Get-ADUser
I have script and I need find users from AD by DistinguishedName# Specify target OU. $TargetOU = "ou=testi,ou=Users,ou=test" # Read user sAMAccountNames from csv file (field labeled "Name"). Import-Csv...
View ArticleMetadata cleanup is not working - unable to demote 2008 R2 DC
Hello everyone, I would appreciate your advice on how to remove traces of a recently demoted 2012 Std server.Although the demotion appeared to go fine, there are still traces that are preventing the...
View ArticleAdvantages of deleting obsolete computer accounts
Hi,how to find the obsolete computer accounts in a 2008R2 domain and how to remove those objects on monthly basis.Is there any benefit we have if we remove the obsolete computer accounts ?
View Articlehaving multi domains to be used as upn suffix for my end users, how to make...
i went to AD domains and trusts and added domain abc@123 for example so now i can change the upn suffix for any users to be abc@123when i create a new user the old domain is the one that comes first...
View ArticleNew 2008 DC on 2003 domain - workstation trust relationship issues.
Greetings,We added a 2008R2 DC to our 2003 domain, which consists of two 2003R2 servers; we are planning to upgrade the domain once I am happy that things are stable. Unfortunately I have had one...
View ArticleAllow private network to access domain controller
Hi Trying to setup NAS server with private IP address ( say 192.168.1.x).But it complains about not being able to reach the DNS server .How can I create a rule or policy at server to allow private...
View ArticleNLTEST ERROR_NO_SITENAME
Hi all,I'm facing an issue about "site mapping" of 2 of our workstations, teh 2 of mines...I use different management consoles or shells from both of my 2 workstations to managing AD based...
View ArticleProtect service Account from accidental Enable/Disable
I want to protect my service account from accidental disable/enable from all users. To accomplish this task I tried to take help of DSACLS, However I am having difficulties to achieve this goal. Below...
View ArticleProtect service Account from accidental Deletion
I want to protect my service account from accidental disable/enable from all users. To accomplish this task I tried to take help of DSACLS, However I am having difficulties to achieve this goal. Below...
View ArticleWrong Logon Server
On a new site we have created all of the clients get a logon server for a different site. BIn ADSS the subnet is setup and assigned to the correct site.I looked through DNS and everything seems to be...
View Article2003 domain with 2012 R2 schema - but upgrading to 2008 R2
We planned and tested a migration from 2003 to 2012 R2, but unfortunately we hit the issue documented here despite being fully patched. It was fine in the test environment but not in production.In the...
View ArticleSplit AD forest into 2 copies that will never be rejoined?
I know Microsoft do not support "graft and prune" as a migration strategy, but could it work as a short term solution if the 2 private networks are split and no longer communicate? If the splitting...
View ArticleNew/reinstalled computers on domain can't authenticate.
Our domain is win.reed.edu. At the login screen, new/reinstalled computers show "WIN" (whereas the established computers show "REED.EDU"). Attempts to login give "The user name or password is...
View ArticleActiveDirectory_DomainService Event ID 1864 Replication
I noticed this error showing up in my Directory Service logs, and I've done some research and ran some commands. When I run repadmin /showrepl or repadmin /replsum, I don't see any replication errors....
View ArticleActive Directory "User must change password at next logon" takes 2 log off's...
Active Directory "User must change password at next logon" takes 2 log off's before prompts for password change.How do i set it that it forces the user to change password after 1 log off?
View Articledcdiag error
Hello,I'm getting ready to do an FRS to DFSR migration. My new domain controllers are now on Server 2012 R2 and I've raised the functional level to it. When I run a dcdiag /e /c I see the following...
View ArticleForest and domain functional levels only show "Windows Server" available...
I recently migrated our DC's from Server 2008R2 to Server 2016. We now have four Server 2016 DC's and no others. When I went to raise the domain and forest functional levels from Server 2008R2 I saw...
View ArticleGroup Managed Service Accounts
Hi All,A few questions regarding gMSA's. I've created the KDS Root Key and the AD Schema was already at a Server 2016 level (DC is on a Windows 2012 server). But checking AD, I do not have a Managed...
View ArticleCA migration from Windows 2008 to Windows 2012
I am planning to migrate Root Ent CA from Windows 2008 to Windows 2012 R2. This root <g class="gr_ gr_107 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling" data-gr-id="107"...
View ArticleCA migration from Windows 2008 to Windows 2012
We are planning to migrate windows 2008 R2 root CA to Windows 2012. We have a basic configuration in which CDP and AIA are pointing to the default location. The migration procedure is basically backup...
View Article