Bridgeheads and local bridge
Hi All,I have two site in my AD environment . one site with 3 DC and one branch site with single DC . Is it possible to have output like this for repadmin /bridgeheads /verbose . I was in imprecation...
View ArticleAD account is getting lock frequently
Hi,One of the users in our organisation AD account is getting locked out frequently. We have already performed the below steps. Is there any other way we can granular the issue.1. Checked whether the...
View ArticleCert based auth as second factor authentication?
Team, Looking for second level of auth. besides SSO by ADFS 2.0 or 3.0 as Primary auth. BING gave me option of MFA by Office 365, but we dont want to go with it. Looking at technet article :...
View Article”msDFSR-ContentSetGuid” corrupt?
I have a domain with two DC's. I cannot browse to \\dc1\sysvol from any member server or DC2 on the network. While trying to troubleshoot this error I came across a value that I think is incorrect...
View ArticleKerberos and Alternative UPN's
I have a single on premesis W2K8 domain forest which exists within a Disjointed Namespace. I have added an alternative UPN to the domain to accomodate Office 365 federation. My understanding is that...
View ArticleIndividual Users Receiving Domain Trust Errors while others can login just...
We have had multiple occurrences of this issue at this location now, so we're moving the past the remove/rejoin to domain approach. The computer is on the domain and other users can login to it....
View ArticleDomain PC Logon Server not correct
Dear All,In my production environment I have one parent domain controller three additional domain controllers (ad.domain.com, bjpdc.domain.com, dlpdc.domain.com) and multiple child domain controllers...
View ArticleServer 2003 Event ID 7 KDC
People were suddenly having issues logging in to the domain over the weekend and I noticed I could not log in either. I could only get to the terminal server via a local login, so I went in to the...
View ArticleRemove a dead domain from trust list in a 2003 forest
Greetings, I'm the admin of a forest. It is a 2003 server based forest with XP workstations. It has multiple domains. Two of our domains are dead. The DC's of those two domains are tombstoned and...
View ArticleWorkplace Join
In this article there's a detailed walkthrough of setting up Workplace Join. The federation service name is set the same as the server name itself. From my lab - at the end of the configuration wizard...
View ArticleWill removal of Enterprice CA break AD replication between sites?
Hello.I have a AD environment that have a CA on a failing Domain Controller. This server is scheduled for decommission, and are running a CA for the Domain. This server has issued certificates to the...
View Articleshutdown 2003 domain controller, Used new different name; same IP address on...
Greetings,I promoted a 2012 domain controller, with new name and IP, shutdown the old DC and re-ip'ed new DC with old IP address.after reboot everything is working fine. I would like to deleted the...
View Articledcdiag fatal error
I am having problems with my DFS shares not showing up, and in researching this I ran a dcdiag on my domain controllers and am getting the following error: Performing initial setup: Trying to find...
View ArticleproxyAddresses attribute not migrated with ADMT 3.2
Hello,I'm performing interforest migration. Windows Server 2008 R2 x64 Domain Controller in target domain has ADMT 3.2 installed.User account I'm attempting to migrate from source domain has value in...
View ArticleView deleted objects - LDP.EXE
Hi, last week I deleted some disabled users and computers. My domain/forest functional level is Windows Server 2008 R2 without enabled AD Recycle Bin feature. Having started ldp.exe utility on domain...
View Article2003 to 2012 AD replication problems
Hi Guys. I feel a little lost in the situation that has been dumped on me and I wonder if I can have some assistance…We have a Server Windows Server 2003 R2 machine as the ONLY physical server which is...
View ArticleClient Domain Controller selection
I understand how the correct use of sites and subnets can ensure that clients authenticate to a local DC.If however a site has only one DC, which fails, is there anyway to ensure that the client...
View ArticlePrimary group option in user accounts
Hi All,When I set a group of an AD user, there is an option to set a primary group. What is the significance of this option?Thanks
View ArticleSeveral removed Certification Authorities on network
Hi, I have found that previous Certification Authorities on network was deleted some time ago and now we are having some problems related to Certificates. I think that previous admins was not stick to...
View ArticleAuthenticate against file & web server but firewalled from DCs
Hi Folks,We've a partner company providing access to a file server and a web server in a DMZ. Their web and file servers will be on their domain and we will be given a username and password from their...
View Article
