DSGET Group ?
As far as I can tell, this command line is correct but I still get an error message. my command line is:dsget group "cn=All Extron,ou=Users,dc=extron,dc=local" -membersdsget failed:Directory object not...
View ArticleWindows Time Server - PDC
We are on 2008 R2 DC's & win10 machines. We see some blocks on local machine firewall event logs , sample below :-=========================================================Application Information:...
View ArticleADCS: Autoenroll working for users, not computers (RPC unavailable)
HelloI have a working enterprise CA setup in my domain. I am trying to get auto enrollment working, which I have for users, but not for workstations.I have a test workstation in a test OU, which has...
View ArticleKCD on a compuer object for ADCS Enrollment Proxy/Policy Services - Access...
I am logged into a Domain Controller running Server 2008 R2 and the domain/forest functional level is server to 2008. When implementing KCD for Windows Clients to request certificates via the proxy to...
View Articledisjoined computer object
Hi,what is the default settings for computer object complete removal from AD, after the computer was disjoint from domain?I see few servers that were disjoint a week ago with the sign of disabled...
View ArticleWindows Hello for Business - On Prem Certificates - Client Side Errors
After following the deployment guide here I'm not getting prompted on the client to enroll, and when trying to enroll the options are grayed out. The client log...
View ArticleDelegate rights to establish a trust between to forests
Hi allI have a bit of a rare scenario where i have to provide a user with the permission to establish a trust with my forest root domain. I could easily give that user "Domain Admin" rights but thats...
View ArticlePrint Server - Unable to print
Hi,1. I have setup 2016 print server say IP as (10.10.x.x). 2. I can send print jobs to printers available in the same network ( say printer IP as 10.10.x.x ) and I can print. 3. When I send print job...
View Articlepermissions to delegate repadmin
Is there a way to delegate permissions to run repadmin commands?
View ArticleUnable to enable AD Recycle bin feature, Server 2016
Good day all, I am having difficulty enabling the recycle bin feature. From what I gathered recycle bin was enable in the past but during upgrade from 2008 and 2016, we received error that the recycle...
View ArticleModify Bulk Users Properties
Hello All,I need to modify around 3300 users name (first+middle+ last name + display name) and description. Is there is any way to do it one time.I have user's new properties in .csv file.Best Regards,
View ArticleAD LDAP best way to do this
We need few people to have the admin rights/capability to enable/disable users in a specific OU. (they should not be able to view any other users). Any existing LDAP/AD tool that can be customized to...
View ArticleHow to active directory Smart Card Authentication with external certificate...
HI,We are planning to have AD authentication for users with smart card and certificate for smart card comes from third party issuer. How to do this. How smart card authentication works.Thanks,Sai Siva...
View Articlewhile executing the ktpass command warning Unable to set SPN mapping data...
Hi All,while executing the ktpass command from administrator command prompt on windows server machine: C:\Users\Administrator>ktpass -princ host/<hostname>@<active directory domain>...
View ArticleSite and Service Design
HI All, I got two Domain setup as account and Resources. Domain ABC - site and service setup. Now we got more sites comes under xyz domain. We have setup 2 x XYZ DC's in Site A (ABC domain) and...
View ArticleSchema changes caused AD services to stop working
We added an attribute which caused AD services stopped working. The issue got resolved by rebooting the server. What are the precautions we need to carry to prevent such issue when adding attributes to...
View ArticleHow to configure Primary group for AD user?
Hi AD Expert,We are integrate our AD to VPN access; we have some AD user have multiple AD group. When AD pass those user with multiple AD group it will causing the issues, users with single AD group do...
View ArticleChange CN value to email address by default
It's not possible to create a user with the same full name in an OU.To work around the issue, I'm trying to figure out how I can change the DN / CN for new users by default, and retroactively change...
View ArticleCreate User and assign it to the group
I am total beginner with LDAP. I need to locally create demo user and its group as it is in production ActiveDirectory server. I installed VirtualBox and Windows 2012 Server, then installed...
View ArticleI want to send Messages from my Active Directory Server to all currently...
sending Messages from my Active Directory Server to all currently logged on Users.
View Article