logon failure: the target account name is incorrect
HiI am getting “logon failure: the target account name is incorrect” error when trying to add a computer to the domainOffice network runs on windows 2003 server and we have to DC both 2003. Client...
View ArticleUnable to delete disabled AD account with CN=ExchangeActiveSyncDevice even...
Hi Experts, one of our clients uses MIIS to manage some of the AD users, The issue here we are facing is we are unable to delete disabled accounts which were enabled for ActiveSync and have a child...
View ArticleReseting the badPwdCount attribute in ldap
Hi,I am trying to reset the active directory badPwdCount field but keep getting a "Server is unwilling to perform". To me it seems that this particular field is not editable. I know my PHP code works...
View ArticleDamaged AD
I don't know where to start to get my problem fixed. It all began yesterday when suddenly my secondary DC had login problem and the message was telling me to start DC in AD Restore Mode. I think...
View ArticleDistinguish between Property Set and Attribute
Suppose that I have an ACE that gives ADS_RIGHT_DS_ WRITE_PROP permission to some ObjectType. The GUID in the ObjectType field could be of an Attribute or Property set. How could I distinguish between...
View ArticleHow to create and add a new user to existing group in Active Directory via...
I am a beginner and I try to implement client in Java for Active Directory. I would like to create and add a new user to AD. So far, I have written the following code:import java.util.Hashtable; import...
View Articledcpromo remove dc failed
I'm banging my head here with this one. I'm attempting to demote a dc. It does not hold any fsmo roles. During the demotion I get the following errorLog Name: Directory Service Source:...
View ArticleHow to recover an AD without having any backup - and the only DC is gone
Hi everybody. So this is the scenario. The only DC (windows 2008) is gone. definitely, raid5 array with two broken disks - at the same time.Backup of all important data --- but not any single backup of...
View ArticleEvent ID 10154
I receive the event ID 10154 the WinRM service failed to create the following SPNs: wsman, on several servers in my domain. the event shows up on domain controllers, and member servers. I have seen...
View ArticleAD FS Server Placement
HelloCan anyone tell me if AD FS server and AD FS Proxy server 2.0 can be co-located on another server or must it be installed on its own sever?Is there an official MS link to the answer as I cannot...
View ArticleDFSRDIAG - Problem running command
Hi!When I run dfsrdiag on my Windows 2008 R2 SP1, I get the following:DFSRDIAG - <Missing String> SyncNow - <Missing String> StopNow - <Missing String> PollAD...
View Articleldp - bind with credentials fails on instance of AD LDS
I have a stand alone instance of LDS running on a machine that is not part of a domain. I am running ldp.exe on the same machine. When I use ldp.exe to do a simple bind with credentials (using my...
View Articleclarification of how to configure a firewall for an external trust relationship
See last paragraph for main question... This article http://support.microsoft.com/kb/179442#method2 lists the ports that need to be open "for domains and trusts", but it's not clear to me which...
View ArticleWindows server 2012 active directory replication
Hello,I have 2 windows 2012 server with active directory replicationserver A is parent serverserver B is secondary server (gets update from server A)So my question is if server A dies due to hardware...
View ArticleRename Rootless Forest?
I am looking for information on renaming (or migrating) from a rootless forest. I have a client with a root forest simply called "domain" instead of "domain.local" All FQDNs are then formed:...
View ArticleCannot determine cause of Event ID 7062
I've been having a problem for quite some time with multiple Event 7062 errors and cannot determine what I've done to cause the problem. I've searched through the forums but I'm obviously missing...
View ArticleAfter diabling disabling LM and NTLM via GPO had mass account lockouts,...
Hi AllWe have a Windows 2008R2 domain, We configured a GPO to apply to all PC's / Servers and DC's to configure the below as we had a penertration test done and this was advisedNetwork security: LAN...
View ArticleAmending existing User Account Attributes...
Hi,I have been asked to create an automated process to update Active Directory user attributes with data from the Oracle HR database.I've successfully dumped out the Oracle information to CSV format...
View ArticleConfiguring MEMBER SERVER
This is ABDUL MATEEN,am using VMware-workstation-6.0.4-93057. in that I installed two Virtual Machines, I can communication two machines with the command PING. when am going to configuring MEMBER...
View ArticleGroup membership and memberof information
Hey Folks,I know how to get the membership information of security group from active directory.what I am looking is a script that will query a particular OU get all the security groups in Active...
View Article