Quantcast
Channel: Directory Services forum
Viewing all 31638 articles
Browse latest View live
↧

How to replicate 'memberOf' attribute to global catalog server

June 30, 2014, 11:40 pm
$
0
0

Hi,

I am trying to replicate 'member of' attribute to global catalog server, to get the data from child domain where trust is enabled.

i did a little reserach and found that 'isMemberOfPartialAttributeSet' should be true to get it replicated to global catalog server.

in schema, i am trying set 'isMemberOfPartialAttributeSet' true for "is-member-of-DL" attribute and getting illegal modification.

is there any other way, where i can modify (or with help of Microsoft).

OS: windows 2003 R2 (SP2) - MSDN

Thanks!

Karthik

Thanks, Karthikeyan R

↧
Search

Error 2148074306 The encryption type requested is not supported by the KDC

August 24, 2009, 8:12 am
$
0
0
Our domain is Windows 2008 Native. I ran repadmin /replsummary and noticed an odd error that I cannot get to the bottom of. Error 2148074306 The encryption type requested is not support by the KDC. This appears between two DCs only. I cannot find any reference to what might be causing this.
Orange County District Attorney
↧
↧

password export server 3.1 - 64x link broken

July 4, 2014, 5:23 am
$
0
0

i can't download the file

PES 3.1 (i need 64x)

http://go.microsoft.com/fwlink/?LinkId=147653

it forward  me to:

http://www.microsoft.com/library/errorpages/smarterror.aspx

if there is another location , where i can download it?

Thanks,


↧

Secondary ADFS server does not switch primary/secondary certificates

July 4, 2014, 7:26 am
$
0
0

Hi there!

I have been sent here from the Microsoft Office 365 Community, so I'll ask my question again. I still do not know very much about all this Federation stuff, but I'd like to learn.

So, we have two Windows Server 2008 R2 domain controllers allong with federation proxies on AWS, each pair behind a load balancer. In March, our certificates were about to expire, so we looked into this. Not sure any more whether we actually had to do something, or whether automatic rollover was active already. Some days before expiration, new certificates were created automatically, on both primary and secondary servers. We verify this withGet-ADFSCertificate -CertificateType token-signing. Those new certificates were not in use, the old ones still were the primary ones. So far, so good.

Then, on our primary domain controller, the secondary certificate became the primary one  - automatically I believe, but I am not entirely sure any more. Just as expected.

But this did not happen on the secondary domain controller. There, I still see both certificates, the old and the new one, and the old, expired one is the primary one. How can this be changed, and why did it not change automatically?

In the ADFS 2.0 Manager on this host I only have the information that 'This computer is not the primary federation server in the farm'. And that 'Changes to AD FS configuration settings can be made only at the primary federation server computer'.

Is there some way to make the secondary certificate the primary? Or to import the new certificate as primary one? But I would not even know how to export it. I looked for it with MMC on the primary server, and atCertificates (Local Computer) -> Personal -> Certificates I expected it to be, like described in one document I found on the net (and which I cannot link to until my account is verified - no idea how this works). There are some, but not the one Get-ADFSCertificate -CertificateType token-signing shows.

When I open the ADFS 2.0 Management on the first server, I see it as token-signing certificate. But I cannot export from there, and the ADFS 2.0 Management on the second server does not allow me to do anything. There, I also see that the last sync with the primary server was on 2014-04-15 - why did that stop? The new certificates were created more than one month earlier already, so this is probably not the cause of the primary/secondary certificates not switching. The Active Directory is still being synced.

Both servers are being restarted regularly due to updates. We removed the secondary domain controller and the secondary ADFS proxy from the load balancers, so for the moment we are fine. But we ned to eventually solve this.

One idea would be to remove the ADFS stuff completely from the secondary server, and set it up again, hoping that it will somehow fetch the certificate from the primary DC then. But I would prefer to actuallyfix this instead of finding a workaround, without ever knowing what the problem was.

Any help with this is greatly appreciated.

        Alex


↧

Port opening for Workplace Join on Windows Server 2012 R2

July 4, 2014, 7:33 am
$
0
0

Hello,

I have a adfs server, web server setup for testing workplace join on windows server 2012 R2.

Which are the ports to be enabled between client machine and the web server to test the feature?. And if at all any port between client and adfs server?

