Unsigned LDAP
Hi All i would like to ask a question about Unsigned LDAP how one can explain it as simple as possible you know.If you can't explain it simply, you don't understand it well enough. So my assumption was...
View ArticleErrors
Error 1A fatal error occurred while creating a TLS client credential. The internal error state is 10013.Error 2Microsoft Windows Server has detected that NTLM authentication is presently being used...
View ArticleDesktops not communicated with Domain controller more than 60 days
Hi All,Due to this lock down, Our most of desktops not communicate with domain controller and DHCP more than 60 days.Pls confirm this is will make any issue on user and desktop login after the lockdown...
View ArticleDcdiag errors
I created a new forest on a new domian controller and after running dcidag I get the following errors:DFS Replication file system can't register WMI providers.DFS Replication server can't contact...
View ArticleCross Forest - Two Tier PKI
Hello All,I need a clarification in cross forest ADCS-Two tier PKI. Below are the details,Existing environment:Forest\Domain - contoso.comRoot CA and Issuing CA installed and configured with HSMCDP/AIA...
View ArticleDifference: Delegwiz.inf vs Dssec.dat
Hi,Can somebody please explain the real difference between delegwiz.inf anddssec.dat? Both allow kind of expand on Delegation of Contol Wizard. Which one to use, when, which is better?Thanks a...
View ArticleRole-based delegation vs Object-type delegation
Hi,What is the difference between Role-based delegation vs Object-type delegation? Can somebody give me some examples of both types? How to delegate such thing likeDC cloning? Normally you add a member...
View ArticleWin 2008R2 GPO - Not applying to Windows 10 clients
Hi,I have windows 2008 R2 domain controller and applying time and date format policy. Policy applied for Windows 7 clients. but not applied for Windows 10 clients.kindly suggest.Regards, Satya.
View ArticleError again
i get this errorEnable-ProjectServerLicense : The term 'Enable-ProjectServerLicense' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the...
View ArticleSchema Snap-in missing
I am in the process of moving to Windows 2008 in my environment and I was going to start the FSMO transfers to my new 2008 DC's and the "Active Directory Schema" snap-in for the mmc is not showing up...
View ArticleMissing OpenID Connect in ADFS config
I am setting up ADFS with OpenID Connect. But in ADFS config, I do not have Endpoint for OpenID Connect. I have ADFS upgraded from Windows Server 2012 R2 to Windows Server 2016.If I run command: GET...
View Articledcpromo /forceremoval
am looking into using dcpromo /forceremoval on a DC (2008R2) that holds No FSMO roles. There are 2 domain controllers in this domain. Only thing is I read that this has been known to cause a loss...
View Articlequestion admins in builtin administrator group getting kicked out randomly in...
Good morning guys, recently I've been having issues where some of our users who were apart of the member of in the administrators built in group in active directory keep getting randomly kicked out of...
View ArticleAzure MFA with a local on-prem equipment
Hello,We started to use Azure MFA to safe gaurd our 365 accounts. It works great with 365 teams, exchange, sharepoint, etc. However, we are in Hybrid mode and was wondering if there is a way to extend...
View Articleupgrade additional 2008 ad server
Hi In our environment we have 2012 r2 DC Server with all the roles in it We also have 2008 r2 server that function as secondary DC , we would like to upgrade it to Server 2012 R2 Is there any thing I...
View ArticleLaps Active Directory Schema
when trying to update the schema for laps, i am using the following code:Import-ModuleAdmPwd.PSUpdate-AdmPwdADSchemaI am in a server 2019 lab environment, functional levels are both at 2016(there is no...
View ArticleTemp file cab_xxxx
Dear allWe are running Domain controller on Server 2008 R2 and I am running out space on c: drive. Does anyone know what program can create files in the Windows\Temp folder that begin with cab_xxxx...
View ArticlePreventing multiple logins using the same credentials at the same time
Hi Everyone,I have been tasked with trying to implement a GPO (if it exists), to prevent a user from logging in to multiple PC's at the same time using the same credentials. From my research, thus far,...
View ArticleBitlocker recovery password
I am using a cpp program to search an Active Directory using the IDirectory-Search (ref: https://docs.microsoft.com/en-us/windows/win32/adsi/searching-with-idirectorysearch). For computer objects this...
View ArticleFix We can’t sign you with this credential because your domain isn’t available
Good morning and afternoon, Here at my worksite, we are having trouble with Administrators being able to log into user workstations for the sake of making changes to the operating system, installing...
View Article