MIM placeholder how to manage

I've got placeholder in connector space so new CS object couldn't be created. I've created some simple object (sql is datasource for this management agent), after import synchronization has started for this object.

november 2022 fixes

https://support.microsoft.com/en-us/topic/kb5021130-how-to-manage-the-netlogon-protocol-changes-related-to-cve-2022-38023-46ea3067-3989-4d40-963c-680fd9e8ee25
https://techcommunity.microsoft.com/t5/ask-the-directory-services-team/what-happened-to-kerberos-authentication-after-installing-the/ba-p/3696351
https://www.csoonline.com/article/3680512/how-to-reset-a-kerberos-password-and-get-ahead-of-coming-updates.html

Ledger Live is not opening or any other Windows app

Strange symptom - when I've tried to run Windows app, like Ledger Live on task bar there is a status of working app (and some view of window) but there is strictly no visible window. I've reinstalled app but without success, still the same result. After searching on Internet and some thinking (app is working perfectly on different laptop) - I've remembered that this machine was in multi monitor configuration. So... I call'ed system menu for this app (Alt + Space), choose Maximize and voile'la - it's working.

Windows Recovery Environment

When creating of rescue disk is impossible (information like We can't create a recovery drive on this PC. Some required files are missing):

reagentc /disable

reagentc /setreimage /path \\?\GLOBALROOT\device\harddisk0\partition1\Recovery\WindowsRE

reagentc /enable
Disk number and partition should be customized but on systems with single disk/partition it should work.

Baremetal backup Windows 10 from command line

wbadmin start backup -backuptarget:V: -allcritical -vssfull -quiet
Backup baremetal Windows 10

ADAM - LDS - how to authenticate/create accounts

Just for remember - every account created in ADAM/LDS is disabled by default. There is the dedicated attribute ms-DS-User-Account-Disabled which should be - if we want to use this account to login/authenticate - switch from default 'true' to 'false'. I spent too many hours to guess why I've got strange LDAP errors 49 with strange codes and sometime message said that is something wrong with account.

Monitoring LDAP querries

Enable Field Engineering - HKEY_LOCAL_MACHINE → SYSTEM → CurrentControlSet → Services → NTDS → Diagnostics. Set '15 Field Engineering' to '5'

Event ID 1643: No. of LDAP searches.

event ID 2889: unsecure ldap bind

event ID 2887: daily unsecure ldap binds

event ID 1644: recent ldap query

event ID 1535: error from ldap server

event ID 1317: ldap timeout
HKEY_LOCAL_MACHINE → SYSTEM → CurrentControlSet → Services → NTDS → Parameters
Inefficient Search Results Threshold, REG_DWORD - default 1000 - how many entries should be returned to treat is like inefficient,
Expensive Search Results Threshold, REG_DWORD - default 10000 - like inefficients
Search Time Threshold (msecs), REG_DWORD - default 30000 - how long query must take to be stored in event log as 1644 event id