Soft (SMTP) vs. Hard (immutableID) matching with Azure AD Connect

08. June 2017 Technical 0
If you are setting up Directory Synchronization from scratch (there are no users in the cloud yet), then Azure AD Connect will be pretty straightforward–the on-premises objects (and passwords if you choose that option) will be synchronized to the cloud, and you can assign services to the user accounts from there. But what if you ...

How to manage permissions with Active Directory (the right way)

25. May 2017 Technical 0
How do most people use Active Directory groups to manage permissions?  You probably already know the answer: Global security groups. For example, if there is a directory on the file server specifically for “Payroll,” then we normally see folks creating a Global security group that corresponds to “Payroll,” populating that group with the users who ...

Warning: Domain Renames are Not Recommended (or Supported)

06. April 2017 Technical 0
I have recently run into a couple of different scenarios wherein I’ve been asked to fix domain rename operations gone awry.  After having worked through this process extensively twice now, I thought I’d post about my experience, in case this helps anyone else avoid the same troubles. To begin, you should know that in both cases, ...

Why You Should Avoid Single Label Domains

16. March 2017 Technical 0
What is a Single Label Domain (SLD)?  This is a term that Microsoft uses to describe domains which have only a single name, and no suffix such as “.local” or “.com.”  For example, your Active Directory domain might have a name like “company.local,” but if it were Single Label, it might be just “company.” The problem ...

Benefits to keeping an On-Premises Active Directory Domain

23. February 2017 Opinion 0
I have seen an alarming trend in the small business market–as more and more companies offload their IT infrastructure to cloud-based applications and services (which is great in many cases), many of them are also starting to abandon older tools and platforms such as on-premises Active Directory. This I cannot agree with, for multiple reasons. ...

Remove SBS 2008 or SBS 2011 Source Server from the domain

14. July 2016 Technical 15
Sorry Old Yeller–I know you were a faithful companion for many years–but it’s time to put you down, buddy. I usually wait until the end of the migration project for this. There is no harm leaving the old server as-is for the duration of the project while you finish migrating file shares, DHCP, Remote Access and so forth. In ...

Active Directory Migration from SBS 2008 or 2011 to Windows Server 2016

27. June 2016 Technical 13
There are three basic options for migrating Active Directory from Small Business Server–(1) you can move into Windows Server Essentials or (2) Windows Server Standard. Furthermore, (3) you can move to Windows Server Standard, and enable the Essentials Experience role afterward, which is what I typically recommend if you are interested in the Essentials features. The ...