This article describes an unexpected behaviour of ADMT v3 and how to work around it.

There are known problems with performing certain Active Directory tasks with DCs running on VMWare, such as DC promotion and trust establishment. This article provides instructions on how to remove the shared folder feature, which is part of VMWare Tools.

Have you ever wanted to log all LDAP searches against a Domain Controller or an ADAM instance? This article describes how to do this.

If you have more than one AD site you may find that account lockouts and unlocks take some time to replicate to the remote site(s). This article explains why this can happen and shows how to enable change notification on inter-site links to allow the urgent replication of account lockout status.

The article provides information about moving (transfering or seizing) FSMO roles from one DC to another DC

This article provides some information on the delegation of certain tasks and on how to create a taskpad.

This articles describes how to increase the "rIDAvailablePool" of the domain

This article describes the behaviour of one of the more important registry values relating to time synchronisation.

This FAQ attempts to answer some of the most common questions around the subject of Active Directory.

When configuring GAL Sync using Microsoft’s Identity Integration Feature Pack (IIFP) you are asked to provide a domain account for use by each Management Agent. Most organisations would not want to provide an account with elevated privileges (e.g. Enterprise Admins or Domains Admins). The IIFP help documentation provides some information on what level of permissions are required for these accounts, but does not provide a good level of detail. In an effort to provide some clarity, this article describes a simple GAL Sync scenario and provides specific guidance on what permissions are required.