{"id":102,"date":"2005-05-18T10:54:00","date_gmt":"2005-05-18T10:54:00","guid":{"rendered":"http:\/\/markwilson.me.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm"},"modified":"2007-07-25T21:58:26","modified_gmt":"2007-07-25T20:58:26","slug":"troubleshooting-windows-authentication","status":"publish","type":"post","link":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm","title":{"rendered":"Troubleshooting Windows authentication with the Microsoft account lockout and management tools"},"content":{"rendered":"<p><!--111641397666287626-->A few weeks back I was at a <a href=\"http:\/\/www.microsoft.com\/uk\/technet\/training\/events.mspx\">Microsoft TechNet UK event<\/a> where <a href=\"http:\/\/blogs.technet.com\/jhoward\/\">John Howard<\/a> demonstrated the <a href=\"http:\/\/www.microsoft.com\/downloads\/details.aspx?FamilyID=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&#038;displaylang=en\">free tools provided by Microsoft to troubleshoot and diagnose account lockout and management issues<\/a> for Windows NT, 2000 and 2003:<\/p>\n<ul>\n<li>acctinfo.dll (also included with the <a href=\"http:\/\/www.microsoft.com\/downloads\/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&amp;displaylang=en\">Windows Server 2003 resource kit tools<\/a>) is installed using the <code>regsvr32 acctinfo.dll<\/code> command and extends the functionality of the Active Directory users and computers MMC snap-in, with an Additional Account Info page on the user object properties to assist in isolating and troubleshooting account lockouts and to change a user&#8217;s password on a domain controller in that user&#8217;s site. This extra page contains a variety of information, including:<\/li>\n<ul>\n<li>The last time the password was set. <\/li>\n<li>Domain password policies. <\/li>\n<li>Password expiration date. <\/li>\n<li>Lockout status. <\/li>\n<li>Last good and bad logons.<\/li>\n<\/ul>\n<li>alockout.dll can be used to create a log file to assist in diagnosing the cause of account lockout problems. It should be copied to the %systemroot%\\system32 folder on the computer experiencing the lockout problems (usually a user&#8217;s workstation) and the <code>appinit.reg<\/code> script run to add alockout.dll to the HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\AppInit_DLLs key. Once the computer is restarted and an account locked out, a log file called alockout.log will be created in the %systemroot%\\debug folder. This tool should not be used on servers that host network applications or services (in particular it should not be used on Exchange servers, because it may prevent the Exchange store from starting).<\/li>\n<li><code>aloinfo.exe<\/code> displays the password age for user accounts to allow determination of accounts which are about to expire in order to anticipate problems before they occur. It is a command prompt tool, with two options: <\/li>\n<ul>\n<li><code>aloinfo \/expires \/server:<em>servername<\/em><\/code> returns a list of user names followed by the age of their password. <\/li>\n<li><code>aloinfo \/stored<\/code> returns a list of services and the accounts used as well as mapped drives for the currently logged on user.<\/li>\n<\/ul>\n<li><code>enablekerblog.vbs<\/code> can be used as a startup script to enable Kerberos logging (as described in <a href=\"http:\/\/support.microsoft.com\/?kbid=262177\">Microsoft knowledge base article 262177<\/a>) on all clients running Windows 2000 or later (it actually sets HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\LSA\\Kerberos\\Parameters\\LogLevel to 1, which once removed will disable Kerberos logging). When looking at Kerberos authentication issues, it is worth checking to see that the Kerberos key distribution center service is started on all domain controllers, that time synchronisation is working correctly from the PDC emulator at the root of the forest down to all client machines (Kerberos authentication will fail if the time is skewed by more than 5 minutes by default), and that both Kerberos and LDAP have service location records defined in DNS (check with <code>nslookup _kerberos._udp.<em>domainname<\/em><\/code> and <code>nslookup _ldap._tcp.