After installing the most recent Updates on their Domain Controllers, some readers have reported in the comments that they experienced that the Local Security Authority Subsystem Service (LSASS) process on their Domain Controllers continually increases memory usage making their Domain Controllers become unresponsive and even automatically restart…
Showing posts with label Active Directory. Show all posts
Showing posts with label Active Directory. Show all posts
Greetings again AskDS!
Ryan Ries here. Got something exciting to talk about.
You might be familiar with the original Lingering Object Liquidator tool that was released a few years ago.
Today, we’re proud to announce version 2 of Lingering Object Liquidator!
Source : Ask the Directory Services Team
Let’s say that you have a GPO that is scoped to a specific security group. If you add a computer to this security group, you would normally need to restart in order for the computer to see that it is now a member of this group. To bypass this, you can delete the system’s Kerberos ticket and run GPUpdate. The computer will magically see its new group membership without a restart.
Source : DeployHappiness | Quick Tip: Add Computer to Group – GPUpdate without Restart
So as many of you may know, yesterday Microsoft released a security hotfix that changed the behavior of Group Policy. Put simply if you have a security group filtered User Group Policy Object and you also removed the “Authenticated Users” group from the policy it will no longer apply after you install MS16-072.
Source : Group Policy Central
Previous PostOlder Posts
Home
