Using DSACLS and how to use objects and properties
Hello,I hope that someone can help me with this question.We are trying to set permissions on user objects in OU's and using for that the DSACLS powershell command.We want to set some specific...
View ArticleTwo-way forest trust between two (single domain) forests with multiple...
Domain and forest levels - Windows 2003 (they both have one 2008 R2 DC)We need to create a two-way forest trust between two separate single-domain forests. The problem is that these two forests already...
View ArticleSysvol Replication
HiI have a couple of Windows 2012 domain controllers that have stopped replicating their Sysvol folders.I believe that the issue is with DC2 as it is missing some of the newer policies, despite having...
View ArticleWindows AD Security Logs
Dear All,We set our security log size to 190 MB but due to large number of events. Log can only cover 1 day events.Is there a recommended size not compromising performance and can capture let say >...
View Articleadd mailenabled group in AD LDS
Good day experts, I've created a single ad lds instance which is made available to a 3rd party. They fill this instance with members and groups. When I go to my outlook ldap addressbook I can see the...
View ArticleClik here to view.
Infrastructure master role in server 2003 / 2008
Going through cleaning up AD replication errors based on error/alerts from Operations Manager 2012. I Ran across this issue with the Infrastructure master role on the one of the domains I manage....
View ArticleClik here to view.
Active Directory RDP Logon Issue
I have a problem logging on to my test domain, here are the setup and symptomsDomain Prod: ua.here.someplace.com Domain Test: ua.test-here.someplace.comDomains totally separate DNS and WINS,...
View ArticleDFS Folder Target Site Associations Incorrect With Server 2012
I've just brought up a new 2012R2 file server to add to our existing DFS infrastructure. All other DFS servers are 2008R2 and are working as expected.The new 2012R2 server is getting the wrong AD site...
View ArticleWhat is the proper way to demote a Win 2003 Domain Controller running SQL...
Hi, What is the proper way to demote a Windows 2003 Domain Controller running SQL Server 2008 WorkGroup Edition? I will be migrating AD from Win 2003 to 2012....Thanks in advanced.
View ArticleAD FS Windows 2012 R2: adfssrv hangs in starting mode
Does anyone has the same issue. Installed and configured ADFS with service account. After a server reboot service cannot start anymore and it always stay in "starting" state.Unfortunately nothing in a...
View ArticleAutomatic URL redirection using ADFS 2.0 proxy loginToRP
I have an issue where i am able to utilize Kerberos (WIA) internally with the loginToRP in the URL for automatic redirection to the SP. However, when I try to use automatic redirection externally,...
View ArticleError during DC Promo
Hi,I am receiving an error when trying to promote a Windows 2008 R2 or a Windows 2012 R2 server to be a Domain Controller in an existing Windows 2003 (SP2) domain. I have tried both 2008 R2 and 2012 R2...
View ArticleAccidentally deleted servers group in adsiedit for exchange 2003 mail store....
Accidentally deleted servers group in adsiedit for exchange 2003 mail store. can i recover from backup?
View ArticleClik here to view.
Active Directory Logon / Site Link Bridge Issue
Dear NC, i have an issue with users in different Locations, to explain easyest here is a little network diagram:So, as one can see, i have 4 Locations, one is the Headquarter. The Target Goal is: Users...
View ArticleThe trust relationship between this workstation and the primary domain failed.
HI All, We configured ASP.net application in IIS 7.5 in windows authentication mode. Some interval of time desktop user get windows authentication prompt asking frequently. At the time below error as...
View ArticleNames in Members field under the UNIX Attributes Tab have changed from...
Hello, Names in Members field under the UNIX Attributes Tab have changed from standard format (i.e. John Doe) to the actual account name (jdoe). The only time this happens is if a domain account is...
View ArticleWay to check if a cross forest user password policy has been disabled
We have cross forest processing going on due to a stricter password policy from forestA to forestB users. ForestB\User must continually receive the default password policy from ForestA.Our concern is...
View ArticleList AD accounts that have not been used for months?
Hello,I use oldcmp.exe to show me what computers have not been used for months and I can disable them, but I wish to do the same for users Active Directory accounts, is this possible?We use AD 2003Thanks
View ArticleHow to search and disable users - Criteria: X days without logon after...
The idea is to schedule a daily task and make sure that if a user is created and not used, the account must be "terminated"We ´re deploying Oracle IDM and some people asked for a VBS ou PS1 script...
View ArticleBulk import of sample data from .CSV
Hi everyone,I'm working towards my MCSA and am building out a test AD environment. My question is not about how to import bulk users from .CSV, but is more a question of where I can obtain a large...
View Article