<em>domainname<\/em><\/code>). <\/li>\n<li><code>eventcombmt.exe<\/code> (also included with the <a href=\"http:\/\/www.microsoft.com\/downloads\/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&#038;displaylang=en\">Windows Server 2003 resource kit tools<\/a>) searches event logs on multiple computers and collects event records matching specified criteria (useful for gathering specific events from event logs on several different computers to one central location). <\/li>\n<li><code>lockoutstatus.exe<\/code> (also included with the <a href=\"http:\/\/www.microsoft.com\/downloads\/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&amp;displaylang=en\">Windows Server 2003 resource kit tools<\/a>) determines all the domain controllers that are involved in a lockout of a user in order to assist in gathering the logs. It can be useful in identifying if lockout problems are arising from Active Directory replication issues, as typically this means there will be two or more entries for different domain controllers. <\/li>\n<li><code>nlparse.exe<\/code> can be used to extract and display desired entries from the netlogon log files generated by <code>lockoutstatus.exe<\/code> or alockout.dll, parsing the logs for specific return status codes and directing the output to a comma-separated value (.CSV) file. It is also possible to enable netlogon debug logging with the <code>nltest.exe<\/code> Windows support tool, or via the registry, as described in <a href=\"http:\/\/support.microsoft.com\/?kbid=109626\">Microsoft knowledge base article 109626<\/a>.<\/li>\n<\/ul>\n<h3>Links<\/h3>\n<p><a href=\"http:\/\/www.windowsecurity.com\/articles\/implementing-troubleshooting-account-lockout.html\">Implementing and troubleshooting account lockout<\/a> (WindowSecurity.com).<br \/>\n<a href=\"http:\/\/www.microsoft.com\/downloads\/details.aspx?familyid=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&amp;displaylang=en\">Microsoft account lockout and management tools<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A few weeks back I was at a Microsoft TechNet UK event where John Howard demonstrated the free tools provided by Microsoft to troubleshoot and diagnose account lockout and management issues for Windows NT, 2000 and 2003: acctinfo.dll (also included with the Windows Server 2003 resource kit tools) is installed using the regsvr32 acctinfo.dll command &hellip; <a href=\"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Troubleshooting Windows authentication with the Microsoft account lockout and management tools<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[],"tags":[100,106,101,99],"class_list":["post-102","post","type-post","status-publish","format-standard","hentry","tag-windows-2000","tag-windows-nt","tag-windows-server-2003","tag-windows-xp"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Troubleshooting Windows authentication with the Microsoft account lockout and management tools - markwilson.it<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Troubleshooting Windows authentication with the Microsoft account lockout and management tools - markwilson.it\" \/>\n<meta property=\"og:description\" content=\"A few weeks back I was at a Microsoft TechNet UK event where John Howard demonstrated the free tools provided by Microsoft to troubleshoot and diagnose account lockout and management issues for Windows NT, 2000 and 2003: acctinfo.dll (also included with the Windows Server 2003 resource kit tools) is installed using the regsvr32 acctinfo.dll command &hellip; Continue reading Troubleshooting Windows authentication with the Microsoft account lockout and management tools\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm\" \/>\n<meta property=\"og:site_name\" content=\"markwilson.it\" \/>\n<meta property=\"article:published_time\" content=\"2005-05-18T10:54:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2007-07-25T20:58:26+00:00\" \/>\n<meta name=\"author\" content=\"Mark Wilson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@markwilsonit\" \/>\n<meta name=\"twitter:site\" content=\"@markwilsonit\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mark Wilson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2005\\\/05\\\/troubleshooting-windows-authentication.htm#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2005\\\/05\\\/troubleshooting-windows-authentication.htm\"},\"author\":{\"name\":\"Mark Wilson\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/98f61365e7c39d6be942174b8c4de468\"},\"headline\":\"Troubleshooting Windows authentication with the Microsoft account lockout and management tools\",\"datePublished\":\"2005-05-18T10:54:00+00:00\",\"dateModified\":\"2007-07-25T20:58:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2005\\\/05\\\/troubleshooting-windows-authentication.htm\"},\"wordCount\":625,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/98f61365e7c39d6be942174b8c4de468\"},\"keywords\":[\"Microsoft