Active Directory Replication Redesign
Hi Folks,We have multidomian heirarcy with A_domain.com(forestroot) and B.A_domain.com(resource), C.A_domain.com(accounts) [25+ domain controllers in branch sites for accounts domain]We have hub and...
View ArticleCan I run ADMT Security translation while user is logged on to source domain?
Hi,Rather simple question. Can I run security translation in add mode while my users are logged in and working in the source domain without problems? I've been told that the users should be logged out,...
View ArticleWindows 2008 R2 Domain Controller NIC replacement
HiWe are changing the 1 Gb NIC of Domain controllers, will do the change with FSMO owner first and once it's up we will proceed with second DC. Is there any special procedure with changing NIC for a...
View ArticleWildcard certificate with two diferent domains
Hi people i need generate wildcard certificate for *.domain1.com and *.sub.domain2.comone second level wildcard and one third level wildcard. It is posibble to include this two domains in one wildcard...
View ArticleMaxTokenSize value implemented but not working
Hi, we've had some intermittent issues with maxtokensize errors on Windows 7 and Server 2008 computers in our environment. We implemented a group policy to push out the key...
View ArticleDNS configuration changed
Hello,i have multiple domains with DNS zone transfer configurations these configuration has been changed from allow zone transfer to be unchecked is there any security id's can provide me who changed...
View ArticleOU Restrictions
HiI want to create Security boundary for OU, so that login in to computers from one OU should be restricted to users from other OU.Consider my OU as a geographical city, we are having 100 cities (OU)...
View ArticleChild Domain Only for Computers (Endpoints / End User Laptops & Desktops)
Our Org is working on Re-Designing Active Directory, Due to following:1. All end user machines are managed by a vendor - How appropriate is it to create a separate domain specifically for Computer So...
View ArticleDomain Controller - IP Subnet Migration (Best Practice)
Hello Experts,Here is our current environment in our Domain -DC1 - Windows Server 2012 (PDC, RID, Infra, Schema & Domain Name Master) &DC2 - Windows Server 2012 (ADC)DC1 & DC2 are of...
View ArticleServer 2003 + Server 2012 - "Operations Master"
HiI am deploying an Azure 2012 Server that I am going to join to my existing domain as an additional DC. My current DC is a SBS 2003 serverHow would I join and configure the 2012 server to the domain...
View ArticleMoving an Object
Hi -I am working in a Windows 2008 R2 environment. I have an OU that has the "protect this object from accidental deletion" box checked, which puts an explicit DENY on the "Delete All Child Object"...
View Articleauthentication ports
Hi, I have my servers in DMZ say abc domain and i have servers in my internal domain say xyz.com I want to access the admin$ share from internal domain to dmz domain by IP Address. Is it possible if it...
View ArticleRODC shows Netlogon Event ID 5723, 5805 for DC's in a trusted forest
In my forest, I have a 2 way transitive trust with another forest. The trust is set to allow forest-wide authentication. We have an RODC in the data center where the remote forest is located. In the...
View ArticleStop Users from Using "Password" In their Password
This might seem like a basic question but I figured I would not need Fine grain policies to achieve this. I have a set of users that enjoy changing their password from "Password1" to "Password2" and...
View ArticleNew server joins windows 2008 R2 domain but returns errors.
I think this is firewall related. I am trying to get all of the ports open on my Cisco 1921 router to allow seamless traffic within the domain. The two networks are on separate subnets they are on...
View ArticleWindows Server 2016 TP4 cannot install via udisk
hiI've download Winsrv 2016 TP4 and make a udisk media with the ISO, but during I install it to my PC, during starting the install windows, it reports an error"Could not find install.wim.."balabalaI...
View ArticleSite assignment for Group Policy for Direct Access site with no Domain...
Some help with understanding what's going on required.I've setup a new AD Site for our Direct Access clients (Windows 8.1). The subnets are defined correctly. However, I've not assigned any specific...
View ArticleWho will be crowned the last Windows Server Guru of 2015!!
Here it is folks!THE FINAL CHALLENGE OF 2015!!Step up all known Gurus currently active!Let us see the year out in style, with some final thoughts and knowledge from everyone we love and follow in the...
View ArticleInternal DNS preventing load company website correctly
Hello dear forum gurusI have a problem with my DNS server When primary DNS in ipv4 configuration in my local network on any machine pointing to my local DNS server my company web site do not load...
View ArticleEventlog subscription not successful in production domain controllers
Hi, I have enabled Advanced audit policy and then I have created event log subscription ( Source Initiated).But its not working and the events are not moving to collector servers Forwarded events. The...
View Article