Microsoft MVP Year 5

I received an email this morning letting me know that I have been renewed as a Microsoft MVP in Directory Services for the fifth year.

I get excited every time I receive the award and I'm so humbled to be in such great company.  The five year mark is an important mark.  I'm glad that I have been able to make a contribution to the community which has helped me much more than I've helped it.

I previously thanked a lot of people.   I won't go through the list again but the same things I said before still apply.

I would like to thank a few new folks this year.  DeLise and everyone at the Microsoft Reston and Chevy Chase Offices.  This is the first year that I started speaking and it is something that I've come to enjoy.  I'm glad to be part of the events.   Shameless plug for TechGate 2013

I've also been a part of several book projects and want to thank the folks at Packt Publishing and O'Reilly Publishing for letting me be a part of them.

Lastly all the people on Twitter working with Active Directory.  I really like the interaction on Twitter and I've met some great and passionate people over there.

Active Directory is starting to make a shift to the cloud (slow shift; it won't happen tomorrow). I'm hoping to turn and pivot as the product evolves (hint everyone learn ADFS).  There are some very smart people in Redmond working on AD and lots of great PFEs in the field.  Active Directory is not going anywhere so stay tuned for more ADISFUN.

Windows Server 2012 R2 Preview - Schema Version

I previously posted  a "quick-hitter" blog about the schema version in Windows Server 2012. 

Windows Server 2012 R2  preview was released today! The current version is 69 

I once again used adfind to quickly find the schema version.

For those that prefer to use powershell; you can also find the object version that way. 

The current (as of 25 June 2013) Active Directory Schema version table is listed below.

Windows Server 2012 R2 Preview	69
Windows Server 2012	56
Windows 2008 R2	47
Windows 2008	44
Windows 2003 R2	31
Windows 2003	30
Windows 2000	13

You can download an evaluation copy of Windows Server 2012 R2  and go start to learn and have fun.  Thanks to all the hard work put in by the many people at Microsoft that made today happen.

Software and Security on Domain Controllers

This post was inspired by someone who I consider a friend and a mentor in the Active Directory world...11 time AD MVP Joe Richards

Microsoft recently published an excellent Active Directory Security document.   Laura Robinson is the lead author of the document and there are serious heavy hitters in the acknowledgements section including Laura Hunter, Dean Wells, and others.   You can download the document using the link below:

Best Practices for Securing Active Directory

Joe brought up an excellent point on the DS-MVP list stating that we all know that best practice is to not run additional and unnecessary software on domain controllers but was this documented.   The document above addresses this.

From page 27 of the document:

Protecting Domain ControllersDomain controllers should be treated as critical infrastructure components, secured more stringently and configured more rigidly than file, print, and application servers. Domain controllers should not run any software that is not required for the domain controller to function or doesn’t protect the domain controller against attacks. Domain controllers should not be permitted to access the Internet, and security settings should be configured and enforced by Group Policy Objects (GPOs). Detailed recommendations for the secure installation, configuration, and management of domain controllers are provided in the Securing Domain Controllers Against Attack section of this document.

Microsoft also recently released a shorter document that is worth downloading and reading.

Securing Active Directory: An Overview of Best Practices 

I appreciate Microsoft and everyone who took time to write, edit, and review this important document..  Many times we can tell our customers best practices but they often don't believe it unless they see it come from a Microsoft site or document.

If you have worked around Active Directory long enough this is a common problem.  Domain Controllers used as file servers/app servers/etc.  This is simple, reduce your attack vectors don't install unnecessary software on your DCs.  Also look into RODCs and Server Core as other easy ways to help secure DCs.

You may also see similar posts on other MVP blogs. Joe has asked us to get the word out about this.

Active Directory MVPs on Twitter

I've become a big fan of twitter over the last few years; it is one of the best sources for information and news in my opinion.  I still like RSS feeds for checking blogs and new entries but I'm using twitter more these days.  It is also much easier to interact using twitter.   With the impending closure of Google Reader I'll probably be a bigger twitter user.  

I've started compiling a list of Active Directory/Directory Services MVPs on twitter.   Tweet frequency ranges from multiple daily tweets to rarely.  I will try and keep this list up to date.  I'm sure there are folks that I missed.  Please send me an email or leave a comment if any entry needs updating.   I don't want to leave anyone out.

I'll try to update and go through this list every quarter (MVPs are selected every quarter Jan/April/July/October)

Microsoft MVPs - Directory Services	Twitter Name and Profile
Mesut Aladag	@mesutaladag
Zubair Alexander	@ZubairAlexander
Jimmy Andersson
Brian Arkills	@barkills
Hank Arnold
Alexandre  Augagneur
Edoardo Benussi	@ebenussi
Paul  Bergson	@pbbergs
Sander Berkouwer	@SanderBerkouwer
Xiaolong Cai
Paul  Clement
Ragael Correa
Eugene Delprato
Brian Desmond	@brdesmond
Olivier Detilleux	@olivierdx
Sean Deuby	@shorinsean
Freddy Elmaleh
Marius Ene
Salman Farizy
Ace Fekay	@AceFekay
Liang Feng
Lee Flight
Tamas Gai
Ermanno Goletto	@ermannog
Guido Grillenmeier
Chunlong Han
LiGang Han
Junxian Huang
Nils Kaczenski	@Kaczenski
Joe  Kaplan
Sainath KEV
Gil  Kirkpatrick	@gkirkpatrick
Jyrki Kivimaki	@jykivima
Mike Kline	@mekline
Michinari Kobuna
Suguru Kunii
Roberto Di Lello	@RaDiansBlog
Guangji Liang
Qiang Liu
Fernando Lopez
Thiago Cardosa Luiz	@t_cardoso
Ahmed  Malek
Tadayoshi Manabe
Mark  Minasi	@mminasi
Richard Mueller
Tony Murray	@MrTweetTastic
Gary  Olsen
Niyi Omotoyinbo
Mark  Parris	@markparris
Suttipan Passorn	@passorn
Jorge de Almeida Pinto
Pawel Plawiak
John Policelli	@JohnPolicelli
Marcin Policht
Leonardo  Ponti	@PontiLeo
Bobby  Primasta
Yuwei Qi
Shengrong Qu
Slamet Raharjo
Leone Randazzo	@LeoneRandazzo
Joe  Richards	@joewaredotnet
Llya Rud
Marc Salvador
Mario Serra	@Marioserra72
Morgan Simonsen	@msimonsen
Ulf Simon-Weidner	@DSGeek
Santhosh Sivarajan	@Santhosh_Sivara
Chris Spanougakis	@spanougakis
Jacek Swiatowiak
Yanyang Tian
Hakan Uzuner	@hakanuzuner
Awinish Vishwakarma	@Awinish
Gabrizio Volpe	@fabriziovlp
Meinolf  Weber	@mei_web
Ralf Wigand	@ralfwigand
Haidong Wu
Chenggang Xiang
Haji Yakub
Shuyong Yan
Bobby  Zulkarnain	@bobbyiz