Windows 2000\",\"Microsoft Windows NT\",\"Microsoft Windows Server 2003\",\"Microsoft Windows XP\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2005\\\/05\\\/troubleshooting-windows-authentication.htm#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2005\\\/05\\\/troubleshooting-windows-authentication.htm\",\"url\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2005\\\/05\\\/troubleshooting-windows-authentication.htm\",\"name\":\"Troubleshooting Windows authentication with the Microsoft account lockout and management tools - markwilson.it\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#website\"},\"datePublished\":\"2005-05-18T10:54:00+00:00\",\"dateModified\":\"2007-07-25T20:58:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2005\\\/05\\\/troubleshooting-windows-authentication.htm#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2005\\\/05\\\/troubleshooting-windows-authentication.htm\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2005\\\/05\\\/troubleshooting-windows-authentication.htm#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Troubleshooting Windows authentication with the Microsoft account lockout and management tools\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/\",\"name\":\"markwilson.it\",\"description\":\"get-info -class technology | write-output &gt; \\\/dev\\\/web\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/98f61365e7c39d6be942174b8c4de468\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/98f61365e7c39d6be942174b8c4de468\",\"name\":\"Mark Wilson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/i0.wp.com\\\/www.markwilson.co.uk\\\/blog\\\/uploads\\\/image-4.png?fit=800%2C800&ssl=1\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.markwilson.co.uk\\\/blog\\\/uploads\\\/image-4.png?fit=800%2C800&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.markwilson.co.uk\\\/blog\\\/uploads\\\/image-4.png?fit=800%2C800&ssl=1\",\"width\":800,\"height\":800,\"caption\":\"Mark Wilson\"},\"logo\":{\"@id\":\"https:\\\/\\\/i0.wp.com\\\/www.markwilson.co.uk\\\/blog\\\/uploads\\\/image-4.png?fit=800%2C800&ssl=1\"},\"description\":\"A Chartered IT Professional, with recent experience in technology leadership, IT strategy and practice management roles, Mark Wilson is an Enterprise Architect in the Advisory and Management Group at risual. During a career spanning more than two decades, Mark has gained widespread recognition as an expert in his field including both industry and national press exposure. In addition to certifications from Microsoft, VMware, Red Hat, The Open Group and Axelos, Mark held a Microsoft Most Valuable Professional (MVP) award for three years and is now part of the MVP Reconnect programme. Mark is also well-known on social media and maintains an award-winning blog.\",\"sameAs\":[\"http:\\\/\\\/www.markwilson.co.uk\\\/\",\"https:\\\/\\\/www.instagram.com\\\/markwilsonuk\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/markawilson\\\/\",\"https:\\\/\\\/x.com\\\/markwilsonit\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCWHlZCoHRTocdvtrOJ2IL4A\"],\"url\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/author\\\/mark-wilson\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Troubleshooting Windows authentication with the Microsoft account lockout and management tools - markwilson.it","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm","og_locale":"en_GB","og_type":"article","og_title":"Troubleshooting Windows authentication with the Microsoft account lockout and management tools - markwilson.it","og_description":"A few weeks back I was at a Microsoft TechNet UK event where John Howard demonstrated the free tools provided by Microsoft to troubleshoot and diagnose account lockout and management issues for Windows NT, 2000 and 2003: acctinfo.dll (also included with the Windows Server 2003 resource kit tools) is installed using the regsvr32 acctinfo.dll command &hellip; Continue reading Troubleshooting Windows authentication with the Microsoft account lockout and management tools","og_url":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm","og_site_name":"markwilson.it","article_published_time":"2005-05-18T10:54:00+00:00","article_modified_time":"2007-07-25T20:58:26+00:00","author":"Mark Wilson","twitter_card":"summary_large_image","twitter_creator":"@markwilsonit","twitter_site":"@markwilsonit","twitter_misc":{"Written by":"Mark