Thanks,

Nishanth

↧
↧

Supported Versions of IOS and Android for Workplace Join feature on Windows Server 2012 R2.

July 4, 2014, 7:29 am
$
0
0

Hello,

What are the Supported Versions of IOS and Android for Workplace Join feature on Windows Server 2012 R2?

Thanks,

Nishanth

↧

Problem with AD DS/LDS Schema Analyzer - The SDDL String contains an invalid sid or a sid that cannot be translated

May 18, 2011, 4:02 am
$
0
0

I'm setting the replication between AD and my LDS intstance, I decide to follow this article:

http://www.thegeekispeak.com/archives/64

when according to schema extension, as I have already extended schema in order to install MS Exchange. I succesfully load target schema from DC, but when I attempt to load base schema from LDS I receive the following error:

http://cid-0fadf372d269e1dd.photos.live.com/self.aspx/Alboom/Schema%20analyzer%20error.JPG

Do you have any clueas about the possible reason for this? Any help highly appreciated

↧

The best Certificate Template for Token Signing certificate in AD FS...

July 4, 2014, 6:43 am
$
0
0
Hi all;

Can anyone tell, what is the best Certificate Template for Token Signing certificate?

Thanks

Please VOTE as HELPFUL if the post helps you and remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

↧
Search

ADFS migration to 2012 R2

May 22, 2014, 12:01 pm
$
0
0

All,

  I am challenged with taking ADFS (2008R2) and moving it to ADFS 3.0 (2012 R2).  I've read a bunch of stuff.  But the clear path to accomplish this is not coming to me.  I thought I could add the 2012R2 server to the 2008R2 farm, but have learned that's not going to work.  I found migration documents: http://technet.microsoft.com/en-us/library/jj647765.aspx

But that covers same server migration.  I need to move to another server. This server has two primary functions.  It's our federation with Office 365, and I have a bunch relaying trust parties for SSO.

I exported and imported all the configurations. A quick test with a DNS change did not make this work (who could be so lucky?!).

Looking for some pointers on how to actually accomplish this.  I'm primarily concerned with office 365, but of course the RTPs are a close secondary concern.

Thanks!

↧
↧

ADFS 3.0 integration with Office 365

July 4, 2014, 4:27 pm
$
0
0

Hi All,

My users were able to login to the Office 365 integrated ADFS 2.0 portal with just AD username (Eg: Username: ABC)and password . However, when I upgraded my Window Server 2012 ADFS farm to Windows Server 2012 R2, the Office 365 integrated ADFS 3.0 login page does not allow users to use AD username login (abc) rather it ask to enter full UPN abc@xyz.com or domain\username (XYZ\ABC).
How can I change the login page so that my users do not have to enter the entire UPN or domain\username?
Thanks
Puneet

↧

"The trust relationship between this workstation and primary domain failed."

July 1, 2014, 5:31 am
$
0
0

"The trust relationship between this workstation and primary domain failed."

While loging to workstation getting trust relationship error & it is not allowing to login to the domain with domain account.

The soln. for this is to login with local administrator ID - Remove & rejoin the system to the domain.

Being a Server administrator can I manage the same process without intervention at workstation end.

Tried prestaging the computer name, resetting the existing computername in AD but didn't worked.

Pls let us know if having any alternate solution.

- Sumit Duduskar.

↧

DCDiag Error on Domain Owner FSMO Role

July 4, 2014, 1:43 pm
$
0
0

Hi all,
I need help here and hope someone can give me some guidance.

We have two servers running win2k3 (NT-US9 and NT-US7). I want to add another server running Win2k8R2 (NT-US10) to DC. I am having trouble promoting NT-US10 to DC saying that Schema Master did not complete a replication cycle...

Running a dcdiag on NT-US7 I see the following error listed at the bottom. How can I go about to fix this.
One additional info, our NT-US7 crashed before and we rebuilt it and rejoin the domain and setup as DC.

