Granting permissions to all users except one in a group over an OU
Hi,I have three users - test1, test2, test3They are in a Group "TestGroup".I have a "Test OU" to which I would like to grant permissions to "TestGroup" users except one use ., i.e., say "test3".Is it...
View ArticleADMT 3.2
Hello All,My first question on this forum,Environment : 1 forest with root domain toto.org and three child domain apac.toto.org, emea.toto.org and nsca.toto.org, DC on Windows 2008 R2 SP2 up to date,...
View ArticleADFS 2.0 "time window" configuration question
We have problems with ADFS SSO to a cloudservice, it seems like their clock/time sometimes is "earlier" that ours and we get an error:Assertion condition was not fulfilled 2013-01-08T15:19:15.393+01:00...
View ArticleDCPromo and Adprep
My 2003 backup Domain controller died, i remove it from AD after a lot of trouble using the ADsutil. i am trying to add another DC using DCPromo but keep getting the message run Adprep /Forestprep...
View ArticleAdvice on AD design
hi there,I've been asked to look into our current AD design. We currently have 200 users across 4 physical sites. There is one domain.As the business is project based the sites are increased and...
View ArticleCreating a custom class/object and using it in active directory
Hi,I would like to create a new object in my active directory. I can create it via mmc->Schema Console->Classes(Right Click)->New Classand add attributes to it by Right click (Created class)...
View ArticleOne Way Trust and GPO Processing
With a 1 way trust Domain A trusting Domain BUsers will reside in Domain B, Resources will reside in Domain A. Mainly VDI resources.Will the GPO's from Domain B process if the users login to Domain B...
View ArticleSetting up home folders on Windows Server 2008 R2 for folder redirection.
Right not very familiar with GP but i have been tasked with researching it and finding a way to create home folders when creating new accounts.I am using windows server 2008 R2 and have a mixture of...
View ArticleWindows 7 and AD LDS
HelloI have installed the AD LDS for windows 7 and I was following this tutorial: AD LDS Getting Started Step-by-Step GuideBut when I try to connect to the instance with the ADSI Editor I get the...
View ArticleADMT migration AD exchange attributes
Hi, would appreciate some claification on AD exchange attributes please. I am about to embark upon a AD and exchange migration.I have a test environment with test accounts and test mailboxes. I am...
View ArticleLink for branch down - AD
Hello all,I have AD running Windows 2000 !!...(upgrading sooon..;-). I have several branches....whereby in each branch i have a DC. PDC is in the main office.sometimes we encounter issues over the...
View ArticleWhether the backup domain controller contains MD5 checksum data to source the...
Hi,I'm documenting a procedure to do a system state backup of our 2003 Domain. During that process I've run into a question as to how to name the backup .bkf file. The following Microsoft Article...
View ArticleNameErr while connecting ADAM service using ADSI Edit
Hi,I have ADAM installed in server to extend BladeLogic schema for software deployment. I have local admin access also on the server. While connecting ADAM paritition using ADSI edit, I get following...
View Articleadminsdholder and account lockout (password attempts)
Server 2008 R2Will the adminsdholder function unlock a privileged account that has been locked out due to maximum password attempts?
View ArticleGetting error message while using adprep /forestprep
Hi,I kept existing windows 2000 native mode and Without registeing schmmgmt.dll. I have transfered roles from windows 2003 domain controller to windows 2008 r2 adc. Still 2003 domain controller...
View ArticleWhich Computer Object attribute can tell me when the object was placed in an OU?
Hello,Its there an attribute of the Computer object in AD which can tell us when the object was 'placed' in a OU? When-Created and CreateTimeStamp indicates the date the object was created, so this...
View ArticleActive Directory ADAM (LDS) Question
Can you still use/sync a Windows 2003 R2 ADAM instance with a Windows 2008 R2 Forest/Domain functional level Active Directory environment? Is ADAMsync still the correct method for doing this?
View ArticleDNS/Group Policy Issue
My organization is having an issue with GPO application which is possibly caused by DNS. Most Directory activity seems to be working fine but group policy is failing to apply on some machines and I...
View ArticleDelegation Permission issue in AD
HiI have delegated helpdesk group on one OU in AD 2008R2 with user account management.But I can see in in that OU, some users are not gettting inherited delegation permission.I found on user account...
View ArticleClik here to view.
Password policy is active but .......
Hi In our company domain, we have implemented password policy for particular group.In the password policy , password should not expire setting is set.And found the same policy is effective for the...
View Article