DsRemoveDsServerW error 0x5(Access is denied.) when removing failed 2003 DC...
Hi,I have a failed 2003 SP2 DC (hardware failure) and I've already seized the FSMO roles onto another DC. Currently, we have two functioning DC's. The ones still functioning are 2003 SP2 and a 2008...
View ArticleAdd RODC W2k12
Hi I have a forest and domain in W2k8R2 native, flew days ago I was extended the schema and prepared the domain to install W2k12 domain controllersThe first dc that I installed was a RODC over 2012,...
View ArticleHosting ADFS and AD LDS on the same servers
We're not looking for these two components to inter-operate with each other or leverage each other as some other threads suggest. We'd simply like to host these components on the same two server NLB...
View ArticleKerberos KCC_ERR_S_PRINCIPAL_UNKNOWN
I have 2 Domain Controllers (DC and ADC) in Windows Server 2003While i have added these SPN in the ADC, Reset the SPN by using setspn command for ADC machine, Checked duplicate entries by using ldap...
View ArticleLSA and GroupPolicy Error-Events on 2012 DC after dcpromo
Hi AllI have started to migrate my domain controllers from 2003-R2 to 2012. My first 2012 DC now has some error's in eventlog. I am unsecure if this is a problem or not. First i got Event-ID 40961 vom...
View ArticleRedesigning my AD - ou structure advice
Hi all,I am in the process of re designing our AD. The original AD person before me used the default containers (computer and users) to store 90% of our objects, which obviously is a nightmare to...
View ArticleUser's failed to login after setting "user must change password at next logon"
Hi: In our Active Directory environment, any new AD user who has "user must change password at next logon" , cannot login to the domain, the strange thing is when the AD user attempted to login ,...
View ArticleEvent iD 1864: repadmin /showrepl is OK but unable to replicate directory...
hi all, I have two Domain Controllers (w2008 core, running W2008 functional level) in a child domain called test.domain.com and the parent domain is domain.com. About 3 weeks ago, I begin receiving...
View Articlecan't open namespace
hiwhen i create new namespace in DFS management and give it special permission like as picture when i open in explorer and pop up for credential i type the special that i create in the above picture...
View ArticleTime Sync -Best Pratice and related questions
Hello All -I want to Enable NTP service on my Domain so as all my VMs,Client Computers, NAS boxes,Storage devices sync with one single source .I have been through articles which describes how to create...
View ArticleRestrict administrative accounts
Hi, I'm looking for a way to restrict certain domain accounts (Domain Admins, Enterprise Admins, etc.) .Is it possible in a Windows Active Directory environment to allow certain AD user account to...
View ArticleDomain members diappear
We have some crazy stuff going on. We can add members to Domain Admins and they stay some time, but after a while they are removed. I can add a group into domain admins and after a while they go away...
View ArticleDNS Appending Space to DC Names
The client I am currently working at has asked me to take a look at one of theirmany Active Directory forests. They are saying their Admins are reporting the fact that they cannot do any amendments to...
View ArticleDSADD, setting securities on pre-staged accounts
I need to pre-stage 100's of computer accounts into a specified OU, which I can do via batch file, lines of which may be;dsadd computer "cn=client01,OU=In Build,OU=IT,dc=mydomain,dc=co,dc=uk"dsadd...
View ArticleDomain Admins have no admin access on XP workstation
Hi all,I am having the strangest problem. I've been slowly rolling out an AD (2008 level) domain over our entire organization. I'm nearing the end, and was adding one of the last computers to the...
View ArticleRODC Servers DNS service stops and DHCP gets unauthorized
I am facing a problem on the RODC servers located on remote locations from the main office which affects both DNS and DHCP. When this services are down the critical business serices goes down including...
View ArticleImporting Bulk Contacts using LDIFDE
Hi,I have 1000 mail enabled contacts to import into Exchange server 2010. I know a single ldifde command we can complete it. I want to know with what kinds of attributes can i prepare in a excel file...
View ArticleAD Server decommissioning
We have a site with some servers and users.I need to decommission the only AD server on this site (others AD servers exist elsewhere along with FSMO roles).Should I stop this server being a global...
View ArticleDNS Zone Transfer Settings -- Keeps reverting back
If I go to my Windows 2008 PDC > Server Manager > Roles > DNS Server > DNS > Servername > Forward lookup zones > domain.com and right click then go to properties and Zone Transfers...
View ArticleWindows 2008 Domain controllers
I have a DC ( windows 2008 R2) IP address 192.168.1.240 The main DNS/DHCP is given from the ISP router ( 192.168.1.1)Now I have a branch office like to have a DC ( 192.168.2.240) They also have a ISP...
View Article