---

 Starting test: NetLogons
         ......................... NT-US7 passed test NetLogons
      Starting test: Advertising
         ......................... NT-US7 passed test Advertising
      Starting test: KnowsOfRoleHolders
         Warning: CN=NTDS Settings\0ADEL:d5eb01a3-c473-4e57-b7db-fcd3d853b730,CN=NT-US7,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domainname,DC=com is the Schema Owner, but is deleted.
         Warning: CN=NTDS Settings\0ADEL:d5eb01a3-c473-4e57-b7db-fcd3d853b730,CN=NT-US7,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domainname,DC=com is the Domain Owner, but is deleted.
         ......................... NT-US7 failed test KnowsOfRoleHolders
    

----

↧

I need to generate Subordinate Certificate Authority but I unable to select from the AD CA CertSRV page ?

July 2, 2014, 8:17 pm
$
0
0

I cannot find the option which says Subordinate Certification Authority in the Certificate Template drop-down menu from the internal AD CA page http://internal-AD-CA.domain.com/certsrv

How can I show that option in the drop down menu ? 

Because I got the .CSR already and I need to issue the certificate which certify a wireless access point and MDM appliance, but somehow I can only see Basic EFS and User certificate selection only?

/* Server Support Specialist */

↧
↧

Joining Server 2012 to existing 2003 Domain Controller

July 4, 2014, 7:24 pm
$
0
0

Hi Guys! Please do ignore my lack of knowledge on many things in terms of this.

My client has a Windows Server 2003 standard set as their domain controller. They need to setup virtual desktops for all their workstations now. I have setup a Windows 2012 Standard machine for them. Clean install (no upgrades). Now I want this to connect to the 2003 server domain controller but I keep getting errors "Network not found". I have checked and rechecked the IP setting on the network adapter and there is no issue there. The IP is a fixed IP, the subnet is the same and Primary DNS is pointing to the 2003 server DC. WINS settings has the same information as well.

I can ping the ip of the DC as well as the domain without any problems. But when I try to use the Server manager to connect to domain controller, I get the error message above. I checked the DC and it is elevated to 2003.

Can someone point me to the right direction on how I can connect the server 2012 to 2003 DC and how I can setup the VDI so that all users get their VM desktops when they login on the machines. I am learning as I go so please do excuse me if I appear to be Naive of basic concepts.

Any help would be greatly appreciated.

Regards,

Ali R-

↧

AD Replication Not Working - Last error: 1256 (0x4e8):

June 30, 2014, 12:36 am
$
0
0

Hi,

We have one DC and ADC which is running on the same premises.  Few days back the ADC got power failure and after that long it thrown an error of some services are not started.  We checked the event viewer to find out the service failed but not found the same.  In Services all the services are in started mode.  Restarted server serval time.  Still the replication not happening with DC.  If any one can help me out to find out the real issue will very helpful.

Pasting Below dciag and showrepl results ,

repadmin running command /showrepl against server localhost




Default-First-Site-Name\BACKUPDC

DC Options: (none)

Site Options: (none)

DC object GUID: bcbf105f-e755-4c24-b846-01d447834480

DC invocationID: da4dec2a-3c22-4b5f-8f36-586ee3969ea2



==== INBOUND NEIGHBORS ======================================



DC=bannaridc,DC=com

    Default-First-Site-Name\DC via RPC

        DC object GUID: 2a328743-72f5-48c7-b932-cbe8f957a580

        Last attempt @ 2014-06-30 12:28:05 failed, result 5 (0x5):

            Access is denied.

        1479 consecutive failure(s).

        Last success @ 2014-05-12 09:42:25.



CN=Configuration,DC=bannaridc,DC=com

    Default-First-Site-Name\DC via RPC

        DC object GUID: 2a328743-72f5-48c7-b932-cbe8f957a580

        Last attempt @ 2014-06-30 12:28:06 failed, result 5 (0x5):

            Access is denied.

        1182 consecutive failure(s).

        Last success @ 2014-05-12 09:23:26.



CN=Schema,CN=Configuration,DC=bannaridc,DC=com

    Default-First-Site-Name\DC via RPC

        DC object GUID: 2a328743-72f5-48c7-b932-cbe8f957a580

        Last attempt @ 2014-06-30 12:28:06 failed, result 5 (0x5):

            Access is denied.

        1182 consecutive failure(s).

        Last success @ 2014-05-12 09:23:26.



DC=DomainDnsZones,DC=bannaridc,DC=com

    Default-First-Site-Name\DC via RPC

        DC object GUID: 2a328743-72f5-48c7-b932-cbe8f957a580

        Last attempt @ 2014-06-30 12:28:05 failed, result 1256 (0x4e8):

            The remote system is not available. For information about network troubleshooting, see Windows Help.

