What query should be used to return the OU the user is currently in Active Directory? Thanks!

friends i have done RDP to my AD running on windows 2012 R2 using administrator account but when i click on start i see "Joel Chavry" as the name on the top right hand corner of the screen as the logged in user name.

i check Joel is a user in AD but a normal user with no login permissions. and i am logged in with administrator .. so why is this .. please check screen shots attached.

in whoami command it shows correct

Thanks, Happiness Always
Jatin

Hi,

Let say Site link in AD sites and services.

Site Link named MAINLINK01 included:

-Site A

-Site B

-Site C

-Site D

How connection works between them?

Hello,

We plan to migrate our domains from 2008 R2 to Windows 2012R2.
We are preparing all the steps and all the necessary checks to avoid problems.

I found this technical note which indicate all the Active Directory Integrated applications referenced :

technet.microsoft.com/en-us/library/hh994618.aspx?f=255&MSPPError=-2147217396#BKMK_AppCompat

Do we have the same for AD DS 2012R2 ?

I especially need the following product informations :

Exchange 2010/2013, Lync 2010/2013, Sharepoint 2010/2013, SQL 2005/2008/2012, WSUS, TMG, SCCM2012R2, IIS 6/7/8

I found the informations for Exchange, Lync and Sharepoint but i need all the other products compatibility.

Thanks a lot in advance,

Sam

We hired a consultant to setup LAPS in our AD-environment. Just make sure it did work I tried to access all passwords in the AD with my regular user account through powershell. I was able to get the password for 4 computers. All 4 where computers I joined to the domain with my regular user account.

So I opened ADSIedit and looked at the permissions on the relevant computer objectsand my regular user account did in fact have read rights on them. Checked other computer objects and I couldn't find any regular user having read rights on the other computer objects.

This is kind of surprising to me. I had no idea the account used for joining a computer to the domain gets read access on the computer object. Is this supposed to happen?

If so is there any way to make sure no regular user accounts are added to computer objects?

I am trying to automate the onboarding process for new users in the domain.  This includes creating their user object on a DC and then creating a home folder and assigning the new user as owner to the home folder.

The problem I'm running into is that after creating the user object, when I attempt to use Icacls to set the folder ownership, it attempts to resolve the user object parameter against a DC that is not the DC where the object was created and the AD replication of the new userObject has not yet occurred.

Is htere a way to either specify which DC icacls uses when resolving the owner parameter, or to provide information to icacls that does not require the AD replication to have completed (e.g. passing the user's objectGUID)?

Thanks.

Hello.

I have 5 DC, 2 2012R2 and 3 2003. Domain lever is 2003.

Whenever I search for something in ADUC, it comes up blank. It does not matter what DC i try from or point ADUC to use. However it works fine in Powershell or administrative center, and i have gotten no other kind of error in the enviorement so everything else seems to be working great.

Does anyone have any idea on were to start with this one?

Hi,

We have 03 AD domain controllers with Windows server 2012 R2 in our environment. Time Synchronization and replication has no errors. The issue occur irrelevant of client OSs and Particular when users try too reset their password and trying to login to AD from branch offices. Branch office doesn't have DC/RODC setup. They directly connects to primary site via VPN links.

We encountered an issue related to ""Trust Relationship between this workstation....", and user is unable to login to PC. Have to remove the PC from domain then rejoin to solve the issue. Please advise to find the cause and solve the issue.

Thanks and Best regards,

Meedstone Perera

How many users and computers will support by root domain with an additional domain controller

Thanks,

NTRao

I am facing issue of domain 'Administrator' account lockout every Saturday around 7:00 to 8:00 PM. When I check logs on domain controller its not showing source/caller computer. I know we have a scheduled Network scan (for vulnerabilities) run by Nessus Vulnerability Scanner (Vulnerability Scanner) at this time. This scan a specific VLAN of our domain so I am sure this is happening from one of target from this VLAN. 

