Best practices for Microsoft CA root server design and operations
I am looking for the most recent recommendations on protecting root CA. In the past people have used HSM modules for additional protection for accessing the root CA servers but then many organisations...
View ArticleADUC MMC Crash
Have an odd situation. I have a Win10 build 1809 MMC version 3.0 and a Windows Server 2012 R2 build 9600 MMC version 3.0.My issue is that when in ADUC on the Win10 pc and the ADUC mmc open (it opens...
View ArticleNetbios help! Server 2008
Hello All, this is my first post and it's a good one!Netbios over TCP/IP has been disabled in my work environment. We are strictly DNS. I've been troubleshooting a domain trust issue with another...
View ArticleClik here to view.
Active Directory replication error - repadmin
Hi,I am facing AD replication issue on one of the server which is holding the FSMO role.Error 5 Access DCDIAG Error:Anyone know the fix for the same???Thanks
View ArticleHow to Delete Multiple Users from specific OU through CSV from AD
Hi, Greeting of the Day!I need help for below Powershell command, How to Delete Multiple Users from specific OU through CSV from ADImport-Csv C:\users.csv | Foreach-Object {Remove-ADUser -Identity...
View ArticleDNS Replication With Child domain
I have a question on DNS replication after adding a child domain to the forest root domain. Is there any additional DNS configuration I need to do after adding the child domain to get DNS zones to...
View ArticleWho enabled or changed DNS scavenging configuration
Hi,We have DNS scavenging enabled for some time now and has been working fine. Last week, someone changed the scavenging Refresh and Non-refresh interval on a zone to 9 hours each and it ended up...
View ArticleNormal User can create folder in Map Drive but cannot delete it?
In my network, I share MAP Drive and all users can access this. The path of this Drive is a Folder name(Share) in this Drive.In his folder, A normal user can create a folder, file but not Delete it....
View ArticleTrust relationships between domain controller and servers/workstations...
We are down to one DC and it is not running correctly. I basically had to rebuild DNS to get it to work at all. DNS is registering again but now trusts are failing in the domain between servers and the...
View ArticleVirtual or Physical Azure AD connect
Hi,My customer ask me if he should purchase a physical server for Azure AD Connect and how many servers.He want also know if it's recommended to use virtual machine.Thank you in advance for your help.
View ArticleESAE - offline IPSec Certificates
The offline IPSec certificates on our production domain, domain controllers are expiring in the next few weeks. When we deploy the newly generated offline IPSec certificates, do we need to delete the...
View ArticleAdditional Domain Controller is not authenticating when Primary Domain...
Hi,I have a Primary Domain Controller and Secondary Domain controller. The problem is that when Primary Domain Controllers goes down, Secondary Domain Controller does not authenticate the users.I've an...
View ArticleWe have found Event ID Error ( Event ID 5722 Netlogon , Event ID 29 Key...
we have found these event ID in bulk Domain Controller system please help me to closed or remove these event ID.
View ArticleCannot contact Domain Controller
Hello,I'm having issues that I cannot figure out for the life of me. Some background on my environment, I have two hyper-v nodes running in a failover cluster(Server 2016). Each node is connected via 3...
View ArticleTrust between 2 external domains
Hi All,We created a one way external trust with our vendor which means Vendor.com domain now trust our Client.com domain. Therefore we can (Client.com) access resources hosted in vendor.com domain. We...
View ArticleDFS Question
Hi I have a question regarding my DFS. I started DFS replication between 2 servers about a week ago. The sending server has 475GB to send overThe receiving server has a 1TB partition dedicated. I can...
View ArticleCA migration: SHA1 to SHA2 in Windows 2016 OS
Hi,We currently have a single Root CA (AD integrated) in our organization and it uses SHA-1. We have issued some certificates internally by using this CA. So now we need to migrate the certificate...
View ArticleWindows Server Applocker blocks google chrome
Hi. I have created AppLocker rules. the rule constitute 4 rules all allow published apps by adobe, WinRAR, Microsoft and googlechrome. Actually all apps works as expected except google chrome. Although...
View ArticlePowershell Command to Set Logon Hours Status to Denied
Hello Team,I would need help with the powershell command to set a particular user's logon hours status to denied.Thanks in Advance!A.K
View ArticleMinimum required certificate templates Windows Server 2016 Active Directory...
I am in the process of setting up a new certificate environment in parallel on Windows Server 2016. The current CA is on 2008 servers. I followed this guide to set this...
View Article