List AD accounts that have not been used for months?
Hello,I use oldcmp.exe to show me what computers have not been used for months and I can disable them, but I wish to do the same for users Active Directory accounts, is this possible?We use AD 2003Thanks
View ArticleSRV records missing under - msdcs zone->dc->tcp. Machines unable to join domain
I recently upgraded my 2003 AD to 2012. Its a s , I can see ingle domain single forest structure with 8 sites and 17 DCs. I demoted all old 2003 DCs from the structure except 1 old 2003 DC. Now n/w...
View ArticleClik here to view.
What is proper path syntax for home folder for users
I'm taking over for someone who has left the organization.They have used two methods for setting up a home folder for each AD user. I think they did this because over time they learned some things and...
View ArticleDFSR fails with partner that no longer exists.
Short version: one of our domain controllers has DFSR Event 5008 errors, regarding a domain controller that has be demoted and removed from our domain. It is the only domain controller, of five, to...
View ArticleDNS Auto Switch
I have a Web Site Server, it has two IP Address (Internal IP and External IP), As usual we request website using Internal IP base on VPN connection. If VPN break down I will change DNS A Host to...
View ArticleJoin MAC OS X on Windows Domain
When I try to put the MAC OS X on windows domain, the following error occurs: 2/28/14 10:41:41 PM mDNSResponder [19] ERROR: tcpCallback - attempt to read message length failed (-1) Can someone help...
View ArticleCheck for manually created connection objects in Active directory
Hi,I Need a SOP which depicts steps by step how to Check for manually created connection objects in Active directory.ThanksMukesh
View ArticleADMGS with AD Administrative Center
Hello.I have installed ADMGS on my win 2003 R2 SP2 server (it is one of my 2 DC, second also win 2003 r2 sp2).In logs i see that AD web services works correct and listen on ports: 3268, 3269. Telnet...
View ArticleLocal ADUC Security mismatch
Hoping someone may have a suggestion to point me at.Our AD is 2008 R2:Scenario: Go to the OU and open up properties on a user account. Select the Security tab - then click Advanced. Select the...
View ArticleWindows 8.1 cannot change password in Windows 2003 domain level domain
On several installations of windows 8.1 enterprise, users cannot change passwords by using <ctrl> + <al> + <del> keys and choosing change password. The error is: "The security...
View ArticleDetails of upgrading 2008 r2 additional domain controller to 2012 r2...
Currently we have a Domain Controller and an Additional Domain Contoller ( both 2008 R2).We would like to migrate our additional domain controller to windows server 2012 R2.Kindly advise of steps and...
View ArticleUser Object -- Object tab
What is 'Modified' in object tab of AD User account I Presumed that it shows the date and time of the recent changes done to that account like password reset, lockout, Unlock, etc But when observed I...
View ArticlePre-Windows 2000 username truncated
I'm having issues between 2 different results /w 2 pre-windows 2000 user accounts, and trusts between 2 different domains.The primary domain is running 2008 R2, and my domain is on 2012 R2. The 2008 R2...
View ArticleConfiguring Active Directory to use External LDAP for Authentication
Hi , I have Windows Client machines authenticating from Windows AD .i have external LDAP Server having users. My prime concern is that i want to login user in Windows Domain, i want the user which...
View ArticleADFS 2.0 Upgrade
Hello there, Our AD is on Win 2003 SP2 and we have a ADFS 2.0 setup on Win 2008 R2. It's just working fine now. We are planning to migrate AD from Win 2003 to Win 2012. In this case does ADFS will...
View ArticleDNS Auditing and DCHP/DNSUpdateProxy
Hi guys, running 6 2008 x64 SP2 DCs with domain/forest level of 2003. Auditing is enabled on the SACL (everyone group all successful/failed writes) of my ForestDNSZones/DomainDNSZones partitions. I...
View ArticleRestrict use of special characters in AD usernames
I am planning to restrict use of any special characters including - "dash" when creating AD users in ADUC console.All are windows server 2008 R2 Domain ControllersAny suggestions.MCSE Certified
View ArticleComputer Rename : Computer account does not update/change, but DNS Name DOES....
Hello everyone,I have an issue here i'm not sure what is causing it. We have a few instances where when we rename a computer, its computer account in ADUC does NOT reflect the change, but when you...
View ArticleDCDIag Assistance
Hi, im getting a lot of best practise analyser errors and warnings etc. I had an old lab DC that I demoted and joined to a new 2012 DC as a secondary DC.I have numerous errors and dns just doesn't...
View ArticleRestrict multiple login on active directory
good dayis there a way to restrict users from login on to two machines at a time. i have been given a tast to restrict users from loging on to more that one machine at any given time. can this be done...
View Article
