Hoy me han enviado un email y la verdad es que me ha encantado, refleja una verdad como la copa de un pino.

“Cuando advierta que para producir necesita obtener autorización de quienes no producen nada; cuando compruebe que el dinero fluye hacia quienes trafican no bienes, sino favores; cuando perciba que muchos se hacen ricos por el soborno y por influencias más que por el trabajo, y que las leyes no lo protegen contra ellos sino, por el contrario, son ellos los que están protegidos contra usted; cuando repare que la corrupción es recompensada y la honradez se convierte en un autosacrificio, entonces podrá afirmar, sin temor a equivocarse, que su sociedad está condenada.” Ayn Rand (1950) ;

La replicación DFS es un motor de replicación con varios maestros y basado en estados que admite la programación y el límite de ancho de banda. La replicación DFS utiliza un algoritmo de compresión denominado Compresión Diferencial Remota (RDC). RDC es un protocolo cliente-servidor que puede utilizarse eficazmente para actualizar archivos en una red con ancho de banda limitado. RDC detecta la inserción, eliminación y reorganización de datos en los archivos, lo que permite a la replicación DFS replicar sólo los bloques modificados de los archivos cuando éstos se actualizan. La replicación DFS utiliza varios procesos para mantener los datos sincronizados en varios servidores.

Leer el resto de esta entrada »

Fuente; http://redmondmag.com/Articles/2011/08/01/Managing-Active-Directory-Password-Policies.aspx?Page=1

Some things in life, like death and taxes, are guaranteed. There are other things in life that you think are guaranteed, or at least you think you know how they work — such as Active Directory password policies. Then, there are things that you want to work, and when they come along, you feel you know how they work before you even look at them — such as fine-grained password policies (FGPPs). I’m not going to discuss death and taxes, but I am going to clarify the misconceptions surrounding Active Directory password policies and FGPPs.

With the technology of password policies having existed for more than 10 years now, you’d think this topic would be infinitely clear. However, based on my exposure to network administrators who are still confused about how Active Directory password policies work, that’s not the case.

Basic Facts

These basic facts have been the same in Active Directory domains since Windows 2000, which was released 11 years ago:

• The Default Domain Policy defines the password policies by default for every user in Active Directory and every user located in the local Security Account Manager (SAM) on every server and desktop that joins Active Directory.
• There can be only one password policy for domain users in a Windows 2000 and Windows Server 2003 Active Directory domain.
• It’s not possible to configure the password policy for an organizational unit (OU) of users to be different than that of other users in the domain or in a different OU.
• The password policy settings can’t be extended to include additional settings without using a third-party tool or developing a custom password policy solution.
• It’s not possible to configure a password policy for the root domain and have it “funnel” down to the other domains in the Active Directory tree.

I still see administrators and organizations try to explain that they have an environment different than what is possible. With that said, I’d encourage all of the admins and organizations that think they have a different configuration for passwords to “test” what they believe. Unless you have a third-party product in place or have Windows Server 2008 native mode domains, you can’t have anything but what I detailed here.

Leer el resto de esta entrada »