Sunday, March 1, 2009

Where Did That Come From?

 

Where Did That Come From?

Have you ever found yourself asking the question, "where did THAT come from?"?

In PowerShell we try to give you mechanisms you can use to answer questions like that.    We spend extra resources (memory, cpu cycles, etc) to do this because we focus in the performance of the PEOPLE using our software instead of the performance of the code.  When something goes pear-shaped, what matters is how quickly a person can figure out what is going on and fix it. 

We've talked quite  bit about this in the context of the rich error information we gather but in this blog I'm going to discuss another V1 feature and then tell you about ANOTHER one of my favorite V2isms. 

You know that variables are exposed as a drive and you can do things like:

PS> dir Variable:s*

Name                           Value
----                           -----
ShellId                        Microsoft.PowerShell

Bug have you have tried this:

PS> dir Variable:s* |ft Name,Description -auto

Name       Description
----       -----------
ShellId    The ShellID identifies the current shell.  This is used by #Requires.
StackTrace

Did you know about that?  There is a lot more to variables than meets the eye!  You can provide a description with a variable by using Set-Variable

PS> Set-Variable X 15 -Description "This is a test"
PS> Get-Variable x |fl *

Name        : x
Description : This is a test
Value       : 15
Visibility  : Public
Module      :
ModuleName  :
Options     : None
Attributes  : {}

That has existed since PowerShell V1 but what we never were able to answer is - where did that function come from? 

When I start PowerShell, I dot-source a number of scripts which define functions as part of my session.  Occasionally, I'll decide that I want a function to do something different.  But then the question is, what file was the function defined in?  There was never a good way to answer that question.  That all changes in PowerShell V2.

In V2, we have extended the SCRIPTBLOCK object to include the FILE where the script was defined.  One of the tricks you need to learn is that to get all the information about a Scriptblock, you need to use the -FORCE flag on the formatting commands.

[4376:0]PS> (dir function:prompt ).scriptblock |fl *

    if ($PSDebugContext)
    { "DBG>"
    }
    else
    {
        "[{0}:{1}]PS> " -f $PID, $NestedPromptLevel
    }

[4376:0]PS> (dir function:prompt ).scriptblock |fl * -force

IsFilter      : False
StartPosition : System.Management.Automation.PSToken
File          : D:\ps\profile.ps1
Attributes    : {}
Module        :

Now that you know it is there, you can just access it directly:

[4376:0]PS> (dir function:prompt ).scriptblock.file
D:\ps\profile.ps1

PSMDTAG:FAQ: How do I tell where a function was defined?
(dir function:X).ScriptBlock.File

Experiment! Enjoy! Engage!

Jeffrey Snover [MSFT]
Windows Management Partner Architect
Visit the Windows PowerShell Team blog at:    http://blogs.msdn.com/PowerShell
Visit the Windows PowerShell ScriptCenter at:  http://www.microsoft.com/technet/scriptcenter/hubs/msh.mspx

Published Sunday, March 01, 2009 5:37 PM by PowerShellTeam

Windows PowerShell Blog : Where Did That Come From?

SharePoint 2007 Enterprise versus Standard Edition

 

SharePoint 2007 Enterprise versus Standard Edition

I was talking to a Technical Decision Maker at a customer of mine, and we were talking about the differences in SharePoint 2007 Enterprise versus Standard Edition.  The customer already owned and deployed SharePoint 2007 Standard for their Intranet, so this summary below is what I sent to them as my interpretation of the differences. 

SharePoint Enterprise provides 3 main features over SharePoint Standard. 

1) Web Forms and Workflows (Form Services – Ian’s Summary)

Microsoft Office contains an application called InfoPath.  This is the Office tool to allow for both the creation and filling of forms.  In the same way Excel is to spreadsheets, Word is to Documents, InfoPath is to Forms.  Any user with InfoPath may create a smart interactive form for their own use – such as Invitation to Team Christmas Party, Surveys, T-Shirt order form, Marketing Bill of Materials Order and gives the ability share/email that form in a similar way to a word document.  A user simply opens the form in InfoPath, fills it in electronically and saves/submits/emails the form back.  It is a fantastic tool for broad paper form replacement.