Honorary MVP

Laura Hunter                                                    @adfskitteh
**Laura was a long time MVP and now a blue badger.  Microsoft employees can't be MVPs.

Gil dasdfsadf

My Friend Wrote a Book - Part 2

In 2009 I wrote a blog about my friend Kevin writing a book.  Friend is really not a good word here. Kevin and I have been like brothers for 30 years now.  I've always said that I have two brothers, my biological brother Andy, and Kevin.

In 2009 Kevin's book was mentioned in the local county paper.  Since that book was released Kevin has been working on his second book that tells the important story of blacks in Loudoun County, VA during the Civil War.

The book is called  From Loudoun To Glory

This is Kevin Grigsby's second book, which highlights Loudoun County's African-American heritage. From Loudoun To Glory is about the important role that African-Americans from Loudoun County, Virginia played in the Civil War. They would serve as soldiers, sailors, nurses, spies, and scouts. Over two hundred and fifty African-American soldiers and a dozen sailors from Loudoun served in the Union military during the Civil War.

The same things I said in my first blog about Kevin's book goes for this one.  This book  has made a bigger initial splash.  When I woke up on Sunday morning and saw the Washington Post I saw that Kevin's book was featured on the front page of the paper on A1, above the fold.  WOW!!!

The full Washington Post article can be found in the link below.  I've also included some screenshots from the paper.

Ghosts of the Union's black solders rise from Loudoun County's past

Sunday, March 3, 2013  Washington Post front page, I put the red box around the book mention

A mention on the front page of one of the biggest papers on the planet.  It doesn't get much bigger than that.  It is cool to be on the same page with President Obama.  I thought that I'd see the book story in the Loudoun weekly section (small weekly insert).  I was wrong on that!  The book was prominently featured on the front page of the Washington Post Metro section. 

Sunday, March 3, 2013  Washington Post Metro Section 

This is one of the proudest moment's in Kevin's life (his kids are  #1 and #2 by a long shot) .  I couldn't imagine being happier for someone.  Years of hard work and dedication will keep this important story alive for many generations to come.  

Today - mentioned on the same page with President Obama...tomorrow a picture and meeting with President Obama where you present him with a signed copy...sky is the limit :)

Microsoft IT Camp - Speaking Event

I am honored to once again be working at a Microsoft event at the Microsoft office in Reston, VA on March 9, 2013 from 8 AM - 4 PM.   The District of Columbia Maryland Virginia Management User Group is holding an event that includes an IT camp focused on Windows Server 2012.     I'll be working with Microsoft Senior Evangelist Yung Chou during the IT camp.  We will be going over many topics including Active Directory  Hyper-V, Installation, Storage Spaces and more.

There are also System Center and Windows Deployment sessions for those interested in those subjects.  The Windows deployment sessions will be led by Microsoft MVP Rhonda Layfield

The Microsoft Reston location is easy to get to with plenty of parking and they have a great setup there for events like this.  It is also a great chance to meet other enthusiastic IT Pros.   I know that may sound cliche but the type of people that come out to events on Saturdays and put in the extra time and my type of people :)

You can register for the event and find more information about the session and speaker bios by going to

http://dmvmug.eventbrite.com/

DATE: Saturday, March 9, 2013

Time: 8:00 AM to 4:00 PM

Location:  Microsoft Reston, 12012 Sunset Hills Rd, Reston, VA 20190

You can see the flyer for the event below.

I'm looking forward to the event and hope to have a full house.  I'm sure everyone is going to learn something as we move forward with Windows Server 2012.

Future Server Service Packs

As an MVP we have MVP leads that share information and are our main connection to the MVP program.   Recently my MVP lead sent out a great Q&A that I wanted to share.  I checked with her to make sure this is not NDA information and it was not. (thanks Michelle!)

There are still a lot of organizations that still believe that they should wait for a service pack before deploying a new Server OS.   If you were around 10 years ago or more you might remember that Windows NT had seven service packs (1-6a).    Windows 2000 had four service packs   With that many service packs you can see why some old timers still think waiting for service packs is the way to go.

The days of four, six ,or more service packs are probably gone forever.   I can't speak for the future of the Microsoft development life-cycle; but with major releases being released every four years and R2 releases every two years there is not much room for service packs.  In addition Microsoft does a really great job with patch Tuesday patches and zero-day patches when applicable.

The point here is you can tell your manager that there is no reason to wait for a service pack.  Windows 2012 is ready now.   It is ready to be tested and deployed now.   I'm in the field just like the rest of you.   Looking forward to this journey.