AD Sites Question
Hey Guys!was reviewing AD infra and struggling with a question A single AD forest , single Domain configured across 3 sites Manhattan ( hub site ) , Newark ( spoke ) , Brooklyn ( spoke ). I have...
View ArticleCan not we seize Shema FSMO role? isn't it recommended?
Can not we seize Shema FSMO role? isn't it recommended?
View ArticleServer 2012 R2 Domain Controllers stop accepting log in and replication failure.
We have recently completed a Domain upgrade to 2012 R2 AD DS from native 2003 AD. The issue we are experiencing is that for seemingly no reason the 2012 hosts will randomly stop accepting (RDP) logins...
View ArticleActive Requestor over Web Application Proxy and ADFS 3.0 (Windows 2012 R2)
Hi,Is it possible to preauthenticate and authenticate with the active requestor profile (ws-federation) over WAP and ADFS? And/Or can you do it with SAML 2.0? Is there an example application?Thank you...
View ArticleActive Directory System Time is decreasing automatically
Hi,I have 4 DC. 3 DC in My main office, one is primary and rest of the DC is Additional and other one is remote location, that also additional domain. all are synch together right now I am getting Time...
View ArticleUpdating the Active Directory Schema
Good morning all,I have been tasked with updating our Active Directory Schema version. Currently our version is "47" which is Server 2008 R2 and I am going to be updating to either 56 or 59 (Server...
View ArticleChange primary SMTP address using powershell for AD NOT Exchange
I am in a Office 365 Hybrid mode, this question has been asked on the Office 365 forums and I was directed here.Using PowerShell for Exchange 2007+ its a fairly simple process to change the primary...
View ArticleTrust relationship error on PDC
Hello,We are getting the error "The security database on the server does not have a computer account for this workstation trust relationship" on our main domain controller. We have a primary domain...
View ArticleDFS replication errors in Windows Server 2008 R2 AD
Hello Everyone, below is the issue I encountered,There are 4 domain controllers in the same domain, all running Windows Server 2008 R2 Standard, SP1.Events with ID 2104 and 2212 appear once per hour on...
View Articlewhy normally we choose dot local extension for domain name
hi....i have one question about choosing the domain name mostly we choose .local extension for the domain why is so whats happen if we choose .com or any other top level domain extension.......2nd part...
View Articleadfs 2.1 - page not displayed
I have ADFS 2.1 setup and was working. I have put a new SSL and token-signing certs on and now am unable to get to the idpinitiatedsignon page. I don't get any errors in the log at all. The return from...
View ArticleDNS 4004 and 4015 events
Hello,I am on a SBS 2011 system, and I am not an expert on server management. Before this server people where on a 2003 server. I have try to make during the periode of change speaking the 2 servers...
View Articlehow can provide access only Taskbar and auto-hide option to user
HiI have requirement to provide access only Taskbar and auto-hide option to user through GPO.But I have GPO which is already "Prevent Changes to Taskbar and Start Menu Settings".How can I make changes...
View ArticleAD Domain Trust Assessment Examples/Documentation
HelloDoes one have a case study or example of documentation used to do a AD assessment for a Domain Trust? I would like to provide info regarding sites. Thank you so much
View ArticleCan't Remove Old Exchange Server
While going through ADSI edit, I noticed there is an entry for an old Mail Server object in the Domain Controllers OU. It only appears in ADSIEdit and not under AD Users and Computers and it didn't...
View ArticleReplication Issue
We installed a 2012R2 domain controller a couple of months ago, it is not a FSMO holder. Our FSMO DC's are 2003. It seems ever since the upgrade when a new 2008 R2 DC is added it pulls replication...
View ArticleDeleted Trust still coming in Microsoft_DomainTrustStatus query
Hello Guys,I am facing a strange issue, I have deleted a stale trust from Active directory Domain And Trust and don't see its TDO/Trust accounts in ADSIEDIT, but still the trust name is coming up in...
View ArticleNetlogon Share not avail on Both the DC (Win2012)
Hi all, Both the AD DC's are not showing Net Logon Share. Due to some H/w failure of Hyper-V, we restored the Old AD Backup which doesn't show any Net Logon or sysvol share. After...
View ArticleClik here to view.
Trying to make computer member of .org internal after creating .local
I have an internal .local domain and a public .org domain name... all works well except now i am trying to deploy a AD FS server and i need to be able to authenticate servers to the .org name...
View ArticlePorts Required for Trusts bidirectional or unidirectional for Internal...
Hello ! - Bit confused find out the direction of the ports for Internal client–External domain domain controllers trust?I know the communication between the child domain computer subnet and the Root...
View Article