Equally, InfoPath has the ability to include very complex logic, data connections, etc to automate your most structured and business centric forms processes.  For example the Expense form, Leave Request, Travel Approval, Access Request forms that integrate to your systems can be achieved and developed.  In fact – developers actually like creating complex forms because InfoPath integrates with Visual Studio and allows those people with developer skills to write managed .NET code in the form logic (not just JavaScript like some other common form design technologies)

Because the forms (.xsn files) are treated like other Office document files, SharePoint is a natural tool to manage the form versions, permissions, auditing, and the workflow processing of the form.  SharePoint acts as the Form Management tool.

InfoPath, however, has a legacy of being an Office Application.  Historically, to interact with a form to fill it in you need to have InfoPath installed – just like you require Office Word to view a Word document.  Some organisations may not have InfoPath deployed to the desktop yet, or want to have forms public facing.  In this case – the requirement is to be able to fill in the form, submit it into a workflow and process the approvals without a dependency on the InfoPath client.

SharePoint Enterprise includes InfoPath Form Services.  These form services render the InfoPath .xsn form file into a web browser without the need to have the InfoPath client.  The web version of the form provides a very rich experience for the user – maintaining dynamic growing of the form as conditional sections are filled, data connections remain, logic, calculations and validations still are enforced to ensure data is accurate.

The combination of Office InfoPath and SharePoint Enterprise including InfoPath Form Services provides customers with a single, Office based form process management environment for all forms.  The benefits of this are:

i) As new form processes are proposed to be automated, there is simplicity in what tool to use and no decision or procurement for each project

ii) Internal Skill sets are developed and the creation of Office based forms becomes a standard business activity (like creating spreadsheets)

iii) The design environment caters for the average business user, all the way up to Developers who prefer to write managed code for the logic of forms.

iv) The forms can easily be embedded in other web sites and applications.

v) SharePoint is used to manage the form templates and also the submitted forms.  This allows customers to leverage the significant investments already made in SharePoint infrastructure, Administration skills, and end user training and skills.  If you already have skilled people in the use of SharePoint for document management – the InfoPath form is simply another document type in this model.  Because it is part of Office, there should be high adoption of InfoPath forms solution if it is made available.

A classic example of how InfoPath and SharePoint Enterprise is used to create a consistent forms platform is ports company DP World based in Sydney.  Their public case study is found at http://www.microsoft.com/casestudies/casestudy.aspx?casestudyid=4000002583.

2) Business Intelligence and Reports (Excel Services – Ian’s Summary)

In a similar manner to InfoPath Form Services, SharePoint Enterprise includes Excel Services.  This allows an Excel Spreadsheet that is saved in SharePoint to be viewed in a Web Browser, while still maintaining rich views, charts, pivot tables, filters, sorting and conditional formatting.

The usefulness of Excel Spreadsheets in a browser is many fold.  Consider these advantages over a normal Excel Spreadsheet .xls or .xlsx file.

i) If the spreadsheet is large in size, to be able to view the data the spreadsheet does not need to be emailed or downloaded to somebody’s PC to simply view it.  Looking at this spreadsheet in the browser is a lightweight and fast Web version of that spreadsheet.  This alone can save storage space in File Shares, Hard Drives and Email storage by not emailing large spreadsheets around or downloading.   My team at Microsoft has a large 51MB Excel spreadsheet and viewing it in a Browser is much easier than downloading that document each time we want to view it.

