Although domain controllers can be configured to obtain an IP address from DHCP, it’s best practice to configure a static IP address so that it can be reliably discovered across the network. You may ...

Lost in the noise over the release of the beta 3 build of Windows Server 2008 was this gem: the read-only domain controller, or RODC. Created especially for branch offices or other environments where ...

IT admin may lock down the DMZ from an external perspective but fail to put that level of security on access to the DMZ from an internal perspective as you’ll have to access, manage and monitor these ...

Sounds funny, but believe it or not, it's real. Since its release in Windows Server 2012, Hyper-V supports cloning of Domain Controller VMs. Cloning may seem an incredibly naughty task for a domain ...

It’s back to the future – remember the Windows NT Backup Domain Controller (BDC)? It could log you on, but you couldn’t make any changes to it. The 2008 version of the BDC goes by the new name of Read ...

I have heard some IT pros say that you don’t have to back up every domain controller on the network because of the way Active Directory information is replicated between domain controllers. While ...

In two previous articles (here and here) I shared some classic Active Directory mistakes people have made that got their companies into serious trouble. Here’s another mistake that on the face of it ...

A new report out today from unified identity security company Silverfort Inc. details a previously undisclosed denial-of-service vulnerability in Microsoft Corp.’s Netlogon protocol that could allow ...

I can't seem to find a definitive answer; I think it's yes, but I haven't been able to confirm it yet. Here's the example situation (I know it's bad, that's another topic): Due to network routing ...