Quantcast
Channel: Directory Services forum
Viewing all 31638 articles
Browse latest View live

Permission related domain user with GUI and CMD?

$
0
0

recently i have faced issue while promoting server as domain controller using GUI showing error you don't have permission do that.

with same persimmon account i have promoted using some script how is this possible?

Kindly help me show what is problem in GUI mode?


AD Lockouts for 1 User

$
0
0
Hello, I am currently troubleshooting an issue with one user at our company. Specifically, they are getting locked out whenever they type in their password once when they sign in for the day at their desk as well as when they lock screen to go away from their desk for lunch and then log back in when they return. I am stumped on what could be causing this as I have checked Task Scheduler, Services, Credentials Manager, removed OWA for Devices entries so they don't have email on their phone as well as turn on Diagnostic Startup to limit what services are started when the PC boots. Any suggestions on where I should check next?

Meta data clean up

$
0
0
I have a question?? Is there any way to clean up Active directory other than Meta data clean up?

Delegate permissions to a Cluster Name Object through a security group?

$
0
0

Working with my SQL guy to help him setup a SQL cluster.  Per several articles I've read (like https://blogs.technet.microsoft.com/askpfeplat/2014/11/17/when-creating-a-new-resource-or-role-in-windows-server-2012-r2-failover-cluster-the-network-name-fails-to-come-online-or-failed-to-create-associated-computer-object-in-domain/), the CNO needs the ability to create computer objects in the OU it's located in.  I have tried multiple times to do this through a security group but it will not work.  Have to specify the CNO itself in the security permissions of the OU.

What am I doing wrong?  Or can this not be done through a security group?


Is it wise to put domain controllers behind a load balancer

$
0
0

Can someone tell me if it would be wise to put domain controllers, DNS servers and DHCP servers behind a load balancer?

I know for clients and servers and other systems that use the DC locator process that does not really make a difference but i wanted to offer HA for those systems and applications where you have to type in one or more domain controller or DNS server or DHCP server.

Also to help when we replace domain controllers. if things are pointed to ADLB.yourdomain.local instead of AD1.yourdomain.local and AD2.yourdomain.local. when times comes and you need to upgrade those 2 AD domain controllers you can include AD3.yourdomain.local and AD4.yourdomain.local and then remove the other 2 and no one will know anything different.

This came up in a discussion because we want to upgrade some 2008R2 domain controllers and some 2012R2 domain controllers to Windows Server 2016 and want to make it a painless as possible

Domain user does only appears in root ad directory

$
0
0

We are experiencing a very strange issue with the AD. 

A user war created in the AD unser domain.de. The user shows properly in the in the AD snap in. and is located under domain/users.

However, when we want to assign user rights on the server (selecting the directory, properties etc) and selecting the domain in the search dialog box for the user - this user does not appear. This user only appears when we adjust the path to the root directory. But even then - when we then select this user and click ok - it does not appear in the user list. 

In the user search dialog box the path is also correct domain.de/users (as all the other users).

The user is active and can sign in.

Would appreciate if anyone has an idea what could be wrong.

Thank you.

Uli

Access Hyper-v Free server joined to a domain that's controlled by the DC guest (when the DC VM is down)

$
0
0
Are there problems accessing the Hyper-v free server that is domain joined, when that domain exists only inside a guest VM that is a single DC for that domain? And the DC is down?

Access is denied error when create an GPO

$
0
0

Hi,

I got the "Access is denied" error when I attempt to create an GPO. Can anyone help me? Thanks



New Replica Of AD LDS Fails When Functional Level Is Too High

$
0
0

I have a simple AD LDS instance setup on a Windows 2016 server:

c:\windows\ADAM\adaminstall /answer:E:\ADLDS\instance3\adaminstall.cfg

with the content of E:\ADLDS\instance3\adaminstall.cfg

[ADAMInstall]
ApplicationPartitionsToReplicate=*
InstallType=Unique
InstanceName=instance2
LocalLDAPPortToListenOn=3891
LocalSSLPortToListenOn=6361
AddPermissionsToServiceAccount=Yes
NewApplicationPartitionToCreate=dc=com
DataFilesPath=E:\ADLDS\instance2\data
LogFilesPath=E:\ADLDS\instance2\log
Administrator=myAdminGroup

