Authentication Issues
Hi,Running Windows Server 2008R2 Active Directory, Symantec Backup Exec and Veeam Backup & Replication. I have this occasional problem with Backup Exec (BE) where the login credentials are...
View ArticleAdvice required for dealing with a DC that has exceeded the tombstone...
I have a server (2003 R2 Standard) that appears to have had replication issues and is beyond the tombstone lifetime. The Primary DC holds all FSMO roles (Server 2008 R2 Standard) and this is the only...
View ArticleDomain Migration
I have two locations. Location A and locatoin B. at both places i have test.co.in forest, First we have created forest test.co.in at Location A. While created at Locaton B , it was created as separate...
View ArticleAccount Lockout issue between Apple devices and Exchange 2003
I have been having an ongoing issue for a couple of months with a few different users Apple devices locking out their accounts in AD when they try to authenticate to ActiveSync. This doesn't happen...
View ArticleADMT v3.2 WRN1:7814 A unique match was not found. The source object
I am having a problem with ADMT. Basically it thinks it finds duplicate objects:[Object Migration Section] 2014-04-30 13:25:21 Starting Account Replicator. 2014-04-30 13:25:22 WRN1:7814 A unique match...
View ArticleActiveDirectory Replication failing after a day
Please excuse the wall of text that is about to assail you, I have been at this problem for several weeks and have read every google search and technet article I can lay my hands on that seams in any...
View ArticleADFS 2012 / multiple domains?
We have ADFS 2012 installed and running under domain foo.com. Would also like to be able to simultaneously run ADFS under domain bar.com as well. Is this possible using passive use case /...
View ArticleRID Master not allocating new rid pool
Hi guys,I am having some problems with my server. I am unable to create new AD objects with the message, the directory has exhausted the pool of relative identifiers. I have a SBS 2003 environment...
View ArticleUnique Functions of Root Domain
Hello, I am trying to think through the unique functions of the ROOT domain. Let's say our Windows 2008 Forest ROOT domain was CARS.com and I virtualized DC1 from RED.CARS.com into an isolated lab...
View ArticleRestore AD to test Environment
Trying to restore two domain controllers to a test environment.I am unable to get the domain controllers to sync. One of the server is our FSMO roll holder. I recieve an errror when running the command...
View Articledcpromo over high latency WAN connection
I have a remote site connected to the internet with a satellite WAN connection which has a high latency (ping=750ms). Because of this high latency I can't replicate the AD trough RCP. Therefore I...
View Articlehow to set password after checking password history using vbscript?
Hi Guys,I am developing a VBScript (actually a application kind using asp) to change AD user account password. I am trying to set password using setpassword() method. But this method not checking the...
View ArticleADDS FSMO AND GLOBAL CATALOG DISSAPEARED AFTER MIGRATION TO 2012 FROM 2003 DC
I have migrated AD and DC/FSMO from my Windows Server 2003 to 2012 Datacenter. I have encountered a few errors along the way but was able to overcome them (by turning on Remote Registry Service) and...
View ArticleCan not we seize Shema FSMO role? isn't it recommended?
Can not we seize Shema FSMO role? isn't it recommended?
View ArticleClik here to view.
[Forum FAQ] AD / SYSVOL Version Mismatch Errors
This FAQ article describes two scenarios for AD/Sysvol version mismatch errors (Figure 1) in the group policy reporting tools which may occur on Windows 8, Windows 2012, Windows 8.1 or Windows 2012 R2...
View ArticleAuditing Acitve Directory group
I was wondering if there is a way that if you add a users to a certain group it would add an entry into the event logs and then we can setup a schedule task to send us an email alert everytime we see...
View ArticleForest Trust Issues (Group Membership Issues)
OK - this is going to be long. I hope I am detailed enough.Four domains, each in their own forests:domain.w.comdomain.x.comdomain.y.comdomain.z.comFor the sake of everyone, I'll refer to each domain as...
View ArticleBind DN/Username for LDAP
I am trying to find out what the Bind DN username would be for my environment. I have set up LDAP on a server and created the AD LDS instance but I need to integrate our Barracuda spam filter with...
View ArticleDisplay of computer object in permissions of object
After having renamed a computer in the domain, I noticed that I had to create a computer object with the new name and an entry to DNS. When I wanted to grant the relevant permissions I noticed that...
View ArticlePorts Required for Trusts bidirectional or unidirectional for Internal...
Hello ! - Bit confused find out the direction of the ports for Internal client–External domain domain controllers trust?I know the communication between the child domain computer subnet and the Root...
View Article
