Since Microsoft didn’t pay much attention to the “health” of those NC IM roles (there’s no mechanism that protects the role nor do they write any messages into the eventviewer or check for it on updates), IM role owners of those NCs may get lost. This wasn’t much of a deal until Server 2008 and...
The basic problem was that some of their users weren’t able to change their passwords. They received an error message: “You have no permission to change your password.” I was pretty sure that the problem behind was the checkbox in those users’ properties that says “User Cannot change password” is checked and password change was...
Here’s a list of the logon types you may find in Windows’ security event log when auditing: 2 – Interactive Console Logons basically. 3 – Network This logon happens when you’re accessing file shares using SMB for example. 4 – Batch This is used for scheduled tasks. 5 – Service This is used for services...
Netsh is a powerful command-line tool that is installed by default on Windows 2000, XP, Vista, and recent Server editions. It lets you view and change TCP/IP, authentication, firewall, and other network settings. The beauty is that you can configure multiple computers by using a logon script or other means, such as a batch file....
By default, in a fresh domain, all five FSMO roles are held by the first DC in the forest/domain. This is until you move (either transfer – that is the more friendly method – or seize them – the more forcefully method) the roles to another DC. Reasons for that can include: •hardware/software failure and...
How can I add an additional attribute to Active Directory Users and Computer’s default view? This is a classic but I thought I’d outline the steps below. I’ll keep this relatively short as you can find tons of information out there on how to do that. What we’re going to do is tell Active Directory...
Server 2008 R2 brings the Recycle Bin feature for Active Directory. You can think of it as the recycle bin in Windows you move your documents and spreadsheets in – just for Active Directory. With the recycle bin enabled (note: you’ll need Server 2008 R2 forest functional level enabled) objects deleted from a partition aren’t...
I’ve blogged about the Recycle Bin feature in Server 2008 R2 and was wondering how group membership of users was stored, when groups were deleted (or vice versa). In general, forward- and backlinks are stripped of an object once it becomes a tombstone (gets deleted without the recycle bin feature). In Server 2008 R2, this...
You made changes (accidentally or not) to a NC on a DC and want to check whether these changes have replicated to a specific DC? One possible solution here is repadmin /showrepl: repadmin /showchanges. For me, it becomes: repadmin /showchanges dc3 0471c1d5-9e2c-47c8-847a-f002a1d023ce DC=intern,DC=frickelsoft,DC=net. I want to check whether changes made to intern.frickelsoft.net on dc1 (whose...
To prevent having to restore objects from Active Directory due to accidentally deleting an object, you can have a remote DC which only sends/receives replication on a limited basis. You also want to prevent users from authenticating against, as well as services being used by other machines, since the metadata on this DC is aging...
Love your site, it's helped me out more than once.
Jordan
Copyright © 2010 Tim the Tech.com All rights reserved.