ii) The data in an Excel Services spreadsheet is protected, and can’t be altered by those who don’t have permission.  Because end users only have access to a view of the file, it may be that some tabs of the spreadsheet are not even published.  Additionally – there is a single point of truth for the spreadsheet in SharePoint.  If a spreadsheet is emailed around – somebody may have changed the data, or filtered on something which could change the intent of the data.  Decisions could then be made on incorrect data.  Consider Gray Knowlton, an Office Product Manager, who was monitoring the download volume of a specific component of Office from the Microsoft.com website.  The volume of this download was very important to some people – including the top executives of Microsoft who were making strategic decisions based on it.  Gray decided to publish the download volume data in an Excel Services spreadsheet.  In this way – executives could look at the data whenever they wanted, could not inadvertently change it, and be confident that the data was correct because only Gray was able to publish and edit that data.  From a Risk and Compliance point of view – Excel Services can assist with hardening the decision making confidence of your company.

iii) Some spreadsheets have significantly complex calculations and models built in.  I’ve seen spreadsheets that take 30 minutes to recalculate on a PC – which ties up the PC and person for 30 minutes while it runs.  Consider if the processing was happening on a powerful Server.  The time would be reduced significantly and the load would be on a server and not a PC.  This would be particularly important for any users that model financial situations in Excel for planning and analysis purposes – your finance team or treasury would find this useful.

iv) Finally, when a Spreadsheet is published into Excel Services – all the calculations can be accessed as a Web Service call.  This means that other applications and web services can call that calculation.  This allows somebody at your organisation to maintain the logic and financial models in a spreadsheet, and simply save it to SharePoint.  Traditionally – the model would need to be documented and interpreted by a developer to convert to Java or .NET code – leading to longer deployment and maintenance complexities to involve a developer every time the model changed.  In this model, whoever owns the model can actually change it in the spreadsheet –publish it to SharePoint and have the online calculations in a web application updated automatically.

A fantastic example of this ability to manage the logic of web applications in a spreadsheet is South East Water who run the Water Savings Calculator in an Excel Services Spreadsheet.  Check it out live at http://www.southeastwater.com.au/watercalculator/

While the interface to this is a custom .NET application hosted on their public website, it calls an Excel Services spreadsheet for calculations on water usage, cost, savings etc based on the questions answers.  Indeed – if South East Water ever updated their rates the only thing that would need to be changed would be the relevant cells in the spreadsheet.

3) Enterprise Search and Integration (Business Data Catalogue – Ian’s Summary)

The Business Data Catalogue (BDC) is essentially the middleware used to integrate other data and systems into SharePoint Portals and SharePoint Search.  Considering that you may be using SharePoint for the Intranet, there will likely be needs to expose data from other systems into the Intranet.  Some common or likely use cases for a cuatomer might be:

i) Integrating SharePoint with your CRM system entities.  This allows you to search on your customers, suppliers and business partners CRM information from SharePoint.

ii) Integrating SharePoint with your Asset Management system.  This would allow you to enforce document meta-data of asset related files/documents to be only those known assets in your Asset Management System. 

iii) Thirdly – you might decide to create applications in SharePoint that use CRM, Sales, and ERP data.  This is a way to have the data from those system exposed in SharePoint to allow people to manage and take action on them

A customer that I work with has SharePoint Enterprise, and uses the BDC to link Contract Numbers from the Contracts system into SharePoint.  This allows their employees to search on Contract details, and also use the Contract Numbers as a  meta-data field for documents managed within SharePoint.

iv) Finally, I’ve also recorded a video that shows a demonstration of integrating SharePoint Enterprise into Finance and CRM systems, and how a finance person could move a Sales Opportunity in CRM to an Invoice and Accounts Payable Management all using SharePoint as the interface.  (It uses a 3rd party tool to wrap LOB systems in Web Services as well – but that part is option to expose other systems as web services).   This video, I think, is good use of how the BDC connects data and actions from LOB systems into your MOSS portal. 

http://cid-e7db9bf957528709.skydrive.live.com/self.aspx/MOSS%20BDC%20with%20SAP%20CRM/MOSS%7C_BDC%7C_WITH%7C_SAP%7C_AND%7C_CRM%7C_DATA.wmv  (45MB)

Posted: Sunday, March 01, 2009 10:58 AM by ianpal

Ian Palangio's Business Productivity : SharePoint 2007 Enterprise versus Standard Edition

Microsoft SQL Server on SAN Best Practices from SQL CAT

 

Disk I/O: Microsoft SQL Server on SAN Best Practices from SQL CAT's Mike Ruthruff (& Prem Mehra)

While at the PASS Community Summit in November 2008, I had the pleasure of attending a handful of excellent presentations.  One of the best was one delivered by Mike Ruthruff (& not just because he shilled for my presentation on disk partition alignment later that day—though I suspect he contributed to my session being SRO).