        1182 consecutive failure(s).

        Last success @ 2014-05-12 09:33:40.



DC=ForestDnsZones,DC=bannaridc,DC=com

    Default-First-Site-Name\DC via RPC

        DC object GUID: 2a328743-72f5-48c7-b932-cbe8f957a580

        Last attempt @ 2014-06-30 12:28:05 failed, result 1256 (0x4e8):

            The remote system is not available. For information about network troubleshooting, see Windows Help.

        1182 consecutive failure(s).

        Last success @ 2014-05-12 09:23:27.



Source: Default-First-Site-Name\DC

******* 1479 CONSECUTIVE FAILURES since 2014-05-12 09:42:25

Last error: 1256 (0x4e8):

            The remote system is not available. For information about network troubleshooting, see Windows Help.


Replication Summary Start Time: 2014-06-30 12:49:41



Beginning data collection for replication summary, this may take awhile:

  .....





Source DC           largest delta  fails/total  %%  error

 BACKUPDC          49d.03h:30m:38s    5 /   5  100  (2148074274) The target principal name is incorrect.

 DC                49d.03h:26m:15s    5 /   5  100  (5) Access is denied.





Destination DC    largest delta    fails/total  %%  error

 BACKUPDC          49d.03h:26m:16s    5 /   5  100  (5) Access is denied.

 DC                49d.03h:30m:39s    5 /   5  100  (2148074274) The target principal name is incorrect.




Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\BACKUPDC
      Starting test: Connectivity
         ......................... BACKUPDC passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\BACKUPDC
      Starting test: Replications
         [Replications Check,BACKUPDC] A recent replication attempt failed:
            From DC to BACKUPDC
            Naming Context: DC=ForestDnsZones,DC=bannaridc,DC=com
            The replication generated an error (1256):
            The remote system is not available. For information about network troubleshooting, see Windows Help.
            The failure occurred at 2014-06-30 11:28:05.
            The last success occurred at 2014-05-12 09:23:27.
            1181 failures have occurred since the last success.
         REPLICATION LATENCY WARNING
         ERROR: Expected notification link is missing.
         Source DC
         Replication of new changes along this path will be delayed.
         This problem should self-correct on the next periodic sync.
         [Replications Check,BACKUPDC] A recent replication attempt failed:
            From DC to BACKUPDC
            Naming Context: DC=DomainDnsZones,DC=bannaridc,DC=com
            The replication generated an error (1256):
            The remote system is not available. For information about network troubleshooting, see Windows Help.
            The failure occurred at 2014-06-30 11:28:05.
            The last success occurred at 2014-05-12 09:33:40.
            1181 failures have occurred since the last success.
         REPLICATION LATENCY WARNING
         ERROR: Expected notification link is missing.
         Source DC
         Replication of new changes along this path will be delayed.
         This problem should self-correct on the next periodic sync.
         [Replications Check,BACKUPDC] A recent replication attempt failed:
            From DC to BACKUPDC
            Naming Context: CN=Schema,CN=Configuration,DC=bannaridc,DC=com
            The replication generated an error (5):
            Access is denied.
            The failure occurred at 2014-06-30 11:28:05.
            The last success occurred at 2014-05-12 09:23:26.
            1181 failures have occurred since the last success.
         [Replications Check,BACKUPDC] A recent replication attempt failed:
            From DC to BACKUPDC
            Naming Context: CN=Configuration,DC=bannaridc,DC=com
            The replication generated an error (5):
            Access is denied.
            The failure occurred at 2014-06-30 11:28:05.
            The last success occurred at 2014-05-12 09:23:26.
            1181 failures have occurred since the last success.
         REPLICATION LATENCY WARNING
         ERROR: Expected notification link is missing.
         Source DC
         Replication of new changes along this path will be delayed.
         This problem should self-correct on the next periodic sync.
         [Replications Check,BACKUPDC] A recent replication attempt failed:
            From DC to BACKUPDC
            Naming Context: DC=bannaridc,DC=com
            The replication generated an error (5):
            Access is denied.
            The failure occurred at 2014-06-30 11:28:05.
            The last success occurred at 2014-05-12 09:42:25.
            1477 failures have occurred since the last success.
         REPLICATION LATENCY WARNING
         ERROR: Expected notification link is missing.
         Source DC
         Replication of new changes along this path will be delayed.
         This problem should self-correct on the next periodic sync.
         REPLICATION-RECEIVED LATENCY WARNING
         BACKUPDC:  Current time is 2014-06-30 12:20:45.
            DC=ForestDnsZones,DC=bannaridc,DC=com
               Last replication recieved from DC at 2014-05-12 09:23:27.
            DC=DomainDnsZones,DC=bannaridc,DC=com
               Last replication recieved from DC at 2014-05-12 09:33:40.
            CN=Schema,CN=Configuration,DC=bannaridc,DC=com
               Last replication recieved from DC at 2014-05-12 09:23:26.
            CN=Configuration,DC=bannaridc,DC=com
               Last replication recieved from DC at 2014-05-12 09:23:26.
            DC=bannaridc,DC=com
               Last replication recieved from DC at 2014-05-12 09:42:25.
         ......................... BACKUPDC passed test Replications
      Starting test: NCSecDesc
         ......................... BACKUPDC passed test NCSecDesc
      Starting test: NetLogons
         ......................... BACKUPDC passed test NetLogons
      Starting test: Advertising
         ......................... BACKUPDC passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... BACKUPDC passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... BACKUPDC passed test RidManager
      Starting test: MachineAccount
         ......................... BACKUPDC passed test MachineAccount
      Starting test: Services
         ......................... BACKUPDC passed test Services
      Starting test: ObjectsReplicated
         ......................... BACKUPDC passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... BACKUPDC passed test frssysvol
      Starting test: frsevent
         ......................... BACKUPDC passed test frsevent
      Starting test: kccevent
         ......................... BACKUPDC passed test kccevent
      Starting test: systemlog
         ......................... BACKUPDC passed test systemlog
      Starting test: VerifyReferences
         ......................... BACKUPDC passed test VerifyReferences
   
