A Premier Field Engineer in Denmark

Running AGPM with a Managed Service Account (MSA or gMSA)

Hi,Service accounts are dead. Long live MSAs! But where can you actually use MSAs/gMSAs? One place...

Author: Craig Forster Date: 06/24/2015

Getting started with Storage Replica in Windows Server Technical Preview

Storage Replica (SR) is a new feature that enables storage-agnostic, block-level, synchronous...

Author: Craig Forster Date: 10/04/2014

Migrating DFS Namespace from Windows 2000 Server mode to Windows Server 2008 mode

Hi,   I recently helped a customer with this tricky little exercise. The idea was to do the...

Author: Craig Forster Date: 06/30/2014

Office 2013 Security Baselines for SCM are live

Hi, Pat Fetty recently blogged about the new SCM baselines for Office 2013 going live. I opened up...

Author: Craig Forster Date: 06/30/2014

A backup server flooded by DPCs

Hi, I’ve just finished working on a case with a customer that was so interesting that it deserved a...

Author: Craig Forster Date: 02/03/2014

Low throughput when copying files

Hi, I have been helping a customer with a tricky issue recently regarding slow network performance...

Author: Craig Forster Date: 12/05/2013

Removing permission for users to upload their image to AD

Hi,   I recently had the pleasure to help one of our Premier customers with a query they have...

Author: Craig Forster Date: 06/23/2013

Installing DHCP on Windows Server 2012 did not create the local groups

Hi again, Another interesting case with a nice, easy solution. While working with a Premier customer...

Author: Craig Forster Date: 06/23/2013

MBAM 2.0 gets released along with Service Packs to most MDOP apps

Hi, Just a quick note to publicise that MBAM 2.0 is now out, and each of AGPM 4.0, DaRT8.0, App-v...

Author: Craig Forster Date: 04/12/2013

Using SONOS as a “Play To” destination from within Windows RT

Hi,   I recently became the proud owner of the fantastic Sonos PLAYBAR. And while the Sonos...

Author: Craig Forster Date: 04/08/2013

Troubleshooting Windows Performance Issues: Lots of RAM but no Available Memory

Hi,One of my recent posts was recently polished up enough to appear on the MSPFE...

Author: Craig Forster Date: 12/07/2012

Messages cannot be sent when Exchange Hub Transport Service runs as NetworkService

Hi again, I think the post title is pretty self explanatory. Just to clarify it a little, the...

Author: Craig Forster Date: 10/15/2012

SharePoint and SID History not playing well together

Hi, I struck a problem at a custom and the impact, while it seemed minor on the surface, was...

Author: Craig Forster Date: 10/15/2012

Upgrading the ADMX Central Store files from Windows 7/2008R2 to Windows 8/2012

################################# UPDATE (22 March 2013) ###The ADMX and ADML files for Windows 8...

Author: Craig Forster Date: 08/27/2012

Using Delegation in Scheduled Tasks

This blog is about the ability in Windows 7 and Windows Server 2008 R2 to apply a SID to every...

Author: Craig Forster Date: 03/15/2011

Getting error 0xC004F074 when activating against KMS server

HiThis error code is a very generic output to a KMS client having problems activating. To view your...

Author: Craig Forster Date: 03/03/2011

Cannot bring Cluster Name resource online

Hi,Another quick post with a non-very-obvious solution, this time on a new Windows Server 2008 R2...

Author: Craig Forster Date: 02/04/2011

Delegating access in AD to BitLocker recovery information

Normally in AD, all attributes are readable by “Authenticated Users”. Some attributes...

Author: Craig Forster Date: 01/26/2011

Getting prompted for credentials when accessing read-only Office files on SharePoint 2003 from Windows Vista or Windows 7 with Office 2007 or Office 2010

I faced this problem recently at a customer. They had pure Windows XP with Office 2003 deployed to...

Author: Craig Forster Date: 01/13/2011

Preventing accidental removal from the domain

Hi, another juicy customer question with a cool solution. The problem is this: on all workstations,...

Author: Craig Forster Date: 10/15/2010

Backing up and Restoring Domain-Based DFS Namespaces

I had a question for a customer recently which needed some investigation, as the seemingly...

Author: Craig Forster Date: 09/20/2010

How to set a static IP address and rename a NIC based on a known MAC address

I had a question that I thought I would share the answer for. A customer was deploying multiple...

Author: Craig Forster Date: 08/27/2010

Tuning Free System Page Table Entries when using /3GB and /USERVA=wxyz

If you enable /3GB in the boot.ini of a Windows Server 2003 x86 server, you risk running out of...

Author: Craig Forster Date: 08/06/2010

Upgrading the ADMX Central Store files from Vista to Windows 7

I had a question from a customer and thought I’d share the answer with everyone. They asked...

Author: Craig Forster Date: 07/10/2010

Wildcard DNS Entires

I was working on a case with a customer for something that was too weird to ignore. We wanted to use...

Author: Craig Forster Date: 07/09/2010

Decommissioning WINS

I’ve been working on helping remove WINS from a customers network. One of the big problems was...

Author: Craig Forster Date: 07/09/2010

SCSI vs IDE disks in Domain Controllers running as Virtual Machines on Hyper-V in Windows Server 2008 R2

When installing Windows Server 2008 R2 Domain Controllers on Hyper-V R2, events were generated by AD...

Author: Craig Forster Date: 04/20/2010

Windows Server 2008 Terminal Server Session Broker and Event ID 1014

I hit a problem recently where we were seeing this event in all the terminal servers in a session...

Author: Craig Forster Date: 10/07/2009

Capturing attempts to exploit Security Advisory 975497

HiIf you’ve heard about this vulnerability which has been located (and published before it was...

Author: Craig Forster Date: 09/12/2009

A work-around when using different proxies for HTTP and SSL in WSUS 3.0 SP1

WSUS 3.0 SP1 introduces a new command line tool to help admins set different upstream proxies (one...

Author: Craig Forster Date: 05/04/2009

Using NAP health certificates to provide IPSec server/domain isolation

Hi I was recently involved with a proof of concept/functional discovery for a large, shared...

Author: Craig Forster Date: 01/08/2009

Exchange 2007 /prepareschema and inherited permissions in AD

Hi,This is my first ever blog (welcome to 2002 Craig!).I have just visited a customer who had a big...

Author: Craig Forster Date: 09/08/2008