Mike is a member of the SQL Server Customer Advisory Team (SQL CAT).  He authored the deck with contributions from SQL CAT patriarch Prem Mehra.

Most of you probably know Mike because he is the primary author of the landmark white paper we all know-&-love & have read over-&-over again because we know how unbelievably valuable it is:

SQL Server Predeployment Best Practices
http://www.microsoft.com/technet/prodtechnol/sql/bestpractice/pdpliobp.mspx

Mike has provided a copy of his latest-&-greatest deck for publication here:

Microsoft SQL Server on SAN Best Practices
http://tinyurl.com/SQLonSAN

The deck includes the following:

  • Characteristics of SQL Server I/O operations
  • Best practices
    • SQL Server Design Practices
    • Storage Configuration
    • Common Pitfalls
  • Monitoring performance of SQL Server on SAN
  • Emerging Storage Technologies
  • Additional Material In Appendix Section (not covered during session)
    • How to validate a configuration using I/O load generation tools
    • General SQL Server I/O characteristics
    • How to diagnose I/O bottlenecks 
    • Sample Configurations

I think you'll enjoy this deck—one of the best, perhaps the best of its kind ever assembled.  ¡Yo!  Why would a bother posting a second-rated presentation?  Besides which, SQL CAT does nothing but the best.  Get ready to be wowed by 50 slides of geekly goodness. 

Administriva

Jimmy May, MCDBA, MCSE, MCITP: DBA + DB Dev
Senior Performance Consultant: SQL Server
A.C.E.: Assessment Consulting & Engineering Services
http://blogs.msdn.com/jimmymay
Microsoft: Change the world or go home.

This post was written with the PracticeThis.com plugin for Windows Live Writer

Published 01 March 09 11:44 by Jimmy May

Jimmy May, Aspiring Geek: SQL Server Performance, Best Practices, Productivity, etc. : Disk I/O: Microsoft SQL Server on SAN Best Practices from SQL CAT's Mike Ruthruff (& Prem Mehra)

Bitlocker To go

 

Bitlocker To go

Well with Windows 7 coming up, there’s been a bit of talk around Bitlocker To Go.(BTG) BTG is essentially Bitlocker for external drives. It’s full volume encryption for all your USB drives.

Jeffa and I have been talking about it quite a bit recently and there seems to be a lack of understanding on how it works.  So I thought I would post this information.

Technically, you could have bitlockered a USB drive in Vista, but it was NOT a supported scenario. In Windows 7, not only is it supported, but encouraged.

There are even supporting GPO entries that you can set that will require all external drives to be encrypted. More on these in another post.

So back to BTG.

BTG is very similar to Bitlocker on the host. It still uses a 3 key system to protect the drive. so what you end up with is this:

  • The volume is encrypted with 256 bit AES based on a Full Volume Encryption Key (FVEK)
  • The FVEK is then encrypted with 256bit AES based on the Volume Master Key (VMK)
  • The VMK is encrypted and protected with a Key Protector that is based on a user defined password.

For more detail see the Bitlocker Architecture article.

Using BTG on a USB drive is really easy. Once you’ve inserted the drive and it’s been recognized by the system, just go to the Bitlocker Drive Encryption in Control Panel.

image

Just select Turn On Bitlocker next to the external drive you want to encrypt.

When you first set it up, you are presented with a choice on how you want to unlock the drive.

image

If you are using a Smart Card as your login, you can chose to save the key on there. If you do this, you’ll need your Smart Card every time you want to access the external drive.

In this case I selected ‘Use a password to unlock the drive’

You are presented with the traditional Bitlocker selection on where to save your recovery key.

