Domain Trust with Selective Permissions - Object permission Allowed to...
http://technet.microsoft.com/en-us/library/cc738653(v=ws.10).aspxReferencing the page above: My goal is to have all computers in the domain allow authentication from the object I am adding. In other...
View ArticleDNS Forwarding
I'm wondering if disabling recursion on a public-facing dns server which accepts forwarded resolution requests from private network servers is truly a feasible way of mitigating the risk of DDOS...
View Articleweird AD replication issues
Hi All,I've recently taken over a network from a previous admin. Site was running a single 2003 Std SP2 DC. We've just got a new server and I've chucked 2008 r2 on it, installed hyper-v, and created a...
View ArticleWin2K3 R2 SP2 -- "Replicate configuration to/ from the selected DC" option?
I am trying to understand the equivalent option/ method to replicate just the configuration partition between the Win2K3 DCs in two different sites. In this example, lets say there is one DC per...
View ArticleError w/ Q312862 - Recovering missing FRS objects and FRS attributes in...
Using Q312862 - Recovering missing FRS objects and FRS attributes in Active Directory, I was able to locate the missing attribute: fRSMemberReference. When I tried to replace the DC with the null...
View ArticleStart up script needed PLEASE!!
Hello supportersI need a start up script to run it on my domain computers, to start installing an exe file located on my server...PS: -my clients are using XP-i need the script to run the exe as domain...
View ArticleDoes Server 2012 have UGMC?
Is Universal Group Membership Caching available in Server 2012? I can't find the option in AD Sites and Services nor can I find any documentation references to it. Thanks in advance!C Shane Cribbs...
View ArticleFSMO role transfer
Dear All,This is regrading FSMO role transfer when DC has gone done and details are as below:We are assuming that we have 2 Server, one is Domain Controller and Second is Additional Domain Controller...
View ArticleSerious issue with availability - Resource leak possible?
Dear experts, we've been having serious issues with our domain controllers running Server 2008R2 SP1 (with current updates, depending on when they were last rebooted). I'll delve right in: Our domain...
View ArticleAllow user to run setspn on user accounts
I want to allow a user to run setspn on service accounts and other specific user accounts. This person is not a domain admin and we don't want to add him at this time. He is a member of a global...
View ArticleThe directory service is busy error when trying to remove a trust.
I am having a problem with permissions and it seems to point to a trust that was set up for a domain controller that is in the domain and running AD for the domain it is being trusted with. when i try...
View Articlethe directory service is busy when trying to remove domain controller from trust
i am recieveg this error indicating i need to have all my user accounts and trusts at the Advanced Encryption Standard (AES) or RC4 Kerberos encryption...
View ArticleProblem adding Windows Server Standard 2008 R2 box as a Domain Controller
I'm attempting to replace a Windows Server 2003 Standard R2 domain controller with a Windows Server 2008 Standard R2 box. My current domain controllers are:Windows Server 2008 Standard R2 (Global...
View ArticleSYSTEM account in Domain Controller
Hi!Just a quick question. What are the privileges of the Local System account in a domain controller? And does it have permissions to access Active Directory?Thanks!
View ArticleADSI: What is the minimum rights parent domain user requires to create users...
Hello all,I have 2 domains MyParent.com and MyChild.MyParent.com (parent child relationship).I have a user 'MyParent\ad_service'. I have made it as part of 'Accounts Operator' group in parent domain. I...
View ArticleRODC or alternative solution (advice requested)
At my work place we are doing a major re-desing of our network, and i need advice.I know there are some good threads here about RODC but none specifically answers my questions.Please take in account...
View ArticleGPO to Allow Remote Drives for Specified RDS Users
I have a new RDS environment setup for a client (2008 R2). They desire to only have certain users have access to their local desktop/laptop drives while connected through RDS. From what I understand...
View ArticleWindows 2008 AD user getting locked out at least 6 times a day
I have one user who is getting locked out from their Windows 2008 R2 SP1 AD account at least 6 times a day. This user is on a Windows 7 workstation that has been rebuilt. How do I identify what is...
View ArticleWindows 20008 R2 SP1 Reg push
I want to do the following with a reg push? Is it possible to apply permissions to a key?Open the Run dialog, enter regedit then clickOK.Locate and right-click on the...
View ArticleMigration Active Directory Migration Tools
I havea problem whenwe wantto migratecomputeraccountsgives me an errorwhen running thepre checkfor the installationof the agent,the accountis done isdomainadmins. Inthelogsappear asaccess...
View Article
