Fine grain password policy some client PC's not allowing the password change
We have fine grain password policy applied to our staff. 8 chars min, password complexity, remember last 10, min change 30 daysOn some client PC's and for some users we are being told it is not...
View ArticlePassword expiration date info
Using Server 2003 we could easily tell when a staff member last changed their password and when it was set to expire by viewing the Additional Account Info tab. I see this tab no longer exists in 2008...
View ArticleDifficulties adding 2012 DC to existing 2003 Domain.
Been trying to add a 2012 DC to a 2003 Domain and having multiple issues.Background: Lost one of three domain controllers (irrecoverable crash) few months ago. Successfully siezed FSMO roles onto one...
View ArticleSYSVOL and NETLOGON folders not shared in DC's on Server 2012
hey guys, i just created a new DC in a server 2012 environment. i created this DC to replace an older 2012 one. After installing AD and promoting to a DC and i shutdown my old DC i get an error when...
View ArticleServer not accessible, but still running fine
Hi all,We have had this same issue now with two of our Hyper-V host servers. The The symptoms are that when RDPing to the machine it asks for credentials, but then throws the error : Remote Desktop...
View ArticleTools for setting Active Directory Diagnostic Logging?
Are there any tools (besides regedit) for setting Active Directory diagnostic logging? Some GP or other console setting? Some combination of NTDSUTIL commands?I've started seeing the LDAP signing...
View ArticleWhat to do with an empty .LOCAL root domain?
Company needs to stand up a new domain. We currently have an empty root domain with .local suffix. All resources currently reside in a child domain that has to be retired due to rebranding.We need to...
View ArticleAD Schema Extension: add new attribute to an OU instead of users
Hi forumI need to add a new attribute to an OU. Say each OU represents a departement, so I'd like to maintain some value on the OU instead on each user in this OU.I'm already able to add custom...
View ArticleConnecting computers to a domain over a virtual network adapter
We have been using a VPN solution for our mobile units called NeoRouter that has so far been working great for us. But now we would like to connect them to a domain so we can more easily manage things...
View ArticleRid Pool Less than 7% available.
Dear all,I am planing to migrate my Domain controller from 2003 sp2 to server 2012. when i run dcdiag/v i got this warning.Could you please advice me how can i move forward in this time and how to...
View ArticleMS NT Directory DRS Interface is not listening
Trying to troubleshoot AD replication issues in our installation, and working through the steps listed at...
View ArticleUrgent Help Requested: Help decide fate of an empty root domain with a .local...
Have a design meeting tomorrow and looking for some amo for the discussion, hence the urgency.Ours is a mid-size organization with several thousand users. Currently, we have an empty root domain - say...
View ArticleComputer Management WinRM (Connect to another computer), works by default?
I was doing some testing in my Lab that enabled \ configured the winRM listener, starts the service, and sets firewall pokes via a GPO named "Remote Admin". Everything works great, my admin win7 client...
View ArticleAD - LDAP vs LDAPS
Hi Everyone,I've read various KB articles about securing AD by installing the AD certificate services and then encrypting traffic by using LDAPS.To get more of an understanding on this can someone...
View ArticleWhich tool could we use to extend AD schema and create new class ?
We use win2003 ,win2008DC.Which tool could we use to extend AD schema and create custom new class ?
View ArticleDomain got corrupted after one DC removal
Cut long story short: I couldn´t unpromote and remove one of my DCs (DC0), and I did a force remove with GUI. All DCs are Server 2012 based. Other DC, DC6 holds all fsmo roles. After force removal of...
View ArticleNetlogon Log display chinese charectors
Dear all,I was monitoring netlogon.log I found the strange text as shown belowI_NetlogonLdapLookup: unrecognized parameter 湄䡳獯乴浡ѥ䴝剐㘭㠲ㄳhow to rectifyRaSa
View ArticleConfigure ADLDS (Active Directory Lightweight Directory Services) for LDAP...
Hi Expert, i am configured the ADLDS and can replicate from the existing AD domain forest I can check the user object in the ADSI through ADLDS server port 389 but when i using outlook to configure...
View ArticleIs there any good way to check all DCs replications in same domain is OK or...
We use win2003,win2008DC.Is there any good way or procedure to check all DCs replications in one domain is all OK or not ?I think dcdiag or repadmin etc tools are related.Is there any better way or...
View ArticleClik here to view.
AD Locked
Hi i am having an issue if my account is locked none of my colleagues IT technicans can unlock my account what security attribute am i missing"in AD but a normal user i can just unlock,we have to...
View Article
