Certificate Services - Autoenrollment not occurring
I am having an issue getting autoenrollment to occur. I am not getting an error that I can see - it appears to be not initiating.The forest is at Windows 2008 R2 domain functional. The root CA is an...
View ArticleThe session setup from computer failed - Netlogon
Hi,We have a Windows Server 2008 R2 domain, and on the domain controller we have the following error messageEventID 5723 and 5805**********************************The session setup from computer...
View ArticleClik here to view.
Force a Relying Party to always use Forms Based Authentication in ADFS 3.0
HelloDoes anyone know if its possible to have a particular relying Party trust to only ever user forms based authentication, regardless of browser or client location.I have an application that supports...
View ArticleRODC placement query...
Hi,I am trying to implement RD Gateway (server 2012) in a DMZ. I do not want the gateway server talking directly to the LAN DC's as too many ports need to be opened from the DMZ to the internal DCs....
View ArticleQuery all uers in an OU, Get group membership, and export as CSV to the...
I want to query each user object in an OU, than go through each user and get group membership, and lastly export that group membership data to a CSV in their home directory. This is what I have so far;...
View ArticlePermissions for group policy in multi-tenant environment?
What are the exact permissions that have to be applied to an OU for the computer object to get group policies?Basically when I remove authenticated users rights from the OU that the computer is in it...
View ArticleSingle forest multiple domains different domain functional levels
Hello, I would like to call on the expertise of the forum to see if there would be any issues in building a new domain tree (in order to have a separate namespace) with Server 2012 R2 at a 2008 domain...
View ArticleKerberos WeConstrained Delegation
Need some help setting up constraint delegation on web servers.Here is our scenario:1.One Web Server in DMZ which will be a front end servers, this has some kinda redirect to a back-end web...
View ArticleCan't login ADFS using IE
I created ADFS v2 on one of windows 2008 R2 serves. The AD Sync works fine. However, I can't login the ADSF server using adfssvr.mydomain.com/adfs/ls/idpinitiatedsignon.aspx even we have correct...
View ArticleAccount Lockout Active Directory continuously
Hi all, I have a domain with 3 sites and domain controllers Windows Server 2008 R2. I recently have ongoing account lockouts and I see no errors on domain controllers. I've checked to see if they...
View ArticleDecommissioning ADDS 2012
Hi everyone,I have 3 domain controller one 2012 and two 2012 R2 all are GC and 2012 R2 servers are DNS server (not the 2012 one)but when I am trying to uninstall AD from the 2012 Server it is telling...
View ArticleImplications of upgrading domain from 2008R2 DC's to 2012R2 DC's with ADFS...
I'm wondering if there are any implications or concerns when upgrading from 2008R2 DC's (2008R2 Functional level) to 2012R2 DC's (2012R2 functional level) with ADFS 3.0 installed in the current...
View ArticleGetting reports out of Active directory
I may be asking in the wrong community, so sorry. It has been a very long time since I have worked with Active Directory, and I am sure it have come a long way since the 90s.I am looking for a way to...
View ArticleWindows 2008 running DCPROMO
We recently migrated from SBS2003 to Windows 2012. Currently our 2012 Server is the Domain Controller, while the 2008 server running Exchange 2010 is just a computer part of the domain.I'd like to...
View ArticleAdd Employee ID Number to Active Directory - Functional Level: Windows Server...
We would like to start entering Employee ID Numbers in Active Directory. How do I add the Employee ID field in 2008 Active Directory?
View ArticleAdding a DC
hi,i already have a Windows Server 2008, on which AD is running with DNS. i have added a new physical server with Server 2012 R2 and i have installed the AD role onto it. i have moved the fsmo roles to...
View ArticleSID only shows up when adding a domain user account from an external trusted...
This is sort of an interesting situation which may wind up being more of a network port not being open.There are two Windows 2008 R2 domains, AlphaCo and BravoCo, that have an external one-way trust...
View ArticleAD account is being locked out every couple hrs. Need help tracking
Hi,I am one of multiple administrators at my company and for the past couple of weeks I have had a problem were my AD account will belocked out every couple hours or so. At least once a day. I fear...
View ArticleADFS Sending UPN Claim
In the past, when sending UPN to a Relying Party, I have always used a Send LDAP Attribute Rule for the Relying Party.I have just read a couple of guides for stepping by trust with Dynamic CRM. They...
View Article
