Create a new domain tree root
I need to add a new domain to my existing forest. my current forest and the domain controllers are Win 2003. however the new domain server that i wish to join is Win 2008 R2.when i run Dcpromo in the...
View ArticleLimit server notifications to Create/Update/Delete users only (using control...
We are developing an Active Directory LDAP client in Java. We are using LDAP_SERVER_NOTIFICATION_OID (1.2.840.113556.1.4.528) control for receiving notification from Active Directory server, and we are...
View ArticleHandle Count Larger Than 10,000
We recently has a ADRaaS run in our environment, some of our domain controllers have been reported to have a "Handle Count Larger Than 10,000. What does this mean and what is the impact of this value...
View ArticleWhy do I see replication latency of several days despite there being no...
Hello All,Why is repadmin /showvector /latency showing latency of several days for the root domain partition to child domain controllers outside the main site?Repadmin /replsummary * shows 0 errors and...
View ArticleFallen Primary DC with no Additional DC.
Hi all,i have Primary DC which was down for some technical issues. i followed many articles to re alive it but with no luck.my main issue that the system administrator did not take any backup for...
View ArticleUse child domain of public domain name for active directory
Hello,we have a public DNS with domain name example.comI want to create a private domain in my company. I create a new forest with domain name office.example.comthis private domain does not register in...
View ArticleDC - refuses administrator log on
History: I migrated a 2003 domain to 2012 R2 (2 DCs), now native. All was ok until my 1st reboot of the 2nd DC. It lost its ability to communicate w/the domain. I've demoted/removed it and am now...
View ArticlePorts and directions new domain
Hi folks,I'm currently setting up a new domain for our office, all hardware is located in our datacenter but I can't seem to find what direction the ports need to be configured for. More specific:...
View ArticleActive Directory Federation - SPN error
Hi, I am installing ADFS on a Windows 2012 r2 server. I am following a Microsoft Document. I got a certificate error which was my mistake. Now I have uninstalled and installed ADFS but I always...
View ArticleCOMO hacer un query especifico
Quisiera saber como hacer un query para saber a que grupo pertenece cada usuario que tengo agregados en mi LDAP.
View ArticleIDMU in Server 2008 Suddenly unresponsive
We are running Identity Management Services for UNIX on Windows Server 2008 SP2 with one Windows Master and one Windows subordinate. After working for over two years, our NIS domain is suddenly unable...
View ArticleUser profile service is error in Win7!!!
Hi everybody,Currently, I meet a problem that has been not solvedI need your help to solve it[State]- We have 2 Site, Japan is Headquater site and Domain controller places here; Vietnam is remote Site-...
View ArticleCannot Replicate after upgrading domain functional level
Hello, Parent and child domain. Parent domain (forest) still in domain functional level 2003. However, child domain i just updated to domain functional level 2008 R2. Now replication is not working. I...
View ArticleRPC 1024 - 65535 and TCP 135
I have been finding conflicting information. I hope someone can clarify.TCP 135 is the End Point Mapper that can allow a Domain Controller to Replicate with another Domain Controller using TCP over...
View ArticleProblem replacing computers using the old computer account
We are running a 2008 R2 domain with Win7 workstations. We are currently removing our PC Technicians from the built-in Account Operators groups and adding them to a new security group called Computer...
View ArticlePermission issue in AD
Hi All,I need to provide access to helpdesk team to reset the password and change the password in AD.I tried adding account operators builtin group to help desk security group which I created and even...
View ArticleAdd a child or sub domain for win8/Office365 support
We have a single Windows Server 2008 set up.It was set up internally as: company.com but we do not own company.com, our domain is company-usa.com.This has not been a problem, except now we are adding...
View Article2008 R2 Replication Problem
Over the weekend I had to replace one of our 43 domain controllers. Pretty standard practice of demoting the old one, waiting for replication and so on.For the second time in a month I noticed a...
View Articleautologoff users from workstations through GPO or anyother way
HiI need to logoff most of users from workstations after 5 PM .How can I achieve it through GPO and other thing like script..
View ArticlePossible error with Active directory with BIND DNS
We recently in the process of upgrading our Domain Controllers from 2008 to 2008r2. I haven't had any errors in event view but in "Best Practices Analyzer" I receive the error:"Issue:The Domain Name...
View Article
