Non-functioning domain controller following ip address change
Hi,Our Environment is as follows:4 x Windows Server 2008 DCs. 2 are located in the HQ and 1 each in remote sites.I recently introduced a new DC in our HQ - Server 2012 DC - this DC is a Hyper-V VM....
View ArticleSelect Between Windows Integrated and Forms Based Authentication Per Relying...
I have ADFS 2.0 (RU3) deployed in my environment. My business unit has a requirement that a user gets prompted with a username/password prompt before accessing any hosted applications but for our...
View ArticleMoving Active Directory 2003 to 2012
Please advise how to move Active Directory from Windows Server 2003 Standard to server 2012 R2 Datacenter. Are there videos or articles? Any advice or best practices are greatly appreciated. Thanks in...
View ArticleADFS and ADFS proxy on 2012 and secondary on 2008 R2 is that ok
I want to build my ADFS, ADFS Proxy for hybrid setup with exchange 2010 SP3I will have primary ADFS and ADFS proxy on 2012 servers and the secondary will be on 2008 R2as per my knowledge this should...
View ArticleAD FS Windows 2012 R2 exception occurred in service
I'm installing the first ADFS server in a new W2012 R2 farmThe post-deployment configuration failed, during the installation the service doesn't start with the following event ID 7023:The Active...
View ArticleChanging default limit to number of workstations a user can join to the domain
We have an Active Directory domain and forest functional level of 2012 and would like to modify the default limit to the number of workstations a users can join to the domain. This article explains how...
View ArticleSync internal AD users account with an external AD domain
Hello,I am looking at deploying a pair of websites that will be Internet facing and need a means of authentication. I am looking at deploying some sort of directory service to manage the user accounts...
View ArticleEvent Viewer
When I attempt to execute eventvwr.msc in Windows 7 I get the message "MMC cannot open the file ...\windows\system32\eventvwr.msc.This may be because the file does not exist, is not an MMC console...
View ArticleAD LDS passthrough auth to internal AD DS
I am looking to put a AD LDS in a DMZ (Screened Subnet) which will allow LDAPS connections from specific external IPs. These IPs I set in my Fortigate firewall. What I would like is for is to have...
View ArticleGPO IE cannot remove automatically detect settings
I've created local group policy's and also top level grou policys for two servers in a Terminal server farm - Inheritance blocked so that only this GPO would apply.Still not matter what I do -including...
View ArticleStep by step Active Directory Services
HiIn search a guide step-by-step to configure ADFS (with certificate) between two forests?I need to install on Windows 2008 R2.Thanks
View ArticleCredential caching on RODC
Hello,I've read that if credentials are cached on a RODC and this RODC is stolen then all passwords potentially cached should be changed. How are cached passwords stored and are they ever cleared?...
View ArticleMigrating 2003 FSMO to 2008 R2 Domain controller and WinXP Workstations
Hello,My company currently runs a mixed environment of 2003 and 2008 R2 domain controllers. All workstations are running Windows XP SP3 which we are slowly going to migrate out over next year.I am...
View ArticlePurpose of Built-In Group "Server Operators"
Hello,Windows 2003 Servers included a local "Server Operators" group. In Windows 2008 Server, that group no longer exists. However, Active Directory still includes a built-in domain-level group named...
View ArticleDomain Controllers redundancy
Hi,We have 8 DCs in a single forest/domain environment.sometimes we need to take one or the other DC down, when that happens some users start getting errors when attempting to access resources, others...
View Articleshould I concern this?
If i run check time on one of our exchnage 2010 server,w32tm /stripchart /computer:this exchange server 09:19:00, error: 0x800705B4w32tm /stripchart /computer:pdc (time server) no error should I...
View ArticleClik here to view.
a global catalog cannot be located to retrieve the icons for the member list
Hi all,While accessing active directory in member server. I'm receiving an error frequently. A global catalog cannot be located to retrieve the icons for the member list. But this issue happens...
View ArticleForce authentication to closest DC
I have found multiple questions about getting clients to find the appropriate DC to authenticate to; however, either they (questions) are not answered or my situation is not exactly like theirs. So...
View ArticleClient PC not always using local RODC and Group Policy is applied from random...
Please help, I am pulling what is left of my hair out!I have a test XP PC on the same subnet as a new RODC and it randomly connects to the RODC and then randomly connects to different DC's at another...
View Article"Notes" attribute for Users in ADAC
I noticed that the Active Directory Administrative Center (ADAC) shows the "Notes" field (aka "info" LDAP attribute) for groups, but not for users. The only way I could find to view or modify this...
View Article
