Storing BitLocker recovery keys in user object instead of computer object
We use non persistant virtual desktops and when a user logs out their computer object can sometimes be deleted and there is no guarantee that the user would receive the same desktop each time.We have...
View ArticleUpgrade ADFS 2.0 Standalone to 3.0
I currently have a production environment using ADFS 2.0 and ADFS 2.0 Proxy for CRM 2011 on windows 2008R2 servers. I am looking to install ADFS 3.0 on Server 2012 and use it for a new installation of...
View ArticleADFS 3.0 - Implications of editing the onload.js file
Hello.I have seen a couple of posts around the internet about changing the sign in input validation for ADFS 3.0 to allow users to authenticate without needing to supply the domain associated with...
View ArticleCan't use NETDOM to reset password for DC that has Target Principle Name is...
I have a small network with two DCs, My secondary DC fails to replicate via site/services, and returns a "Target Principle Name is incorrect" I am running Windows Server 2008 R2 on both DCs.I am sure...
View ArticleExchange 2007 - cannot receive from particular users
Hello,We have a situation where a relatively new user (current month) has no trouble sending/receiving email amongst other users internal to our Exchange organization. However, the same user cannot...
View ArticleWindows Server 2008, Event ID 521
Hi All im always encountering this error. on my windows Server 2008.I already did this resolutions : - Reinstall windows server backup - Patch the latest update on the server - Restart the server -...
View ArticleLogon script
Hi all,we want to remove a expired certificate from client PCs, we created a power shell script and added to logon of Group policy in DC, the power shell script works well when run on local clients,...
View Articlecannot access the network due to time difference between your server and...
Hi all,I am new to this forum.I am getting the following error on client machine.cannot access the network due to time difference between your server and clientBut I dont have the time difference...
View ArticleCannot delete trust between domains
Hi all,I have recently removed two-side forest trusts between two domains. I have connected to Domain1 and press Remove in DomainsAndTrusts -> Domain1 -> Properties -> Trusts. I choose to...
View ArticleAccount Expiry
HelloI know I can set an account to expire on a give day but is it possible to set an account to expire at a give time? Example: set account to expire 29/09/2015 @ 17:00RegardsEwan.
View ArticleAdd atributes
hii am add 4 attributtes in active directory i will upload data in ad csv format through and i am using tool wise soft bulk ad user manager attributes not updated . pls help not set mangers attribute...
View ArticleSSO issue in Selective AD Trust Environment
Hi,We have Selective Two way trust between test.ik.net and test1.kb.net . In that, for a web application , SSO is not working in the Trusted Domain and its working fine in Trusting environment.DNS...
View ArticleForce Logoff at specified time - Even if computer is Locked
We need to setup a task to force logoff of all workstations, even if the user has locked their workstation.I tried to use the logoff.exe and the shutdown.exe action in a GPO policy (not the default...
View ArticleMigration from Redhat Directory server to Active Directory
Hi Gurus,I am in the process of migrating all the data from redhat directory service to Active directory.The procedure followed was exported the data from redhat directory server using Jxplorer and...
View ArticleActive Directory: Delegate permission to move users to child OUs. (same...
I've followed this article here to delegate moving users to a group. I set the permissions of 'Source OU' and 'Destination OU' at the same high level OU (for example 'OfficeA'), so the group could...
View ArticleActive Directory Security Group membership based on specific attribute
Trying to figure out if there's a way to create an AD security group and populate its members with user objects that have a specific attribute. Example: ABC Security Group User XYZ has attribute...
View ArticleReporting on changed attributes
I have a script that runs right now that shows me accounts that were modified in the past 24 hours. It does the job but reports on any kind of change (obviously). I want to narrow this down to just...
View ArticlePointF in .NET Framework is not present for Device Applications
Hi,I am working on an embedded medical device that takes inputs from various sensors and uses the data to display various graphs using .NET Framework 2.0. The OS used is WinCE 6.0, the .dlls are...
View ArticleUnable to edit in arrtibute editor with ADCS and ADSIEDT
I am trying to open attribute editor for AD or DL objects in Azure AD than it shows Error : There is no attribute registered to handle this attribute typePlease guide
View ArticleForeingSecurityPrincipals Cleanup
Hello,a customer is asking us to cleanup the ForeingSecurityPrincipals container in a Windows 2008 Domain.The situation is they had a trust relationship with a Windows 2000 Domain, and using the ADMT...
View Article