Repadmin - syncall vs replicate switch?
Hi there,I've been doing some maintenance work on a environment (basically uplifting it to 2008 R2 from 2003) that has involved the removal and addition of some DCs.Post removal I've occaisonally...
View ArticleHow could I grant security right of user to specific user by command ?
I would like to grant sender right (in English? , security tab of user in ADUC by windows2003DC ) of user to specific user by command(Ad command or Powershell )How could I do that ?I expect command...
View ArticleActive Directory: Cannot create new user on operations master, but can on...
We have a domain for the school I work for that has our main operations master (HS-DC2), and 4 global catalog DCs all on the same domain. On our oper master, we cannot create / copy a new user because...
View ArticleActive directory users and computers wont start on a dc, "the server is not...
In our environment, we have 3 dc's two which run server 2008 (they work perfectly)and one never off branch dc that runs server 2008 r2.We have been having some problems where we feel the replication...
View ArticleLogon Caching old password
Hi,I have created a domain user user1 in my domain.I have logged into domain using user1's credential from my Windows 7 and Windows XP systems.Then from windows 7 i changed the user's domain...
View ArticleServer 2003 to Server 2012 migration
I am a student finishing my last semester and we have been contracted out to a local college to look at the possibilities of migrating server 2003 to server 2012.They want to migrate AD (which is very...
View ArticlePassword of AD-user with local admin rights is not pushed to all clients?
Hey guys,I created a GPO that sets a "restricted group" as member of the local administrators on every client.That worked fine so far. Now, in order to raise the security level a little, I changed the...
View ArticleEncryption method use to store password of active directory users in active...
Hi,What is the method use to store password of Active directory and also please help0 me to understand , is there any possiblity to decrypt the password.Thanks & regards,Masud Hussain
View Articlenetdom join fails for Window 8 machines with access denied
Hi,I am getting an "access denied" when joining Windows 8 machines remotely into a AD domain with the following command:netdom join /domain:<fqdn>\<pdc><machine name>...
View ArticleSetting up a limited rights domain admin type account or group for allowing...
I'd like to lock down software installs on workstation in a domain. My plan is to remove users as local admins and give them standard user rights to workstations. Then setup a limited rights admin...
View ArticleRODC with NETLOGON 5723 & 5805 EventIDs | Machines in Domain
About 6 months ago, I travelled to a remote office where we had issues with machines falling out of the domain, more regularly then at our headquarters. I decided to deploy a RODC at this site, hoping...
View ArticleWindows 2008 Domain Controller does not Authenticate
Hello,I have recently added a new Domain Controller to my environment. Having one Windows 2003 Server R2 Domain Controller already in place, I have successfully updated the schema on the W2K3 DC...
View ArticleNTDSUTIL IFM file-can this be taken from a production environment then placed...
NTDSUTIL IFM file-can this be taken from a production environment then placed into a test environment which is another domain??I am trying to take the IFM file created using ntdsutil IFM full (includes...
View ArticleLinux Servers in AD DNS - Linux servers are getting an age in AD DNS
My environment is: 2003 Functional level Domain and ForestDomain controllers are a mix of 2008 R2 and 2003 (Mostly 2008 R2)Client servers are a mix of 2003, 2008 R2, and a mix of Linux flavors.Zone is...
View ArticleForest LDAP Query seeing all sub domains
Hi there, Does anyone know if the following scenario is possible? I have a domain Forest A has two sub domains, say domain x and y (two way trust) and are replicated.root:dc=domain,dc=comchild 1:...
View ArticleActive Directory error 1168 on W2K8R2
Hi all,I have 3 domain controlles in single domain in a single forest: 2xW2K8R2 and 1xW2K3R2. Forest functional level is Windows 2003. All FSMO roles holding one of W2K8R2 domain controllers that...
View ArticleServer not accessible, but still running fine
Hi all,We have had this same issue now with two of our Hyper-V host servers. The The symptoms are that when RDPing to the machine it asks for credentials, but then throws the error : Remote Desktop...
View ArticleTwo Forest 2003. Upgrade DC on one Forest to Server 2012
We have two forests (A,B). Forest trust exists. Forest Level Windows 2003 on both. Forest B is a resource forest.We're going to upgrade Forest A DC Servers to Server 2012 (not domain and forest...
View Articlestrange error from AD when using powershell
hey guys, im trying to add UPN suffixes to AD-Forest, and im using the below command for that.Import-Module activedirectory Set-ADForest -Identity domain.com -UPNSuffixes @{Add="demo23.com"}now the...
View ArticleGlobal Catalog Server
Hello,We run a 2008 R2 Active directory environment with Exchange 2010 Sp1. Every DC is a global catalog server. Currently we have a new ticketing system the queries the global catalog for AD...
View Article