Daily IT Matters [DIM]

This is just a simple one. I had to find users who did not had the preauthentication option checked. Read more here: http://technet.microsoft.com/en-us/library/bb742516.aspx Please note that I use samAccountType instead of the less efficient (&(objectClass=user)(objectCategory=person)) Get-ADUser -LDAPFilter "(&(samAccountType=805306368)(useraccountcontrol:1.2.840.113556.1.4.803:=4194304))"

Today we had a nasty encounter with sudden access denied on RDP connection to our Terminal Server Farms. The day started that users could not connect to our Navision environment, this environment constists of an Terminal Server farm with an SQL 2008 Cluster. After analyzing first symptoms we saw that the SQL Cluster had failed over but that the quorum disk was stil on the Node that had "sudden" issues. Thus we gracefully brought the faulty node down through Cluster Manager and started it up again. In the meantime we were notified that there were still issues, then we saw profile redirection errors caused by a faulty location and permissions of the user profile location. We left the profiles at default location and focussed on the permissions we fixed them, and users started to report that they could log in again. But now problems started to appear out of now where users could not connect to our other Terminal Servers farms for other application, we where now m...