Schema update when exchange 2003 is in the forest
Hi all,<o:p></o:p>We have a situation where the business have told us to update the AD to 2008 R2 however we have exchange 2003 in this forest.<o:p></o:p>We appreciate exchange...
View ArticleList Enabled Computers in Active Directory 2003 that have been Inactive for 4...
Hi Guys,I am struggling a little with this one.We have a legacy 2003 domain and require to find computers still enabled but have been inactive for 4 weeks or more.I am limited to using dsquery for...
View ArticleOrder of LDAP search response entries from Active Directory
Hellois the order of LDAP search result entry(s) followed by search result done guaranteed by Windows Server 2012 R2 Active Directory server?For example, while performing a search using a UPN and...
View Article2 Forests with trust connection issues
Here is the scenario....main forest xyz.on.ca is current active domainparallel forest ad.zyx.ca is running in parallelI have created a 2-way trust - and when i validate the trust i get "There are...
View Articleevent id 2513 DSA Attempting to set the desired authentication protocol for a...
I rebooted my 2008R2 DC yesterday and now I'm getting these events in the event log. I have 3 DCs, 1 2008R2 and 2 2003R2.I ran DCDIAG after the server came back up and all the tests checked out. -...
View ArticleSecurity Audit Logon Failure not showing up on DC but does on local client
Hello Everyone,I am having a hard time coming to a conclusion as to why an audit failure is not taking place on accounts. I have a test account that I am locking out on purpose. The local workstation...
View ArticleQuery FSMO role in ADSEDIT
When I run these cmd, is the result should give the same server? What the difference between those cmd?dsquery * CN=Infrastructure,DC=DomainDNSZones,DC=MyDomain,DC=CA -attr fSMORoleOwner dsquery *...
View ArticleTo add and remove uses from group
HI Experts,I want to give a service account rights to add or remove users to 3 security groups, is there any way to do this.RegardsAamirNA
View Articledns /ad transfer
On my network i have an sbs 2008 dc and a w2k12r2 dc running as vm's. The sbs crashed recently and i restored the vmdk file from an image backup i made. When i attempt to transfer the schema to the...
View ArticleAging / Scavenge not working properly
Hi All,I can see that some unused old DNS 'A' records. Multiple 'A' records and unused 'A' records.Although i have enable/checked Scavenge stale resources records for 7 Days but i can see that this...
View ArticleInstall-ADServiceAccount Error Message: An unspecified error has occurred
I have had Group Managed Service Accounts running before in our AD without a problem. The one server that ran all the policies needed to be updated so it was imaged and everything was wiped. When I...
View Articlenetlogon service not started
Hello Everyone,I have DC windows Server 2008 R2. on my dc i am not able to start my netlogon service please advise.Thank you,Kutub.
View ArticleRenew RDS Certificates
A while back, we've created a GPO that deploys certificates to machines so they can be used over Remote Desktop Services (RDS) - a model of the guide can be found here. Everything went smooth and the...
View ArticleHelp with Active Directory - Dynamic Security and Distribution Groups
Is there a way in Active Directory to either make a specific users not be a member of a dynamic distribution or security group even though the account meet the requirements for it? Or is there a way to...
View Article2008 R2 and 2012 DC Upgrade
Hi Team,Suggestions are needed.We have 2008 R2 physical box DC and 2008 R2 ADC VM. We recently moved all FSMO roles to ADC server.Now are planning to upgrade a 2008 R2 to 2012 R2 OS. We are going to...
View ArticleUser is not prompted to change password when logged in through VPN
When a user is logged in through VPN and "User must change password at next logon" is checked, he is not prompted to change password when connected through VPN. Also when password expires some users do...
View ArticleAdvanced FIND
Using Find Users,Contacts and GroupsADVANCEDI select my DOMAIN over tin the Console pane --> FIND--> ADVANCEDField --> Group --> Managed By --> Is Exactly Value ( I go to an...
View ArticleThe specified network password is not correct. (Exception from HRESULT:...
We have an error on our AD that is stumping us. We have code in a software product that allows the user to change his password after they have logged in.The code searches the AD and finds the user:...
View ArticleUpgrading Domain Controllers to 2012 R2
Hi,We have 2 domain controllers, one physical and one virtual. It is time to replace the physical server hardware and I thought I'd take the opportunity to upgrade to 2012 R2 as well.The current setup...
View ArticleSetting AD time correctly.
I have a Linux box that connects externally to ntp.gov for time setting and I wish to have my 2008R2 AD DCs connect to this to synchronise their clocks. As I understand it, I should set the Operations...
View Article