User gets access denied when changing network password
We have one user in an environment of 5000+ who gets access denied when he tries to change his network password on Windows XP or Windows 7. User cannot change password is not checked on his AD account...
View ArticleHow to monitor ADFS 2012r2, Commercial services use HEAD and ADFS returns 500...
I have set up an on-prim ADFS and an off-prim ADFS.I want to use DNS Failover to monitor them and switch off-prim as required.I've tried both Amazon Route 53 and DNS Made Easy monitoring, and both...
View ArticleDomainDNSZones - Last Replica prompt on DC promo (uninstall)
Hi All,Here is some quick info before I ask the question. We are upgrading AD from 2008 R2 to 2012 R2. We have a parent domain, and a child domain.ALL DNS is hosted by the parent domain. While...
View ArticleBest way to implement active directory in multiple locations
Hi,Currently we don't have an active directory domain and looking in to configuring a test setup for it.We have 6 countries and in some countries we have 2 to 3 sites. There is a constant VPN...
View Articlenetlogon.log why does my member server query my domain controller as a domain?
here is a section of my netlogon.log i have been reading about how netlogon builds its dns request from the information it collects. but not sure where this information is stored i have setup wireshark...
View ArticleCan a 2003 domain controller be taught to issue AES128 or AES256 kerberos...
Hello Everyone, we are running a 2003 native mode domain with a mixture of 2003 / 2008 R2 / 2012 R2 domain controllers and a mixture of XP / win7 / win8.1 clients.As far as I understand our kerberos...
View ArticleProper Configuration of DNS server for our new branch office
Hi All,Our new office will setup a new branch office with a routed network link to our HO. In HO, we have 2 domain controllers configured as AD and DNS just for fail over scenarios.How will we...
View ArticlePlacing RODC in Perimeter network
Thanks to all in advance. we have two ADC servers on one of our sites with single forest and single domain on all sites. My client wants me to Install one RODC server at the same site but in perimeter...
View ArticleRemove old child domain
HelloI am an administrator of a single forest with many child domains (35 to be exact)We had a child domain w2k3 R2 (geri.sem.com) it crashed 7 years ago, and the guy before me removed it using...
View ArticleCustomising a users display name AD
Our company wants us to change the users display name from "SN, GivenName" to "GivenName SN (Company)"I've had a play around with ADSI edit and ad modify etc and while changing the name order is...
View ArticleProblem in joining client in domain
Hello,I am having some error while joining a client in my domain, I have DC-DR environment, in my data center (DC) I have DNS integrated AD (IP 172.16.10.72), now in Disaster Recovery site (DR) I have...
View ArticleSchannel error, Event ID 36888? - IS there a way to Identify what causes...
Hi, I hope this is the correct forum for this problem,I am seeing a few of these errors (error details below) sporadically throughout the system event log on a windows 2008 R2 server. I have seen a...
View Articleadprep /domainprep failed on server 2003 std trying to upgrade to 2008
In process of switching dc from 2003std to 2008 x64 std sp2. downloaded 32 bit version of adprep.exe and ran adprep /forestprep with no errors. when running adprep /domainprep I get error messages.Hi,...
View ArticleChanging to Password must meet complexity requirements when does the end user...
Changing to "Password must meet complexity requirements" when does the end user need to change the password? Is that when the user next logs in or is it when the existing password expires?We are about...
View ArticleDNS Island
I have seen previous forum questions which state that the 'DNS Island' issue was resolved in Windows Server 2003 and is no longer a concern.Example:...
View ArticleDNS Island defination
Hello Team,Could you please explain what is DNS island? AliahMurfy
View ArticleAD FS 2012 R2 Windows Integrated Authentication
We are implementing our first AD FS environment and are running into a couple of snags. The main issue I am having is that when connecting tohttps://sso.domain.com/adfs/ls/idpinitiatedsignon, I am...
View ArticleFinding enabled inactive users (not based on logon date)
Hi any posts can be found about inactive users and how to find them using PS or Dsquery or ...but as i found all these work using last logon date of userbut here is my problemwe have several accounts...
View ArticleSYSVOL & NETLOGON not shared
I have 4 sites and 6 DCs, 2 out of 4 are 2008 R2, the rest are 2003. I'm in the process of upgrading DCs in a domain from 2003 to 2008 R2. I ran into a problem when one of the 2008 R2 DCs had a hard...
View ArticleDelegate Right to Access Services on Remote Computers
Hi,I'm trying to figure out how to set it up so our IT team scan access the services of a remote computer via RSAT. I know that they can do this if they are Domain Admins, but I'd prefer to do it via...
View Article
