Each directory object contains security information in a structure called a security descriptor. This can contain the following: A Discretionary Access Control List (DACL), which comprises Access ...

To provide a consistent manner to identify the functional area responsible for a given object in the Active Directory, and to prevent collisions between objects in different organizational units (OUs) ...

Understanding the ins and outs of AD and object permissions is no simple task, but your efforts can help avoid catastrophe. "I need more circuits in this room," I told him. "Oh, computers don't draw ...

That sure is a long title for a blog post. Anyhow, I seem to hear the following question a lot: “In Active Directory, how do I figure out which account objects are valid?” Well, first off, if you ...

When you accidentally delete an Active Directory object, can you bring it back without performing an authoritative restore on the entire directory? This tip shares a little known service built right ...

Several years ago I documented Windows updates that needed additional registry keys to be set before you are fully patched. These updates can be hard to keep track of. Microsoft recently released ...