KB3081320 - affect on domain clients Schannel negotiation
Hi.KB3081320 - https://support.microsoft.com/en-us/kb/3081320In the known issues for this update it is advised that:This update makes changes that are required for the Extended Master Secret Transport...
View ArticleEvent log Subscription Query
Hi,I have 12+ Domain Controller in my prod environment and I need to enable Event log subscription on all my DC's to forward security event log to central location. The purpose of this is, I need to...
View ArticleUpdating Java security exceptions without removing custom sites
On our network, we have an internal site that runs several Java applets. These applets require elevated permissions, and also require the primary site to be added to the Java site exceptions list. It's...
View ArticleReporting/Querying Active Directory - Accounts with User Must Change Password
Our personnel vendor decided that all employees need a login account (even those who work in the field and do not regularly use a computer). Therefore, they used our identity management solution and...
View ArticleUsing Microsoft LAPS and Deep Freeze
Hi,I have a question about using Microsoft LAPS in an environment where Deep Freeze is in use on 250+ Windows 7 clients. Is it possible to allow LAPS to only update the password during the thawed...
View ArticleWindows Server 2016 TP4 cannot install via udisk
hiI've download Winsrv 2016 TP4 and make a udisk media with the ISO, but during I install it to my PC, during starting the install windows, it reports an error"Could not find install.wim.."balabalaI...
View ArticleScript to change home directory
I need to substitute a server address with a DFS one in each user's home directory. Unfortunately only a portion of the string is constant. Bellow is an attempt in Powershell that works but is clumsy....
View ArticlePC's able to access via remotely even after disabled.
Hi All,I recently disabled couple's of unused PC's in AD. I have noticed that, I'm able to access them via remotely even after disabling them. Kindly advise. Thanks in advance
View ArticleSceCLI 1202 - Security policies were propagated with warning. 0x534 : No...
Hi,Server 2012 R2 Domain Controller:I get this error :Security policies were propagated with warning. 0x534 : No mapping between account names and security IDs was done. Advanced help for this problem...
View ArticleW2K3
Hi.A few years ago, I installed 2 DC Windows 2003 STD, 1 EXCH 2007 and other servers at our customer. On ADS, I configured 2 domain: something.local and something.it. Now, I would add other domain...
View ArticleUserSharedFolder Attribute
HiCan someone please provide detailed description of "UserSharedFolder" attribute of user object in Active Directory.The following definition is available on MSDN "The attribute specifies a UNC path to...
View ArticleMultiple problems with Active Directory - 2008 r2 - At the end of my rope
Hi all,I'm completely lost with errors on a Server 2008 r2 AD.Here's my symptoms:Computers are losing trust relationship - unable to rebind - Error "The following error occurred attempting to join the...
View ArticleNeed to keep Domain Contollers IP addressed after up grade from 2008 R2 to 2012
Good evening,We have many servers and devices and Linux servers that have the IP embedded into each device pointing the the domain controllers at different sites. Is there a step by step on how to...
View ArticleDeny users from certain AD container to be a members of local administrators...
Hello.Users in our company user accounts are not members of local administrators group on computers they use. Some of them have separate local account that is a member of local administrators group. Is...
View ArticleUsing a public DNS name internally that is owned by someone else
My company, call it CompanyA, is using an internal active directory namespace (and DNS) of CompanyA.net. This domain is used to access internal resources for a subset of the user population.However,...
View ArticleNeed some assitance deciphering event id 4933
So here is the event:I am not sure why this is registering as an Audit Failure. Can anyone shed some light on this? Replication is running in this domain without issue as far as I have been able to...
View ArticleWhat are the drawbacks to have computers in a domain and users/ressources in...
Hi,we have an Active Directory domain oganized like this : 1. DomA with approx 1500 users; 1000 computers and 120 servers 2. DomB which is a child domain of DomA with 500 users, 100 computers and 20...
View ArticleHow to migrate windows 2008 DC to new windows 2012 R2 server
Hello,I want upgrade old Windows 2008 DC to Windows 2012 R2 in another server. I'd like to backup all DC information (AD, DHCP and DNS) from old server and put them into new one, so new server becomes...
View ArticleAlowing users to manage their Active Directory profile picture?
How can Sharepoint be used by employees to upload photos to Active Directory so that it appears in Outlook, Lync, etc.. From my research, only an admin can upload the photo to AD and there is no way...
View ArticleWindows 10 cannot join domain or access shares - The specified network name...
Hi All,I got a peculiar problem that I cannot seem to understand. I suspect there must be something wrong with our domain configuration, as no Windows 10 machines (upgarded or clean install) is able to...
View Article