Quantcast
Channel: Directory Services forum
Browsing all 31638 articles
Browse latest View live

The session setup from the computer XXX failed to authenticate.

Last value: The session setup from the computer HKITS5 failed to authenticate. The following error occurred: %%5Trigger: hkdc1 Event System Log Have ErrorTrigger status: PROBLEMTrigger severity:...

View Article



KRB_AP_ERR_MODIFIED 4 Random on Member Server in upgraded Domain 2003 to 2012 R2

Hi all By one ouf oure customer we migrated a 2003 domain to 2012 R2 (3 DCs, 2 AD Sites), now native all 2012 R2 Dc in 2008 AD and Forest Mode. All was ok until a view weeks after depromoting the last...

View Article

Transferring FSMO roles for upcoming DR test

We have a Disaster Recovery test coming up and I wanted to run this scenario past everyone.  Our production AD infrastructure consists of 3 sites.  We'll call them Site A, Site B and Site DR(where our...

View Article

Active Directory Replication Status Tool (ADREPLSTATUS) crash

Hi,My adreptool work perfectly until I need to force a task kill in a middle of running. After that the program crash every time at launch.I tried to reinstall software, repair .NET framework,...

View Article

'Audit Directory Service Changes' in windows 2012 R2

The issue:In Win server 2012 R2, it looks like some security auditing settings doesn't generate the events in the security log.We've enabled the Audit Directory Service Changessubcategory, but do not...

View Article


Adding Windows Server 2012 R2 DC to a Windows 2008 Std (32bit) Domain

I have a Windows Server 2008 (x86) DC and few others Windows Server 2003 (x86) additional DC's with a Windows Server 2003 forest & domain functional level. I got a new server recently and i want to...

View Article

How to search and disable users - Criteria: X days without logon after...

The idea is to schedule  a daily task and make sure that if a user is created and not used, the account must be "terminated"We ´re deploying Oracle IDM and some people asked for a VBS ou PS1 script...

View Article

ADFS Farm on Server 2012 R2

Hey everyone,Quick question on a best practice around setting up an ADFS Farm on Server 2012 R2.  If you have two servers in the farm, are you suppose to use Microsoft Network Load Balancer to...

View Article


ForestDNSZones have old DC entries

I have a single-domain forest running at 2008R2 domain and forest level, with five DC's all of which are 2012R2.I noticed a script failing which depends on a ping to forestdnszones.mydomain.co.uk and I...

View Article


Creating a security group for S/Mime cert auto-enrolment

We currently have auto-enrolment rights for an Exchange User cert granted to Domain Users. In our environment this is generating more than 50,000 failed requests each week by service accounts which...

View Article

PKI -- Required Certificate Fields

  I have been trying to update some expired Certs in our domain serviced by an internal CA. The security team creates them and I get tasked with installing them. On some I get errors because the names...

View Article

Export / Import ADSI objects between Forests?

I need to copy 'CN=System Management' container and some of its sub-objects into a different forest.I was attempting to do it manually by having ADSIEDIT open in both forests and simply copy/pasting...

View Article

DNS on SBS2011

I am having a slow internet in a sbs2011 domain which it has just one Domain controller with DNS and DHCP. Which of below is better to enter in network card IP setting.A) DNS Primary. 127.0.0.1 And...

View Article


Any downside to making Windows 2012 DC, in a Windows 2008 R2 native domain,...

I have recently added a Windows 2012 Server to my older Windows 2008 R2 native Active Directory domain, and made it a domain controller.Is there any disadvantage to giving the new Windows 2012 Server...

View Article

What are the caveats of moving a Windows 2008 R2 domain controller, from one...

We are relocating a large portion of our current infrastructure to a new location, and there will be a new IP subnet in place at the new facility.    Right now we have an IPSec tunnel connecting our...

View Article


"managed by" attribute of computer object

Hi all,I am working on a script to manage the computer's attribute "managed-by" through power shell. I have found the command Set-ADComputer "AAECNBJ003403L" -ManagedBy "dn_path_of_user" which does not...

View Article

Need documentation about AD msRADIUSFramedIPAddress field

I have a support case open with Watchguard regarding the msRADIUSFramedIPAddress AD field.my Problem is that the above mentioned field saves ip address as 4 Byte signed integer. I found info about the...

View Article


Installing additional domain controller on remote site

Hi, we have two locations Mumbai and Banglore and connected both using vpn connectivity. We are able to ping each other networks. We have primary domain controller in mumbai and want to install...

View Article

sysprep generalize but keep a few settings

Was there any way to run sysprep /generalize but just keep a few settings like Language, time zone, organization. Essentialy the entire OOBE setup screen but only have it prompt for a user and...

View Article

Image may be NSFW.
Clik here to view.

Domain Time Sync Issue

Dear All,We are facing an issue in our domain environment that some of the clients are getting wrong time information. Most of the PCs are getting the time updated correctly as it is on the domain...

View Article
Browsing all 31638 articles
Browse latest View live




Latest Images