How long can FSMO holder be down for?
We have 2 DC's in our AD environment. DC1 is physical and holds FSMO roles. DC2 is virtual. I need to bring DC1 down and move it to another rack in our datacenter. The server will be down for no more...
View ArticleMigrate CA root 2003 to New Server
Hi, how are you ?? I have the following environment:A server (SRVCA1) CA Root 2003 R2 Enterprise. It has issued several certificatesA server (SRVCASB01) CA Subordinate 2003 R2 Enterprise....
View Article"Cold Feet" in raising domain and forest levels to 2008r2
Hi all,I have two domain controllers in our network. The primary one is a 2008r2 DC with all the FSMO roles. The second is a server 2012r2 running on as a VM in hyper-v. I had migrated a server...
View ArticleCan't pull Max Password Age with vbscrip
Ok, here's the setup. My company has been building a new 2012 domain environment. So far, all the servers in the domain are 2012.With the new domain, I have begun testing Fine-Grained Password...
View Article2012 R2 server, lsass.exe crashing when trying to promote to DC
Hi all,Having an issue trying to promote a 2012 R2 server to a DC.Lsass.exe is crashing regularly, faulting module being ntdsai.dll. But, the DC has not yet completed promotion, the SYSVOL share is not...
View ArticleCross forest certificate enrollment Server 2012 R2 - cannot copy templates
I have attempted to setup Cross Forest certificate enrollment in a Test environment. I am using the document AD_CS_Cross_Forest.pdf. from the Technet article...
View ArticleWindows 2008 Domain Fuctional Level Upgrade
We have recently upgraded our active directory domain and functional level to windows 2008. One of the domain controller was down during the upgrade but we had gracefully moved all the server roles to...
View ArticleNETLOGON 5723, 5805, 5722 from none existent computer
NETLOGON 5723, 5805, 5722 from none existent computer I have a single domain with Windows 2012, 2008 and 2003 domain controllers. Domain forest functional level 2003. All domain controller have...
View ArticleNtFrs Error 13568 Server 2003
I was going through the server events and noticed this error has been happening on the domain controller for some time (years). I have researched this and I can't seem to figure out the best way to...
View ArticleCan I import certificate files into a GPO?
Hi, I've got the request to rollout >20 certificates (root and intermediate, mostly from external CAs) to all Windows computers in all my AD domains. I've got the certs as files *.cer . The only...
View ArticleGPO for wifi sense
Windows 10 has a new feature called Wifi Sense. The feature connects WLAN adapter to any open hotspot in vicinity. It also shares WLAN passwords with friends over Facebook.how to completely disable...
View ArticleIs there anyway to implement the Domain users reset password from external...
Hi ,I own .net application which is running in my machine and that application is accessible using the domain users (Active Directory on windows server 2008 R2). I dont want to go to AD and reset the...
View ArticleDsReplicaGetInfo() failed
Hi Team,we are having three AD sites with each site having two DCs with OS windows server 2012 R2however in the dcdiag report i am getting below error ***Error: On server xxxxxxxx, DsReplicaGetInfo()...
View ArticleActive Directory Time Synchronization
I currently am in the process of upgrading my Active Directory Domain Controllers from 2008 R2 to 2012 R2.I have 2 domains, 1 parent and 1 child. Currently my FSMO role holder in the parent domain is...
View Articlehow long can a Windows Domain be down for
I am trying to prepare for a planned power outage. Our building will be with out power for 3 to 4 days (possibly 5 days). Our plan is to backup and shut down... 3 to 4 days later, bring everything...
View ArticleRID Numbering query
So, my RID master gives all DCs a pool of 500 RIDs. I just noticed that i have around 15000 security principles but my issues RID number stand over 47000. SO i ran the command to capture all SIDs...
View ArticleWhat's the Maximum limit of user groups in the AD
Hi,Can someone let me know what is the maximum limit of User Groups that can be created in AD (2008)?Regards,MJMJ
View ArticleADMT 3.2 Unable to verify the computer 'svr1.source.local' belongs to the...
We are trying to perform an intraforest domain migration. The source domain level is 2003 and the target is 2012. ADMT 3.2 is installed in the target domain on a server running 2012 r2. Their is a...
View ArticleDoes LastLogonTimestamp get updated when an ADFS authentication occurs
Does anyone know if an ADFS auth triggers an update of the lastLogonTimestamp attribute?
View ArticleCant edit group policy, Replication Warning
Hi All, I had a Single domain controller Server 2003 I have already installed 2012 Server on another physical server. Raised domain functional level to Windows 2003 Promoted 2012 server to Domain...
View Article