft Windows Server 2003 Resource Kit Tools

  Microsoft's oft-ignored Windows Server 2003 Resource Kit Tools can help administrators deal with issues such as troubleshooting operating system issues, managing Active Directory, configuring networking and security features and automating ...  Continue Reading

• Configuring a Windows virtual test lab on a budget

  Creating a test environment with virtual machines can be a valuable asset when configuring your Windows environment. Directory services expert Gary Olsen walks through the step-by-step process of creating a virtual test lab.  Continue Reading

• Can freezing a hard drive that's crashed restore it to life?

  You may be able to bring a hard drive that has crashed or cannot mount back to life by leaving it in the freezer overnight. Not every hard drive having problems responds to this treatment, but in some cases it does seem to work. But why? Here's the ...  Continue Reading

• Synchronizing multiple Exchange email accounts on one smartphone

  Is it possible to synchronize one smartphone with two different Exchange Server email accounts? The short answer is no, but there are a few workarounds you can consider.  Continue Reading

• Create batch file to log chkdsk results

  You can use the AT command in Windows to schedule chkdsk to automatically run on a daily basis. The problem with this technique is that chkdsk results are quickly flashed on the screen, then disappear. If you're not sitting at the server console ...  Continue Reading

• Limiting LDAP searches with MaxPageSize

  Directory services MVP Gary Olsen explains why modifying the MaxPageSize attribute can cause problems for Active Directory and suggests some tools for troubleshooting those issues.  Continue Reading

• Troubleshooting Microsoft Outlook toolbar problems

  Microsoft Outlook toolbar buttons will stop working correctly if the OUTCMD.DAT file becomes corrupted. Find out why third-party add-ins are often the culprit and learn how to fix the problem.  Continue Reading

• How to properly authenticate a Linux client in a Windows domain

  MVP Gary Olsen describes the step-by-step process of configuring a Red Hat Fedora client into a Windows Server 2003 domain.  Continue Reading

• Create custom boot sector manually with Boot Build utility

  Most of the time, a boot sector is created automatically when we format a disk, but at times it's useful to create one manually. A specialized utility called Boot Build allows you to do this by offering a blank template for a boot sector that you ...  Continue Reading

• Guide to using chkdsk to detect file and folder corruption

  Follow these steps for configuring Windows to periodically run the chkdsk tool against a volume in order to detect file and folder corruption.  Continue Reading

• FireDaemon runs app as service, shows or suppresses GUI

  Several tools allow you to take a Windows executable and run it as a system service rather than a console or desktop application. A tool called FireDaemon takes this one step further by allowing an application's GUI to be shown or suppressed ...  Continue Reading

• Locate removable device IDs for Group Policy settings

  Brien Posey, MCSE, discusses how you can locate the different device IDs required in order to restrict removable device usage in Group Policy settings. This is the third tip in a three-part series on preventing the use of removable storage devices.  Continue Reading

• Case Study: Troubleshooting Distributed File System Replication

  One of the difficulties with DFSR is that many admins still try to troubleshoot it using FRS methods. MVP Gary Olsen offers a case study to exemplify the proper techniques for debugging DFSR.  Continue Reading

• Let users update their own AD information with the Active Directory Update tool

  Learn about a third-party utility called the Active Directory Update tool that lets end users update their own Active Directory attributes via a Web page.  Continue Reading

• Getting to know the read-only domain controller for Windows Server 2008

  One of the most common questions surrounding the new Active Directory technologies for Windows Server 2008 involves the read-only domain controller. Active Directory expert Laura E. Hunter breaks down the key details of the RODC and how it can ...  Continue Reading

• Use RAID to increase write performance on three-drive arrays

  On many small servers with RAID 5, you'll see the minimum three-drive array. Although read access on a three-drive array is faster than on a single drive, write performance is abysmal. If price is a consideration, a simple RAID 1 (i.e., ...  Continue Reading

• Multi-core systems vs. multi-CPU systems

  Can you get better performance from a dual-core system or a dual-processor system? This article evaluates the two configurations and determines that multi-core chips tend to be more efficient than multi-CPU systems.  Continue Reading

• Prevent removable device usage with Group Policy settings

  Secure your Windows system even more by preventing the use of removable storage devices with these Group Policy Object settings. This is the second tip in a series on this topic.  Continue Reading

• How to detect data corruption in files and folders

  Data corruption that occurs within a file or folder will usually go unnoticed if you're simply backing up the data and testing the backup by restoring it elsewhere. If the files or folders that have been corrupted are used infrequently, you may ...  Continue Reading

• Understanding DFSR for easy configuration of Active Directory replication groups

  Though Microsoft DFSR is clearly better than FRS, many admins still don't know how to properly deploy it. Directory services expert Gary Olsen explains how to use DFSR to configure replication groups for backing up remote sites.  Continue Reading

• Incident management made easier with Microsoft Service Desk

  Expert Stuart Galup gives the skinny on Microsoft's help desk software, called Service Desk, and explains why help desk software and automated incident management can make your life a lot easier.  Continue Reading

• Why are email attachments zero-byte files on OWA and mobile devices?

