Get AD accounts created between specific dates
Hi Team,Could any one help me pulling out ad users created between specific dates, I have heard that it is possible to do with Quest AD power shell, Can any one help me on this. Please help.Trying to...
View ArticleProper Domain Delegation in non-standard environment
Hello all! We are an IT shop that is working on deploying proper administrative AD delegation on our domain. We are working through the information provided by Microsoft and trying to fit it to a...
View Articlew32tm show different DC than PDC
Hi,I have all the FSMO roles on DC-B, and that DC is configured to sync with a NTP server outside.All the clients in the domain are configured to sync with the PDC, so i can see they have NT5DS...I...
View ArticleLAPS - Extended Rights
We are looking to implement LAPS in our environment. However, during testing we notice when using powershell to check for extended right holders on an OU: Find-AdmPwdExtendedRights...
View ArticleImpact of raising forest functional level
Apologies for dumb question. We raised our domain functional level from Server 2003 to Server 2008 R2 a few months ago, but completely overlooked the forest functional level, which is still at 2003. We...
View ArticleExport user list with computer to be able to logon
I'm using AD on WinSv2008.How can I export user list(CSV) with computer to be able to logon?ex : there are 2 users. user001, user002. there are 2 PCs. PCX, PCY. user001 can logon to both...
View ArticlePassword Expired
Dear Team,We have windows server 2003 R2 with sp2 DC. All the users password was set never expired. Yesterday i had applied Default Domain Policy with complex Password enabled, Minimum Password age:8...
View ArticleAlternate UPN login with domain trust
Greetings all.We are currently in the process of an AD migration. Lets sat that:1. DomainA is our current source domain2. DomainB is our target domainWe currently have a two way, external,...
View ArticleScript to check if there are users logged on in a server(s)
Hello, I was wondering if any of you could help me with the following. I need a better script to check if there are users log in a server(s). Right now what I am doing is... get the server name and...
View Articlelsass.exe terminated unexpectedly with status code 1
Can anyone help me to fix the issue. Our one of domain controller with OS windows server 2012 R2 keep on rebooting frequently like in 10 days 2 times . With below errorSystem process lsass.exe...
View ArticleUser rights to download
The Users in my Domain only have User rights. However some of our users needs rights to be able to download files from the Internet and open them. They cannot do that with user rights. They get...
View ArticleDisable "Add" and "Remove" in Group's Member of
Hi all,Please be informed that we would like to limit our help desk permission for manage Group permission in AD.May i know is it possible to disable permission of "Add" and "Remove" button in the...
View ArticleWe are facing cache credentials issue in one of system (Window Server 2012...
Dear All,Please get me help to resolved below scenario issues.System Windows Server 2012 tries to and have failed for logon attempts on Domain credentials using cache credentials. We have checked...
View ArticleDebugging Directory Services and Lsass.exe
Hi Guys,I have some weird issues happening with my DC's and it is only happening on W2k12 R2 and 2016 DC's.We have some third party agents that runs on DC's that related to logon events.And somehow...
View ArticleHow to backup Active Directory when D:\Windows\NTDS folders are not on C:...
Our architect specified servers for new AD forest and domain. ADDS is to be installed to D:\Windows\NTDS (not the default C:\Windows\NTDS). These are VMs and a cloud provider will be backing up the...
View ArticleChanging the NAME attribute on the root domain properties
This is an example of one of the domains our forest domains. What are the consequences of changing thename attribute on a domain itself, if any? Are there any services or anything that is tied to...
View ArticleW2008R2: replication error 8418
Hi, I have two servers, running repadmin /syncall /e /dI obtain following message: CALLBACK MESSAGE: The following replication is in progress: From: CN=NTDS...
View ArticleExport the root certificate from the LDAP directory
The WebLogic server is running in LINUX 7. I have created new OVD provider in WebLogic server and SSL is configured for LDAP, forthis I generated Key store file and I need to export root certificate...
View ArticleDN attribute disappeared from users details
The users from our directory were, without a reason, segregated to several OUs so we restructured the directory and went from over a dozen OUs to 2, one for users, one for service/testing/other...
View ArticleErroneous Results from Get-ADUser
The below AD query gives me thousands of results, including four named: 7-Jan, 7-Mar, 1-Apr, 8-May.Get-ADUser -Filter * -SearchBase "OU=Departments,DC=dom,DC=for" | Select-Object samaccountname |...
View Article