Don’t worry, it’s smart enough not to let you save the recovery key on the drive you are trying to encrypt.

image

Once you’ve found a suitable location, you can start the encryption process.

image

Once you’ve started the encryption process, you can remove the drive before it is complete. However the system does tell you to pause the encryption before removing the drive.  If you don’t…well, let’s just say you’ve been warned.

Once encryption is complete, and you remove, then reinsert the drive you are presented with the password dialog to access the drive.

image

If you chose to ‘Automatically unlock on this computer from now on’ the system will store your password (the Key Protector password) in an encrypted section of the registry. So the next time the drive is inserted, if you are the person logged on and have access to that registry key, the Key Protector password will be automatically entered for you and the drive will be accessible.

I would strongly suggest actually using the Context menu on the drive and selecting Eject when you want to remove the drive from the machine.  Technically you should be doing this with all your USB drives, but with a Bitlockered one, you really need to get into the habit “just in case”.

But what if you chose not to unlock the drive?

When you try to access it you will get an access denied error. If you try to do a ‘dir’ from an Admin command prompt you’ll see that the volume isn’t even bound to the system.  (go ahead, try it).

Now if you were to set the System Files Visibility on your machine and look at a USB drive protected by BTG, you’ll notice some files on there.

image

These files are indeed the keys to the drive. It’s the FVEK, and the VMK. You may also notice that they are stored in the unprotected section of the drive.  I’m sure some sensationalist’s our there are freaking out just waiting to break a story on how you can use these keys to decrypt the drive so BTG is broken.  Well, get a grip, that’s not the case.

As I said earlier, the FVEK is encrypted with the VMK, and the VMK is encrypted with the Key Protector which is hopefully locked safely away in the noggin of the user. 

There’s not much point in trying to brute force the keys to get to the data on the drive. They are encrypted with the same strength stuff that’s used on the drive data anyway.  If you are that determined to brute force something you may as well just target the drive data.

Good luck with that. With today’s computing power, and presuming that you have to go through an average of 52% of the keyspace before you find the right key, it’s going to take you about 20,000,000,000,000,000,000 years to do it. I plan on being dead by then do if you get to my data in 20 Quadrillion years, you just have the time of you life.

BTG is a great way to protect all of those external drives you have.  You can protect a USB drive for each client, or account, or just keep your kids pictures safe from prying eyes if you happen to drop your USB key in the parking lot.

No, you probably can’t open it up on the local Wal-mart photo Kiosk.  But you should be able to open it up on any bitlocker capable machine providing you remember the password. Such as Windows Vista or Windows Server 2008

In fact, BTG includes a Bitlocker Reader application on the USB drive. When you open the drive on a Vista machine it looks something like this:

BTGVista

You’ll notice that the drive has the Bitlocker icon on it. If you open it, you see the following:

BTGOpenDrive

You can see the BitlockerToGo exe there ready to serve you:

BTGRunBTG

Once you run it you are asked for the password for the drive. If you enter it correctly the BTG Reader starts and presents you with the following dialog.

BTGReader

Now you are ready to access your files. But, you have to drag them to the local computer to use them.  This will allow the on access decryption to decrypt the file as it copies it to your system all ready to use.

So give it a try. I personally use it on my external drives. Especially those that contain my laptop backups, and any client data that I’m working on. I don't tend to lose drives, but if I ever did, I know that the data on them would be very safe.

Published Sunday, March 01, 2009 8:57 PM by RockyH

From Source to Secure : Bitlocker To go

I'm listening

 

I'm listening

Published 01 March 09 07:00 AM | ericbrec

It's Midyear Career Discussion time at Microsoft. Perhaps you just finished, but more than likely you're still trying to squeeze yours in. How'd it go? How will it go? For you? For your manager? Well, that depends.

It depends a bit on your prior performance and your manager's prior performance. It depends a bit on the feedback itself and how that feedback is given. It depends a bit on how your parents raised you and the comfort of your chair. But the biggest influence on the lasting impact of your Midyear Career Discussion is the way you and your manager respond to feedback.