But how to trace that source computer. Nothing found in C:\Windows\debug\netlogon.log

Hi all,

I have the below subnets defined in AD Sites and Services which are distributed between 8 AD sites, I am looking for a tool\script that will move each computer in AD to its specific OU based on computer IP; i.e. if computer has IP from 10.8.0.0/26 subnet then move it to OU x and so on..

Hi,

First thing, if this in the wrong forum I apologise.

We are having issues with a Windows 2008 DC at the moment. To give you a quick insight into how this problem happened, the server is a virtual server sat on a VMware platform. They were hit by the telsacrypt virus and the decision was taken to roll back to a previous version of the server.

Yes I know now that ths was the wrong thing to do.

Since then we have had a few problems with the server and VSS, I have managed to get most things working but I cannot get the ntds vss writer to show up when I type vssadmin list writers.

Looking online all the information I can find tells me to do a dcpromo down and then back up again but this is a production exchange server so it is not really an option.

Is there any way to reregister this writer and so get it working again?

Thanks for any help given,

alamb200

We have multiple geographic sites defined in AD. Let's say one of the sites is "NEW YORK" and we are adding new site "BROOKLYN" that is going to roll up to "NEW YORK" by virtue of routing. To optimize login and minimize chance of clients selecting remote DCs, we'd like to have "BROOKLYN" AD site clients associated with "NEW YORK". We currently have DC1, DC2, and DC3 assigned to "NEW YORK" and I can see that I can add same DCs to "BROOKLYN" in AD sites and users.

Is this OK to have these DCs assigned to multiple AD sites or are there any concerns we need to be aware of when DCs are "shared" between AD sites? I need to find "Microsoft Official" position on this and cannot seem to find anything that distinctly forbids (or permits) it. 

Thanks in advance!

Hi,

Pricing need pricing estimation for new server with Active directory services, child domain's and O 365 services

Thanks in Advance

NTRao

hi team,

please suggest me how to resolve this problem . server gonna restart automatically 1-2 to time in day they have error accorded VDS Basic provider , fail-over cluster ,virtual disk service ,NTFS and event id is that 1,6013,7036,37,1026,1067,1205,1067,1207,136 etc. 

This is on a Windows Server 2008 R2 with a domain at the same level, but only recently upgraded from 2003.

In AD U&C, after choosing Advanced Features in the View menu, I right-click on the domain name (ex: contoso.com) and choose Properties. When I click on the Attribute Editor tab, I get the following error:

Windows could not load the values for all the attributes.

Operation failed. Error Code: 0x2121

The search failed to retrieve attributes from the database

00002121: SvcErr: DSID-02130493, problem 5012 (DIR_ERROR), data 8341

I searched with Google but have not found any references to this error. Does anybody have an idea of what could be causing this?

Hi.

I am trying to install Skype for Business on my local domain. I have already completed the AD Setup in Skype for business setup. I have connected my User Computer to the domain. When I try to run the SFB Setup, it states "Failure occurred while attempting to check the schema state. Please ensure active directory is reachable". On browsing various forums, I checked the DCDiag on my cmd. It gave me error with NcSecDesc and SYSVOL. I tried installing adprep.exe from my installation media. I also used cmd to install adprep\rodcprep, but the cmd gave an error stating that the system cannot find the path specified. So I finally ran DCDiag\v command and received the following log:

Can someone help me with this issue.

Log:

         A warning event occurred.  EventID: 0x800008A5
            Time Generated: 03/21/2016   03:28:27
            Event String:
            The DFS Replication service stopped replication on volume C:. This o
ccurs when a DFSR JET database is not shut down cleanly and Auto Recovery is dis
abled. To resolve this issue, back up the files in the affected replicated folde
rs, and then use the ResumeReplication WMI method to resume replication.

