Tracking down where/how a certificate is being deployed to all domain computers
Hi,As part of my AD 2003 to 2008R2 upgrade, I am poking about in the domain to see if there are any certificate authorities configured, etc.I have found that there appears to have been a windows 2000...
View ArticleChild Domain vs Trust Relationship
So here is the scenario- We are in the process of centralizing IT to a data center in a single location. I currently have 12 different operating companies that need a shared security and exchange...
View ArticleDCDIAG reports problem but not sure what to do about it...
HelloI am about to migrate an installation from W2k3 (SP2) to 2008. My first step was to run a DCDIAG /V and low and behold I actually see some errors whihc I guess I should correct before going...
View ArticleUnable to authenticate to domain\administrator AD Server 2003 R2
I am unable to authenticate with my domain\administrator (SID 500) account either as a service or at a login prompt.I get this generic error:"The System could not log you on. Make sure your User name...
View ArticleActive directory issue
Hi All, need assitance with a weird issue.. We are able to search few accounts in Child domain but not in entire directory in active directory (ADUC). Please note this objects are not lingering...
View ArticleCheck for Kerberos ticket
Really simple question. How can I check that a certain user is using Kerberos authenitcation and not falling back to NTLM authentication?Would it be as simple as getting the user to run klist on their...
View ArticleServer for NIS SunRPC Port
I would like to know how I can restrict the possible range of ports that Server for NIS (nissvc.dll) uses. Every time it starts up it starts under a different port in a range somewhere around 550-1000...
View ArticleRename a Single DC without ADC
HI!We need to rename a single Windows 2003 R2 DC without transferring its roles to an ADC because we are preparing a new windows 2012 DC with the same Netbios name as the current one but the difference...
View ArticleWhat is AD attribute of Protect Delete of OU and user ?
In windows 2008 , there is Protect Delete function of AD object.What is AD attribute of Protect Delete of OU and user ?
View ArticleCan't promote Windows Server 2003 member server to DC
I have a single domain Server 2003 forest with two domain controllers. One of my DCs, which happened to hold all the FSMO roles, died earlier this week. I seized the FMSO roles on the remaining DC...
View Articleupgrade from Windows 2003 Enterprise to Windows 2008 Enterprise SP2?
Current clients of the network include Windows XP Pro and Windows 7 clients. There are three Windows 2003 SP2 Enterprise domain controllers. I need to move to a Windows 2008 AD environment.1) Is it...
View ArticleDomain Trust and User Permissions
My organization is split up into two domains, a corporate domain (example.net) and a domain for external resources (example.biz) with a one-way transitive forest trust allowing .net users to...
View ArticleWhy delegated permissions are not inheritaning automatically from OU in AD
Hi I am facing the issue that "delegated inheritable permissions from this object's parent is unchecked in users objects in OU in AD 2008 R2 environment. I checked belwo article but the workaround...
View ArticleNetlogon and SYSVOL shares are not created after DCPROMO in Windows 2003
Hi, This is weird! I just do DCPROMO to add DC role in my Windows 2003 and the NETLOGON and SYSVOL shares are not created. Is it normal or it takes time to be created?
View ArticleDomain Trusts
Hi Sir/Mdm, I would like to know for Windows Server 2008, can I restrict domain administrator in the trusted domain to modify or view the domain administrator acct in the trusting domain. I also...
View ArticleAdminSDHolder Object Affects Delegation of Control
Hi I am facing the issue that "delegated inheritable permissions from this object's parent is unchecked in users objects in OU in AD 2008 R2 environment. I checked belwo article but the workaround...
View ArticleAD Trust - Conditional forwarder aganist secondary DNS zones
We are recently acquired a company and plan to setup a two way forest level trust ,i would like to know the advantage/disadvantage of setting up DNS conditional forwarder against setting up secondary...
View ArticleDCs on VMs and HyperV Host as Members
Hi,I have got two Physical Servers which will be running Windows 2008 R2 - HyperV and i will be hosting one VM on each Host.VM1 on Host1 - The VM1 will be configured as Main Domain Controller VM2 on...
View ArticleADFS SSL certificate replacement
Hi guys,Not sure if I have the correct forum, but I have a simple ADFS question. We have ADFS working with Office365 and we need to replace our public SSL certificate for fs.contoso.com. When we...
View ArticleHave multiple issues in domain
Hi,I've few problems in my domain environment. Please help me to resolve this issue.The domain setup as follows - One forest and One domain. Within a domain 4 DCs running with WS08 R2 SP1.2 DCs in...
View Article
