Setting up BitLocker missing delegate control setting
Hi, I am setting up BitLocker in our AD. I checked the schema using ADSI edit and it looks as if the schema is already extended. I find: CN=ms-FVE-KeyPackage CN=ms-FVE-RecoveryGuid...
View ArticleDNS 4015 error - DCs replication in different sites with IPv4 VPN
HelloI have 2 DCs in different sites in Internet. They are connected by VPN routers (which are IPv4 only). The IPv4 connectivity is working, however, I believe that the lack of IPv6 connectivity,...
View ArticleClik here to view.
Windows can't access CIFS share via DFS link ,but it works if we access the...
Hi Guys We got a very strange problem, we are test our windows 8.1 currently, we found that our windows 8.1 client can't not access our existing CIFS share via DFS link, like\\domain.local\org\share...
View Articlecomputing of modified timestamp attribute in the schema partition
Hello,i have problems understanding the modifiedTimeStamp attribute especially in the schema. I found on MSDN and Technet that this attribute is computed from the whenchanged attribute of the same...
View ArticleExchange Server 2010 Domain Functional Level Migration Prep
All,This may be a simple question to most but I only been Administering Exchange 2010 SP3 for 2 years now and this is my first AD migration with Exchange so excuse my ignorance.Currently my Domain...
View ArticleError 364 An item with the same key has already been added with Azure Pack
I am configuring Windows Azure pack and have configured my 2 ADFS servers using NLB.The login to the tenant portal works fine, but when I try to login to the Admin site, the page errors and I get the...
View ArticlePowerShell or DSACLS adding permissions to OU
HiI was starting to like Powershell but the AD stuff is giving me a headache, what I am looking for is (what i think) quite simple....all I would like is this:allow the computer object called...
View ArticleActive directory OU deleted
Hi,Recently we have disaster in our organization as someone has deleted entire OU from active directory and we have the logs regarding the user who delete the OU but we dont have any logs to tell us...
View ArticleHow to set permission to change E-mail field on Active Directory user account?
We need to allow a user the permission to only update the E-mail field on the General tab of an Active Directory user account. What is the name of the the object for that field when setting advanced...
View ArticleHow to let help desk only update email in one OU
All,Question is I have set up help desk group in AD for a particular OU. I cannot find under the security tab for them to just be able to ONLY update the email field. I found that read and write...
View ArticleDomian Trust Issue
We are in the process of creating 2 domains. One is our old, and one is the new one we want to move everything to. I have the new domain created. I created a new domain, and a new forest; the old...
View ArticleBasic Monitoring Permissions
Hi Guys,Maybe a silly question, but I have been looking around for a solution and cannot find a clean way to achieve what I want to achieve.I have a team who currently have no administrative...
View ArticleAD Sites & Services - Replication Connections
I am trying to gather a better understanding of AD Sites & Services with regard to replication and to clarify some possible misunderstandings with a co-worker.Replication within a site occurs very...
View ArticleForest Configuration Operators
I'm commissioning a new Windows Server 2012 R2 AD DS forest for a customer and have implemented the ten recommended service management roles as per the Best Practice for Delegating Active Directory...
View ArticleCan we track or get the list of sites and subnets deleted from ActiveDirectory?
Can we track or get the list of sites and subnets deleted from Active Directory?
View ArticleClik here to view.
Delegate Control Not Working
I have an AD Group that has 12 users inside of it. I did a delegate control for this group and here are the settings I allowed them to perform.I've had users log off and back on yet they still cannot...
View ArticleWindows 7 machines lose Trust relationship frequesntly
I have a random bunch of computers that are Windows 7 part of my domain that are randomly losing their trust relationship on a random basis. I currently have a Windows 2008 Primary DC with a 2K8 R2...
View ArticlePrimary and secondary DNS best practice
Hello, I have 2 Server 2012 R2 domain controllers. DC1 has IP 10.0.0.1 and DC2 has IP 10.0.0.2. The primary DNS setting points to each other. I have added the secondary DNS pointing to the alternate...
View Article2012R2 DC - AD LDS Service Principal Names - Duplicates
HelloAfter installing the first domain controller with 2012R2, we see the following error in the directory service log on the new 2102R2 domain controller: The attribute value provided is not unique in...
View ArticleAD user security tab - inherit permissions
Hi,I have circa 150 user [1000 users total] who are not inheriting the security permissions. this causes an issue when delegated help desk staff try to reset passwords [becase the new delegated...
View Article