Let me put this delicately to you. You have no frigging idea how to give and take feedback. Seriously—not one frigging idea. Think I'm wrong? You are only proving me right. If you actually knew how to give and take feedback your response would be a sincere and polite, "Thank you."

Thanks for the advice

In fact, there are only two valid responses to feedback, "Thank you" and "Go on."

The "Thank you" is simple and self-explanatory. Too bad most people don't use it. Most people defend themselves, explain their behavior and results, and describe how they are already taking the right steps.

Please, slowly and carefully shut your mouth, empty your mind, and listen. Perhaps you can even take notes. Then, when the generous soul is finished, say, "Thank you."

You don't say it to be polite. You say "Thank you" because you mean it. Your relationships, your life, and our products and services would reek far beyond their current stench if people were not kind enough to provide an outside perspective and help us improve. Thank goodness they are willing to do it. To ensure they continue it's essential to sincerely appreciate it.

Tell me more about me

In addition to "Thank you," a valid response to feedback is "Go on." As in:

§ "Could you talk more about that?"

§ "I don't quite understand—could you describe that further?"

§ "Thank you, that's helpful, what else can I do differently?"

Anything that encourages clear and continued feedback is appropriate.

Back off, man. I'm a scientist

What's inappropriate is anything that questions or cuts off feedback. This includes:

§ "I'm working on it." So what? You're doing the wrong thing, you haven't made much progress, or you are actually improving. Regardless, the feedback is valid and your comment is irrelevant and self-serving.

§ "I was trying to …" So that makes it better? Never confuse reasons with excuses. If you can get better, you should get better. No excuses.

§ "I disagree." So this is news? You're getting feedback. It's opinion. The fact that you like your current approach is not a revelation. When the feedback seems wrong, you've either missed something or left the wrong impression—that’s precious information.

Keep in mind that you don't have to follow whatever advice you get. All you are obligated to do is listen, consider the advice carefully, and thank the person for helping you.

Eric Aside

A particularly important time to keep your mouth closed, take notes, and simply say, "Thank you," is during an executive review.

Now it’s my turn!

Now that you know how to take feedback, it's time to learn how to ask for it and provide it. When asking for feedback and when providing it, there are three basic questions:

§ What is good [about what I'm doing or the work I've done]?

§ What could be better?

§ Any further comments?

You can structure feedback more, but the simplest, complete ask are those three questions. And it is those three questions that you want to answer when you provide feedback.

We have come full circle

When providing your feedback, start with what's good, talk about improvements, add on your other comments, remind about improvements, and then reiterate what's good. That order is important.

§ You start with what you like. It sets up the conversation on an upbeat note and prevents the impression that all is lost. If you start with what's wrong, your listener may never hear what's right.

§ Next, you talk about ways to improve. Ideally, your listener should focus on just one change. One change is all that most people can handle at a time. Pick the most impactful improvement and emphasize it.

§ Of course, you'll have plenty of other thoughts that aren't as important. Feel free to mention those in the context of "a few other comments."

§ Then come back to your main message—the one or perhaps two improvements that would make the most difference.

§ Finish with what is going well. It's important to end on a positive note.

Eric Aside

Remember to always focus on the behavior or outcome, not on the person. People can't change who they are, but they can improve their actions and results.

We don't have much time

That's it. Being concise is important. If you want your feedback to matter it should be clear, consumable, considerate, concise, and centered on the receiver. Your feedback isn’t about you and your glorious knowledge; it is about helping the recipient.

If you are on the receiving end of the feedback you should be just as concise. Feedback is precious, whether it's from a customer, a peer, or your manager. Don't get in the way. Encourage it. Savor it. Appreciate it. Thank you.

I. M. Wright’s “Hard Code” : I'm listening

Windows Server 2008 R2: Offline Domain Join Step-by-Step Guide

 

Windows Server 2008 R2: Offline Domain Join Step-by-Step Guide

Offline domain join scenario overview windows-server-2008-r2

Offline domain join is a new process that computers that run Windows® 7 or Windows Server® 2008 R2 can use to join a domain without contacting a domain controller. This makes it possible to join computers to a domain in locations where there is no connectivity to a corporate network.

