Kerberos Error after remote Cluster-Aware Updating
I installed a Window 2012 R2 Failover Cluster in order to virtualize servers with Hyper-V. Both physical servers of the cluster are namedSRV-SAN01 and SRV-SAN02 and were installed usingWin2012 R2...
View ArticleQuestion about Delegate Control to Desktop Support
I am working on delegating control to a newly formed/reclassified position in my company. This role will primarily provide Desktop Support. They will have little to no need to log into servers.I have...
View ArticleDC - refuses administrator log on
History: I migrated a 2003 domain to 2012 R2 (2 DCs), now native. All was ok until my 1st reboot of the 2nd DC. It lost its ability to communicate w/the domain. I've demoted/removed it and am now...
View ArticleOnly members can see members
Active directory functional level "Windows Server 2008 R2"I would like to hide "Members" from all Authenticated Users except for the members of the group in question.At the OU level I put a rule to...
View ArticleHaving trouble promoting a server to a Child Domain Controller
Hello,I am having promoting a 2012 server that's already a member of a domain to a child domain controller. All of the prereq's are met. When I try to promote it, it shows the steps being processed....
View ArticleClik here to view.
Active Directory domain user groups do not have permission to change password
Users Member Domain Users Connot Change Password Configuration Group Policy Active Directory : password must meet complexity requirment=DiableUnable to update the password. The...
View Articleremove delegation
Hi everyone, I have given delegation few users certain rights on the domain. But how do i remove those rights.and can i get the list of those users whom i have delegated. and how to use DSRevoke
View ArticleRemoving password expiration policy for users
Hello,I am in a situation where I need to remove the expiration on user accounts in my domain. I have removed the group policy that requires a password reset every 120 days. My question is, if some...
View ArticleWMI Read access to my one service account
HiI need to provide my one service account READ access on all windows 7 /servers 2003,2008,2012 in my domain.I found below article, but this is not for read...
View ArticleImpact of resetting the password of the krbtgt account?
Hi,Currently a lot of effort and interest goes into the golden ticket scenario that mimikatz and metasploit are able to do using the krbtgt account.I know you would have to own a DC or get a NDTS dump...
View ArticleClik here to view.
Active directory users and computers wont start on a dc, "the server is not...
In our environment, we have 3 dc's two which run server 2008 (they work perfectly)and one never off branch dc that runs server 2008 r2.We have been having some problems where we feel the replication...
View ArticleAD account is being locked out every couple hrs. Need help tracking
Hi,I am one of multiple administrators at my company and for the past couple of weeks I have had a problem were my AD account will belocked out every couple hours or so. At least once a day. I fear...
View Articletoo much traffic from clients to DC port 389
hi,today we are observing many sessions from clients to a DC / DNS (all 5 roles on it) on port 389they have an about 2MB session on this port (like they are getting something from it)but as the port is...
View Article2 of 3 DC's won't ping each other
I am researching an issue that I noticed today and hoping to get some direction.My company is part of a larger one now. We have an old domain that consists of 3 DC's for some old servers that can't be...
View ArticleAdding a DC
hi,i already have a Windows Server 2008, on which AD is running with DNS. i have added a new physical server with Server 2012 R2 and i have installed the AD role onto it. i have moved the fsmo roles to...
View ArticleUser cannot logon "does not exist"?
Hello,We have a very odd issue with one particular user. Every morning when they try to logon it fails repeatedly. For the last several days I have been using EventCombMT to search through all our...
View ArticleChange last name
I recently changed a users last name in ADUC by right clicking the user and clicking rename then proceeded to go into ADSIedit and change users proxy SMTP address to reflect and with our rich...
View ArticleCustomize AGDLP strategy for specific needs
Hi all, hoping I could get some input how to stick to the best practice AGDLP nesting strategy while meeting the specific needs of my users/departments.I have a network share for our Marketing...
View ArticleChanges value in Adsiedit.msc is getting revert
Hello can anyone help me, I want in our organization contact should not be view in Global Address List but should view in All contacts in outlook, I tried the option by removing value in...
View ArticleAD object migration
We are planning to migrate AD objects from x.com (Global forest) to y.com (Single domain forest).There are two parts of migration : part 1) Users, compauters and profile migration. part 2) Application...
View Article
