DSRM - Directory Services Restore Mode - Windows 2008 R2

1. Verify if have DSRM password. If not - can You change it?
2. (to change password run ntdsutil, set DSRM password, reset password on server null)
3. add dsrmode to start: bcdedit /set safeboot dsrepair
4. restart server (gui or shutdown -t 0 -r)
5. logon on account "administrator" with DSRM password
6. do the restore, with wbadmin is at follows:
- wbadmin get versions -backuptarget:d:
- wbadmin start systemstaterecovery -version:12/08/2019-16:05 -backuptarget:d:
7. remove dsrmode from start by bcdedit /deletevalue safeboot
8. restart server (should be the only option after restore)

Error 1219 on server

I saw error 1219 and message like "Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed. Disconnect all previous connections to the server or shared resource and try again." on one of application servers with strange access to resources. To avoid restart of the whole server I restarted workstation service.
But (update) it wasn't enough - so - I created entries in the hosts file - and currently it is working perfectly.

DNS performance on Windows

Just to remember: I've got experience with heavy loaded domain controller with queries rate above 40k per second (yes, 40 thousand per second). The main problem on this virtual domain controller it was high cpu0 utilization and low load on other cpu. As I can remember - it was VMWare vm with 16 cores (virtual cores on operating system). What should be done in this case to improve performance? Upgrade of virtual hardware and network subsystem.

TMG and Windows 2008R2 optimisation

IP Stack configuration
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters “TcpTimedWaitDelay” DWord set to 0x1e.
“StrictTimeWaitSeqCheck” DWord set to 0x1.
Forces TCP/IP stack to hold TCP ports in a TIME_WAIT state for 30 seconds. Default is 120 seconds.

Disk subsystem – Web Cache
Disable short name creation. HKLM\SYSTEM\CurrentControlSet\Control\Filesystem NtfsDiable8dot3NameCreation 0x1
Disable last access update. HKLM\SYSTEM\CurrentControlSet\Control\Filesystem NtfsDsiableLastAccessUpdate 0x1
Multiprocessor only - Bypassing I/O Counters. HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\I/O System CounterOperations 0x0
Task Manager will no longer provide per-process I/O measurements
Useful when a process generates considerable disk and network I/O on a SMP system, which an ISA server under load can easily do.

Domain Topology
NTLM Auth issues. Set HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters DWord “MaxConcurrentApi” 0x3. If still having issues walk up to 0x6.


Firewall & Web Proxy service DNS Cache (in-process)
Services hold the last 3000 DNS records, regardless of actual TTL, for 6 hours.
Keys
Web Proxy: HKLM\SOFTWARE\Microsoft\Fpc\Arrays\{Array GUID}\ArrayPolicy\WebProxy "msFPCDnsCacheSize“ Default is 0xBB8 & "msFPCDnsCacheTtl" Default is 0x5460
Firewall: HKLM\SOFTWARE\Microsoft\Fpc\Arrays\{Array GUID}\ArrayPolicy\Proxy-WSP "msFPCDnsCacheSize“ Default is 0xBB8 & "msFPCDnsCacheTtl“ Default is 0x5460