Can user from non trusted domain accessing resources across domain?
The answer would seem to be NO obviously (I'm 99.999% sure) but I need to be damn sure and don't have a test environment handy.Domain A trust DomainTrustDomain B trusts DomainTrustDomain A and B do not...
View ArticleAD FS Server 2012 R2 Question
HiI have setup ADFS on 2012R2 with a Web Application Proxy Server (WAP). I have published 2 apps. 1. Claims based app - works fine2. Non-claims app - Kerberos in IIS to a standard websiteOn the non...
View ArticleAD FS across Multiple Forests
Hi We have 4 forests hosting users and one of these also host an Integrated Windows Authenticated web app that all users will access. They can do this internally but now I am looking to federate this...
View ArticleClient PC not always using local RODC and Group Policy is applied from random...
Please help, I am pulling what is left of my hair out!I have a test XP PC on the same subnet as a new RODC and it randomly connects to the RODC and then randomly connects to different DC's at another...
View ArticleError Attempting to update Schema for Active Directory
Hello,Specifically, I am researching possible issues with running commands to update/create the schema update file (maybe there are known issues). I am helping someone who can't get past this error:...
View ArticleConnecting DHCP and AD
Hi!I have a question about bounding DHCP and AD. I´m trying to find out is there a solution for that kind of idea. First of all today we have Linux DHCP server and Microsoft AD. What we do today is...
View ArticleChecking "Include inheritable permissions from Object's parent" not sticking
AN oldie but a goodie. This is a 2003 R2 Domain. None of the accounts in the domain will keep the "include inheritable permissions From object's parent" setting. None of the accounts in question are...
View ArticleMoving Active Directory 2003 to 2012
Please advise how to move Active Directory from Windows Server 2003 Standard to server 2012 R2 Datacenter. Are there videos or articles? Any advice or best practices are greatly appreciated. Thanks in...
View ArticleWindows Server 2012 R2 - ADFS 3.0 - Stops responding with 503 error, have to...
I have ADFS 3.0 running on a Windows 2012 R2 domain controller.We have been using it with WAP to publish all our web applications, SharePoint sites, Lync, Exchange etc. This has been working fine for...
View ArticlePossible to change AD account password used on 3000+ computers without...
Imagine a work environment of 3000+ computers. - Several domain service accounts are used to automatically log into Windows. - (This is done via HKLM\...\CurrentVersion\Winlogon.) - Every so often,...
View ArticleOne way trust WMI issues - only on domain controllers
Hi all, I'm having some interesting issues with attempting to setup remote monitoring via WMI from a trusted domain service account to some remote domains in our environment. There is a one way trust...
View ArticleSYSVOL Replication delayed
We have a windows server 2008 r2 and 2008 environment with 4 domain controllers. All of my servers replicate almost immediatly with the exception of 1 2008 r2 server and this replication can be...
View ArticleStructuring accounts for logging into servers (advice)
Hi All,I have a domain with computers and users (standard setup). What I am wondering, how do you structure accounts that are for logging into the servers?For example, I could create a group in AD with...
View ArticleRemoving ADFS (used for an Office 365 test)
There isn't a whole lot of info out there about removing ADFS.My initial thoughts were that it would be easy enough just to remove it, but it seems that you have to run Convert-MsolDomainToStandard and...
View ArticleSync AD and access HR database
Hi, is there any free tool for synchronizing AD database and HR database (access database)? I am losing too much time in making changes manually in AD whenever some employee is hired of fired, or...
View ArticleAD FS on 2012 R2 Server Core - management tools
So it seems in 2012 R2, AD FS is now able to be installed in Server Core, I'm assuming because it's no longer part of IIS. However, managing it on Server Core seems "limited" to the use of PowerShell....
View ArticleHow did something get on my server, now everyone in the domain has a default...
Wondering how this is possible. I do not have any admins (except me) that have access to modifying a default user profile. Here are the particulars: When a new user is created there is a link created...
View Articleunable to promote additional domain controller
HiI have 2008 R2 domain controller. when i am creating another domain controller it gave me errors:sometimes i got the error when run dcpromo i.e. cannot access domain listsometimes unable to read lsa...
View ArticleCan active directory send scim messages?
Is there a tool/plugin/method/option that can enable microsoft active directory to send scim messages?F.i. in the use-case: a user changes his/her windows password then this new password is send in a...
View ArticleRODC in Seperate Site, inbound replication partner change.
Hi, hoping someone can help on this one, I've been battling for a couple of days with a single RODC inbound replication connection issue. As a result of a firewall change one of the inbound replication...
View Article
