About the OS X Lion v10.7.3 Update – Active Directory Improvements

This update has numerous Microsoft related updates to improve the integration with Microsoft servers and Active Directory.  Some of the features include: Improve binding to read-only Active Directory Domain Controllers Improve binding and login speed for Active Directory users in a domain whose name ends in “.local” Improve reliability of Dynamic DNS (DDNS) updates by […]

Read more

AdminSDHolder, Protected Groups and SDPROP

Active Directory Domain Services uses AdminSDHolder, protected groups and Security Descriptor propagator (SD propagator or SDPROP for short) to secure privileged users and groups from unintentional modification. This functionality was introduced in the inaugural release of Active Directory in Windows 2000 Server and it’s fairly well known.

Read more