Internet Explorer and SPNs

After learning how SPNs work (read my "Who? Why? Where" to learn what's an SPN), I was frustrated to find out that I can't implement my experience in the real world.
I've created a Sharepoint Central Admin site on port 1234, and wanted to enable kerberos authentication ...

more ...

Checking for conflicting oIDs

I got word that this script was useful for some other IT team, so it's definitely blog-worthy!

The Story

I've inherited some AD forests with their schema extended by in-house software, using oIDs belonging to an MS pool, meaning that those numbers might be used by future schema ...

more ...

Vanishing permissions on AD objects

I recently managed to solve a problem that bugged me for a ~ year - permissions on a specific group on AD would vanish, and the change won't show up on the security logs of any DC (as audit success).

The Story

We've made groups for our helpdesk teams, and ...

more ...

Stsadm / new SPSite is slow

Update: Get the script here

The Story

A couple of days ago, developer extraordinaire Itay Shakury was doing performance tuning on one of our SharePoint applications, and came to me with a problem - creating a new SPSite object took about 30 secs. The stranger part was that only the first ...

more ...


A few seconds about psbase

I really like Powershell's dynamic type system, which allows you to, among other things, view XML nodes really easily. For example, to view the connectionStrings stored in your machine.config, all you have to do is something like:

([xml](gc 'C:\windows\Microsoft.NET\Framework\v2.0.50727\CONFIG ...
more ...

SPNs - Who? Why? Where?

I was making an introduction to a new teammate about SharePoint infrastructure, and one of the things I had to teach her about was SPNs. I was surprised to know almost no one at our place knew what SPNs are actually for. Until my PowerPoint presentation is ready, here is ...

more ...

2008 Clusters can't change password

Last week MS's PFE Moti Bani and me solved a problem that bugged me for ~ a year - since the day we've started deploying 2008 clusters in our production environment:
2008+ Clusters can't update their CNO and VCO accounts' passwords.
The error, as shown in the cluster administrator ...

more ...