Account Lockout
Hi Experts, I have AD account on which I have to perform my daily tasks such as login into the remote desktop, scheduler and other tasks. From past 10 days, my account gets locked daily in the evening...
View ArticleOU delegation in active directory.
we have 8 site in active directory i have create a OU in active directory for xyz sites users . we want to xyz site users reset the password of own OU only please help me closed it
View ArticleDFSR error ID:5008/4612 Towards demoted/removed DC
I am having a issue where i see the following errors:The DFS Replication service failed to communicate with partner OLDSERVER for replication group Domain System Volume. This error can occur if the...
View ArticleAccess denied trying to remove Server 2008R2 DC
I am in the process of retiring a DC from my domain and have run into an issue. when I ran dcpromo, I would get a prompt for AD account credentials, then shortly after, an access denied message. I was...
View Articlehow to tell if i´m using DFS or DFSR to replicate sysvol?
how to tell if i´m using DFS or DFSR to replicate sysvol?My fisrt AD Server is 2008R2 (10 years ago) and over time we added some WIn2012R2 AD ServersYesterday i´ve added my first AD Win2016 Server and...
View ArticleI need to change the replication partner of a RODC because of a planned...
Is is safe to create a second replication link for the RODC to a secondary DC?I understand that if the DC is demoted, a new link will be made automatically to another DC. But in case of a planned power...
View Articleforest is incompatible with the complete behavior of this optional feature -...
forest is incompatible with the complete behavior of this optional feature - Current functional level: 4294967295An optional feature is enabled on this DC. However, the functional level of the forest...
View ArticleClik here to view.
AD account operators cannot update Exchange attributes.
Hello All, I have a few AD admins whose accounts are in the Account Operators group in AD. It seems that the admins have no issues managing user accounts as for creating, resetting passwords and so...
View ArticleDomain Upgrade to 2012 functional levels - how to avoid breaking things
Hi, We have 4 2012 R2 DCs and 1 2003 server. Our domain and forest functional level is 2003. I want to upgrade to 2012 and want to check what could be impacted, here's what I'm planning to do:- Lower...
View Articlecreate and delete user account on a specific ou with domain user rights
Is it possible to add users to a security group and give them right to create and delete users, but only in a specific OU?If so, what tool can be given to them without them seing the rest of the AD?
View ArticleDC Event 4634 (logoff) instead of 4624 (logon) ?
Hello Team,I am forwarding all security events to Splunk (from DC), and tracking logon(4624) vs logoff(4634) events and noticed that sometimes i do see a logoff event just a second after i do logon via...
View ArticleActive directory
HelloI have some questions. Please answers me on your own words1- I have two forests. abc.com and xyz.com. I want to move all objects from abc.com to xyz.com. is it possible or not? If possible then...
View ArticleA script to find if a computer is member of a domain or in workgroup ?
Hi,Someone has a script that will show me if a computer is member of the domain or not ?indeed, some users are disjoining the AD domain to go on Workgroup (or they are modifying the member of the...
View ArticleRemoving Few Administrators
Hi Team,We had run a MBSA scan on all of the domain Controllers in which we found one common thing Multiple Administrators were more than two.Two accounts were suspicious to me for which I had checked...
View ArticleDomain controller file share
Hi Everyone,Scenario is we have a Domain controller which has configured with scheduled backup,We configured backup destination to local drive in same disk,Now I've a powershell script to copy that...
View ArticleLong path and file name issue
Dear Support,Please guide us to resolve long path and file name issue.Please let us know how to delete long path file name folder.Regards,Itsupport
View ArticleUser authenticated on wrong DC
Hi,We had recently a problem with one of our DC:s. We had 4 DC, dc01, dc02, dc03 and dc04. For some readon dc04 died and it doesnt exist on the forest anymore. But every morning somehow some clients...
View ArticleEvent 4624 logon type 3 for RDP access ?
Hello Team,When i logon to windows client via RDP using my AD credentials (that client is in AD domain) i got event 4624 logon - but with type=3.This looks to be inconsistent with the...
View ArticleDoes Windows Server 2016 Read-Only DC support the use of Group Managed...
Hi,We are setting up a new environment and want to use RO DCs in the DMZ subnet. Can I use GMSA account in this subnet?Servers placed in the DMZ can only connect to RO DCs. Can they change their...
View ArticleExchange Server Computer account password changed
I recently had an issue where a customer's Exchange production environment servers both had their passwords changed, seemingly inexplicably. The security logs were predictably overwritten shortly...
View Article