   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
   
   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
   
   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
   
   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
   
   Running partition tests on : bannaridc
      Starting test: CrossRefValidation
         ......................... bannaridc passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... bannaridc passed test CheckSDRefDom
   
   Running enterprise tests on : bannaridc.com
      Starting test: Intersite
         ......................... bannaridc.com passed test Intersite
      Starting test: FsmoCheck
         ......................... bannaridc.com passed test FsmoCheck


Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\DC
      Starting test: Connectivity
         ......................... DC passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\DC

DNS Tests are running and not hung. Please wait a few minutes...
   
   Running partition tests on : ForestDnsZones
   
   Running partition tests on : DomainDnsZones
   
   Running partition tests on : Schema
   
   Running partition tests on : Configuration
   
   Running partition tests on : bannaridc
   
   Running enterprise tests on : bannaridc.com
      Starting test: DNS
         ......................... bannaridc.com passed test DNS

↧
Search

DCPROMO FAILS -The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles.

November 16, 2011, 11:39 pm
$
0
0

Hi Experts,                           

We have 4 AD sites and working properly. Due to some requirement we need to decommission DCs in one site. We are trying to demote DC roles in 2 servers but they are throwing attached errors.

 

I tried to follow given link and changed the orphan entry as mentioned. But still this error persists. Replication and communication is properly happening in all sites.

 

http://www.zerohoursleep.com/2011/07/dcpromo-out-fails-with-the-directory-service-is-missing-mandatory-configuration-information-and-is-unable-to-determine-the-ownership-of-floating-single-master-operation-roles/

 

 

When I tried to fire dsquery * CN=Infrastructure,DC=ForestDnsZones,DC=xxx,DC=net -attr fSMORoleOwner

 

I got below mentioned result which shows that there is some orphan entry. DC01 doesn’t exists in our network more.

 

CN=NTDS Settings\0ADEL:413b675f-3da2-4c09-b801-6358e839268f,CN=DC01\0ADEL:de8559b2-255b-4603-8f07-608df9e61a73,CN=Servers,CN=GVA,CN=Sites,CN=Configuration,DC=XXX,DC=net 

 

I changed the entry according to link.

CN=NTDS Settings,CN=EUDC2,CN=Servers,CN=AUS,CN=Sites,CN=Configuration,DC=XXX,DC=net 

 

 

Event Log Errors-01

 

The operations master roles held by this directory server could not transfer to the following remote directory server.

