Mark Parris

AD-LDS (ADAM) For Windows 7 is now available.

Mark Parris — Tue, 12 Jan 2010 09:27:00 GMT

AD LDS is a Lightweight Directory Access Protocol (LDAP) directory service that provides flexible support for directory-enabled applications, without the dependencies that are required for Active Directory Domain Services (AD DS). AD LDS provides much of the same functionality as AD DS, but it does not require the deployment of domains or domain controllers. In environments where AD DS exists, AD LDS can use AD DS for the authentication of Windows security principals. You can run multiple instances of AD LDS concurrently on a single computer, and have an independently managed schema for each AD LDS instance.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=a45059af-47a8-4c96-afe3-93dab7b5b658

Active Directory Domain Services (AD DS) and Public Key Infrastructure (PKI) related to Homeland Security Presidential Directive 12 (HSPD-12) smart card logon.

Parris — Wed, 06 Jan 2010 14:34:00 GMT

This document explains the interdependencies between Active Directory Domain Services (AD DS) and Public Key Infrastructure (PKI) related to Homeland Security Presidential Directive 12 (HSPD-12) smart card logon. Topics concerning the Federal PKI Common Policy Root certificate, Extended Key Usage (EKU) requirements and validation of Personal Identity Verification (PIV) authentication certificates for smart card logon are addressed. This document is written for enterprise information technology professionals who are planning or implementing PIV-II smart card logon in accordance with the HSPD-12 directive. It is assumed that the audience for this document has basic knowledge of Public Key Infrastructure and Smart Card concepts.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b86d8fe2-a76a-4692-9983-5ee65f0f4e88

Changes in Functionality in Windows Server 2008 R2

Mark Parris — Tue, 05 Jan 2010 09:28:00 GMT

Microsoft have released this document:

Changes in Functionality in Windows Server 2008 R2

"Changes in Functionality from Windows Server 2008 to Windows Server 2008 R2" describes new and changed functionality and features available in Windows Server 2008 R2. The Windows Server® 2008 R2 operating system includes changes to Windows Server® 2008 features and technologies that help improve the security of computers running Windows Server 2008 R2, increase productivity, and reduce administrative overhead.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2db685c7-bb06-4083-9978-66b57661f6f7

Happy New Year

Mark Parris — Tue, 05 Jan 2010 09:22:00 GMT

I would like to take this opportunity to wish everyone a Happy New Year - this year for the Active Directory User Group will see a few changes, I hope for the best, more details to follow in the coming weeks.

I am busy working on speakers for the coming year and hope to have some dates lined up for February onwards.

Upgrading Active Directory Domains to Windows Server 2008 and Windows Server 2008 R2 AD DS Domains

Parris — Wed, 25 Nov 2009 21:34:10 GMT

Microsoft have released a paper which explains the process for upgrading Active Directory domains to Windows Server 2008 and Windows Server 2008 R2, how to upgrade the operating system of domain controllers, and how to add domain controllers that run Windows Server 2008 or Windows Server 2008 R2 to an existing domain.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=fa629de2-f4dd-47ac-8d80-3db46b2877a2

del.icio.us Tags: markparris,Windows Server 2008 R2,[ADUG] Upgrade,Migration,Windows

Running Domain Controllers in Hyper-V

Mark Parris — Tue, 24 Nov 2009 12:06:00 GMT

Microsoft have released Virtualization recommendations for Active Directory Domain Controllers running Domain Controllers in Hyper-V.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7425e34b-3990-43d8-b93b-cb6442858c21

Active Directory / Domain Naming System Convergence Check Utility

Mark Parris — Wed, 11 Nov 2009 10:06:00 GMT

This cmd file provides a means of verifying that a newly created DNS server has completed the replication of AD content from an assumed/known-good 'source' DNS server. Directions for using this utility can be found in the Active Directory Domain Services and Domain Name System (DNS) Server Migration Guide (http://go.microsoft.com/fwlink/?LinkId=134771). The migration documentation and tools ease the process of migrating the Active Directory Domain Services and Domain Name System roles, operating system settings, and data from an existing server that is running Windows Server® 2003, Windows Server® 2008, or Windows Server® 2008 R2 to a computer that is running Windows Server 2008 R2. By using the migration guide to migrate roles, you can simplify deployment of new servers, reduce migration downtime, increase accuracy of the migration process, and help eliminate conflicts that could otherwise occur during the migration process.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=bcb25f16-77fa-41b5-b1b2-27d46bc2cc33

Direct from TechED Europe - John Craddock presents DirectAccess - UPDATED.

