question admins in builtin administrator group getting kicked out randomly in...
Good morning guys, recently I've been having issues where some of our users who were apart of the member of in the administrators built in group in active directory keep getting randomly kicked out of...
View Articleupgrade additional 2008 ad server
Hi In our environment we have 2012 r2 DC Server with all the roles in it We also have 2008 r2 server that function as secondary DC , we would like to upgrade it to Server 2012 R2 Is there any thing I...
View ArticleLaps Active Directory Schema
when trying to update the schema for laps, i am using the following code:Import-ModuleAdmPwd.PSUpdate-AdmPwdADSchemaI am in a server 2019 lab environment, functional levels are both at 2016(there is no...
View ArticleTemp file cab_xxxx
Dear allWe are running Domain controller on Server 2008 R2 and I am running out space on c: drive. Does anyone know what program can create files in the Windows\Temp folder that begin with cab_xxxx...
View ArticleDifference: Delegwiz.inf vs Dssec.dat
Hi,Can somebody please explain the real difference between delegwiz.inf anddssec.dat? Both allow kind of expand on Delegation of Contol Wizard. Which one to use, when, which is better?Thanks a...
View ArticleClik here to view.
Role-based delegation vs Object-type delegation
Hi,What is the difference between Role-based delegation vs Object-type delegation? Can somebody give me some examples of both types? How to delegate such thing likeDC cloning? Normally you add a member...
View Articleconnect Windows10 to Active Directory
I have Windows Server 2016 on a cloud server, and want to use as AD DS. After installing AD DS / dns on the server, joined server domain but there is a problem connecting to corporate PC(Windows 10...
View ArticleBitlocker recovery password
I am using a cpp program to search an Active Directory using the IDirectory-Search (ref: https://docs.microsoft.com/en-us/windows/win32/adsi/searching-with-idirectorysearch). For computer objects this...
View ArticleAD Users and Computers Hang
Hello,when i tried to unlock user account or reset password , it takes the user propertied window hang and take about 3 minutes to apply the change.this is Child domain , contains 3 sitesevery site...
View ArticleKRBTGT password reset
Hi, I have read few articles in Active directory forum regarding KRBTGT account password reset. Microsoft says when recovering the domain from the disaster recovery or compromised situation during that...
View ArticleUnable to find cause of account lockouts
We are having accounts get locked out, from the logs on the DC in the security log we see event ID 4776 for these users but the source workstation is blank. on the DC we have the netlogon log and I can...
View ArticleBest Practice with regards to removing Obsolete windows 7 machine from AD
Hello Everyone, We had recently migrated from windows 7 to windows 10 and during that process we had manually remove the drives from the actually devices without first removing them from the Domain and...
View ArticleDomain Password History
Hi Admins, this might be a simple question but I cannot find the answer when searching. I am working with PCIDSS Certification and one item asks for users to be forced in changing the password every 90...
View ArticleUnable to Map Network Drive using %username% variable
We are running a windows server 2012 r2 AD environment and would like to dynamically map user specific network drives at time of logon to domain desktop sessions. We created a network share on a 2012...
View Articlelingering objects issue in AD
Hi Team,I am facing lingering objects issue but I am unable to delete the lingering objects in the below patch .please help.Path:CN=Deleted Objects,CN=Configuration,DC=test,DC=local Source domain...
View ArticleSAM denied remote call on a 2019 DC
After promoting to 2019 DC i see Warnings with eventid 16969:6 remote calls to the SAM database have been denied in the past 900 seconds throttling window.Is this something i should be worry about?...
View ArticleErrors
Error 1A fatal error occurred while creating a TLS client credential. The internal error state is 10013.Error 2Microsoft Windows Server has detected that NTLM authentication is presently being used...
View ArticleMy user account is locked out automatically in a couple of minutes again and...
Account locked out automatically. After I unlock it, The account will get locked again in a couple of minutes. I checked the logs in the Windows Event Viewer. It shows many logs like the following. It...
View ArticleAD Claims - Use transformation rules within domain
I'm having a hard time finding documentation for AD DS (not AD FS!) claims and how to use them for different scenarios. I can create a claim based on an attribute, that's not a problem. It also looks...
View ArticleUnsigned LDAP
Hi All i would like to ask a question about Unsigned LDAP how one can explain it as simple as possible you know.If you can't explain it simply, you don't understand it well enough. So my assumption was...
View Article