Enable/Disable CD-ROM and USB
Can we Enable/Disable CD-ROM and USB using group policy preferences, item level targeting etc..
View ArticleHow to Group policy works and how to troubleshoot it
i want to know How to Group policy works in active directory and how to troubleshoot if we get any issues.
View ArticleUser and group access limited time controll
Hi,We have a system that requires often vendors to have local administrator access on the servers in the network.The scenario is as follow. Vendor A has local admin access to 10 servers, now and then...
View ArticleClik here to view.
Enable Kerberos AES encryption on an existing one-way trust
I'm trying to get kerberos to work between an internal and a DMZ forest with a one-way trust between them and have narrowed the issue down to encryption type between the client and DC.After some...
View ArticleFSR to DFSR migration stuck for RODC
Hi team, I'm trying to perform a FSR to DFSR migration using https://blogs.technet.microsoft.com/filecab/2014/06/25/streamlined-migration-of-frs-to-dfsr-sysvol/#quick Guide. Upon running the below...
View ArticleClik here to view.
Help with delegation - Usergroup should be able to delete computers but do...
Hi everyone,i'm searching for the setting to allow users to delete computers but do not create any. All tutorials are about creating AND deleting so i think i'm missing a right here.Currently i've the...
View ArticleEmail Synch between AD and Azure AD using Azure AD Connect
In AD I have put the user's email in the following fields:In the E-mail field under Properties/Generalin the 'mail' field under Attribute Editorin the 'otherMailbox' field under Attribute Editorin the...
View ArticleCant Login After Creating a new Domain.
Hey all,I created a new domain which did override the root domain of my server. I now cannot login using the previous credentials as the GPO were lost. I have tried using the dsrm password too and it...
View ArticleWindows 2012 R2 Forest and Domain Functional level
I have a question regarding to raise FFL and DFL.We have all Windows 2012 R2 DCs and the FSMO roles are in two domain. The current functional level is Windows 2018 R2.i know that we raise the DFL at...
View ArticleNewer Version of LockoutStatus.exe than 1.0.0.60?
Not sure if this is the appropriate category/forum, but I'm posting here as this is where I've found a few related issues/queries.Is there a version of LockoutStatus.exe newer than 1.0.0.60? Several...
View ArticleSame name two certificate can create issue ?
HiWe have 4 certificate which needs to be installed through GPO on below path. But these 4 certificates also already been installed via SCCM package on almost all systems.Now clients is saying that GPO...
View ArticleHow Group policy works in active directory and how to troubleshoot it
i want to know How Group policy works in active directory and how to troubleshoot if we get any issues.
View ArticleUser locked out -- no indication in event viewer
Hi,A user is locked out per the lockoutstatus.msi tool.There are no entries in the event viewer security log for event id 4740 on either of my two domain controllers. Also no 4771, 4776, or 529 event...
View ArticleDCPromo as ROWC fails - Server 2016
I've been working on a DCPromo issue for about 6 months that I can't seem to get around. Some of my specific details are a little fuzzy at this point since it's been so long but I tried the process 3...
View ArticleRepadmin report 8453 error - Access is denied
Background The environment is just built using Windows server 2016. Single forest with root domain as ad.corp.com and child domain org.corp.com. Each domain has two domain controllers ad.corp.com:...
View ArticleObject types missing from selection in Select Groups
we run our DC on a VM and it is exclusively used for DC and Certificate purposes.this morning there was an application error with mmc.exe, so I rebooted the VM.All was fine except that now when I go to...
View ArticleRSAT not showing under Windows features
HelloI have a colleague who is experiencing problems with getting the Remote Server Administration Tools in his windows features. We have followed the installation proccess for RSAT windows 10, and...
View ArticleIs NTLM officially supported in a organization with all DCs running Windows...
Hello MS Directory Services team,I would like to gather some sort of MS officially information [KB/post] and/or response to this thread, whether NTLM authentication is not supported and has been...
View ArticleMake visible on Organization tab in ADUC a new Attribute
Hello, How do I make visible on Organization tab in ADUC the new attribute I added named "hrmanager" ? We already have Manager showing in the Organization tab. I would like HRManager to show right...
View ArticleGuest's account in the SAM database failed due to a resource error
Hllo All,i got this error on our server (DC) in events log and it happened few times. (on windows server 2012 R2 Standard)Guest's account in the SAM database failed due to a resource error, such asAs...
View Article