Windows 2003 AD4UNIX schema extension
Hi all,Sometime last decade we installed AD4UNIX onto our Win2k3 Domain Controllers.Now it seems this schema extension is blocking updates to the AD schema.I have gone through the schema using Active...
View ArticleChanging expired password remotelly on a non domain computer
Greetings! We have same users that never connect to network on authenticated computers. They connect only through Webmail (OWA on Office365 Exchange Inline, that uses ADFS for authentication).Whent...
View ArticleLock Down Server Access
Hello,We are operating in a Windows Server 2008 R2 domain and I have been asked to lock down access some servers. By lock down I mean there are only 5 administrators that need to be able to access a...
View ArticleWindows 2012 R2 DNS Server sporadic failures
Hi Guys;Recently i promoted three Windows 2012 R2 servers as Domain controllers to my existing multi domain forrest as a first step of a total migration to 2012 R2.I noticed that none of the new...
View ArticleUser and computer affinity for a DC (server 2008)
We have 3 DC's in our environment (Server 2008)I have noticed if one of the DC's has issues (Like Sometimes \\dc\sysvol stops working -- dont know why)The users who have this DC as logged on one cant...
View ArticleMEMBER OF missing groups when viewing as help desk user
2008r2 Domain Controllers When I view the MEMBER OF tab of a given user with my admin account, it lists all groups the user is a part of as expected. However when I view the MEMBER OF tab of the same...
View ArticleHow to create and add a new user to existing group in Active Directory via...
I am a beginner and I try to implement client in Java for Active Directory. I would like to create and add a new user to AD. So far, I have written the following code:import java.util.Hashtable; import...
View ArticleWindows Server 2003 Migration
We have a server installed with Windows server 2003.Using this server for AD/FTP/DHCP and as well as WEB Server.Now we want to migrate this server to Windows server 2012 with higher end...
View Articlecommand line net group
i can view some users in some group but others no.those groups are both security group, but running the command i can only view users from the other.command net group <groupname>are there any...
View ArticlePowershell bug? PasswordNeverExpires shows "false" ou "NULL"
i´m trying to create a script to send mail and monitor users with password never expired enabled. The idea here is to make sure that´s NO USERS will have the pass never expire option enbaled, making...
View ArticleUnexpected Results in LDAP Policies
In troubleshooting an issue with a third party application which uses AD authentication, I needed to check the MaxConnections in the LDAP policies. I found that MaxConnections was set to the default of...
View ArticlePreventing a service to run during machine startup if DC not available
Hope to get some help on this:My objective is to prevent a in-house developed service to run if Windows cannot connect to the domain controller during startup. The reason for this is that some old...
View ArticleMoving a Server out of One Domain to another - How to Test?
Hi,I'm required to create a test plan regarding moving a server out of one domain and putting it into another, any suggestions of what should be tested? How do you test the correct GPO's are being...
View ArticleShare Drive
I have a share drive on a server. From my desktop, I can access that share drive,\\servername\sharedfolder no problem, but on the server itself, if I try to go to\\servername\sharedfolder I get...
View ArticleWho created that user?
I need to setup audit on Domain Controllers to log who creates users.Ie: if me, with my login user xpto-admin created user01, I need to be possible to realize that user01 was created by xpto-admin. Is...
View ArticleLDAP_MATCHING_RULE_IN_CHAIN query 13 times faster on AD LDS than AD DS
Hi all,I've been busy in a Lab environment with a LDAP_MATCHING_RULE_IN_CHAIN query to validate its performance on a Windows 2012 R2 domain controller. The query comes from IBM's PureApps...
View ArticleActive Directory Migration
I wish to migrate domain controllers from one datacenter to another datacenter. However some applications are dependent on the name or ip address of the domain controllers. I cannot retain the name or...
View Articleclient traffic between parent and child domain
What is the expected traffic (and why is it generated) between hosts from parent to child domain (and vice versa)? I understand all these ports get hit between the Domain Controllers...
View ArticleIssue finding which logon server a remote workstation is currently Connected...
Hi Guys,(Get-WmiObject-Classwin32_ntdomain-Filter"DomainName = 'domain'"-ComputerNamemade_up_workstation_name).DomainControllerNameWhen I run the above on my workstation it gives the same value as...
View ArticleDFS Migration
What should be the considerations and questions asked for a successful DFS migration.
View Article