Robert's profileThe System Center Connec...PhotosBlogListsMore Tools Help

    Addressing Problems Due to Access Token Limitation ( Kerberos )

    Lately I was doing some testing with users and local & global groups, did you know you can't give a user more than 1015 groups.

    There is a limit in group membership. I did a yahoo and saw there a lot and lots of issues whit this problem in large sites.

    Sites with more than 10k users an 500k off groups the user get a error

    image  Excellent info is there form microsoft  read it and there is no hotfix for this to fix this by software.

    Don't give users more than 1000 groups that's a fact.

    http://www.microsoft.com/downloads/details.aspx?FamilyID=22dd9251-0781-42e6-9346-89d577a3e74a&DisplayLang=en#filelist

    Cheers,

    Robert

    Microsoft Hosting Solutions for Service Providers

    Featured Resources

    The Solution for Hosted Messaging and Collaboration (HMC) incorporates powerful Microsoft enterprise products such as Microsoft Exchange Server, Microsoft Windows SharePoint Services, and:

      • Introducing Microsoft Office Communications Server 2007, which manages all real-time communications such as instant messaging (IM) and audio and video conferencing.
      • Improved support for Exchange Server 2007 SP1 now includes Web-based OABs and resource mailboxes.
      • Enhanced support for Windows SharePoint Services now includes multi-tenant People Picker functionality.
      • Provisioning capabilities have been expanded by adding Microsoft Provisioning System (MPS) cross data store integration checking procedures and the Individual Information Worker (IIW) tenant model.

    Read about these and more new features

    All Knowledge Base (KB) articles reference hotfixes that may resolve an immediate issue.

    http://www.microsoft.com/downloads/details.aspx?FamilyId=C9CBBC69-4AE4-450D-AF5E-F49E7C701CF4&displaylang=en#filelist

    http://technet.microsoft.com/nl-nl/serviceproviders/default(en-us).aspx

    TechNet Magazine

    July2008 July 2008

    IIS: Going Live with IIS 7.0

    The release of Internet Information Services 7.0 sets new standards, offers fundamental improvements, and brings new capabilities for consolidating Web environments. Explore the most important enhancements and get an in-depth guide to testing, staging, and migrating your Web apps to IIS 7.0. Fergus Strachan

    Communications and Collaboration: Planning Your Migration to Unified Messaging

    Moving from a legacy voicemail system to a unified messaging platform can be done fairly easily and with little disruption to your end users—as long as you have a solid plan in place. Here’s what you need to know to plan your migration, test your new systems, and implement unified messaging in your organization. Jeff Goodwin

    Communications and Collaboration: How Voice Powers OCS 2007

    Microsoft Office Communication Server brings important changes to enterprise telephony. Examine how voice calls are made layer by layer, learn how calls can be routed to various endpoints, and explore the importance of conversations in OCS communications. Rajesh Ramanathan

    Communications and Collaboration: Create Powerful Connections with Groove and SharePoint

    Microsoft Office Groove and SharePoint Server both provide powerful collaboration capabilities. Compare how they differ from and complement one another, and find out how you can integrate Groove and SharePoint to provide an easy and flexible collaboration solution that will support users at different locations. Alan Maddison

    Windows Administration: Introducing Windows Server 2008 Failover Clustering

    Users have complained for years that clustering in Windows Server is too complicated. With the release of Windows Server 2008, clustering received a complete facelift. Explore some of the most significant advancements found in the new Failover Clustering, and see how this new implementation makes clusters much easier to set up and maintain. Chuck Timon

    Code Download
    .Chm Files

    Network Monitor 3.2 Beta is available!

    We are our proud and excited to announce the release of NM3.2 Beta, available at http://connect.microsoft.com. Please visit the Network Monitor Project on Microsoft Connect and download the Network Monitor 3.2 Beta. You can also view the FAQ from the home page for more information about the latest version.

