Account Disabled attribute
Hi Allone of my users active directory account is disabled. From the Attribute editor for that user, is there any attribute which tells me that this account is disabled.
View ArticleChange a domain user password only works with FULL CONTROL.
Hi everyone! Devs are working on an interface to change users passwords on domain. Perhaps, it (the application) only works when I give full control on the object. In this case, a lab user test:Doria
View Article8344 Connected data source error: Insufficient access rights to perform this...
We have been syncing our main domain to Azure through the Azure AD Connect for a couple of years. I recently added a child domain. I honestly could not find a great article on everything I needed to...
View ArticleRegarding Enable netlogon debugging logs
Team, Is it possible to view / enable the logs shown in "Enable netlogon debugging" in domain controller event viewer ? For troubleshooting purpose we enabled netlogon debugging in our domain...
View ArticleRaising domain functional level.
Hello team! What changes when I raise domain function level? In others words, is there any kind of risk for some network protocol like SMB version 1.0 stop working or something else? We run some old...
View ArticleGroups Missing from DC Local Administrators Group
After rebooting for this month's security updates, we're unable to logon to our DCs with our Domain Admin accounts, via RDP nor locally. We get a message that says "the user has not been granted the...
View ArticleDCDiag Errors
Hello, Keep getting the same error on all DCs. They are all replicating with 0 errors. only when i run DCDiag i get the same error. When i run GPUPDATE on the servers I can successfully run. I have...
View ArticleCorrupt Built in administrator account on Domain Controller
Hello guys recently we have had issues where our administrators in the built in administrator group inside of active directory have been getting kicked out randomly. At this point I believe it to be...
View ArticleComputer object and removing computer from domain
Hello fellow techs, hope i am in the correct forum. if not, i apologize!in the past, when i removed computers from AD domain, after restarting the computer and some time after, the computer...
View ArticleAccidently installed a second enterprise CA
Hello everybody,We have made a mistake: In a customer's small domain, we were not aware that there was an enterprise CA running on a server 2008 R2 which shall be decommissioned, and installed a new...
View ArticleUnsigned LDAP
Hi All i would like to ask a question about Unsigned LDAP how one can explain it as simple as possible you know.If you can't explain it simply, you don't understand it well enough. So my assumption was...
View ArticleFix We can’t sign you with this credential because your domain isn’t available
Good morning and afternoon, Here at my worksite, we are having trouble with Administrators being able to log into user workstations for the sake of making changes to the operating system, installing...
View Article2020 LDAP channel binding and LDAP signing configuration changes
Hello, any updates on when are LDAP channel binding and LDAP signing configuration changes are taking place. I know it was push from March 2020 to Mid 2020. but that news was back in February. anyone...
View ArticleEvent ID: 2091 FSMO
This issue came up during a dcpromo failure on a windows 2008r2 server. I know I can forcibly remove but I am trying to get to the root cause. I noticed the below event in directory services log....
View ArticleActive Directory ADSync error with non-existent account
Hi! This question is originally posted by me on serverfault but it seems I shouldn't wait for the response there :( I have a weird ADSync error stating that my local active directory contains two...
View ArticleSome failures in DCdiag.exe
So, I'm apparently a domain administrator now, and I have a lot to learn apparently. The following is a dcdiag.exe results that have been sanitized and someone explain to me what I'm seeing and what...
View ArticleEvent ID 4012 - The DFS Replication service stopped replication
I have a network with 3 domain controllers. On the DC with all the FSMO roles I am getting this error:Log Name: DFS Replication Source: DFSR Date: 2/25/2016 3:14:40 PM Event ID:...
View ArticleDHCP Services Not Issues Ip Addresses
Hello,This is to request some guidance.I do have a Default scope on my DC Server and it leasing ip address already.I have created a new Subnet in my Network for users. Which i have created aScope on...
View ArticleDomain trust and user credentials
Hi everyone,I am looking for an theoretic answer on the next question: Imagine we have two independent domains A and B.A trusts B, there is one-way trust where A is a resource trusting domain, B is an...
View ArticleDFS Domain Migration
Forgive me if I put this question in the wrong forum.We are currently in the middle of a domain migration. We are migrating all of servers and system from one domain to another. It is time to migrate...
View Article