UPN Login restriction
Is it possible to set AD to only accept UPN logins and not the down level (domain\username), especially when using Exchange (OWA, EWS, Outlook Anywhere) and Sharepoint using Forms base Auth.
View ArticleDNS and Windows Firewall Issue SBS Server 2011
Hi Everyone,We have a single 2011 SBS Server running Exchange, Web and Remote Outlook/Web Desktop. It is the DC since it is the only one we have.For some reason the server got ridiculously slow. At...
View ArticleNeed to monitor the LostAndFound Container and evaluate importance of each...
Hello,We need to create a script that alerts admins when an object appears in the LostAndFound container. Additionally, we'd like to somehow evaluate the importance of the object and determine whether...
View ArticleTime on domain & it's client system is ahed of world!
Hi Everyone,My domain & it's client systems time is ahead by 10 minutes to rest of the world. It's causing us issues while sending data feeds to our client as they receive data by different time...
View ArticleDCDiag Error: failed test kccevent
Hello,I have noticed Outlook users have been having issues possibly with our Exchange server so i ran a DCDiag to see if any errors would occur. I normally run this weekly anyways. For what ever reason...
View ArticleWindows Server 2012 and XP as a client
Hello everyone!I would definitely appreciate someone pointing me in the right direction. I have a very simple network, e.g. Windows Server 2012 as DC, Windows Server 2008 R2 as RDS and some Windows 7...
View ArticleObject counting comparation before and after AD upgrade
Hi, I am going to upgrade AD from windows 2003 32 bit to windows 2008 r2 64 bit.Customer required to provide the object comparation before and after the upgrade.Can anyone advise how I can provide this...
View ArticleIs it bad practise for a DC to have 2 NICs?
Hi,My domain controllers have two NICs. One is for the internal NIC, the other for the external NIC. If I understand correctly, this is a multi-homed DC. Is it advisable to keep just one NIC? (which...
View ArticleDC will not replicate in sites/services
I have a new 2008 r2 DC that is also holding user profiles that will not replicate in sites and services..I am getting 1865/1311/1566 AD KCC errors.trying to replicate manually in sites and services...
View ArticleWindows 8 metro apps do not work
I have a small remote office (they do not have an onsite IT) that received their first Windows 8 laptop but they can not access the metro apps with their domain account but can access them with a local...
View ArticleWindows Active Directory - Grapical Management
I was wondering if anyone knew of a program that would provide a feature of arranging computers on a network visually. What I mean by this, is having somthing that shows where each of the computers are...
View ArticleActive directory/Dns server quarrel
Configuration:2 windows server 2012 Domain controllers multiple synology rack storage stations42 work stations connected to domainIssue: The synology storage station can connect to an AD Server and...
View ArticleAttribute value
Hi,can you please guide me on how to find out attribute value for the following filter.need to create a filter wherein my site(account) of a user should be purged 1month after they no longer appear or...
View ArticleDynamic access control & S4USelf
When a non-claims-aware client computer hits a file server that is configured to use DAC, my understanding is that the file server issues a S4USelf kerb request to get claims from AD for the user...
View ArticleAllow non-administrative user to put NIC into promiscuous mode
I have a Windows Server 2008 32-bit system with Active Directory. I need to allow a user to run a protocol analyzer, which requires putting the NIC into promiscuous mode. I have found that...
View ArticleFailed to create two-way trust between server 2008 R2 and server 2003
we are trying to create a two-way forest trust between us (server 2008 R2, v.local) and our solutions provider (server 2003, s.com).DNS zone is created, we are able to ping their domain name, nslookup...
View ArticleCreating a Forest Trust after a Domain Trust is already in place?
I have a situation where a two-way domain trust is already in place between two different domains that are in there own forests. There is only one domain in each of these forests. Ideally this should...
View ArticleNT5DS stops responding when running adprep /domainprep /gpprep on Windows 2008
I've got a Windows 2008 Standard x64 SP2 server. It's the only domain controller currently in the domain (there was a previous Windows 2003 DC that was retired and removed some time ago), and holds all...
View Articlescript for adding new domain user to old domain groups
Hi there We are in the process of an interforest migration and have hit an issue wrt to sid history on groups. I am looking for a script or process to follow to enumerate group membership in old...
View ArticleADMT 3.2 problems with the exclusion and Error 0x80004005
I am doing some testing with the Active Directory Migration Toolkit Version 3.2 on a Windows Server 2008 R2. I am sure I met all the prerequisites in the source domain, target domain and on the ADMT...
View Article