Find and Remove SIDHistory

To find and to remove SIDHistory: Web resources: http://blogs.technet.com/b/ashleymcglone/archive/2014/09/05/powershell-module-for-active-directory-sid-history-now-faster.aspx Remove SIDhistory: http://blogs.technet.com/b/ashleymcglone/archive/2011/11/23/how-to-remove-sid-history-with-powershell.aspx SIDHistory powershell module: https://gallery.technet.microsoft.com/PowerShell-Module-for-08769c67 With AD cmdlets: https://technet.microsoft.com/en-us/library/powershell_remove_sid_history%28WS.10%29.aspx

Configure trusts to use SIDHistory

When users and groups are migrated using the Active Directory Migration Tool (ADMT) or using Quest Migration Manager, there is an option to copy the SID’s of the objects in the source domain to the target domain. The reason for this is to allow migrated users to access resources which are still located in theContinue reading “Configure trusts to use SIDHistory”

Kerberos Token and Max Token Size – Group membership limits

Technical reference about Kerberos: http://technet.microsoft.com/en-us/library/cc739058(WS.10).aspx White paper about Kerberos troubleshooting: http://www.microsoft.com/en-us/download/details.aspx?id=21820 Microsoft has published a tool called Tokensz: http://www.microsoft.com/download/en/details.aspx?id=1448 Microsoft has a detailed document about the token-bloat problem, Addressing Problems Due To Access Token Limitation: http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=13749) To step you through remediation on this MS whitepaper, we can read: Several factors can affect the outcome ofContinue reading “Kerberos Token and Max Token Size – Group membership limits”