I can add a replica instance using the following installfile

[ADAMInstall]
ConfigurationSetLevel=5
ApplicationPartitionsToReplicate=*
InstallType=Replica
InstanceName=instance3
LocalLDAPPortToListenOn=3892
LocalSSLPortToListenOn=6362
DataFilesPath=E:\ADLDS\instance3\data
LogFilesPath=E:\ADLDS\instance3\log
SourceServer=localhost
SourceLDAPPort=3891
Administrator=MyAdminGroup


But if I change the functional level of the first instance to WIN2012R2 (msDS-Behavior-Version=6) before I create the replica instance, the creation of the replica fails:

Active Directory Lightweight Directory Services could not create the NTDS Settings object for this Active Directory Lightweight Directory Services
 instance CN=NTDS Settings,CN=<Server name>$instance3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,CN={6BA71401-BACF-47A0-A59B-9F8CC
9A6E9C2} on the remote AD LDS instance localhost:3891. Ensure the provided network credentials have sufficient permissions.
Error code: 0x80072177
The version of the operating system installed on this server is incompatible with the functional level of the domain or forest.

This problem is already described in https://jorgequestforknowledge.wordpress.com/category/active-directory-lightweight-directory-services-adlds/functional-level/ but there the author saysthis issue does not exist in Windows 2016 anymore, but apparently it does.

Is there any way one can add a replica to a AD LDS instance where the functional level is on WIN2012R2?

Searching for objectGUID using LDAP

$
0
0

I am searching an AD server using a Java LDAP client from Linux. On some AD setups, searching by objectGUID is extremely slow; at one of our customer's, it consistently takes 60+ seconds. Searching using search base of the GUID looks like it might be faster. Shouldn't objectGUID be an indexed attribute? Why would it be that slow? In another customer, AD was slow but their Global Catalog was faster (the first customer does not have a GC).

LDAP search parameters:

  • Base = DC=example,DC=com (got this from rootDSE as defaultNamingContext)
  • Search filter: (|(objectGUID=\b5\86\c6\5f\a1\67\a5\41\a3\66\41\7d\01\47\de\ef)(entryUUID=5fc686b5-67a1-41a5-a366-417d0147deef)(nsuniqueid=5fc686b5-67a141a5-a366417d-0147deef))  // so I can search in other LDAP servers
  • scope: SUB
  • attrs: cn description

I guess the Microsoft preferred form would be

  • Base = <GUID=5fc686b5-67a1-41a5-a366-417d0147deef>
  • Search filter: (objectClass=*)
  • Scope: base
  • attrs: cn description

Thanks much to help us debug this performance issue.

Deleting primary domain controller metadata from additional domain controller

$
0
0

Hi,

I want to promote an virtual additional dc to physical primary dc and delete primary dc metadata from the additional dc. The SYSVOL replication using between these domain controller is DFSR. How can I delete any metadata that related to the primary dc? Thanks

Change primary DNS suffix when domain memebership changes

$
0
0

Hello, I am currently in the middle of a migration project where we are moving a number of applications and their servers from a source domain to a target domain.  We are using Quest Migration Manger to assist with the migration.

One thing I've noticed is that a number of servers, after the migration are not updating their FQDN under the computer system properties.  The Primary DNS suffix of this computer is correct, it has the DNS suffix of the target domain.  The check box is checked that says "Change primary DNS suffix when domain membership changes.  In the Member of "Domain"  it shows the server is a member of the target domain.  However the full computer name still lists the DNS suffix of the source domain.  It doesn't seem to be affecting the ability of the applications on the server, it does prevent the server from updating their DNS record in the new target domain, and the system event log continuously logs a netlogon error for the HOST spn's trying to update their record in the source domain, and trying to update the regular Host record in the DNS zone of the source domain.

The server has been rebooted the registry value of HKLM\CurrentControlSet\Service\tcpip\Parameters\NV Domain is correct as it lists the new target domain, but I can't get it to change the full computer name to reflect the correct new target domain.  Has anyone seen this before?  Does anyone know what to do?

Thanks

DFS Replication not working Windows Server 2016 after upgrade, Error 4004

$
0
0

Hi, after an upgrade to a windows server 2016 DC the DFS AD replication does not work - showing error 4004. We have investigated and tried several options as outlined in:  https://social.technet.microsoft.com/Forums/windowsserver/en-US/2f99eb47-4e47-4761-80c3-68f6faf27d71/2k8-dfsr-replication-not-working?forum=winserverfiles - but without luck.