    Also remember that you can visit our blog for continued updates about using NM3 and network troubleshooting in general: http://blogs.technet.com/netmon.

    What's New since Network Monitor 3.1

    • Process Tracking: View all the processes on your machine generating network traffic (process name and PID). Use the conversation tree to view frames associated with each process.

    • Find conversations: Quickly isolate frames in the same network conversation. Isolate TCP streams, HTTP flows etc.

    • PCAP capture file support*
    • Capture engine re-architecture to improve capture rate in high-speed networks. NM 3.2 drops significantly fewer frames that NM 3.1

    · Extensive parser set: Parsers for over 300 protocols! Parsers for the protocols covered by the Windows Open Protocol Specifications (see http://msdn.microsoft.com/en-us/library/cc216517.aspx).

    · NM API: Create your own applications that capture, parser and analyze network traffic!

    • Better parser management: By default only a subset of parsers are loaded. You can load the full parser set by changing the parser search order in Tools>Options>Parser
    • Support for frame truncation. Go to Tools>Options and limit the number of bytes captured per frame to improve performance.
    • More extensive documentation of the NPL which includes documentation on the new NMAPI. Access the documentation from Help > NPL and API Documentation
    • Enhanced filtering on items within NPL while loops or arrays. You can specify an index into the array or while loop to filter on
    • IA64 version now available.
    • ContainsBin Plug-in: Search frames for arbitrary byte sequences or strings. For example, ContainsBin(FrameData, ASCII, "msn").
    • More UI indications of conversation status, dropped frames and the number of frames in the capture buffer.

    • . and more. See our Release Notes in the NM3.2 installation directory for a complete list of new features and known issues with the Beta.

    Enjoy!

    The Network Monitor Team

    Microsoft released the Security Compliance Management Toolkit for System Center Configuration Manager

    source:http://www.microsoft.com/downloads/details.aspx?FamilyId=5534BEE1-3CAD-4BF0-B92B-A8E545573A3E&displaylang=en

    Monitor the Security Compliance State of Your IT Environment for Computers Running Windows
    The toolkit provides best practices from Microsoft about how to plan, deploy, monitor, and remediate a security baseline. The toolkit includes 12 Configuration Packs that you can use with the desired configuration management (DCM) feature in Microsoft® System Center Configuration Manager 2007 to monitor Windows Vista®, Windows® XP Service Pack 2 (SP2), and Windows Server® 2003 SP2.

    The toolkit also offers a proven method that your organization can use to effectively monitor the compliance state of recommended security baselines for Windows Vista®, Windows® XP Service Pack 2 (SP2), and Windows Server® 2003 SP2. You can monitor computers running these operating systems using the desired configuration management (DCM) feature in Microsoft® System Center Configuration Manager 2007 with the Configuration Packs the toolkit provides. In addition, you can quickly and easily run reports to demonstrate how your organization is meeting important compliance regulations.
    The Security Compliance Management toolkit includes the following components:

    • Security Compliance Management Overview.docx: This document describes the overall security compliance management process and the steps that the toolkit recommends to achieve security compliance using prescribed security baselines.
    • DCM Configuration Pack User Guide.docx: This user guide describes how to load and operate the Configuration Packs in the desired configuration management (DCM) feature of System Center Configuration Manager 2007.
    • SecurityComplianceManagement.msi: This Microsoft Windows Installer (.msi) file includes 12 Configuration Packs to provide security baseline checks for Windows Vista, Windows XP SP2, and Windows Server 2003 SP2.
    • Informational Materials.zip: The materials include a Security Compliance Management Data Sheet and a FAQ that explain how the guidance for the toolkit can benefit your organization.

    To view this accelerator online at TechNet click here.
    Please direct questions and comments related to the DCM feature and the Configuration Packs to the Configuration Manager – Desired Configuration Management community forum on Microsoft TechNet.

