User Able to Join Computer to Domain and Shouldn't Be Able To!
Hey, I'm having quite the time with this one. I have modified our default domain policy so that only Domain Administrators can join computers to our domain (along with an SMS account). It seems to work...
View ArticleCannot Dcpromo directory service is missing
I am trying to remove a 2008 R2 DC from our domain but receive this error:"Directory Service is missing mandatory configuration information...unable to determine ownership of floating single-master...
View ArticleExtension attribute 10 &11
Hi,Is it possible to set a custom value for extensionattribute10 and 11 at OU level and not on Individual users ?
View ArticleDC Replication error
I have a total of 4 2008 r2 dc's on my network, dc1 and dc3 will not talk to each other but both of them will replicate and talk to both the other servers. any suggestions would be grateful
View ArticleJoin a computer to AD DS with Built-in Domain Guest
Hi,I am using an AD DS server on Windows 2008 r2.It is only a test server so there are no security concerns. Any method will do.So far I managed to get members of Domain Guests to join a computer...
View ArticlePassword History Doesn't Seem to be Purging
We are running 2003 FFL and our default domain policy has the following options set:Number of passwords to remember = 24 Minimum password age = 0 daysOther items not imp...I did a test based on a...
View ArticleProvisioning users to Active Directory
We have a requirement wherein we have a web site which will offer some services to internet users. Te Web Site offers to signup for new users to access those services. I want to know how if we can use...
View ArticleUnattendJoin fails but works afterwards without further configuration
Hello everybody,im suffering from a problem that i could not solve yet.In short, my UnattendJoin with an AutoUnattend.xml in WDS fails due to error 0x54b (1355, NO_SUCH_DOMAIN), but works fine when i...
View ArticleDC DEPROMOTE
Please help.While trying depromote DC on Exchange Server, getting the following errorThe operation failed because: Active Directory Domain Services could not transfer the remaining data in directory...
View ArticleActive Directory, problem removing old server
Hello,I'm having a bit of a problem and I'm I'm hoping for some assistance. I setup a new Windows 2008 R2 server onsite alongside a Windows 2003 R2 SBS server. I added the 2008R2 server to the...
View ArticleSite Link - Is This the Best Configuration? How to handle sites that cannot...
Site A (HQ) can route to Site B,C,D,ESite B can route to site A,C,D,EC,D,E cannot route to each other.The default site-link includes connections between the sites that cannot route to each other. How...
View Articleautomatically delete or move old user accounts
i am looking for a way to delete or move old users account to an ou i have disabled users for years and i want to do this automatically like having a threshold for a disabled user for 3 months for...
View ArticleActive directory group membership not replicated on RODC
Hello,We've a domain with 2 writable DC in head office and one Read-Only DC in branch office. We've some logon batches which mount the "network drives" to domain user profiles. Everything was working...
View ArticleReplication failing between 2 DC 2008 R2
Hello everybody,I need some help to get ride of a critical error on my DCs.I've got two DC (SRV & SRV-AAPLIS) on the same site and one of them (SRV-APPLIS) is handeling RID, CDP and Infrastructure...
View ArticleDNS.exe is utilizing high CPU usage
Hi All,I found in my domain controller DNS.exe is utilizing more CPU resource (UP to 100%) on the server, I hope that DNS.exe service is not releasing the memory and the CPU usage come back to normal...
View ArticleActive Directory Authentication Issue
Hi,My customer has Windows 2008 Active Directory which like to integrate WIFI controller. During integartion, it fail. Based on the log, it seem like simple binding issue. May I know how to check on...
View ArticleDNS zone _msdcs.domainname was not found
I'm installing software in a hosted cloud that needs to see a Global Catalog Server that is not a part of the hosted cloud's Domain. There is a VPN to the partner's network but need to setup a DNS...
View ArticleRestore Sysvol and NETLOGON Folders
Hi , when I upgrade DC 2003 to DC 2008 R2 , Sysvol and Netlogon folders not replace to DC 2008 . How can restore these folders to dc 2008 . dc 2003 still is exist , not delete . can I use registry to...
View ArticleDetermine Domain Accounts that have Connected Accounts
We are looking at using Group Policy to disable users ability to connect their Microsoft account to their domain credentials. Before doing this, we would like to know which users (or at the very least...
View Article2008 R2 DCs doing a ton of traffic over port 445
In our domain, we have 11 domain controllers that authenticate approximately 2300 PCs spread out over 150 different offices on our WAN. At the branch offices that host our domain controllers, we're...
View Article