Active Directory Domain Services could not resolve the following DNS host...
Hi,I have added a new DC (W2k8) to a domain. I want to transfer roles from original w2k3 DC to the new server but want to resolve the issues first. I have done dcpromo but have errors in AD DS and...
View ArticleTime source resets after server reboot to Free-running System Clock
All our servers (Windows 2008 R2) are configured to synchronize to the AD hierarchy. Sometimes the time source of the Windows time service is reset to Free-running System Clock. This happens as far as...
View ArticleActiveRoles usage after Exchange Org removal
Hey guys, I know my question is very Quest related, but I know here are the most guys working with it, so I hope that it is not completely mis-placed.We got a configuration with multiple account...
View ArticleDesired authentication protocol for DSA fail after DC-reboot
Hi!We have experienced authentication and replication problems after restart of our Domain Controllers for a quite long period (1-2 years). Replication problems is almost always solved with an extra...
View ArticleUAC settings are different between 2008 and 2008 R2
Hello All,We have added settings "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" in a GPO and it is applied to all servers.We have set "Prompt for...
View ArticleDelegating create/modify record rights to a single DNS zone
I have a requirement to allow one team of users to create records within a single DNS zone and edit those records they create as necessary. My understanding, based on testing in my lab, is that the...
View ArticleRestoring Active Directory to Different Hardware - Server 2008 R2
I'm currently in the process of working on disaster recovery within my organization. I have scheduled full, bare metal backups of important servers such as the mail server and the domain controller, in...
View ArticleAD FS Relying Party Trust Hide in Dropdown
We have a few Relying Part Trusts that we do not want to be displayed in the IdpInitiatedSignon drop down for "Sign in to one of the following sites:". What is the best way to hide it from being...
View ArticleDomain Controller fails to start after installation of latest security updates
Hello.I run a single PDC in a Windows 2003 server. No other DCs are in my network.After the latest installation of security patches via automatic update (KB3067505, KB3068457 and a few more), the...
View ArticleADFS 3.0 External Authencation
HelloHow does ADFS identify that a user is coming in via a external connection thus only offering certificate or forms based authentication ?I have users that connect via a VPN which uses a shim and...
View ArticleDirectory Error after migrating ESX to HyperV
We have recently migrated few SharePoint webservers from ESX to Hyper V. We have not migrated AD. We are getting COMException on all our applications only from the migrated servers. All other servers...
View ArticleActive Directory Password Synchronization by ADConnect tool
HI,Is it possible in ADConnect tool to configure AD synchronization without synchronizing passwords?If yes, then how it will work for the user's application login?Thanks.PSA
View ArticleHow to create Active directory user who can add User but cannot delete
Hi,I have to create several users in Active Directory. The Users i Created can also create other users but they cannot delete any thing or any user created by me or by him/herself. Please help.ThanksSD
View ArticleOld Folder Redirection path and policy woes
We had a group policy that was redirecting user folders to a share on a server that died, with no backup. We were able to recover 85% of the users data and migrated it all to a new VM, and setup a new...
View ArticleHow to access Active Directory via Proxy in java?
I have application say 'X' which is behind proxy server. From this application I need to call Active directory say 'Y'. Currently we are able to make LDAP call successfully between X and Y when proxy...
View ArticlePlan for AD Events logs for at least 3 months
Hi,How can I plan for AD Events logs for at least 3 months? This can be done via Event Log Policy, right? If so how can I determine the size needed for the logs for three months?
View ArticleCross Domain Authorization is not working
Hello,We have configured Active directory services on Windows 2008 R2 server. We are trying to authenticate LDAP user from the client. But in the below scenarios Authorization is failing.Cross Domain...
View ArticleDomain Join operation was not successful. Access Denied !
Hello,I am facing a weired problem while adding a Server to our domain.I get following following error message:"The join operation was not successful. The could be because an existing computer account...
View ArticleADCS
Hello team,Can I any one explain me about ADCS ( Active Directory Certificate Service) in layman term( simple language), I am getting confused with the article. All I understood is that its for...
View Articlecommand line net group
i can view some users in some group but others no.those groups are both security group, but running the command i can only view users from the other.command net group <groupname>are there any...
View Article