SYSVOL_DFSR replication issue
Hello,First of all, I'm french, so sorry if my english is not perfect :)I tried to find a answer to my problem but everything I tried was unsuccessful.One of my client have a domain with 3 domain...
View ArticleLDAP query for expired accounts
Hi All,I've read many forums on this topic but have yet to get one query to work. Essentially what I am doing is provisioning accounts through the GADS(Google Active Directory Sync) tool for student...
View ArticleDNS DCDIAG (solved)
Hope someone can point me in the right direction,after some dns issues today I ran dcdiag and came up with the following errors. I've included the diag report and the ipconfig of the DC. thanks for any...
View Articleldap query not returning whenCreated value
I have a powershell script that retrieves user objects from AD and there are quite a few user objects returned that don't have whenCreated value. So I opened up my ldp to check those objects and it's...
View ArticleADFS 3.0 & ldpinitiated.aspx
I realize that with ADFS 3.0, Microsoft has done away with a number of things since ADFS 2.1 including using http.sys as the basis for the ADFS "website" versus using IIS....
View ArticleADFS Windows 2.0 Service stops and gives users an error when logging in to O365
We have a Hybrid Deployment. Existing Exchange 2007 Environment (on-prem) An Exchange 2013 Hybrid (on-prem) O365 Tenant to which we are migrating mailboxes. Users authenticate via ADFS hosted in...
View ArticleEvent ID 13506, 13555, 13502, & 13505
Hello, everyone,We've been having a repeated issue with our Windows 2003 SP1 (32bit) servers. It is now happening weekly where after a non-authoritative, authoritative, and a complete deconstruct and...
View ArticleWindows Federation Server logs AD logons in the security logs
Hello everyone.I am trying to figure out what is going on on my Federation Server.I have just installed it and there are no services that are configured against it.When I look at the security logs, I...
View Articlemsfve-RecoveryPassword with Get-ADObject
Hi all! I have an odd issue regarding the use of the Get-ADObject Powershell cmdlet to retrieve Bitlocker recovery passwords in AD. I recently wrote a function that outputs some Bitlocker information...
View ArticleWindows 2008 R2 DC VM's hang at start-up
I have 2 Virtual Domain Controllers, they login fine for about 4 weeks after a reboot. After about 4 weeks when logging in via Remote Desktop then they stay at the welcome screen, or they hang at the...
View Articlewhat is the correct sequence of raising Active Directory functional levels?
I am almost ready to raise our current Active Directory functional levels to Windows 2008 R2. Right now our domain level is at Windows 2003 but our forest level is at Windows 2000. I thought I should...
View ArticleHow to avoid applying Default domain policy?
Hello! Hope to get some ideas on the following: I have one PC that I DO NOT want to apply default domain policy to. I have created a separate OU in AD with one security group, that contains only that...
View ArticleUsing LDAP to search attribute bit flags using attribute OID values
Hello everyone,My question stems from trying to understand the OID and syntax behind this classic LDAP search to find disabled users:"(useraccountcontrol:1.2.840.113556.1.4.803:=2)"What I am interested...
View ArticleHow to expire an AD account 30 days from 1st login
How can I expire or disable an AD account 30 days from 1st login?Jason
View ArticleInstalling a new forest for the first time in 2008 R2 SP1
Installing a new forest for the first time in 2008 R2 SP1 with no other forests present do I run:E:\support\adprep\adprep /domainprepor any other adprep to get the forest ready using the Answer...
View ArticleDeleted computer account
I tried to make aother computer account and I did something and my other c.account deleted.Can I get it back?
View ArticleHow to track user log on and log off on the Domain
Hello All,I am trying to audit user log in access to the domain. My aim to to see records of logon and logoff and also export the report.Can one achieve this even without the use of third party...
View ArticleNon replicated data in active directory replication
Is there any attributes/objects that are not replicated in Active directory replication other than lastlogon and last logontimestamp?Will the password attribute be replicated?
View ArticleReplication when the site contain two domains
Hi,I have a site named "TEST". I have 4 DCs in the "TEST" site. Out of 4 DCs DC-1 and DC-2 fall under t1.com domain and DC-3 and DC-4 fall under t2.com domain.So, when an object is modified or created...
View ArticleLDAP Chaining Support in AD LDS
Directory experts, can anyone tell me if AD LDS supports LDAP chaining? Note that I am talking specifically about chaining and not referrals. For example, Contoso has an AD LDS server (hosting the...
View Article