  Email attachments can sometimes arrive in Outlook Web Access (OWA) or on mobile devices as zero-byte files. Find out why this problem happens and how to fix it.  Continue Reading

• SLAs and service-level management: What does it mean for Windows managers?

  Windows service-level management is a business process for managing Windows user service requirements in an IT environment. A key component of a Windows service-level management plan is a service-level agreement (SLA). Expert Harris Kern explains ...  Continue Reading

• Distributed File System feature prioritizes target servers in Active Directory

  DFS target prioritization is a helpful feature that has slipped under the radar for some IT admins. Directory services expert Gary Olsen breaks down how to use (and not use) this tool to its full effectiveness.  Continue Reading

• How to terminate SCSI devices

  Termination is the practice of placing a terminator at the end of a chain of SCSI devices. The terminator prevents an echo, which disrupts communications along the SCSI bus.  Continue Reading

• How to use Microsoft Outlook 2007's Quick Parts feature

  Discover how to use Microsoft Outlook 2007's Quick Parts feature (formerly known as AutoText) to save fragments of text in a gallery for repeated use in email.  Continue Reading

• How to retrieve lost files using Group Policy folder redirection

  Learn how to combat many file and folder disasters using the 'Redirect My Documents' option via Group Policy in the Windows domain.  Continue Reading

• Use RunAsDate freeware to set system time and date for programs

  RunAsDate freeware allows systems administrators to run any program as though the system time and date were set to a different clock.  Continue Reading

• Universal ATA controller driver serves as alternative to Windows generic driver

  If you're trying to get a system running and don't have the manufacturer-specific parallel ATA driver for a given controller, you can fall back on Windows' generic PATA/IDE device driver, which runs most hard drives and CD-ROM drives. Or you may ...  Continue Reading

• Watch out for a Microsoft Outlook 2007 indexing issue in Windows Vista

  Windows Vista's built-in indexer sometimes freezes when attempting to index Microsoft Outlook 2007 content. Fortunately, there is a workaround that will fix the indexing issue.  Continue Reading

• Case Study: How to force immediate Active Directory replication for all core sites

  Just how fast can replication take place in your Active Directory network? You might be surprised. Systems software expert Gary Olsen presents a case study on how to use intrasite replication to achieve convergence of all core sites in one Active ...  Continue Reading

• AGDLP reduces account management, permissions management headaches

  AGDLP is a practice that can greatly reduce your administrative headaches related to account management and permissions management.  Continue Reading

• Crimping RJ-45 connectors onto CAT6 cable

  Crimping RJ-45 connectors onto CAT-6 cable can be particularly frustrating, because CAT-6 is quite a bit thicker than CAT-5 cable. Here are some techniques to make the process of installing RJ-45 connectors easier.  Continue Reading

• Reverse DNS mismatches mark Exchange email as spam

  Many Internet service providers and email providers, such as AOL and Hotmail, attempt to block spam by using reverse DNS lookups on incoming email. This can cause problems for Exchange Server organizations in which the DNS server's PTR records are ...  Continue Reading

• Windows Server 2008: A look inside the new features for Active Directory

  With the release of beta 3 for Windows Server 2008, code-named Longhorn, interest in Microsoft's new server OS has grown within the Active Directory community. Gary Olsen details some of Windows Server 2008's most important new features for Active ...  Continue Reading

• Remote Desktop Protocol as an alternative to a KVM switch

  KVM cables can only be so long. Wireless KVM is expensive. In certain situations, Remote Desktop Protocol is a viable alternative to a KVM switch.  Continue Reading

• Daisy-chaining SCSI devices

  With SCSI, you can daisy-chain (physically wire) multiple devices together. However, if you're considering daisy-chaining multiple SCSI devices together, you should know the SCSI bus will only support a certain number of devices.  Continue Reading

• When authentication fails: Troubleshooting Windows time services

  Authentication issues caused by time services can result in a lot of problems concerning Active Directory security. Fortunately, they can be easy to fix if you have the right tools.  Continue Reading

• Use System Information reporting tool to view all Windows Vista system settings at once

  Once you've deployed Vista, you'll undoubtedly start installing printers, drivers and applications. While many admins currently have to deal with multiple Control Panel windows when locating these devices, Windows Vista's System Information program...  Continue Reading

• You can run Windows XP from an external USB hard drive

  Although Microsoft says it's not possible to run Windows XP from an external (USB) hard drive, Ngine Software has created a guide to building an installation of Windows XP that can be booted from an external USB hard drive.  Continue Reading

• Process Monitor tool gets around shortcomings of Microsoft Windows

  The Windows operating system does not provide a troubleshooting tool that allows you to clean up a system infected with malware, see how your files have changed or monitor registry processes and threads. Microsoft's new Process Monitor tool does ...  Continue Reading

• Perform bare metal restore of Windows Server 2003 using NTBACKUP

  NTBACKUP is not an ideal tool for performing a bare metal install. However, if your backups were made using NTBACKUP, you don't have much choice in terms of using Automated System Recovery backup.  Continue Reading

