The security database on the server does not have a computer account for this...
Hi i've a remote site (with firewall with HQ) where Computer are added to my domain. Computer account is well created but when i restart and login, i've the following message (samed after disjoin and...
View ArticleUnable to change domain logon password from Windows 8.1 system
We are facing a new problem in our domain. Users working on windows 8.1 platform are not able to change the password and getting an error "the security database on the server does not have a computer...
View ArticleProblem replacing computers using the old computer account
We are running a 2008 R2 domain with Win7 workstations. We are currently removing our PC Technicians from the built-in Account Operators groups and adding them to a new security group called Computer...
View Article2008 RC1 DC: DomainControllerAuthentication Certificate Request error
After installing a secondary domain controller (Windows 2008 Core RC1) in my existing domain (forest, domain functional levels: Windows 2003, root DC: Windows 2003 SP2), I keep getting the following...
View ArticleWhy do I see replication latency of several days despite there being no...
Hello All,Why is repadmin /showvector /latency showing latency of several days for the root domain partition to child domain controllers outside the main site?Repadmin /replsummary * shows 0 errors and...
View ArticleDomian Trust Issue
We are in the process of creating 2 domains. One is our old, and one is the new one we want to move everything to. I have the new domain created. I created a new domain, and a new forest; the old...
View Article"Authenticated Users" vs. "Users"
I'm setting up a profiles structure on a server starting with the master folder that'll house all the profile subfolders. the default permissions on a newly created folder always has the admins and...
View ArticleDisable domain join unless computer account has first been created
Anyone know if its possible to configure Active Directory so that a computer cannot be joined to the domain unless the computer account is first created manually
View Articlesidhistory from demised domain
hoping that somebody can give me a definitive answer..I've been tasked with migrating from one domain to another. However, i have discovered that the current domain has sidhistory present from a...
View ArticleThe current fsmo holder cannot be contacted - FSMO transfer between 2 dc...
Hi, I faced with trouble while adding new domain controller. The situation is: I have only one dc (Windows Server 2012 trial, its name dc1.mydomain.com), it stops to work few days ago - and it is...
View ArticleWindows Server 2012 Connect with Client Windows 7 Pro.
Hello to all, Im having problems when I connect with Win2012, 1. Win7 always connect with Public Network Profile, I tried many times reset Network Adapter at both side (Server and Client). but no use,...
View ArticleImpact of resetting the password of the krbtgt account?
Hi,Currently a lot of effort and interest goes into the golden ticket scenario that mimikatz and metasploit are able to do using the krbtgt account.I know you would have to own a DC or get a NDTS dump...
View ArticleCentralized multiple file servers into a single location
Hi Experts,I have a client that is looking a solution that allow the centralization of file servers. This company has a headquarter in the US and multiple satellite offices around Latin America, where...
View ArticleRemove a domain controller
I have SBS 2008 with a Windows Server 2008 SP2 server as a second domain controller. I've added a new 2012 server and made it a domain controller. I need to demote the 2008 box. If I run dcpromo, it...
View ArticleSysprep.exe with or without "Generalized"?
Can anyone tell me what the difference between sysprep.exe with or without "Generalized" Option?Another question is, is it possible to join a computer to domain contorller if they have the same SID (I...
View ArticleI want to restrict my domain users that they can not use RSAT
HiI want to restrict my domain users that they can not use RSAT and see and brows or query my Domain information and group policy object in my domain from DC with RSAT installed on their client...
View ArticleKerberos WeConstrained Delegation
Need some help setting up constraint delegation on web servers.Here is our scenario:1.One Web Server in DMZ which will be a front end servers, this has some kinda redirect to a back-end web...
View ArticleADFS Sending UPN Claim
In the past, when sending UPN to a Relying Party, I have always used a Send LDAP Attribute Rule for the Relying Party.I have just read a couple of guides for stepping by trust with Dynamic CRM. They...
View ArticleIDMU in Server 2008 Suddenly unresponsive
We are running Identity Management Services for UNIX on Windows Server 2008 SP2 with one Windows Master and one Windows subordinate. After working for over two years, our NIS domain is suddenly unable...
View ArticleAD 2008R2 cant connect with a host to the domain
Hello,I have an AD server 2008R2 and everything looks like working fine.but, for some reason I cant connect with a host with win7 to the domain.I recieve the following error:"An Active Directory Domain...
View Article
