Domain controller failure
All,In deploying domains/servers over the last few years I've been following the guidelines and always building out at least two domain controllers. My environments are usually of the SOBO variety and...
View ArticleSetup AD without its server being the first one in the DHCP options
I'm trying to setup Active Directory, I'm trying to move from macOS Server's Open Directory. It seems I can set the AD role succesfully as well as DHCP. The problem is as soon as I set up AD my the...
View ArticleADMT Problem
Hello,using ADMT for cross site migration, the trust is set between the two domains.Porcess steps: 1- migrating groups2- migrating users3- migration computers4- migrating security translation.The...
View ArticleAD LDS Question
Hello everyone,I don't know if I'm posting in the right forum, but I couldn't find a LDS forum.Windows Server 2012 R2 with AD LDS installed and configured.Instance contains two partitions. I'm...
View ArticleRemove AD domain from Forest Root
Hey guys,So here is the scoop. There are currently two domains that have been connected in the past. Domain1.local and Domain2.local via two way and transitive.Domain1.local is currently the Forest...
View ArticleDCDIAG Errors and AD parent/child domain DNS suffix search list
We have an AD structure that consists of a parent and child domain. I have been doing some cleanup and repair of the existing DNS environment mainly using DCDIAG /test:dns /e /v. I have fixed a good...
View ArticleDisable ldap anonymous directory access in Windows server 2008 R2 SP1 Domain...
Hello Friends,During the security audit we have been suggested to Disable ldap anonymous directory access, i found multiple article which suggest to change the value for dSHeuristics, we need to change...
View ArticleIdentity synchronization Error
Hello Allim facing this issue after migrating one of our users to office 365.Unable to update this object in Azure Active Directory, because the attribute [ShadowCommonName], in the local Directory...
View ArticleRemove published trusted root certificate and all related items (e.g. AIA,...
Recently, I became alarmed when I noticed an unusual certificate (hereafter: "BadCert") in the Trusted Root Certification Authorities section of the Certificates MMC on a computer. I checked several...
View ArticlePowerShell Script for getting multiple group membership information along...
PowerShell Script for getting multiple group membership information for Group along with user name,company,user name,display nameit's not work properly "Get-ADGroupMember -identity...
View ArticleIs the internet needed for Active directory and why ?
Hi We have 2 Domain Controllers First I want to know if the internet required for Domain controllers or not If yes I need to know why and what is the best practice from Microsoft on this caseSecond...
View ArticleMoving the FSMO rules effect
I'm planning to upgrade my dcs from 2008 r2 to 2012 r2. I added the first 2012 r2 dc to my domain and its working fine.we have a GPO for the NTP server with wmi filter "PDCe filter". now I'm planning...
View ArticleProblem when LDAP-Querying the GC
Hello, in our Environment we have three Domains in one Active Directory Forests. Each Domain has two DCs. In one Domain i want to configure an Webapplication to (ldap) query the global catalog for...
View ArticleClear Saved Password on all servers
Hi when filtering the unsuccessful logins , i found 2 user have many logins failed actually the 2 users already changed their passwords , so that we get many unsuccessful login they didn't remember...
View ArticleActive Directory migration 2003 R2 to 2012 R2 with office 365 on board
Hello,I would like to know if it is possible to migrate the active directory from (2003 R2 to 2012 R2) without an impact to other services for exemple office 365 , sharepoint or other services on...
View ArticleNTDS Replication Warning with Event ID 1093
Hi,We have DCs across two sites and some replication issues are there, upon troubleshooting, we found a Warning with Event ID 1093 in affected DCs, this warning appears for some users. When checking...
View Articleprofile move help
We need to relocate user profiles stored in Windows 2003 servers to Windows 2012 servers. The user profiles is stored in \\win2k3\profiles and new destination in \\win2012\profiles We think to use...
View ArticleADFS 4.0 AD LDS Local Claims Provider passing group membership
Hi,I've configured a ADFS Local Claims Provider Trust to an AD LDS instance. I can pass through all kind of claims. But I want to kind of mimic regular Active Directory so I'd like to pass group...
View ArticlePort Requiremenet from Domain controller to Client PC
Dear Team,We found below all the ports are opened from client to Domain contoller but not opened from domain controller to Client PC.TCP and UDP 389TCP 636TCP 3268TCP 3269TCP and UDP 88TCP and UDP...
View Articlehow to install openLDAP server into RHEL without internet connection
I need to implement the OPENLDAP in RHEL 6.5.but my system doesn't have internet connection.is it possible or not????if without internet connection is possible please help me with us for the step by...
View Article