Domain controller setup temporarily with two IP addresses
I am upgrading our domain controllers from 2008 to 2012r2. I have a new dc that is 2012r2 (vm) and I have transfered the roles and GC. The last step is DHCP. I am in that process but ran into issue...
View ArticleLDAP Over SSL
Hi guys, I hope you have a great weekend. I'm trying to set up LDAP Over SSL. I followed the guide below and installed perfectly. I chose default options like...
View ArticleADFS Sizing
Team I am planning to build ADFS 3.0 & I would like to have High Availability for ADFS Servers , there are almost 17000 users who need to access the O365 service , Could you please help on this...
View ArticleDefault Server in nslookup not mysite.com
When I enter in nslookup I get:Default Server: UnKnown Address: 192.168.1.1Default Server should read : mysite.comIn DNS Manager under mysite.com in Forward Lookup Zones there are two entries:...
View ArticleGC status unavailable in windows server 2008 R2
Hi,we are using windows server 2008 R2 domain controller.we have 3 domain controller.My primary domain controller GS status is unavailable.please refer the below image.Thanks,Gayan
View ArticleFull fully qualifed domain address not resolving
HelloI currently have a 2008 AD set up (1 Domain controller, a VM). originally, i set up the Site in the AD as mysite.local and everything worked. i could typeping computername.mysite.localand windows...
View ArticleKdsSvc (Microsoft Key Distribution) won't start
The Microsoft Key Distribution Service is not starting on my DC (kdssvc.dll) and when I look at the event log under Microsoft\Kdssvc, I see the events:Event ID 4001 Group Key Distribution Service...
View ArticleWindows 2012 R2 DNS Server sporadic failures
Hi Guys;Recently i promoted three Windows 2012 R2 servers as Domain controllers to my existing multi domain forrest as a first step of a total migration to 2012 R2.I noticed that none of the new...
View ArticleReplication Issue, Schema mistmatch
I'm in the middle of doing a on premise Exchange migration from 2003 to 2013 using 2010 as an intermididate server.There are three DC's. One 2003 dc (sbs 2003) which was the primary dc before two...
View ArticleDomain controler // DS/DFS/System error
Hisuddenly one of our 2008R2Sp1 DC get a lot off error ... all others are OKSystem : EventID 4 The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server xxxxxDFS replication :Event...
View ArticleMoving a Server out of One Domain to another - How to Test?
Hi,I'm required to create a test plan regarding moving a server out of one domain and putting it into another, any suggestions of what should be tested? How do you test the correct GPO's are being...
View ArticleEstablishing Global Active Directory ( GAD)
HI All, Our parent Company is proposing GAD and want to know bit more about the setup. We are separate forest in different country . So if we are resource domain and if they are the Account domain...
View ArticleWhat are AD objects that have SID?
Dears,I have a question: what are the AD objects that have SID (security identifier)?ThanksRegards
View ArticleDomain migration with UPN suffix the same as target domain name
Hello,We are currently thinking of migrating domain (internal.local), this domain has UPN suffix (external.local). UPN suffix is necessary for Office 365.We would like to migrate to new domain...
View ArticlePowershell bug? PasswordNeverExpires shows "false" ou "NULL"
i´m trying to create a script to send mail and monitor users with password never expired enabled. The idea here is to make sure that´s NO USERS will have the pass never expire option enbaled, making...
View ArticleRaising forest and domain functional levels
I have a single forest / single domain at 2008 r2 functional levels.All DC’s have been upgraded to 2012 r2.We do however have some 2000 member servers in the domain. Will these servers have issues...
View ArticlesystemMayContain and MayContain
HiI have a interforest migration scenario with a 15 year old domain where there are 100 custom attributes that are bound to a class.Source domain is FFL and DFL 2003In the source domain the class have...
View ArticleFrequent error on AD DS Windows Server 2008 R2
I have an error that shows every day on my Active Directory ServerLog Name: Directory Service Source: Microsoft-Windows-ActiveDirectory_DomainService Date: 8/25/2015 8:43:54 PM...
View ArticleWindows 2008 R2 AD DS BPA Issue
Hi All,We are in the middle of upgrading our DC's from Windows 2003 to 2008 R2. All seems well, apart from 3 (W2K8 R2) boxes. The other 13 (W2K8) boxes don't show the issue.When I run the AD DS BPA...
View ArticleGlobal catalog says that user from DomainA belongs to Domain Users from DomainB
I am trying to get detailed information about a user's group membership using directory services queries to the global catalog. I don't want to useGetAuthorizationGroups() because it's flaky.There are...
View Article