Kerberos Delegation and Troubleshooting
When things go wrong with Active Directory’s (AD’s) Kerberos implementation, troubleshooting can be a daunting task. Ninety-nine percent of the time, everything just works—so opportunities to practice troubleshooting are limited. When you do need to solve a problem, it’s important to have a good technical understanding of the protocol. One of Kerberos’s most complicated configurable components is the concept of delegation.
In this article for ITPro Today, Brian Desmond from Ravenswood Technology Group explains how delegated authentication works.
AD Forest Recovery is tough. There’s a non-trivial number of pitfalls that can occur during a recovery that you won’t want to encounter when recovering from an actual disaster. It’s essential to have a solid recovery plan that is updated on a regular basis, after every major environmental change, and tested at least once every year. In this article, Burke Matsuo provides guidance on what should and shouldn’t be in your AD recovery plan.