Mark Parris — Tue, 03 Nov 2009 23:10:00 GMT

I am delighted to confirm that direct from TechED Europe, John Craddock will be presenting a double session on DirectAccess to the Active Directory User Group on 30^th November 2009, 18:00 – 21:00 at Cardinal Place, London.

John Craddock BSc (Hons), CEng, MBCS will be taking us through - Implementing Direct Access.

DirectAccess is a new feature in the Windows 7 and Windows Server 2008 R2 operating systems that gives users the experience of being seamlessly connected to their corporate network any time they have Internet access. With DirectAccess, users are able to access corporate resources (such as e-mail servers, shared folders, or intranet Web sites) securely without connecting to a virtual private network (VPN).

Improve Productivity of Mobile Workforce. DirectAccess provides increased productivity for mobile workforce by offering the same connectivity experience both in and outside of the office. DirectAccess is on whenever the user has an Internet connection, giving users access to intranet resources whether they are travelling, at the local coffee shop, or at home.
Improved Manageability of Remote Users. Without DirectAccess, mobile computers can only be managed when users connect to a VPN or physically enter the office. With DirectAccess, mobile computers can be managed any time the mobile computer has Internet connectivity, even if the user is not logged on. This allows remote computers to be managed regularly and helps ensure mobile users stay up-to-date with security and system health policies. DirectAccess helps ensure that organizations can meet regulatory and privacy mandates for security and data protection for assets that must roam beyond the corporate network
Improved security. DirectAccess uses IPsec for authentication and encryption. Optionally, you can require smart cards for user authentication. DirectAccess integrates with NAP to require that DirectAccess clients must be compliant with system health requirements before allowing a connection to the DirectAccess server. IT administrators can configure the DirectAccess server to restrict the servers that users and individual applications can access.

John Craddock

As an infrastructure and security architect he has designed and implemented global distributed IT solutions, providing services to industry leaders including Microsoft. John is an international speaker, delivers technical seminars and sessions around the world and is a featured speaker at major IT conferences such as Microsoft TechEd and IT Forum.

John’s website’s are www.xtseminars.co.uk and www.kimberry.co.uk

*** UPDATE ***

Take a sprinkling of Windows 7, add Windows Server 2008 R2, IPv6 and IPsec and you have a solution that will allow direct access to your corporate network without the need for VPNs. Come to these demo-rich sessions and learn how to integrate DirectAccess into your environment.

In Part 1 learn about IPv6 addressing, host configuration and transitioning technologies including 6to4, ISATAP, Teredo and IPHTTPS. Through a series of demos learn how to build an IPv6 Network and interoperate with IPv4 networks and hosts.

In Part 2 we add the details of IPSec, and components that are only available with Windows 7 and Windows Server 2008 R2 to build the DirectAccess infrastructure. Learn how to control access to corporate resources and manage Internet connected PCs through group policy.

Part 1 is highly recommended as a prerequisite for Part 2.

Description of the Windows Management Framework on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008

Parris — Wed, 28 Oct 2009 10:38:07 GMT

This article describes the Windows Management Framework on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008. The Windows Management Framework includes the following:

Windows Remote Management (WinRM) 2.0
Windows PowerShell 2.0
Background Intelligent Transfer Service (BITS) 4.0

http://support.microsoft.com/default.aspx/kb/968929

del.icio.us Tags: Windows XP,Windows Server,Windows Vista,PowerShell,BITS,WinRM

Multiple DFS Namespaces on Windows Server 200x – Standard Edition.

Parris — Tue, 27 Oct 2009 23:27:30 GMT

When Windows Server 2003 Standard Edition was first released it only supported one DFS Namespace or root as some people refer to them.

A little known hot fix available since July 2005 and subsequently included in Windows Server Service Pack 2 removed this limitation.

Moving forward a few years, Windows Server Standard Edition 2008 and 2008 R2 both now natively support multiple DFS Namespaces.

Hotfix Article 903651 http://support.microsoft.com/kb/903651

del.icio.us Tags: Windows Server,DFS-N,DFS Root,WIndows Server 2003 Edition,Windows Server 2008 Standard Edition,markparris

Microsoft Operations Framework (MOF) 4.0

Mark Parris — Fri, 23 Oct 2009 08:59:00 GMT

MOF 4.0 is practical guidance for IT organizations. With the release of version 4.0, MOF now reflects a single, comprehensive IT service lifecycle—it helps IT professionals connect service management principles to everyday IT tasks and activities and ensures alignment between IT and the business.