We have also tried to set the registry parameter SysVol to 0 and back to 1 (including restarts of the server). But also this did not create the folders. 

What seems to be missing is the c:\windows\sysvol folder and we can not figure out how to get this re-created (apart from creating this manually - but we are not sure how this works out with the required access rights).

Would appreciate some help on this.
Uli

Network Path Cannot Be Found for Windows Server 2019

$
0
0

So I have been through all the online help forums, tutorials, videos, and other online research and I cannot seem to find a solution to my problem. I was trying to access folders located on the file share service on the DC and am unable to as I get the error code 0x80070035 which is the "Network path cannot be found". Then I go into the event viewer and get and error with an event ID: 1058. 

"The processing of Group Policy failed. Windows attempted to read the file %9 from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 
a) Name Resolution/Network Connectivity to the current domain controller. 
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller). 
c) The Distributed File System (DFS) client has been disabled."

OpCode: (1)

I tried to resolve a, b, and c; but all of the services were on, sharing permissions were enabled, and nothing was fixing this error. I've tried to force the DFS to replicate, however it cannot do that because again, "Network Path not found". 

I am able to ping, nslookup, the DC

I ran a dcdiag /v /c /q and the following tests failed:

C:\Users\Administrator>dcdiag /v /c /q
         Could not open pipe with [ARTEKDC]:failed with 53: The network path was not found.
         Could not get NetBIOSDomainName
         Failed can not test for HOST SPN
         Failed can not test for HOST SPN
         [ARTEKDC] No security related replication errors were found on this DC!  To target the connection to a
         specific source DC use /ReplSource:<DC>.
         [ARTEKDC] An net use or LsaPolicy operation failed with error 53, The network path was not found..
         ......................... ARTEKDC failed test SysVolCheck
         ......................... ARTEKDC failed test FrsSysVol
         Could not open pipe with [ARTEKDC]:failed with 53: The network path was not found.
         Could not get NetBIOSDomainName
         Failed can not test for HOST SPN
         Failed can not test for HOST SPN
         [ARTEKDC] An net use or LsaPolicy operation failed with error 53, The network path was not found..
         ......................... ARTEKDC failed test NetLogons
         ** Did not run Outbound Secure Channels test because /testdomain: was not entered
         Could not open Remote ipc to [ArtekDC.ArtekMFG.com]: error 0x35 "The network path was not found."
         ......................... ARTEKDC failed test Services
         An error event occurred.  EventID: 0x00000422
            Time Generated: 01/10/2019   13:21:02
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\ArtekMFG.com\sysvol\ArtekMFG.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
         An error event occurred.  EventID: 0x00000422
            Time Generated: 01/10/2019   13:26:04
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\ArtekMFG.com\sysvol\ArtekMFG.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
         An error event occurred.  EventID: 0x00000422
            Time Generated: 01/10/2019   13:31:07
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\ArtekMFG.com\sysvol\ArtekMFG.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
         An error event occurred.  EventID: 0x00000422
            Time Generated: 01/10/2019   13:31:08
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\ArtekMFG.com\sysvol\ArtekMFG.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
         An error event occurred.  EventID: 0x00000422
            Time Generated: 01/10/2019   13:36:09
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\ArtekMFG.com\sysvol\ArtekMFG.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
         An error event occurred.  EventID: 0x00000422
            Time Generated: 01/10/2019   13:41:11
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\ArtekMFG.com\sysvol\ArtekMFG.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
         An error event occurred.  EventID: 0x00000422
            Time Generated: 01/10/2019   13:46:14
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\ArtekMFG.com\sysvol\ArtekMFG.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
         An error event occurred.  EventID: 0x00000422
            Time Generated: 01/10/2019   13:51:16
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\ArtekMFG.com\sysvol\ArtekMFG.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
         An error event occurred.  EventID: 0x00000422
            Time Generated: 01/10/2019   13:56:18
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\ArtekMFG.com\sysvol\ArtekMFG.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
         An error event occurred.  EventID: 0x00000422
            Time Generated: 01/10/2019   14:01:21
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\ArtekMFG.com\sysvol\ArtekMFG.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
         An error event occurred.  EventID: 0x0000272C
            Time Generated: 01/10/2019   14:03:12
            Event String:
            DCOM was unable to communicate with the computer 10.0.0.254 using any of the configured protocols; requested by PID      6a0 (C:\WINDOWS\system32\dcdiag.exe), while activating CLSID {8BC3F05E-D86B-11D0-A075-00C04FB68820}.
         An error event occurred.  EventID: 0x00000422
            Time Generated: 01/10/2019   14:06:23
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\ArtekMFG.com\sysvol\ArtekMFG.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
         An error event occurred.  EventID: 0x0000272C
            Time Generated: 01/10/2019   14:10:26
            Event String:
            DCOM was unable to communicate with the computer 10.0.0.254 using any of the configured protocols; requested by PID     25f4 (C:\WINDOWS\system32\dcdiag.exe), while activating CLSID {8BC3F05E-D86B-11D0-A075-00C04FB68820}.
         An error event occurred.  EventID: 0x00000422
            Time Generated: 01/10/2019   14:11:25
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\ArtekMFG.com\sysvol\ArtekMFG.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
         An error event occurred.  EventID: 0x00000422
            Time Generated: 01/10/2019   14:16:27
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\ArtekMFG.com\sysvol\ArtekMFG.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
         ......................... ARTEKDC failed test SystemLog
         Test results for domain controllers:

            DC: ArtekDC.ArtekMFG.com
            Domain: ArtekMFG.com


               TEST: Authentication (Auth)
                  Error: Authentication failed with specified credentials

         Summary of DNS test results:

                                            Auth Basc Forw Del  Dyn  RReg Ext
            _________________________________________________________________
            Domain: ArtekMFG.com
               ArtekDC                      FAIL PASS PASS PASS PASS PASS n/a

         ......................... ArtekMFG.com failed test DNS

It appears that I'm having an authentication failure/issue, but I cannot find a solution. I am aware that some of the configuration with whats placed in the DC and not having a BDC are faults on my part, but this is the first server I've put up and I am trying to learn how to make it right so I don't run into this issue again or can avoid it.

I've tried deleting the replicated dfs files, but it won't allow me access to that, I've tried running the DC in a virtual environment and trying to fix/repair with the installation media.

If you'd like me to run other commands I am more than happy to do so. I hope this is enough information for someone to point me in the right direction. Any help would be much appreciated. I'll post some images as well once my account is verified.




Thank you in advance,

Tony 


Questions about 2003 Domain upgrade to 2012 R2 with Unix Attributes

$
0
0
My bosses have finally agreed to upgrade our 2003 Domain Controllers. My only concern is that the existing 2003 servers are currently using Windows Services for Unix and NIS. I'm more than a little concerned that once I add a 2008 R2 DC and start removing the 2003 DC's that the existing Unix Attributes for user accounts will be removed.

The NIS domain itself doesn't appear to be used anymore. But the rest of the Unix attributes are still actively being used. So I need to confirm whether or not the 2003 Unix Attributes will still be present after 2003 is gone.

Is it accurate that the Attributes won't be changed when moving from 2003-2008-2012, but in order to access them and make changes I'll need to start using Identity Management for Unix in 2008-2012?

Vincent Sprague


gMSA pwd renewal causes reboot

$
0
0

Hi all !

I've been searching around for some time now, but can't get any clue about this problem...

I set gMSA to be available for my customer's domain.

We implemented some of them to be used with SQL Server (2016 & 2017)
Servers OS are 2012R2+2016.
AD Functional level is 2012R2.

The problem:
At every pwd renewal (Exactly every 30 days) for the gMSA account, I get an (Application) event ID 1000:

Faulting application name: lsass.exe, version: 10.0.14393.187, time stamp: 0x57cf9e87
Faulting module name: ntdll.dll, version: 10.0.14393.447, time stamp: 0x5819bc32
Exception code: 0xc0000409
Fault offset: 0x000000000009520f
Faulting process id: 0x274
Faulting application start time: 0x01d483cc22a9048b
Faulting application path: C:\Windows\system32\lsass.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 36d3002f-cd30-4dd6-82ab-cbaa9b0e6422
Faulting package full name: 
Faulting package-relative application ID: 

A (System) Event ID 10016:

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{XXXXXXX5-BB46-4990-A94F-EXXXXXXXXXX}
 and APPID 
{XXXXXXXX3-ACB7-47C8-AFC4-AXXXXXXXXX}
 to the user DOMAIN\svcm_gMSA1$ SID (S-1-5-21-00000000-1659004503-00000000-21153) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

And the server reboots (System Event ID 1074):
(Certainly a BSOD, as I get the prompt for the reason of an unexpected restart at the next logon)

The process wininit.exe has initiated the restart of computer COMPUTER1 on behalf of user  for the following reason: No title for this reason could be found
 Reason Code: 0x50006
 Shutdown Type: restart
 Comment: The system process 'C:\Windows\system32\lsass.exe' terminated unexpectedly with status code -1073740791.  The system will now shut down and restart.