 

Remote directory server:

\\EUDC2.xxx.net

 

This is preventing removal of this directory server.

 

User Action

Investigate why the remote directory server might be unable to accept the operations master roles, or manually transfer all the roles that are held by this directory server to the remote directory server. Then, try to remove this directory server again.

 

Additional Data

Error value:

5005 The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles.

Extended error value:

0

Internal ID:

52498735

Event Log Errors-02

 

Ownership of the following FSMO role is set to a server which is deleted or does not exist.

 

Operations which require contacting a FSMO operation master will fail until this condition is corrected.

 

FSMO Role: CN=Infrastructure,DC=DomainDnsZones,DC=xxx,DC=net

FSMO Server DN: CN=NTDS Settings\0ADEL:413b675f-3da2-4c09-b801-6358e839268f,CN=DC01\0ADEL:de8559b2-255b-4603-8f07-608df9e61a73,CN=Servers,CN=USA,CN=Sites,CN=Configuration,DC=XXX,DC=net

 

User Action:

 

1. Determine which server should hold the role in question.

2. Configuration view may be out of date. If the server in question has been promoted recently, verify that the Configuration partition has replicated from the new server recently.  If the server in question has been demoted recently and the role transferred, verify that this server has replicated the partition (containing the latest role ownership) lately.

3. Determine whether the role is set properly on the FSMO role holder server. If the role is not set, utilize NTDSUTIL.EXE to transfer or seize the role. This may be done using the steps provided in KB articles 255504 and 324801 on http://support.microsoft.com.

4. Verify that replication of the FSMO partition between the FSMO role holder server and this server is occurring successfully.

 

The following operations may be impacted:

Schema: You will no longer be able to modify the schema for this forest.

Domain Naming: You will no longer be able to add or remove domains from this forest.

PDC: You will no longer be able to perform primary domain controller operations, such as Group Policy updates and password resets for non-Active Directory Domain Services accounts.

RID: You will not be able to allocation new security identifiers for new user accounts, computer accounts or security groups.

Infrastructure: Cross-domain name references, such as universal group memberships, will not be updated properly if their target object is moved or renamed.

 

Any Suggestion apart from that Link pls?


 

Regards Suman B. Singh
↧

SSL Certificate For A Standalone AD LDS Server (Workgroup Server)

April 22, 2014, 10:25 am
$
0
0

Hi,

I have a Server 2008 R2 Certificate Authority (CA Root) server in my Windows domain. I have a Server 2008 R2 standalone server in a Workgroup with AD LDS installed (I want to keep it in the workgroup so it is isolated from the domain). I need to connect to LDS instance using SSL (basically LDAPS). So far my research tells me that I need a SSL certificate from my CA Root server for LDS server.

My Questions are:

1. How do I generate an SSL certificate for my AD LDS server that is not a domain member?

2. How to install/add this certificate in AD LDS server?

3. How to test for successful connectivity over LDAPS using ADSIEdit?

↧
↧

Set MananagedBy Attribute to "Everyone" Powershell

July 5, 2014, 8:43 pm
$
0
0

Ok

So here is the script ive been working on. I cant figure out how to set the Managedby Attribute to the "Wellknown Security Principal" "Everyone". Please help, and thank you.

#cript##
Import-module ActiveDirectory
$Computer = Read-Host 'Computer Name='
Get-ADComputer $Computer | Set-ADComputer -ManagedBy S-1-1-0
##endScript####

MILADMIN

↧

Logon Failure: target account name is incorrect

July 6, 2014, 7:54 am
$
0
0

I have small network with 2 DC running Windows 2003 servers.  When I tried to connect to DC2 shared drive I got error "\\DC2 is not accessible. You might not have permission to use this network resource. Logon Failure: the target account name is incorrect."

I have checked everything but I could not resolve it.  Please help.


↧

Enable Inheritance issue in user

June 19, 2014, 11:34 pm
$
0
0

Hi,

I have a windows 2012 server, I am the domain admin, and have all the roles which default administrator have. The problem is that my permissions are revoked. When I checked in Security settings of my user, I noticed that Inheritance was removed on my user. I then manually enable inheritance. But after some time it disabled automatically. Can you suggest?

I'll be grateful for any help.

Anees

↧
Viewing all 31638 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>