            Additional Information:
            Volume: C:
            GUID: FF638010-EB4E-11E5-93E7-806E6F6E6963

            Recovery Steps
            1. Back up the files in all replicated folders on the volume. Failur
e to do so may result in data loss due to unexpected conflict resolution during
the recovery of the replicated folders.
            2. To resume the replication for this volume, use the WMI method Res
umeReplication of the DfsrVolumeConfig class. For example, from an elevated comm
and prompt, type the following command:
            wmic /namespace:\\root\microsoftdfs path dfsrVolumeConfig where volu
meGuid="FF638010-EB4E-11E5-93E7-806E6F6E6963" call ResumeReplication

            For more information, see http://support.microsoft.com/kb/2663685.
         A warning event occurred.  EventID: 0x800008A5
            Time Generated: 03/21/2016   12:18:12
            Event String:
            The DFS Replication service stopped replication on volume C:. This o
ccurs when a DFSR JET database is not shut down cleanly and Auto Recovery is dis
abled. To resolve this issue, back up the files in the affected replicated folde
rs, and then use the ResumeReplication WMI method to resume replication.

            Additional Information:
            Volume: C:
            GUID: FF638010-EB4E-11E5-93E7-806E6F6E6963

            Recovery Steps
            1. Back up the files in all replicated folders on the volume. Failur
e to do so may result in data loss due to unexpected conflict resolution during
the recovery of the replicated folders.
            2. To resume the replication for this volume, use the WMI method Res
umeReplication of the DfsrVolumeConfig class. For example, from an elevated comm
and prompt, type the following command:
            wmic /namespace:\\root\microsoftdfs path dfsrVolumeConfig where volu
meGuid="FF638010-EB4E-11E5-93E7-806E6F6E6963" call ResumeReplication

            For more information, see http://support.microsoft.com/kb/2663685.
         A warning event occurred.  EventID: 0x800008A5
            Time Generated: 03/21/2016   15:02:52
            Event String:
            The DFS Replication service stopped replication on volume C:. This o
ccurs when a DFSR JET database is not shut down cleanly and Auto Recovery is dis
abled. To resolve this issue, back up the files in the affected replicated folde
rs, and then use the ResumeReplication WMI method to resume replication.

            Additional Information:
            Volume: C:
            GUID: FF638010-EB4E-11E5-93E7-806E6F6E6963

            Recovery Steps
            1. Back up the files in all replicated folders on the volume. Failur
e to do so may result in data loss due to unexpected conflict resolution during
the recovery of the replicated folders.
            2. To resume the replication for this volume, use the WMI method Res
umeReplication of the DfsrVolumeConfig class. For example, from an elevated comm
and prompt, type the following command:
            wmic /namespace:\\root\microsoftdfs path dfsrVolumeConfig where volu
meGuid="FF638010-EB4E-11E5-93E7-806E6F6E6963" call ResumeReplication

