Close

Not a member yet? Register now and get started.

lock and key

Sign in to your account.

Account Login

Forgot your password?

Windows 2008  // Windows 2008

14 Apr Posted by tim in Active Directory | Comments

Recover deleted Active Directory objects with the AD Recycle Bin PowerPack

Recover deleted Active Directory objects with the AD Recycle Bin PowerPack

Windows Server 2008 R2 reached RTM. Among the many cool new features provided with that release, Microsoft has now added a recycle bin feature to Active Directory. The management interface provided by Microsoft for this feature is the command line, or more specifically, PowerShell. That’s great if you’re like me and you love to manage...

Read more...

13 Apr Posted by tim in Active Directory | Comments

Active Directory Replication Errors

Active Directory Replication Errors

If you have 2 Active Directory Servers that are not replicating, ServerA & ServerB, try the following: check if the secure channel has been corrupted From ServerA, go to Start -> Run and type: \\ServerB From ServerB, go to Start -> Run and type: \\ServerA If you get and error message indicating that the target...

Read more...

12 Apr Posted by tim in Active Directory | 1 comment

Disable Password Requirements in Windows Server 2003 Domains

Disable Password Requirements in Windows Server 2003 Domains

How can I disable the password requirement for a user in a Windows Server 2003 Active Directory domain? Windows Server 2003 provides security policies that ensure that all users select strong passwords. Creating a password policy involves setting the following options in the Default Domain Group Policy object. These policies, with the exception of those...

Read more...

11 Apr Posted by tim in Active Directory | Comments

Moving NTDS.dit and its logs to a different location

Moving NTDS.dit and its logs to a different location

Reasons for this include but are not limited to: •You run out of disk space and want to move it away from the system disk •You want the DB to run on a faster/more reliable hard disk (other than the system disk) •You experience performance issues and want to seperate the DB from the core...

Read more...

10 Apr Posted by tim in Active Directory | Comments

How to Find Nested Group Members

How to Find Nested Group Members

What if your security group has nested groups and users? Then those nested groups may also have additional nested groups and users. What does that query look like? How do you find all the members? Suppose I have the following Example TopLevelGroup — Global Security Group TopLevel — User TopLevel2 – User2 Nested1 – Global...

Read more...

09 Apr Posted by tim in Active Directory | Comments

Creating and Maintaining System State Backups on Your Domain Controller

Creating and Maintaining System State Backups on Your Domain Controller

I was very excited when I started to play around with the first beta versions of Windows Server 2008 and experiment with the latest security improvements. At first, I wanted to start with one of the more basics and important things on this new server: Active Directory. Several improvements were made on security matters that...

Read more...

08 Apr Posted by tim in Active Directory | Comments

Troubleshooting for DC and DNS servers

Troubleshooting for DC and DNS servers

“My DC is online, the TCP/IP it´s OK, the DNS service running but I still cannot make a valid connection with AD! “ This is a problem that can be present in many ways. The most common example is: you have your DC completely configure for Active Directory, the DNS server too, and you try...

Read more...

07 Apr Posted by tim in Active Directory | 1 comment

DCDIAG Error RPC Server is unavailable

DCDIAG Error RPC Server is unavailable

It’s a common best practice to run the DCDIAG tool in all DC in your forest whenever a significant change has been made, i.e. a new DC has been added or deleted in the forest. With this you are testing if the change you just made was done correctly. It’s also common that if you...

Read more...

06 Apr Posted by tim in Active Directory | Comments

Verify your Active Directory installation after DCPROMO

Verify your Active Directory installation after DCPROMO

I have come across Administrators who have barely managed to get the DC up and running and with no further checks rushed into installing Exchange and have had loads of problems and start looking for solutions on Exchange as opposed to get the roots right i.e. DC / DNS. Without further delay while some of...

Read more...

05 Apr Posted by tim in Active Directory | 1 comment

What is the “Internal ID” or DSID ?

What is the “Internal ID” or DSID ?

There was a question in the newsgroups a few days ago. It was about an Server 2008 Active Directory error he received: Log Name: Directory Service Source: Microsoft-Windows-ActiveDirectory_DomainService Date: 2009/02/11 08:03:23 PM Event ID: 1168 Task Category: Internal Processing Level: Error Keywords: Classic User: SYSTEM Computer: ServerName Description: Internal error: An Active Directory Domain Services...

Read more...