Forest wide Replication Partners - Best Practise
I have recently started with a new employer and have been tasked with looknig through their AD and making any suggestions for changes / improvements.Briefly there is a main head office with 3 DC's and...
View ArticleTesting LDS functionality
Dear Colleagues,I have installed an LDS server to support multiforest authentication for Cisco UC Manager. I have extended the schema, imported the affected users and finally I gave the new LDS server...
View ArticleI need to be able to Cut and past across volumes and drives. Not copy/paste....
OK, I have looked all over the internet, all up and down your forums. There is no one giving anyone the answer we really need. The question is simple:How do you set the Drag and drop features on your...
View ArticleDomain Trust - SID's not resolving
I have a one way trust with an external domain. I am a domain admin on my domain and have a domain user account in the remote domain (domainA). My domain (domainB) is trusting the remote domain. We...
View ArticleAD with FSMO down for days?
Our agency is moving over the holidays and my DC with FSMO roles might be down for a day or two. I have some backup DC/GC servers in remote offices. Should I transfer FSMO rolls to one of those servers...
View ArticleCan't validate trust against RODC
Hi,We have a customer that we have setup a one way external selective trust to. We have a VPN tunnel setup between us and them. We have 2 RODCs setup on our side for them that are in their domain....
View Articleadfs 2.0 Hardware Load Balancer configuration
Hello All,Does anyboy know the HLB configuration for ADFS 2.0 Server (WIndows 2008 R2)?Affinity: Source IP AddressAlgorithm:Least ConnectionsSticky COnnectionTime OutRegardsJOse Osorio
View ArticleSyncing road warrior's AD password.
We recently flagged a large number of accounts to require password reset. We also have a policy in place that only allows users to change passwords once every XX days.Now are running into a situation...
View ArticleGPUPDATE /force warning even folder redirection has not configured
Hi All,When try the GPUPDATE /Force on any of the domain machine we are getting the warning thatWe are having 2008 r2 domain and forest function levels and Windows 2008r2/Win 7 client machines." The...
View ArticleHow to purge from AD
I have AD where the PDC is trying to communicate to another DC that is no longer online so i am looking at runningrepadmin /removelingeringobjects ServerName ServerGUID...
View ArticleRODC trusted domain cannot resolve resources (users/groups)
DomainDMZ one way trust (External with Domain-wide authentication) with DomainLANDomainDMZ sites & servicesSubnets ------- 10.0.20.0/24 10.0.24.0/24 10.0.40.0/24 10.0.41.0/24 10.0.42.0/24Sites...
View ArticleWindows 2012 Active Directory upgrade
Hi,I was just going through below article for planning AD upgrade to WIndows 2012 based environment, i got few ideas but not able to to find clear articulation about Windows 2003...
View ArticleClik here to view.
Custom Attributes - Which permission option?
HiI need to enable a service account to write to the Custom Attributes.Which options is this set from the AD Delegate access wizard?These attributes are visible in Exchange Management ConsoleThanks,...
View ArticleClik here to view.
Installing a DC in Windows Server 2012
Hello!Can't type in the DSRM password while installing the first Win2012 DC:???Thank you in advance,Michael
View ArticleClik here to view.
Rename a Custom Attribute
HiW2K8 domain + Exch2010.I need to start using Custom Attributes is it possible to rename to whatever I want or is this a locked field in Schema?Thanks, MMaelito
View ArticleAuto email notification to system administrators if users do not login for...
As from the title above, basically is to allow the system administrators to be notified that these users did not login to their PCs for at least a month and above, and therefore is required to disable...
View ArticleRetention
Hi!Is it possible in Windows 2008 Domain to keep the deleted active directory objects somewhere in a container if account operators delete them?Thanks.
View ArticleActive Directory Users and Computers Ask For Password
Hello frnds, plz help in solving this problem.......... when i login on Domain controller with a user id that is not part of administrator group and run Active Directory Site and services...
View ArticleMigrating SYSVOL to DFSR, One Server 'stuck' when using getmigrationstate,...
Hi,I am upgrading our 2008 R2 Domain Controllers (All Writable, no RODC) to DFSR for SYSVOL.2 of our DCs are out our main head office, and 1 DC is in a small office (in a seperate site on a different...
View ArticleLDIFDE No Such Attribute
I am trying to Import users with LDIFDE but I'm getting an error on the second user. The error isAdd error on entry starting on line 20: No Such Attribute The server side error is: 0x57 The parameter...
View Article