            For more information, see http://support.microsoft.com/kb/2663685.
         ......................... WIN-N26E7PT8N0G passed test DFSREvent
      Starting test: SysVolCheck
         * The File Replication Service SYSVOL ready test
         File Replication Service's SYSVOL is ready
         ......................... WIN-N26E7PT8N0G passed test SysVolCheck
      Starting test: KccEvent
         * The KCC Event log test
         Found no KCC errors in "Directory Service" Event log in the last 15 min
utes.
         ......................... WIN-N26E7PT8N0G passed test KccEvent
      Starting test: KnowsOfRoleHolders
         Role Schema Owner = CN=NTDS Settings,CN=WIN-N26E7PT8N0G,CN=Servers,CN=D
efault-First-Site-Name,CN=Sites,CN=Configuration,DC=lavinnk,DC=local
         Role Domain Owner = CN=NTDS Settings,CN=WIN-N26E7PT8N0G,CN=Servers,CN=D
efault-First-Site-Name,CN=Sites,CN=Configuration,DC=lavinnk,DC=local
         Role PDC Owner = CN=NTDS Settings,CN=WIN-N26E7PT8N0G,CN=Servers,CN=Defa
ult-First-Site-Name,CN=Sites,CN=Configuration,DC=lavinnk,DC=local
         Role Rid Owner = CN=NTDS Settings,CN=WIN-N26E7PT8N0G,CN=Servers,CN=Defa
ult-First-Site-Name,CN=Sites,CN=Configuration,DC=lavinnk,DC=local
         Role Infrastructure Update Owner = CN=NTDS Settings,CN=WIN-N26E7PT8N0G,
CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=lavinnk,DC=lo
cal
         ......................... WIN-N26E7PT8N0G passed test
         KnowsOfRoleHolders
      Starting test: MachineAccount
         Checking machine account for DC WIN-N26E7PT8N0G on DC WIN-N26E7PT8N0G.
         * SPN found :LDAP/WIN-N26E7PT8N0G.lavinnk.local/lavinnk.local
         * SPN found :LDAP/WIN-N26E7PT8N0G.lavinnk.local
         * SPN found :LDAP/WIN-N26E7PT8N0G
         * SPN found :LDAP/WIN-N26E7PT8N0G.lavinnk.local/LAVINNK
         * SPN found :LDAP/727add65-9fc1-4d2f-85d4-a4b29c626837._msdcs.lavinnk.l
ocal
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/727add65-9fc1-4d2f-85
d4-a4b29c626837/lavinnk.local
         * SPN found :HOST/WIN-N26E7PT8N0G.lavinnk.local/lavinnk.local
         * SPN found :HOST/WIN-N26E7PT8N0G.lavinnk.local
         * SPN found :HOST/WIN-N26E7PT8N0G
         * SPN found :HOST/WIN-N26E7PT8N0G.lavinnk.local/LAVINNK
         * SPN found :GC/WIN-N26E7PT8N0G.lavinnk.local/lavinnk.local
         ......................... WIN-N26E7PT8N0G passed test MachineAccount
      Starting test: NCSecDesc
         * Security Permissions check for all NC's on DC WIN-N26E7PT8N0G.
         * Security Permissions Check for
           DC=ForestDnsZones,DC=lavinnk,DC=local
            (NDNC,Version 3)
         * Security Permissions Check for
           DC=DomainDnsZones,DC=lavinnk,DC=local
            (NDNC,Version 3)
         * Security Permissions Check for
           CN=Schema,CN=Configuration,DC=lavinnk,DC=local
            (Schema,Version 3)
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         CN=Schema,CN=Configuration,DC=lavinnk,DC=local
         * Security Permissions Check for
           CN=Configuration,DC=lavinnk,DC=local
            (Configuration,Version 3)
         * Security Permissions Check for
           DC=lavinnk,DC=local
            (Domain,Version 3)
         ......................... WIN-N26E7PT8N0G failed test NCSecDesc
      Starting test: NetLogons
         * Network Logons Privileges Check
         Verified share \\WIN-N26E7PT8N0G\netlogon
         Verified share \\WIN-N26E7PT8N0G\sysvol
         ......................... WIN-N26E7PT8N0G passed test NetLogons
      Starting test: ObjectsReplicated
         WIN-N26E7PT8N0G is in domain DC=lavinnk,DC=local
         Checking for CN=WIN-N26E7PT8N0G,OU=Domain Controllers,DC=lavinnk,DC=loc
al in domain DC=lavinnk,DC=local on 1 servers
            Object is up-to-date on all servers.
         Checking for CN=NTDS Settings,CN=WIN-N26E7PT8N0G,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=lavinnk,DC=local in domain CN=Confi
guration,DC=lavinnk,DC=local on 1 servers
            Object is up-to-date on all servers.
         ......................... WIN-N26E7PT8N0G passed test
         ObjectsReplicated
      Test omitted by user request: OutboundSecureChannels
      Starting test: Replications
         * Replications Check
         * Replication Latency Check
            DC=ForestDnsZones,DC=lavinnk,DC=local
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations.  0 were either: read-only replicas
 and are not verifiably latent, or dc's no longer replicating this nc.  0 had no
 latency information (Win2K DC).
            DC=DomainDnsZones,DC=lavinnk,DC=local
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations.  0 were either: read-only replicas
 and are not verifiably latent, or dc's no longer replicating this nc.  0 had no
 latency information (Win2K DC).
            CN=Schema,CN=Configuration,DC=lavinnk,DC=local
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations.  0 were either: read-only replicas
 and are not verifiably latent, or dc's no longer replicating this nc.  0 had no
 latency information (Win2K DC).
            CN=Configuration,DC=lavinnk,DC=local
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations.  0 were either: read-only replicas
 and are not verifiably latent, or dc's no longer replicating this nc.  0 had no
 latency information (Win2K DC).
            DC=lavinnk,DC=local
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations.  0 were either: read-only replicas
 and are not verifiably latent, or dc's no longer replicating this nc.  0 had no
 latency information (Win2K DC).
         ......................... WIN-N26E7PT8N0G passed test Replications
      Starting test: RidManager
         * Available RID Pool for the Domain is 2101 to 1073741823
         * WIN-N26E7PT8N0G.lavinnk.local is the RID Master
         * DsBind with RID Master was successful
         * rIDAllocationPool is 1601 to 2100
         * rIDPreviousAllocationPool is 1601 to 2100
         * rIDNextRID: 1602
         ......................... WIN-N26E7PT8N0G passed test RidManager
      Starting test: Services
         * Checking Service: EventSystem
         * Checking Service: RpcSs
         * Checking Service: NTDS
         * Checking Service: DnsCache
         * Checking Service: DFSR
         * Checking Service: IsmServ
         * Checking Service: kdc
         * Checking Service: SamSs
         * Checking Service: LanmanServer
         * Checking Service: LanmanWorkstation
         * Checking Service: w32time
         * Checking Service: NETLOGON
         ......................... WIN-N26E7PT8N0G passed test Services
      Starting test: SystemLog
         * The System Event log test
         A warning event occurred.  EventID: 0x00001796
            Time Generated: 03/21/2016   15:38:24
            Event String:
            Microsoft Windows Server has detected that NTLM authentication is pr
esently being used between clients and this server. This event occurs once per b
oot of the server on the first time a client uses NTLM with this server.