    Get the Files : http://www.microsoft.com/downloads/details.aspx?familyid=5534bee1-3cad-4bf0-b92b-a8e545573a3e&displaylang=en&Hash=xZt%2bZ7y7zf9B%2bn4cVvxhB%2fidNiLbpcyeXj6K9kAJ7DuEAfrMSm1JzKjXgrNeDN%2bofT9q4v%2bS%2fCvvLZ8q9KbW3Q%3d%3d

    Secure Vantage ACS Administrators Quick Reference

     

    Secure Vantage released a ACS Administrators Quick Reference for Free.

    Get it here

    ACS Administrators Quick Reference

    Based on some customer and partner feedback we put together a 1 page quick reference sheet for the Audit Collection Service (ACS) included with System Center Operations Manager 2007. This ACS 'cheat sheet' includes best practices, configuration and administrative facts for managing your ACS environment.

    If you're new to ACS or it's something you don't administer often this doc is for you. Don't waste time hunting for information, print this doc and keep it close by. 

    Download ACS Administrators Quick Reference

    Summary of content

    · adtAdmin Command, Parameters and SubParameters List

    · Best Practices

    · Collector Default Settings

    · Collector Queue Settings

    · Collector Database Size Planning equation

    · Collector Memory Planning equation

    · Collector & Forwarder Performance Counter Objects

    · dtPartition Status Codes & dtConfig Items

    · General Scalability & Performance information

    · Important Event IDs

    · Key SQL Views

    · Noise Filtering Tips

    · Security Quick Facts

    source:http://securevantage.spaces.live.com/Blog/cns!905E136EE69247B4!285.entry

    http://securevantage.spaces.live.com/default.aspx

    Microsoft buys virtualization player Kidaro

    Kidaro delivers innovative virtualization solutions to address desktop computing challenges at an enterprise scale. With Kidaro, you can deploy secure, corporate-managed virtual desktops that run locally on enterprise or 3rd-party PCs, enhancing IT agility while eliminating cost and risk.

    Microsoft to Expand Investment in Desktop Virtualization With Acquisition of Kidaro

    Addition to Microsoft Desktop Optimization Pack will provide IT professionals with capability for managing Virtual PCs across the enterprise

    Turning Virtualization Into Tangible Benefits

    Managing desktops across an enterprise can be time-consuming, complex and costly. Adding Kidaro’s desktop virtualization capabilities to the Microsoft Desktop Optimization Pack suite will provide Microsoft Software Assurance customers who have purchased the add-on subscription with the enhanced ability to do the following:

    Accelerate Windows Vista migrations by minimizing compatibility issues between applications and the operating system

    •Easily deploy managed Virtual PCs to Windows desktops

    Drive business continuity by enabling rapid reconstitution of corporate desktops

    Minimize the tension between IT control and user flexibility by applying policies in locked-down corporate Virtual PCs while giving users more open access to the underlying host operating system

    Speed user adoption of desktop virtualization by making Virtual PCs “invisible” to end users

    Reduce IT investment in desktop image management by delivering virtual images independent of hardware or local desktop configuration

    “Virtualization technology has tremendous potential to help companies reduce costs and increase control over their desktops, while simultaneously delivering benefits to end users,” said Kevin Brown, chief executive officer of Kidaro. “By adding Kidaro’s technology to Microsoft Desktop Optimization Pack, Microsoft can deliver sophisticated virtual desktop capabilities and management to a wide variety of enterprise customers.”

    Kidaro technologies will be incorporated into future updates of the Microsoft Desktop Optimization Pack for Software Assurance, which currently includes five key technologies that help enterprises manage their desktops:

    •Microsoft Application Virtualization

    •Microsoft Asset Inventory Service

    •Microsoft Advanced Group Policy Management

    •Microsoft Diagnostics and Recovery Toolset

    •Microsoft System Center Desktop Error Monitoring

    http://kidaro.com/

    http://www.microsoft.com/Presspass/press/2008/mar08/03-12ExpandVirtualizationPR.mspx