SYSVOL replication issue
HiWe have two offices and main office having 2008R2 primary domain controller and 2008 R2 additional domain controller and Branch office having 2008R2 RODC installed.Now when we create a new GPO in PDC...
View Articlecreating a working Password policy besides the Default domain Policy without...
Hi Would someone be able to tell me if it is it possible to create a working Password policy in AD besides the Default domain Policy without using the Fine Grain password Policy in Windows Server 2012?...
View ArticleRemove group policy
I purchased a workstation from my employer when I retired. It was a member of a domain but never removed from that domain. One of the group policies is to disable wifi. How can I get rid off all the...
View ArticleHow to prevent an AD service account from deleting AD objects it creates?
I am running Windows 2012R2 and have an AD service account that creates ServiceConnectionPoint (SCP) objects in a container. By default when it creates these objects it has "Full Control" rights on...
View ArticleDC replication issuea
We currently have 3 domain controllers. 2 at our main site and one at a another site. The sites are directly connected via fiber just on different subnets. A few weeks ago a redundant connection was...
View ArticlePassword history check (N-2)
Hello everybody!How can I disable the feature "Password history check (N-2)" ?https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc780271(v=ws.10)This causes me many...
View ArticleCan't log in to local computer after created active directory
Hello, so I have some problems...I'm a computer systems student and now I'm studying system administration.I'm using Windows Server 2008 R2 on VMware software.I had a task to try create an active...
View ArticleAD LDS partition problem.
1>We know there are 3 partitions in LDS, configuration, application and schema.my understanding is schema is what kind of data we can store in LDS, but how about application and configuration.I have...
View ArticleWindows Server 2008 R2 - Parent Domain is down
hi everyone,i have a parent (Domain.com) and child domain (Child.Domain.com), Parent Domain is down and i haven't any backup for it, so can i use the child domain as a primary Domain and clean metadata...
View ArticleHow I can change Display Resolution when use winrm?
I use windows server 2016 as jenkins slave for GUI tests by selenium. Master Jenkins node use for work with slave winrm protocol. When I use winrm as protocol for work beetwen master - slave I have had...
View ArticledSHeuristics value change to 0 from 2
Hi, We have DCs in my domain where dSHeuristics value is set to 0000002. Also, I would like to inform that, Exchange trusted subsystem and some other applications has access to AD via “Anonymous...
View ArticlePassword Expired
Dear Team,We have windows server 2003 R2 with sp2 DC. All the users password was set never expired. Yesterday i had applied Default Domain Policy with complex Password enabled, Minimum Password age:8...
View ArticleAdding a UPN Suffix that is already synced to O365
Hello,We have 2 forests: one.org and two.ca; Both are synced with Office365 in a single tenant.We would like to add a UPN suffix called two.ca to the one.org forest - will this cause any issues since...
View ArticleInstallation of Certificate Authority Role
Where should I install certificate authority role ? do I need to have dedicated machine in a domain, can I install in domain controller where Active Directory is installed.Thanks, Ram Ch
View ArticleQuerying objects (users/computers) from imported list, across multiple...
Hi, This is my 1st post in TechNet forum...I'm a big fan of PS scripting since it helps my job done more efficiently, but unfortunately, an a newbie for creating custom scripts as such, hoping to learn...
View ArticleAD CS: Issues getting the Root CA back to the Trusted CAs cert store
Hi,Two weeks ago we renewed our Entreprise CA cert and it was properly deployed to all our clients. I was able to even use certultil -pulse to get it updated on my laptiop as soons as I finished the...
View ArticleEvent 2887 "performed without SSL/TLS:" vs "performed without signing"
Hello,I have been using MS ATA is find systems & apps making clear text LDAP connections to our domain controllers and have reconfigured them to use SLDAP / port 636. I have the clear text...
View Articlecreate a banned password list
Hello, We got a client with a problem with weak passwords, currently the complexity level is 3/4 but it is not enough and we would like to create a banned password list in order to forbids 123456aA...
View ArticleControlAccessRight RightsGUID Values
Hi I'm working on Powershell script to create a machine account and as part of giving right to users / groups to have access to add that machine to the Domain im looking for some Rights GUID values...
View ArticleUnusual SAMaccountNames
I'm working on a multi-domain Exchange 2016 configuration running on Server 2012 R2. Since it is multi-domain we use a third party control panel to manage the users. The issue may not be due to the...
View Article