            NTLM is a weaker authentication mechanism. Please check:

                  Which applications are using NTLM authentication?
                  Are there configuration issues preventing the use of stronger
authentication such as Kerberos authentication?
                  If NTLM must be supported, is Extended Protection configured?

            Details on how to complete these checks can be found at http://go.mi
crosoft.com/fwlink/?LinkId=225699.
         Found no errors in "System" Event log in the last 60 minutes.
         ......................... WIN-N26E7PT8N0G passed test SystemLog
      Test omitted by user request: Topology
      Test omitted by user request: VerifyEnterpriseReferences
      Starting test: VerifyReferences
         The system object reference (serverReference)
         CN=WIN-N26E7PT8N0G,OU=Domain Controllers,DC=lavinnk,DC=local and
         backlink on
         CN=WIN-N26E7PT8N0G,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Co
nfiguration,DC=lavinnk,DC=local
         are correct.
         The system object reference (serverReferenceBL)
         CN=WIN-N26E7PT8N0G,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSe
ttings,CN=System,DC=lavinnk,DC=local
         and backlink on
         CN=NTDS Settings,CN=WIN-N26E7PT8N0G,CN=Servers,CN=Default-First-Site-Na
me,CN=Sites,CN=Configuration,DC=lavinnk,DC=local
         are correct.
         The system object reference (msDFSR-ComputerReferenceBL)
         CN=WIN-N26E7PT8N0G,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSe
ttings,CN=System,DC=lavinnk,DC=local
         and backlink on
         CN=WIN-N26E7PT8N0G,OU=Domain Controllers,DC=lavinnk,DC=local are
         correct.
         ......................... WIN-N26E7PT8N0G passed test VerifyReferences
      Test omitted by user request: VerifyReplicas

      Test omitted by user request: DNS
      Test omitted by user request: DNS

   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : lavinnk
      Starting test: CheckSDRefDom
         ......................... lavinnk passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... lavinnk passed test CrossRefValidation

