Computer Accounts losing trust relationship -DNS scavenge related?
I have random Windows 7 Pcs losing thier trust relationship with the Domain. I have 1500-2000 PCs and 2 2012 DCs. The DHCP svr is also on 1 of the DCs and is set to update DNS when lease changes. These...
View ArticleDCDIAG - AD Information for two domains in one forest not replicating correctly?
I'll try to keep this simple, as I have finally hit the proverbial brick wall...I have two domains. X.corp and Y.corpServer 01 and 02 are the DCs for the X.corp domain. (Server 01 is also the forest...
View ArticleBurflags is not available in registry...
Hi I have one root AD which as 4 sub domain controllers, I am facing lot of replication issue. So that i am trying to rebuild the sysvol tree and its content using the below technet...
View ArticleADFS 3 missing SPN - but which one?
Hi All,getting these errors (below) in the ADFS event log, but can't figure out which spn is missing. As far as I can tell (and according to documentation) all are there.Thx in advance for help and/or...
View ArticleWindows 8.1 cannot change password in Windows 2003 domain level domain
On several installations of windows 8.1 enterprise, users cannot change passwords by using <ctrl> + <al> + <del> keys and choosing change password. The error is: "The security...
View ArticleADMGS with AD Administrative Center
Hello.I have installed ADMGS on my win 2003 R2 SP2 server (it is one of my 2 DC, second also win 2003 r2 sp2).In logs i see that AD web services works correct and listen on ports: 3268, 3269. Telnet...
View ArticleActive Directory and group policy Books
Hi all,I am looking for the book regarding the Group policy and active directory 2008 R2 and 2012 troubleshooting. could you please advice me which books are good for understanding and troubleshooting...
View ArticleDomain controller reboots
Hi,The environment i am working on is quite straight forward. A single forest single domain running 2 Server 2012 R2 domain controllers. both DFL and FFL are 2012 R2 aswell.My issue is when I try to...
View Articleuser's account intermittantly fails to authenticate to AD, is immediately...
I have a user whose when trying to log into the VPN (via a network Access service/RADIUS) or Outlook anywhere will sometimes be able to login, and I can see Audit Success events on the DCs, but other...
View ArticleSingle LDAP query across forests
HelloWe have two forests (trusted) with single domains.From a third-party tool we need to query users in both domains/forests.Using chase referrals and vbs (found in the forum) I can create a script to...
View ArticleAD CS - Length of the field exceeds maximum length
Hello,I have an issue when generating a Certificate in my local AD CS because I have too many SAN. This is mainly for testing purpose but it seems that when my SAN-field exceeds 8192(guesstimate, its...
View ArticleAccount Operators Group
I have a couple of questions. We are running Windows 2008 and 2012 Domain Controllers.1. How do you assign a Local Service Account a Reset Password permission?2 Is there an Account Operators group in...
View ArticleActive Directory: 2003 to 2012 R2 Upgrade across single forest with child...
I just have a quick questions about something that should be simple. We will be upgrading our current domain from Windows 2003 functionality to Windows 2012 R2. This forest has domain and two child...
View ArticleUniversal groups vs global groups. With Universal groups you can users from...
Hello,If I setup a forrest with a domain A and I have two way trust setup with domain B. Then I should be able to create universal groups in each domain and add users from both domains correct? When I...
View ArticleDNS Forwarder data replication - promotion of 2012r2 domain controller
I have a 2008r2 Domain where i have introduced 2012 and 2012r2 domain controllers. After promoting the 2012r2 domain controller we began encountering DNS Forwarder related issues. I then discovered...
View ArticleNTP DDoS Vulnerability Active Directory
Hello,Our ISP has provided warnings about NTP DDoS attacks against our network. We have Active Directory at Server2008 R2 schema version, but a number of our DC's are at Server 2003 SP2. I have read...
View ArticleWINDOWS 2012R2 Licensing - ROK
Hi,I need to install a new server very urgentlyi already have all the hardware in place but the HP ROK 2012R2 standard is only coming in next week..can i use the windows 2012R trial to install and...
View ArticleAccess Sysvol policy folder ACL given to computer
When I checked the folder permission for folder {31B..} under \\DC\SYSVOL\child.domain.com\policies\{31b..} was: Computer1 - Read Computer2 - Read If i'm trying acess this folder from linux machine...
View ArticleClik here to view.
Network Connection Properties Access Standard Users
Hi All,I know this is an old issue but i just cannot get it going i've read a couple of forum posts but i don't know whether i am still doing it correctly.I am trying to allow domain users to change...
View ArticleDiscover image to work on network with other dhcp server
Hi,We are a small department within an organistation. The main IT department runs the DHCP and DNS servers. We use our own Server 2012 with DNS for AD. The DNS is just a forwarder to the main DNS...
View Article
