Cross realm Kerberos and SPN
Hello, I setup 2 domains with a bi-directional trusted relationship: domain1.com and domain2.com .When I try to authenticate using user@domain1.com accessing resource.domain2.com (im using winrm to...
View Articlehow to export All computer list with operating system from AD and all...
how to export All computer list with operating system from AD and all attributes like disable or enable and OU location also?I have tried with dsquery below but status is not showing there.dsquery *...
View ArticleTrying to Demote 2008R2 AD Server but cannot remove AD Certificate Services,...
I am trying to Demote a 2008R2 AD Server that has Certificate Services installed but when I try to remove AD Certificate Services keep getting error 0x80073701. I have tried everything to remove it...
View ArticleMissing member attribute in replication metadata
Greetings, I have a script that tracks group membership changes. I recently converted it to using USN to make it more efficient. It works fine for most groups using:$rep =...
View ArticleKCC could not add this Replica Link due to error
In the process of migrating DCs to new hardware. I have 2 - Windows 2008R2 DCs on older servers, 1 - 2012R2 VM DC on HyperV, and 1 - Windows 2012R2 DC on a new server. All was working well for several...
View ArticleDNS Forwarders disappear on Server 2012 R2 PDC emulator
As the subject line suggests, when I enter the list of Forwarders under the domain controller "properties" the list stays there for about 20 minutes and then disappears. The list of Forwarders on my...
View ArticleActive Directory Web Services
Hello. Recently I noticed a problem. There are 4 DC: DC1 \ DC2 on OC 2016 DC3 \ DC4 2 on OS 2012R2 Problem associated with Active Directory Web Services, when requested in PS: Get-ADGroupMember...
View Articlewrong fsMORoleOwner
My CN=infrastructure,DC=ForestDnsZones,DC=XXX,DC=XXX attrib fsMORoleOwner value is wrong,what good value should I set?My CN=infrastructure,DC=XXX,DC=XXX attrib fsMORoleOwner value is right,but I can...
View ArticleApply MS Security Baseline for Windows 2016 settings with server in Workgroup
HiCan we apply MS Security Baseline for Windows 2016 with servers in workgroup?Also how the user accounts / credential security can be compared in Domain environment Vs in a Workgroup environment?...
View ArticleThe DNS server 206.89.179.3 on Local Area Connection 2 did not successfully...
I am at a loss here. I have checked the network settings the <g class="gr_ gr_41 gr-alert gr_spell gr_inline_cards gr_disable_anim_appear ContextualSpelling ins-del multiReplace" data-gr-id="41"...
View ArticleO365 Integration
Hi,Please find the below scenario,Client A - AD Domain name is A.COM and Email domain is A1.comClient B - AD Domain Name is A.COM and Email domain is B1.comIn this situation can both client utilize...
View Articledelegation permissions: access to deny after one move !!!!
HelloI delegated permissions to a group to move users from one OU to another OU.After moving them once, if they want to move them another time, they have access to deny.they have also the permission to...
View ArticleActive Directory Merge and rename. Best approach rename or migrate
I have 2 2016 domains. DomainA.local and domainB.corp. Separate forests. DoainA has our ERP software and related servers. Mainly an SQL server and an application which is accessed by a terminal server...
View ArticleAd to Ad replication not working
Dear Support,We have recently install PDC in our network and moved the roles for the same and its working properly.But our AD to AD replication not working which is previously working fine.So please...
View ArticleChange UPN for a group of Users
<# 1. Import Data from a CSV file 2. Process each object in CSV file:a. Foreach Objectb. Validate the Existence of the User in AD: -> if found - Proceed to Step 3-> If Not Found, Update the...
View ArticlePassword reset for remote workers - without AlwaysON VPN or another self...
Hi everyone,sorry for the long topic. But these are the first suggestions i get which i cannot deploy easily.How to you deal with remote workers "all over the world" that might have lost their...
View Articlei configured the schedule to sync between domain controllers but its not working
well the idea is to make one domain controller sync after 5 days ... so that if any thing gets wrong with the mains like virus or corruption we would still have one domain controller active that did...
View ArticleGet AD accounts created between specific dates
Hi Team,Could any one help me pulling out ad users created between specific dates, I have heard that it is possible to do with Quest AD power shell, Can any one help me on this. Please help.Trying to...
View ArticleUser Migration with ADMT
Hello,We are migrating users, groups, computer objects from one forest to another forest domain. and user name is different in each domain. below is the scenario,Source Domain User : 10025@abc.com...
View ArticleDeleted/Recreated ADUC User, Drive Mapping Fails
I recently deleted my user account from ADUC and recreated it (with the same user name). The Group Policy should automatically map the drives, and it did, for one of them. When I look at a GP result it...
View Article