Burflags is not available in registry...
Hi I have one root AD which as 4 sub domain controllers, I am facing lot of replication issue. So that i am trying to rebuild the sysvol tree and its content using the below technet...
View Articleconnect windows server via ldap
I am new to windows AD .I would like to use Softerra LDAP browser to connect windows server ( localhost ) , I just would like to use "administrator" user to connect windows server , would advise what I...
View ArticleDC 2012 R2 reboot every 15 minutes after Upgrade from Win Server 2008 R2
After upgrade DC 2008 R2 to 2012 R2 Server Core, DC reboot every 15 minutes, this is the error:Event ID 1015, Source Wininit:A critical system process, C:\Windows\system32\lsass.exe, failed with status...
View Articlerodc ldap ssl
I am putting an rodc on the DMX in a separate forest than the internal networkOn the DMZ, I have a Read/write 2012 DC in 2008R2 mode. Then I added a RODC in the same DMZ forest.I want to open up 636 to...
View Articlerodc in dmz and trusts
on my internal network I have ForestA/domainAon the DMZ I have ForestB/domainBI will setup a one way trust >>> ForestA/DomainA will trust ForestB/domainBThen I will setup an rodc on...
View ArticleWhy can't I get administrators' privilege
Dear All :Last year, I created a group in DC which named 'Local Admin' and then added user account 'aliufr' to this group. Meanwhile, added this group to local computer's administrators group by GPO....
View ArticleReplication Problem
Hi,I have windows 2008 SBE domain server (Domain A) which is not replicated with other GC Server (Domain B).When i disconnect the domain Server (Domain A) from the network. we are not able to join new...
View ArticleApplication Authentication and User Logon Workstation
Hi,I have a question regarding User Logon Workstation attribute in AD. We have many users who are binded to their workstation so that the ID cannot be used in any other PC for logging. After this some...
View ArticleUser Authentication Reporting for each AD DS DC
Hi.I am in the middle of leading a DC Reduction excercise. We are overscoped for the amount of DCs that we have for our users. An upgraded network topology has given us the opportunity to rethink AD...
View Articlekinit(v5): Error in the PKCS 11 library calls while getting initial credentials
Team,I am trying to implement Kerberos Authentication mechanism . After providing the related configuraion in krb5.conf, when I try tokinit, it is giving the following error "kinit(v5): Error in the...
View ArticleHome Directories Map Intermittently, then "Break" Forever
I am not sure if this is the correct forum for my issue. Please let me know if there is a better one and I'll post there.We are experiencing a puzzling issue with drive mapping after deploying a new...
View Article2008 and 2012 DCs
Hi,I have domain which has consists of four DCs, three of these are Windows 2008 R2 Ent x64 and one is Windows 2008 Ent x86. The 2008 x86 is needed for a particular application. Also only one DC is...
View ArticleDC - refuses administrator log on
History: I migrated a 2003 domain to 2012 R2 (2 DCs), now native. All was ok until my 1st reboot of the 2nd DC. It lost its ability to communicate w/the domain. I've demoted/removed it and am now...
View ArticleAccount expired and Account Disabled. What is the difference?
In Active Directory, under Account tab of the User properties in ADUC, there are two options to disable a account. By checking the Account Disable box or by specifying a account expiry date. But what...
View ArticleAD User Account Automatically disables when Domain Controller Reboots
My customer has a single DC domain (an unfortunate situation by itself) with this single DC running on shared storage being presented by an IBM iSeries instance. The server is being backed up from the...
View ArticleMigrate from ADFS 2.0 to ADFS 3.0 - heavy customization to LS website
We currently have claims based ASP.Net websites integrated with ADFS 2.0. The LS website has been heavily customized for functionality and look & feel. There is also a vendor web site dependent on...
View ArticleDomain administrator account lockout issue - Advapi process
Team, Need your help to troubleshoot an account lockout issue. This issue is with our domain administrator account, given the error message from the server causing account lockout....
View ArticleDFS changes if I upgrade Active Directory 2012 R2 with DFL and FFL 2008 R2
HiWe are planning AD 2012 R2 DCs with DFSL & FFL 2008 R2.All are good but we have 3 DFS server and out of 2 running on DCs.I need to verify if we upgrade AD then this may impact of DFS infra.. If...
View ArticlePreparing AD for 2012
Greetings,We are getting ready to add 2012 member servers to our network. Specifically, we're adding a server to use for DFS and for file services. The 2012 server will act as the namespace server and...
View Articlewhat role does a trust contact when creating a trust
When I create a trust between ForestA/DomainA in networkA to ForestB/DomainB/NetworkBDoes it contact the closest GC or does it contact the PDC role?
View Article
