Unkouwn Sign In AD Through Bulk Modifications
Hello All,I did a bulk modification " through .csv file" for all AD users and i did add a description "description field" for each user "in Arabic language" but it showing the description as " ♥♥♥♥...
View ArticleExternal NTP server usage
Hi,I am working on mid-level enterprise with 12 DC and 3 AD sites, 590 and clients.I don't have external time server. All servers and clients use PDC for time sync.Is there any advantage,if I use...
View Articlemsds-generationid is not set for windows 2012
msds-generationid is not set for windows 2012 virtual domain controller on vmware. Could it be because it was upgraded from earlier versions of the OS or any other reason and what would be the...
View ArticleSchemaMaster Role and LAPS
Hello everyone: I have to install LAPS in my AD and I was thinking of doing it in this way in case there was a failure when making the update of the scheme:-Block the replication of the DC that has the...
View ArticleHow to configure Primary group for AD user?
Hi AD Expert,We are integrate our AD to VPN access; we have some AD user have multiple AD group. When AD pass those user with multiple AD group it will causing the issues, users with single AD group do...
View ArticleLost DNS/AD
I have my Windows server 2012r2 running on ESXI. I tried to move the VM to a SSD and everything crashed. I cannot boot this VM anymore. If I re-install the server, can I control the domain that was...
View ArticleHow Replication works in AD and how to troubleshoot
Please describe, How Replication works in AD and how to troubleshoot.
View Article1 Domain Controller with replication in progress
I recently installed a new DC and made it the PDC. The old PDC was demoted and removed from the domain.On the new PDC in GP management I have this "error" 1 Domain Controller with replication in...
View ArticleSchema changes caused AD services to stop working
We added an attribute which caused AD services stopped working. The issue got resolved by rebooting the server. What are the precautions we need to carry to prevent such issue when adding attributes to...
View ArticleTime Service configuration with Virual DCs - Power Outage Concerns
Hi,I have two physical servers. Each server hosts a DC. The PDC gets it's time from an external source us.pool.ntp.org. The Host servers are members of the Domains controlled by the virtual DCs.When...
View ArticleWhy is "token size" with domain local group bigger than global group?
Hi,does anybody know why a domain local group needs/occupied 40bytes in a token, and a global group only needs 8bytes ?The attributes on this two groups are all the...
View ArticleAD LDAP best way to do this
We need few people to have the admin rights/capability to enable/disable users in a specific OU. (they should not be able to view any other users). Any existing LDAP/AD tool that can be customized to...
View ArticleGive user right to backup DC
HiI encountered this question online. I am unsure which is the correct answer.You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is...
View ArticleClik here to view.
Help with delegation - Usergroup should be able to delete computers but do...
Hi everyone,i'm searching for the setting to allow users to delete computers but do not create any. All tutorials are about creating AND deleting so i think i'm missing a right here.Currently i've the...
View ArticleHow to active directory Smart Card Authentication with external certificate...
HI,We are planning to have AD authentication for users with smart card and certificate for smart card comes from third party issuer. How to do this. How smart card authentication works.Thanks,Sai Siva...
View ArticleActive Directory and external openldap
Hello,Now I have all the users and passwords stored in openldap (no domain) and I want to introduce Active Directory on the network.Is it possible to configure AD to use openldap as a password...
View ArticleDomain Controller taking long time to login via Remote Session while another...
Dear All,we are facing a issue with our domain controller (windows 2012r2) when i was accessing the server via remote session its took long time to login after given credential and some time it got...
View ArticleUser locked out -- no indication in event viewer
Hi,A user is locked out per the lockoutstatus.msi tool.There are no entries in the event viewer security log for event id 4740 on either of my two domain controllers. Also no 4771, 4776, or 529 event...
View ArticleNewer Version of LockoutStatus.exe than 1.0.0.60?
Not sure if this is the appropriate category/forum, but I'm posting here as this is where I've found a few related issues/queries.Is there a version of LockoutStatus.exe newer than 1.0.0.60? Several...
View ArticleDR Testing in Sandbox environment.
In previous years we would perform a DR test consisting of bringing up a handful of our Windows Server VMs (On VMWare) at our Disaster recovery location. The DR location has it's own SAN array that is...
View Article