issue with Domain
Hi,Lately we having an issue with adding a new PC to our domain. We can remove and add an existing machine to the domain but if machine is new one get even 4097 error code 1332 and error code 1003Our...
View ArticleEvent log for first & last name changes in Active Directory
Hi Technet,Is it possible to track who has updated a users first or last name in Active Directory?It looks like event 4738 cover most user properties, but I've trawelled the internet and cannot find...
View ArticleBitlocker recovery password
I am using a cpp program to search an Active Directory using the IDirectory-Search (ref: https://docs.microsoft.com/en-us/windows/win32/adsi/searching-with-idirectorysearch). For computer objects this...
View ArticleActive Directory - Last Logon is not logged when a user logs on using MAC or...
Hello! We noted that the "last log on" of our AD users that uses MAC or mobile browser is not logged. Our Active Directory is on-premise. Please help. Thank you!
View Articledfsrmig /getglobalstatus is "eliminated" and stops sysvol share on RWDC
Hi all.I have two Domain Controlles with 2012 R2 (DC 1 and DC2), both RWDC. I have the necessity to create other server with Win 2019 but for this I have to change de technology replication from FRS to...
View ArticleUpgrading FRS to DFS
I have a domain that has a few server 2003 servers on it. I am wanting to add a new domain controller using server 2019 to it. When I try to promote the second DC I get a prompt about needing to...
View ArticleADCS Installing CA Certificate
Just created a new, off-line root CA, and signed the SubCA request generated. All are on the same WS2016 DatacenterNow I attempt to install this certificate and I receive an error about Invalid Data....
View ArticleBest Practice with regards to removing Obsolete windows 7 machine from AD
Hello Everyone, We had recently migrated from windows 7 to windows 10 and during that process we had manually remove the drives from the actually devices without first removing them from the Domain and...
View Articlequestion admins in builtin administrator group getting kicked out randomly in...
Good morning guys, recently I've been having issues where some of our users who were apart of the member of in the administrators built in group in active directory keep getting randomly kicked out of...
View ArticleClik here to view.
Password setting container
Hello Team,If we create password setting container with password length and added AD group which contains service account , if some service accounts(already exist in the group) which does not meet...
View ArticleDSQUERY.EXE and VPN users.
Hi everyone! We are running W2K8 DCs and the following command... %SystemRoot%\System32\dsquery.exe user "DC=mydomain,DC=local" -inactive 8 -s localhost -limit 1000 ... but it seens DSQUERY.EXE...
View ArticleLaps Active Directory Schema
when trying to update the schema for laps, i am using the following code:Import-ModuleAdmPwd.PSUpdate-AdmPwdADSchemaI am in a server 2019 lab environment, functional levels are both at 2016(there is no...
View ArticleClik here to view.
Role-based delegation vs Object-type delegation
Hi,What is the difference between Role-based delegation vs Object-type delegation? Can somebody give me some examples of both types? How to delegate such thing likeDC cloning? Normally you add a member...
View ArticleDifference: Delegwiz.inf vs Dssec.dat
Hi,Can somebody please explain the real difference between delegwiz.inf anddssec.dat? Both allow kind of expand on Delegation of Contol Wizard. Which one to use, when, which is better?Thanks a...
View ArticleUnexpected switch at this level
Hi,We seeing event 2213 on our server 2012 DC that has the 5 fsmo roles. we have 5 DC's in our doamin, 2 in the same site and the rest in different site.The event viewer says run this command:wmic...
View ArticleHow to configure two factor OTP authentication by active directory (AD DS)
Dear Team,I want to configure Microsoft two factor OTP authentication in Active Director users, advice me and share the documents. suggest the third party (RSA) software, will be support active...
View Articleconnect Windows10 to Active Directory
I have Windows Server 2016 on a cloud server, and want to use as AD DS. After installing AD DS / dns on the server, joined server domain but there is a problem connecting to corporate PC(Windows 10...
View ArticleRead Only Domain Controller resolving to wrong DC
I have a set of read only domain controllers on a segregated network. Sites and Services are set to that subnet. When pinging the domain, the first ping is always to an internal writable DC - which...
View ArticleUnable to Map Network Drive using %username% variable
We are running a windows server 2012 r2 AD environment and would like to dynamically map user specific network drives at time of logon to domain desktop sessions. We created a network share on a 2012...
View ArticleBasic documentation about Active directory management
I need to provide to a team of junior system administrators some pointers to up-to-date documentation about basic Active Directory management procedures on Windows server 2019 or Windows server 2016...
View Article