Is there really no way to do workstation account logon restrictions by an AD...
I can restrict what workstations/servers a user can log on to via the account tab on the individual user. You manually enter 1+ computers that they are able to log on to. However, it does not appear...
View Articlemachine logged in via a dc on another site
I have a server that is on subnet 10.245.x.x which is part of a site with its own dcs etc...however it is logged in using dcs in a differerent site. any diea why this is happening and not using the...
View ArticleDNS Active Directory folders under forward lookup zones missing
Ok, here is the situation, I created a domain earlier this week, the domain got hosed due to fsmo roles being all over the world and not being able to talk to each other. I blew away that domain and...
View ArticleAD LDS
Hi,we have 2 AD LDS servers where one of them is the extension of AD. can we add computers to the domain using the remote LDS server?also can we integrate any application using LDAP with the remote AD...
View Article2GB lsass.log file on 2003 DC - How do I clean it up?
I have windows server 2003 domain controller that has a large 2.2GB lsass.log file.I need to know if I can relocate it to a different Drive or delete it or reduce the level of logging that is taking...
View ArticlePowerShell UPN Suffix not working
HiI have a powershell script that ive nicked from somewhere else which is supposed to change the UPN suffix on all of our accounts in the domain, but it doesn't work. if I use the -whatif switch it...
View ArticleForest Trust Verification..
I Run the following command to verify forest trust..Correct me if i am wrong & if the syntax is right:C:\Users\Me>nltest/domain_trusts /forest List of domain trusts: 0: blr.mydomain.local...
View ArticleNesting Domain Groups across a one-way trust
I think I have the correct forum.....We recently setup a domain trust between two Win2k3 domains, domain-a.net (existing domain for 5+ years) and domain-b.net (just setup late last year). The trust is...
View ArticleTLS
We have an SSL-vpn sonciwall 2000 integration with AD but with our password policy users have to change pw's every 90 days. So now when a user tries to login they cannot change there password properly...
View ArticleRename or Migrate AD 2003 to 2012
Hello,My private domain name is currently company.com and public DNS has been annoying so we want to rename the domain to company.local. Currently running 2003 AD and forest. We don't have Exchange...
View ArticleDo you need to run ADPREP if you already transferred FSMO roles from 2003...
I have an exsisting 2003 DC. I have a brand new 2008 DC (which is also a virtual machine.) I did the transfer FSMO roles from the 2003 server to the 2008 server. I have also moved DNS and DHCP services...
View Articlezrm
Hi,I trying to configur the active directory by the dc promo but there is comming message.The operation failed: A domain controller could not be contacted for the domain aseerwater.gov that contained...
View ArticleHow to set the time on clients NOT sync with DCs?
DCs: Windows Server 2008 R2 (virtual machines) Some special clients: Windows Server 2008 R2 (physical machines)As you know, the time on clients will sync with DCs automactically after joining the...
View ArticleHow to setup user level restrictions in AD FS
Hi,We are configuring AD FS (federation Services) to access webapplications on a different Zone, wanted to a few things on a high-level. These Applications are intended for US users, is it possible at...
View ArticleInternet accses for clients when the DC is privately connected only
Hi! :)I have a server which runs a few VMs, one of which is a DC. I have read and agree with the notion that a private DC should not be routable on the Internet; as such it's private only. I also have...
View ArticleEvent ID 4771
Hi AllI have an issue with my HyperV 2012 cluster where I am getting a 4771 audit failure event on the cluster virtual computer name. E.G. The cluster is called hypervcluster and the event is for the...
View ArticleThe renaming of nested group don't replicate display information across the...
Hello,I have the following issue, i don't understand why the display name of the nested group is not refresh:same forest / not parent-child domainDomainA has two DC: DCa1 and DCa2-GC; (DCa1 has all...
View ArticleHelp needed with Kerberos Constrained Delegation
Hi,I have a requirment to configure kerberos constrained delegation to accommodate a 'double hop' from SQL to a cifs/SMB file share.The scenario is:I have a SQL Server instance (2008 R2) running under...
View ArticleHow to find Branch number in Active Directory by C# ?
Hi, Could anyone provide any information about how to find Branch number in Active Directory(AD) account by C#? For example, I have an AD account: abc\xyz. At my computer, when I login it, I can get...
View ArticleQuery for OS (XP, 7, 8) versions (SP1, SP2, SP3), NetBiosName and IP Address
Hi,I want to collect the information from Active Directory of which Operating System Install with which version with netbiosname and ipaddress. i am searching for this query but nothing found useful....
View Article