Wilson","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm#article","isPartOf":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm"},"author":{"name":"Mark Wilson","@id":"https:\/\/www.markwilson.co.uk\/blog\/#\/schema\/person\/98f61365e7c39d6be942174b8c4de468"},"headline":"Troubleshooting Windows authentication with the Microsoft account lockout and management tools","datePublished":"2005-05-18T10:54:00+00:00","dateModified":"2007-07-25T20:58:26+00:00","mainEntityOfPage":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm"},"wordCount":625,"commentCount":1,"publisher":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/#\/schema\/person\/98f61365e7c39d6be942174b8c4de468"},"keywords":["Microsoft Windows 2000","Microsoft Windows NT","Microsoft Windows Server 2003","Microsoft Windows XP"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm","url":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm","name":"Troubleshooting Windows authentication with the Microsoft account lockout and management tools - markwilson.it","isPartOf":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/#website"},"datePublished":"2005-05-18T10:54:00+00:00","dateModified":"2007-07-25T20:58:26+00:00","breadcrumb":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-windows-authentication.htm#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.markwilson.co.uk\/blog"},{"@type":"ListItem","position":2,"name":"Troubleshooting Windows authentication with the Microsoft account lockout and management tools"}]},{"@type":"WebSite","@id":"https:\/\/www.markwilson.co.uk\/blog\/#website","url":"https:\/\/www.markwilson.co.uk\/blog\/","name":"markwilson.it","description":"get-info -class technology | write-output &gt; \/dev\/web","publisher":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/#\/schema\/person\/98f61365e7c39d6be942174b8c4de468"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.markwilson.co.uk\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":["Person","Organization"],"@id":"https:\/\/www.markwilson.co.uk\/blog\/#\/schema\/person\/98f61365e7c39d6be942174b8c4de468","name":"Mark Wilson","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/i0.wp.com\/www.markwilson.co.uk\/blog\/uploads\/image-4.png?fit=800%2C800&ssl=1","url":"https:\/\/i0.wp.com\/www.markwilson.co.uk\/blog\/uploads\/image-4.png?fit=800%2C800&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.markwilson.co.uk\/blog\/uploads\/image-4.png?fit=800%2C800&ssl=1","width":800,"height":800,"caption":"Mark Wilson"},"logo":{"@id":"https:\/\/i0.wp.com\/www.markwilson.co.uk\/blog\/uploads\/image-4.png?fit=800%2C800&ssl=1"},"description":"A Chartered IT Professional, with recent experience in technology leadership, IT strategy and practice management roles, Mark Wilson is an Enterprise Architect in the Advisory and Management Group at risual. During a career spanning more than two decades, Mark has gained widespread recognition as an expert in his field including both industry and national press exposure. In addition to certifications from Microsoft, VMware, Red Hat, The Open Group and Axelos, Mark held a Microsoft Most Valuable Professional (MVP) award for three years and is now part of the MVP Reconnect programme. Mark is also well-known on social media and maintains an award-winning blog.","sameAs":["http:\/\/www.markwilson.co.uk\/","https:\/\/www.instagram.com\/markwilsonuk\/","https:\/\/www.linkedin.com\/in\/markawilson\/","https:\/\/x.com\/markwilsonit","https:\/\/www.youtube.com\/channel\/UCWHlZCoHRTocdvtrOJ2IL4A"],"url":"https:\/\/www.markwilson.co.uk\/blog\/author\/mark-wilson"}]}},"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":577,"url":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-dns-on-windows-server.htm","url_meta":{"origin":102,"position":0},"title":"Troubleshooting DNS on a Windows server","author":"Mark Wilson","date":"Wednesday 18 May 2005","format":false,"excerpt":"Earlier today, I blogged about some of the tools that are available for monitoring Active Directory (AD) enterprise replication and troubleshooting Windows authentication. Given that AD is so heavily reliant on the domain name system (DNS), it seems logical that I also list some of the tools available for monitoring\u2026","rel":"","context":"In \"DNS\"","block_context":{"text":"DNS","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/dns"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":104,"url":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/troubleshooting-group-policy.htm","url_meta":{"origin":102,"position":1},"title":"Troubleshooting