Even after spending many days to find out what's going on here, I still have no solution.
Those reboots on production servers are VERY annoying, as you may surely guess...

Anyone here had the same issue ? 

I found absolutely no help using this good old Google.
Ideas and suggestions are highly appreciated.

Thanks !


MCSA, MCDST, MCTS, MCITP
Transcript ID: 825434 - Access Code: microsoft


"value for the attribute was not in the acceptable range" error when trying to edit attribute value in ADLDS instance

$
0
0

Hi,

I have an ADLDS instance, in which I've added some custom attributes.

When I try to edit one of these attributes for a user account and add a value to it I get the below error:

Error: Modify: Constraint Violation. <19>
Server error: 00002082: AtrErr: DSID-031513C2, #1:
       0: 00002082: DSID-031513C2, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 9d558094 (<my attribute name>):len 22

Error 0x2082 A value for the attribute was not in the acceptable range of values.

the attribute was Boolean at first, and I changed it's syntax to UNICODE so that I can store string in it.

the attribute syntax is:

attributeSyntax: 2.5.5.12 = ( UNICODE ); 

and oMSyntax is:

oMSyntax: 64 = ( UNICODE_STRING );           (or in another representation -> Syntax: 1.3.6.1.4.1.1466.115.121.1.15)

I event tried to edit the "rangeUpper" and set it to 1024

rangeUpper: 22;

but still getting the same error :(

can anyone help me please?


Certification Authority Web Enrollment Error: An unexpected error has occurred: The Certification Authority Service has not been started. when open link 'Download a CA certificate, certificate chain or CRL'

$
0
0

Hi everyone:

I have two tier-PKI with server-1 as sub-ordinate enterprise/issuing CA. I have installed 'Certificte Authority Web Enrollment' on Server-2. when I open Server-2.domain.com/certsrv and go to ''Download a CA certificate, certificate chain or CRL' it returns 'Error: An unexpected error has occurred: The Certification Authority Service has not been started.' However it works fine from https://localhost/certsrv on server-2.

My problem is same as in the following thread and I have tried the solution advised but it hasn't worked for me:

https://social.technet.microsoft.com/Forums/en-US/4c7f41a5-21b0-470d-8c78-0fc237eb1da0/web-enrollemet-page-giving-error-quot-an-unexpected-error-has-occurred-the-certification?forum=winserversecurity

I have tried the following but nothing has changed:

https://support.microsoft.com/en-gb/help/300867/error-message-the-certification-authority-service-has-not-been-started

https://blogs.technet.microsoft.com/askds/2009/04/22/how-to-configure-the-windows-server-2008-ca-web-enrollment-proxy/

Please advise if I am missing something. Many thanks

Como configurar um servidor de arquivos separado do AD

$
0
0
Olá pessoal.
Estou iniciando os estudos na área de infraestrutura e me deparo com a seguinte questão: como configurar o AD e um servidor de arquivos que estejam em máquinas diferentes?
Pesquisei sobre o assunto e li que é recomendável que o servidor de arquivos esteja em uma máquina separada do servidor AD, no entanto não achei nenhum material que explicasse o passo a passo de como realizar as configurações para que essa infraestrutura funcione e para que eu possa controlar o acesso dos usuários às pastas através do AD.
Assim, gostaria de ajuda ou indicação de algum material que explique como realizar esse procedimento.
Obrigado desde já.

RODC Instalation

$
0
0

Hello All,

we have 2012 R2 Domain controller in our environment.

now planning to install RODC. and could not see ActiveDirectoryRODCUpdate under configuration/forest updates in ADSI.

need to know from where can i get the Adprep.exe file.

i heard in 2012 we dont have to get it from mount CD drive, it is by default available

Can any one advise on how to proceed.

regards

Aamir Masthan


NA

Viewing all 31638 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>