New! MOF Action Plan: Release Readiness for Windows 7. The latest release in the MOF Action Plan series addresses the challenge of validating people-readiness for Windows 7 deployment. Building upon guidance from the MOF Release Readiness Management Review, this action plan asks the reader to evaluate four distinct aspects of release readiness. The action plan provides key considerations to determine organizational preparedness, as well as guidance for creating a tailored deployment checklist

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=457ed61d-27b8-49d1-baca-b175e8f54c0c

Windows 7 Product Guide

Mark Parris — Fri, 23 Oct 2009 08:50:00 GMT

Windows 7 Product Guide

A reference guide highlighting the new and improved features in Windows 7.

Overview

The Windows 7 Product Guide provides a detailed look at the many new and improved features in Windows 7. The guide is designed as an acurrate source of information that can help you to understand how Windows 7 Simplifies Everyday Tasks, Works the Way You Want, and Makes New Things Possible. The guide is also designed to provide IT Professionals with information about how to Make People Productive Anywhere, Manage Risk Through Enhanced Security and Control, and Reduce Costs by Streamlining PC Management. This is not a help and how to guide. Rather, it provides an overview of the many exciting features in Windows 7 and pointers to more information.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b3c68ec2-e726-4830-ac89-31c71d6be5f3

Deploying Windows® 7 Essential Guidance from the Windows 7 Resource Kit and TechNet Magazine

Mark Parris — Thu, 22 Oct 2009 09:51:00 GMT

Deploying Windows® 7 Essential Guidance from the Windows 7 Resource Kit and TechNet Magazine

Download the New eBook: Deploying Windows® 7 Essential Guidance from the Windows 7 Resource Kit and Microsoft® TechNet Magazine. Looking for guidance specific to Windows 7 deployment? Check out what the industry's leading experts have to say in this free Microsoft Press eBook with selected chapters from the Windows 7 Resource Kit on Deployment Platforms, Planning, Testing Application Compatibility and 8 Common Issues in Windows 7 Migrations.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ee2a1d38-88a9-43b3-95bc-7e962f0b6030

Windows Automated Installation Kit for Windows 7 documentation (October 2009 Update)

Mark Parris — Thu, 22 Oct 2009 09:48:00 GMT

The Windows Automated Installation Kit (Windows AIK) is a set of tools and documentation that support the configuration and the deployment of Microsoft® Windows® operating systems. This guide describes the current methods, tools, and requirements for deploying Windows. This release includes updates to the Windows AIK documentation as of October 2009. Updates include many corrections that were previously documented in the readme file. In addition, updated sections include: disk management, product key and activation clock, the generalize process, the diskpart tool, and Windows RE.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f1bae135-4190-4d7c-b193-19123141edaa

Free e-book: Introducing Windows Server 2008 R2

Mark Parris — Wed, 21 Oct 2009 08:42:00 GMT

Introduction

Windows Server 2008 R2, or simply R2 for short, is the second release of Windows Server 2008. It isn’t a completely new release, but rather adds additional features and refinements to the existing release. In this book, we focus on the new features and refinements in R2. We assume you have at least a general knowledge of Windows Server, and that you have some familiarity with Windows Server 2008, although we don’t assume you’re actively running Windows Server 2008. Where an R2 feature is a refinement of a feature that was new in Windows Server 2008, we provide background on the Windows Server 2008 feature to provide context.

Who This Book Is For

This book is targeted primarily at Windows server administrators who are responsible for hands-on deployment and day-to-day management of Windows-based servers for large organizations. Windows server administrators manage file and print servers, network infrastructure servers, Web servers, and IT application servers.

They use graphical administration tools as their primary interface but also use Windows PowerShell commandlets and occasionally write Windows PowerShell scripts for routine tasks and bulk operations. They conduct most server management tasks remotely by using Terminal Server or administration tools installed on their local workstation.

http://download.microsoft.com/download/5/C/0/5C0BD0AB-040D-4C56-A60B-661001012DDA/Windows_Server_2008_R2_e-book.pdf

Text as per the MSPress Blog http://blogs.msdn.com/microsoft_press/