Windows Active Directory -> Nat on DNS service only
Hello everybody,we are making some test on AD deployed on Win2016 Servers, and we would like to use the max capacity of DNS Server (include Scope and Policies).For that porpouse, we are planning to...
View ArticleCertificate enrollment failed - 0x8007054b
Hi,we have some PCs cannot enroll certificates, the error is:The specified domain either does not exist or could not be contacted.these PCs are in the restricted network location, we have open below...
View Articleremote computers authenticating to DCs
Our remote engineers have VM's on their laptops that they use to connect to our customer systems for support. They are part of our domain but very rarely connect to our VPN to authenticate. I ran a...
View ArticleHow to find out unused security groups
HiWe are looking for a way to get a list of unused security groups including the empty ones. Thanks in advanceLMS
View ArticleCan I be member of thousands of AD distribution groups?
Hi,I know the Windows limits ("Active Directory Maximum Limits" https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc756101(v=ws.10) ) regarding security groups. But...
View ArticleFSP objects from Internal Domain
Hello, In my AD environment, there are lot of FSP objects from my Internal domain showing under Foreign Security Principals container. I mean SID value of FSP objects (showing under Name column in FSP...
View ArticleClik here to view.
Naming information cannot be located
Hi TEam,Im getting atatched error "naming information cannot be located......." in my Additional Domain controller while accessing"Active Directory users and computers".
View Articleattribute editor for computer object
2012 R2 domain. i'm a domain admin, i've enabled advanced features in ADUC. i can see the "attribute editor" tab when i open a user's properties, but i do not see an "attribute editor" tab when i open...
View Articlewindows server 2003 Primary DC recover +exchange server 2003
Hi,in my scenario,i have 1 DC + dns (windows server 2003 r2 enterprise with all fsmo roles + exchange server 2003 , 1 ADC server + dhcp +dnsbut suddenly my dc serevr stopped to boot server is not...
View Articlehow to denest nested AD group. (AD group embedded as member in another group)...
how to denest Nested AD group. Here AD group is embedded in another AD group. Nesting is done in multiple levels. here is need to denest AD groups and make every AD group independent.Apart from...
View ArticleAD DS unable to establish connection with a Domain Controller
Hello all!We are having trouble bringing up a second domain contoller in an AWS VPC. The First DC went up fine. It promoted, installed DNS etc. We were able to join three servers to the Domain it...
View ArticleForeign Security Principals showing under Domain Local Groups of Target domain
Hello,I need more clarity and information on FSP showing in Domain Local groups of Target Domain:1. What are those objects in Source Domain showing FSP objects as members in Domain Local groups of...
View ArticleMicrosoft's Secure LDAP Requirements
Can someone please clarify whether Microsoft is going to require Active Directory installations to use LDAPS? The recent guidance that Microsoft has issued regarding securing AD has led some IT...
View ArticleNew DC on SITE B LDAP Problems
Hi everyone, recently we install a new DC in my company. We assign new sub net in sites and services for the new site and the new DC is in this sub net. Also, we apply a GPO to enable clients to...
View ArticleDCDIAG issue: Guid DNS name resolved to the wrong IP address
Hi there,strange issue since a few days. Result of 'dcdiag /e /q'Although the Guid DNS name (10f02f39-2583-8919-da86-2a28687f088a._msdcs.lab.de) resolved to the IP address (10.10.1.8), which could not...
View ArticleDisplaying the Location and Division in the ADUC Console
Hi Everyone, Would anyone know how I can display the location and division attributes (which are hidden by default) in the ADUC? This is a bit urgent as there has been an update in Office...
View Articlehow to find the domain controller who handle authentication for users int the...
Hi all,I work in an environment where there are a lot of sites and domains and forests.there are two domains domain A and domain B where domain A belongs to forest A and domain B belongs to to forest...
View ArticleDFS Replication Failing for Domain System Volume
Hi, I am setting up a 2 node Domain controller (windows sever 2019 [1809]) DC01 and DC02. So that the SYSVOL is sync'd between the two I have installed DFS NameSpaces and Repiication on both servers,...
View ArticleProblem of Replication and membership in groups between 2 domains of controller
Problem: When users with active Directory Directory and using VPN FortiClient plan to connect to the internal network, they get the correct password error (expire password) because after their Login...
View Article