   Running enterprise tests on : lavinnk.local
      Test omitted by user request: DNS
      Test omitted by user request: DNS
      Starting test: LocatorCheck
         GC Name: \\WIN-N26E7PT8N0G.lavinnk.local
         Locator Flags: 0xe00073fd
         PDC Name: \\WIN-N26E7PT8N0G.lavinnk.local
         Locator Flags: 0xe00073fd
         Time Server Name: \\WIN-N26E7PT8N0G.lavinnk.local
         Locator Flags: 0xe00073fd
         Preferred Time Server Name: \\WIN-N26E7PT8N0G.lavinnk.local
         Locator Flags: 0xe00073fd
         KDC Name: \\WIN-N26E7PT8N0G.lavinnk.local
         Locator Flags: 0xe00073fd
         ......................... lavinnk.local passed test LocatorCheck
      Starting test: Intersite
         Skipping site Default-First-Site-Name, this site is outside the scope
         provided by the command line arguments provided.
         ......................... lavinnk.local passed test Intersite

I am also posting the DCDiag result:

Microsoft Windows [Version 6.2.9200]
(c) 2012 Microsoft Corporation. All rights reserved.

C:\Users\Administrator>Dcdiag

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = WIN-N26E7PT8N0G
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\WIN-N26E7PT8N0G
      Starting test: Connectivity
         ......................... WIN-N26E7PT8N0G passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\WIN-N26E7PT8N0G
      Starting test: Advertising
         ......................... WIN-N26E7PT8N0G passed test Advertising
      Starting test: FrsEvent
         ......................... WIN-N26E7PT8N0G passed test FrsEvent
      Starting test: DFSREvent
         There are warning or error events within the last 24 hours after the
         SYSVOL has been shared.  Failing SYSVOL replication problems may cause
         Group Policy problems.
         ......................... WIN-N26E7PT8N0G passed test DFSREvent
      Starting test: SysVolCheck
         ......................... WIN-N26E7PT8N0G passed test SysVolCheck
      Starting test: KccEvent
         ......................... WIN-N26E7PT8N0G passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... WIN-N26E7PT8N0G passed test
         KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... WIN-N26E7PT8N0G passed test MachineAccount
      Starting test: NCSecDesc
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         CN=Schema,CN=Configuration,DC=lavinnk,DC=local
         ......................... WIN-N26E7PT8N0G failed test NCSecDesc
      Starting test: NetLogons
         ......................... WIN-N26E7PT8N0G passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... WIN-N26E7PT8N0G passed test
         ObjectsReplicated
      Starting test: Replications
         ......................... WIN-N26E7PT8N0G passed test Replications
      Starting test: RidManager
         ......................... WIN-N26E7PT8N0G passed test RidManager
      Starting test: Services
         ......................... WIN-N26E7PT8N0G passed test Services
      Starting test: SystemLog
         ......................... WIN-N26E7PT8N0G passed test SystemLog
      Starting test: VerifyReferences
         ......................... WIN-N26E7PT8N0G passed test VerifyReferences


   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : lavinnk
      Starting test: CheckSDRefDom
         ......................... lavinnk passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... lavinnk passed test CrossRefValidation

   Running enterprise tests on : lavinnk.local
      Starting test: LocatorCheck
         ......................... lavinnk.local passed test LocatorCheck
      Starting test: Intersite
         ......................... lavinnk.local passed test Intersite

Are all DCs have the same AD information as the server with FSMO roles?

I ask that question because I'm just wondering if a server with all 5 FSMO roles is down and can't be repaired then is other DC have the same AD information and can handle the FSMO roles?

I inherited an ADFS 2.0 server from a colleague who left. One of the external users who is using ADFS submitted a question and I can't find how to do what they want. They are looking for a "SessionIdentifier" attribute to be sent in the AuthnStatement.  I know little about ADFS and so this may be a simple thing but I cannot find anywhere in the ADFS console to do this.  I'd greatly appreciate if someone could point to a solution.  I apologize in advance for my n00bism.

Melissa

hi team,

please suggest me how to resolve this problem . server gonna restart automatically 1-2 to time in day they have error accorded VDS Basic provider , fail-over cluster ,virtual disk service ,NTFS and event id is that 1,6013,7036,37,1026,1067,1205,1067,1207,136 etc.