group policy","author":"Mark Wilson","date":"Wednesday 18 May 2005","format":false,"excerpt":"I picked up the following advice for troubleshooting application of group policy objects (GPOs) from John Howard at a recent Microsoft TechNet UK event and thought it might be useful if I posted it here: Is the client operating system Windows 2000 or later? Group policy is not available with\u2026","rel":"","context":"In \"Microsoft Active Directory\"","block_context":{"text":"Microsoft Active Directory","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/active-directory"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":485,"url":"https:\/\/www.markwilson.co.uk\/blog\/2004\/09\/script-to-disable-password-expiry-for.htm","url_meta":{"origin":102,"position":2},"title":"Script to disable password expiry for local Windows accounts","author":"Mark Wilson","date":"Friday 10 September 2004","format":false,"excerpt":"One of the shortcomings of the net user command in Windows is the inability to set the password never expires flag on an account (account expiry options can be set, but not password expiry and the full syntax is described in Microsoft knowledge base article 251394). There are 13 flags\u2026","rel":"","context":"In \"Microsoft Active Directory\"","block_context":{"text":"Microsoft Active Directory","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/active-directory"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":63,"url":"https:\/\/www.markwilson.co.uk\/blog\/2004\/02\/overview-of-microsoft-baseline.htm","url_meta":{"origin":102,"position":3},"title":"Overview of the Microsoft Baseline Security Analyzer","author":"Mark Wilson","date":"Monday 23 February 2004","format":false,"excerpt":"Like Microsoft Software Update Services, the Microsoft Baseline Security Analyzer (MBSA) is a security toolkit component born out of the Microsoft Strategic Technology Protection Program (STPP). MBSA v1.2 is available for download from the Microsoft website and provides a graphical and command line interface that can perform local or remote\u2026","rel":"","context":"In \"Microsoft\"","block_context":{"text":"Microsoft","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/microsoft"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":506,"url":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/monitoring-active-directory-enterprise.htm","url_meta":{"origin":102,"position":4},"title":"Monitoring Active Directory enterprise replication","author":"Mark Wilson","date":"Wednesday 18 May 2005","format":false,"excerpt":"Unlike Windows NT domains, Active Directory (AD) domains have multiple masters and so all domain controller servers must be kept up-to-date with directory modifications made at other domain controllers. AD uses two forms of replication between domain controllers - directory replication is used for directory objects (users, computers, groups, etc.)\u2026","rel":"","context":"In \"Microsoft Active Directory\"","block_context":{"text":"Microsoft Active Directory","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/active-directory"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":709,"url":"https:\/\/www.markwilson.co.uk\/blog\/2006\/04\/maximising-active-directory-performance.htm","url_meta":{"origin":102,"position":5},"title":"Maximising Active Directory performance and replication troubleshooting","author":"Mark Wilson","date":"Tuesday 11 April 2006","format":false,"excerpt":"Whenever I see that John Craddock and Sally Storey (from Kimberry Associates) are presenting a new seminar on behalf of Microsoft I try to attend. Not just because the content is well presented but because of the relevance of the material, some of which would involve wading through reams of\u2026","rel":"","context":"In \"Microsoft Active Directory\"","block_context":{"text":"Microsoft Active Directory","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/active-directory"},"img":{"alt_text":"","src":"http:\/\/www.assoc-amazon.co.uk\/e\/ir?t=marsweblo-21&l=ur2&o=2","width":350,"height":200},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/posts\/102","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=102"}],"version-history":[{"count":0,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/posts\/102\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=102"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=102"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=102"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}