• Time services: A closer look at Windows authentication

  Proper Windows authentication is crucial to maintaining a secure environment. Active Directory expert Gary Olsen explains the important role that time services plays in Kerberos functionality.  Continue Reading

• Group Policy management: Disabling CMD

  You can disable CMD in Group Policy in two steps according to Wes Noonan, our Windows-based network infrastructure security design expert. In this tip, he'll tell you how to prevent your network users from enabling CMD.  Continue Reading

• Create and manage hardware profiles

  Hardware profiles, which are set by a systems administrator, describe which pieces of hardware are enabled or disabled when a system is booted under a given profile. They eliminate the process of Windows having to redetect hardware. This tip will ...  Continue Reading

• A disciplined approach to the Windows change management process

  Change management is a simple concept, but the process can be complex. Expert Harris Kern highlights the IT staff's roles in the Windows change management process.  Continue Reading

• Free up disk space on your C: drive

  Do you have a Windows PC with a system disk that is nearing capacity? Or do you just want to reclaim some disk space? These tips may help you to free up space.  Continue Reading

• ECC memory: A must for servers, not for desktop PCs

  Most servers should have error correcting code (ECC) memory, as should high-end workstations. But it's hard to cost-justify adding ECC memory to a commodity desktop PC. What matters more in a desktop PC is that the motherboard, power supply and ...  Continue Reading

• How CPU caching speeds processor performance

  CPU caching keeps recently (or frequently) requested data in a place where it is easily accessible. This avoids the delay associated with reading data from RAM.  Continue Reading

• Creating your own Windows digital certificates: The risks and benefits

  Perhaps you've considered generating your own digital certificates for your Windows system, but you weren't sure how safe that would be. This tip outlines the risks and benefits involved in creating your own certificates.  Continue Reading

• Free third-party POP3 connector for Exchange Server

  Exchange Server isn't really supposed to connect to an external POP3 mailbox and aggregate email from it, but enough people do it that most Exchange Server administrators have to support it. If you have no choice but to use a POP3 configuration in ...  Continue Reading

• Kerberos protocol: What every admin should know about Windows authentication

  Kerberos can be a difficult protocol to understand for some Active Directory admins, so it's best to start at the beginning. Expert Gary Olsen describes the basics of how Kerberos authentication and authorization works for Windows.  Continue Reading

• Backing up and restoring server cluster nodes

  To back up and restore an entire server cluster or just a single cluster node, an administrator must first understand how to troubleshoot, back up and restore a stand-alone server running Windows Server 2003. The process of backing up cluster nodes ...  Continue Reading

• Adding nodes to a server cluster

  Here's a step-by-step guide for adding the first node to your Windows server cluster, as well as additional nodes.  Continue Reading

• How to obtain Exchange 2007's commercial version, self-extracting version and .ISO version

  There are three different media editions of Exchange Server 2007 -- the commercial version, self-extracting version and .ISO version. Learn how to obtain each version and discover a couple of hardware caveats you should be aware of before ...  Continue Reading

• Case Study: Troubleshooting a logon script problem using Userenv and GPE logging

  Understanding the value of Userenv and GPE logs is only half the battle. Software engineer and author Gary Olsen shares a case study to demonstrate how the logs can be used in a real-life situation.  Continue Reading

• Naming workstations on a Windows network

  There's no such thing as a perfect naming scheme for every computer on a Windows network. Here are some thoughts on naming network hosts.  Continue Reading

• Manage servers and SANs better by understanding SCSI

  Most servers and SANs use SCSI drives, which typically perform better than the IDE hard drives prevalent in workstations and consumer-grade computers. In short, it's almost impossible for an administrator to allocate storage in a SAN, build a ...  Continue Reading

• Remote control of Windows PCs simpler through PsExec than Remote Desktop

  The Remote Desktop feature is the most common way to control a Windows box remotely, but sometimes you need something simpler than Remote Desktop. The command-line utility PsExec from Mark Russinovich lets you run a remotely executed command instead...  Continue Reading

• Userenv and GPE logging: A great tool for debugging Group Policy Extensions

  Userenv logs are great for troubleshooting user profile and GPO issues, but what about Group Policy Extensions? Expert Gary Olsen explains how Userenv and GPE logs can be valuable tools for debugging Group Policy.  Continue Reading

• Third-party email archiving tool helps Microsoft Outlook's AutoArchive

  If you have any experience with Microsoft Outlook's AutoArchive feature, you know that it doesn't always work as intended. Learn about a third-party email archiving software program called ArchiveAssist that alleviates Microsoft Outlook's ...  Continue Reading

• Debugging user profile and GPO problems with Userenv logs

  Expert Gary Olsen walks through the basics of the Userenv.log file and shares some useful case studies that illustrate how to use Userenv to debug problems involving the user environment.  Continue Reading

• Multi-core processors: Their implication for Windows

  A Windows OS is totally unprepared to handle large numbers of processor cores. So what if Intel does indeed succeed with its plan to mass-produce a tetraflop processor by 2012?  Continue Reading