FSMO roles and DC decommissioning
We are having WS2008R2/2012R2 DCs, and have upgraded to WS2016 DCs. Now we are planning to move the FSMO roles to new DCs in our root and child domain. Root forest is empty, and child domain has all...
View ArticleInternet restriction on DC
I want to restrict internet browsing on domain controller. Already I'm following the Microsoft...
View ArticleBackup AD and what have you done
We have multiple domain controllers. I wanted to ask how have you guys prepared for these.DR: I guess you can have Multiple domain controllers spread across geo-locations in Azure or other...
View ArticleActive Director Group Member Created by User
How can I determine who has created a member in a AD group?
View ArticleAD LDS - Create new application partition
Hello!I have two 2 AD LDS instances in one configuration set and I am trying to create a new application partition. I am following an MSDN article (unfortunately I can not provide the link here, I do...
View ArticleService account permission
Hi guys,Scenario: I have a service account that is granted permission to run a script on a server. I've noticed that when other users who are non-domain admin sometimes use the credentials for the...
View ArticleNitpicking 101: AD snapshot- correct way..
Hey,In order to "snapshot" AD I go to cmd and use ntdsutil. When I read how to do it I see "2 schools" .ntdsutilactivate instance ntdssnapshot...
View ArticleAccount policy settings not being enforced
Hello, we have a Password policy defined in the Default Domain Policy enforced in AD which is working on all our Windows 2008+ machines except recently deployed Windows 2016 machines.On those machines...
View ArticleDynamic security group
I need to create a security group that contains all the enabled users in AD.This group needs to be dynamic so that when a user is disabled it is automatically removed from itThanks
View ArticleHow to disable/Uninstall built in windows 10 app " Microsoft Edge" via gPO or...
Hi Team, I want to disable Microsoft Edge and want to use default browser IE . i tried some few links for removal but not working For removal ,getting error: PS C:\Windows\system32> get-appxpackage...
View ArticleRansomware encrypted GPT.ini
In a Server 2003 setting, the gpt.ini file in our SYSVOL folder has been encrypted across all our DCs. I have a backup of the "system state" on the DCs made using NTBackup and was going to just...
View Articlecouple more Qs before upgrading the Domain and Forest function level
hi everyone,I am about to raise the domain and forest function level to 2008r2. Currently we are running 6x 2012 and 2x 2008r2 domain controllers while its domain and forest level is still in 2003....
View ArticleGet list of deleted AD users
Hi there.There are people setting up a 3rd party system that retrieves information from our AD.During testing, they found that they could capture the creation of new users and modifications of users...
View ArticleSchema Master role owner is down need to recover
I came to know that schema master role holder is down however, PDC and other FSMO role holders are up and running. What will be the best course of action?Schema Master role owner is a VM, can I restore...
View ArticleClik here to view.
FSMOcheckFail
Hello Everyone, We are running one script for our Active directory health Check and in that health check we are getting most of the things fine but only one thing is showing fail as below.Can anyone...
View ArticleUnexpected issue with GPO
Hi,I have created one GPO with some security settings suggested by our security team. The GPO contains only Computer Settings. I had to apply it to the OU with 80 computer accounts (Hyper-V servers). I...
View ArticleDNS - Server addressess
Hi All,I am having some difficulty with client machines not logging into the nearest Domain Controller at their local site. For example some of our client machines in HQ connect to a satellite site...
View ArticleUser Permission
Hi everybody, I would like to created a kind of restricted policy that make the user power :- Joining computers to domain in network - adding/removing users to/from a groups - access to all shared...
View ArticleClik here to view.
Replication access denied
Hi Support, We have two Windows 2012 Standard DCs.We did not make any recent changes.When checked replication today we have seen the below errorRepadmin: running command /showrepl against full DC...
View ArticleHow to make LDAP SSL call using DsBrowseForContainerW API
Hi, I am using DsBrowseForContainerW( ) to load all container (OUs ) from given domain. Internally Its using LDAP Non SSL call to read data from domain controller. But I want to use LDAP SSL...
View Article