For example, an organization might need to deploy many virtual machines in a datacenter. Offline domain join makes it possible for the virtual machines to be joined to the domain when they initially start after the installation of the operating system. No additional restart is required to complete the domain join. This can significantly reduce the overall time required for wide-scale virtual machine deployments.

A domain join establishes a trust relationship between a computer running a Windows operating system and an Active Directory® domain. This operation requires state changes to Active Directory Domain Services (AD DS) and state changes on the computer that is joining the domain. To complete a domain join in the past using previous Windows® operating systems, the computer that joined the domain had to be running and it had to have network connectivity to contact a domain controller. Offline domain join provides the following advantages over the previous requirements:

  • The Active Directory state changes are completed without any network traffic to the computer.
  • The computer state changes are completed without any network traffic to a domain controller.
  • Each set of changes can be completed at a different time.

The following sections explain some of the benefits that offline domain join can provide.

Reduced total cost of ownership in datacenters:
Offline domain join can reduce the total cost of ownership for computers by reducing the startup time that is required for each server and by increasing the reliability of domain join operations in production environments.

Improved experience for performing domain joins using an RODC:
In Windows Server 2008, there is a mechanism to perform domain join operations against a read-only domain controller (RODC).

Rapid enterprise deployments:
By using deployment tools, such as Windows System Image Manager, you can perform an unattended domain join during an operating system installation by providing information that is relevant to the domain join in an Unattend.xml file.

Requirements for offline domaoin join:
To perform an offline domain join, you run commands by using a new tool named Djoin.exe. You use Djoin.exe to provision computer account data into AD DS

Operating system requirements - Windows Server 2008 R2 or Windows 7
By default, the Djoin.exe commands target a domain controller that runs Windows Server 2008 R2. However, you can specify an optional /downlevel parameter if you want to target a domain controller that is running a version of Windows Server that is earlier than Windows Server 2008 R2.

Credential requirements:
To perform an offline domain join, you must have the rights that are necessary to join workstations to the domain. Members of the Domain Admins group have the rights to join workstations to the domain by default.

Granting rights:
You can use the Group Policy Management Console (GPMC) to modify the domain policy or create a new policy that has settings that grant the user rights to add workstations to a domain.

For more information download the step-by-step guide from http://technet.microsoft.com/en-us/library/dd392267.aspx

Aviraj Ajgekar's Blog : Windows Server 2008 R2: Offline Domain Join Step-by-Step Guide

IT Administrator scripts, WMI samples and witty comments

 

Sunday, March 01, 2009 8:21 AM josebda

IT Administrator scripts, WMI samples and witty comments

Microsoft keeps a number of scripting examples at the Technet Scripting Center. These are mostly focused at administrators that need to write code every once in a while, as opposed to the MSDN references, focused mostly at full-time developers.

If you are an IT Administrator and you have exhausted your ability to type one-liners to handle repeating tasks, it's time to start working with scripts. These can many times go beyond simple .CMD files at times. The most interesting ones use VBScript, JavaScript and the more recent PowerShell. Most of the time, these also involve the use of WMI.

One of the best articles there are in the "Hey Scripting Guy" series, where admins send questions and get well-written answers, both in the terms of the actual scripts provided and the explanation in plain English. After doing this for a while, they have also done a great job of grouping the answers by topic, which helps when you are looking for something specific.

Here are some areas that are of special interest to me:

You can pick other categories in any of those pages using the links on the top right of the page.

Among the items in the many categories, you will find:

If you are a hardcore developer, these will seem like basic scripts to you. However, since most are implemented using WMI, they could save you a few minutes finding the right syntax for a specific task. The explanations that come along with them are also very enlightening and, with their witty comments, even entertaining...

Jose Barreto's Blog : IT Administrator scripts, WMI samples and witty comments

Blog Archive