Showing posts with label active directory. Show all posts
Showing posts with label active directory. Show all posts
Saturday, October 4, 2014

Windows Azure AD with your Active Directory

›
I've just watched a Microsoft jump-start video on how to integrate Windows Azure AD (AAD) with your on-premise AD infrastructure. By do...
9 comments:
Wednesday, September 3, 2014

Active directory or sysvol is not accessible on this domain controller or an object is missing

›
I saw this error message on Group Policy Management when I did a status check on the AD replication. All domain controllers were stuck with ...
Thursday, May 15, 2014

Virtualised Domain Controllers Replication Issues

›
I noticed virtualised domain controllers often have issues replicating new settings in Group Policy Objects. This warning message was also o...
Monday, May 12, 2014

WS2012 Domain Controllers stop replication after Power Outage

›
We had some power outage and noticed newer Group Policy Objects (GPOs) weren't replicated across the AD. After running dcdiag /a diagno...
Thursday, May 8, 2014

Verify Domain Controller Certificate for Smartcard Logon

›
To enable user smartcard logon, all domain controllers must be enrolled with KDC enabled certificates. The correct cert template to deploy i...
Monday, September 16, 2013

Cert template of Issuing CA must be updated on Account Forest

›
Previously, we did a successful trial on cross-forest cert enrollment  with 2-way forest trust enabled. The user objects are on Account Fore...
4 comments:
Wednesday, July 24, 2013

Delegate Certificate Template Management

›
By default, only Domain Admins are able to create and manage Certificate Templates on the Active Directory. To delegate to other groups (e.g...
Wednesday, May 8, 2013

How to add custom attributes to AD User Objects

›
We have an application that requires to store some custom user attributes on the Active Directory. Let's say we need to add a custom att...
Thursday, February 28, 2013

Cloning Virtual Domain Controllers

›
A new feature of Windows Server 2012 is the cloning of Domain Controllers. This is a rapid way to deploy new Domain Controllers in virtual ...
4 comments:
Wednesday, January 9, 2013

Prevent Users from joining Computers to AD

›
From a security standpoint, it would be pretty hard to control if normal domain users can join their machines to AD without authorization. ...
6 comments:
Thursday, November 29, 2012

EFS Recovery

›
There are 2 types of recovery for Encrypting File System (EFS): Key Recovery and Data Recovery . When there is a designated Key Recovery Ag...
Tuesday, October 30, 2012

Remote EFS for Cross-Forest AD Users

›
I was working on a project that allows encrypting files on remote file share, which was not enabled by default. I've to setup the pre-r...
2 comments:
Thursday, October 25, 2012

Modifying Built-in AD Objects

›
While working on cross-forest cert enrollment, I noticed I couldn't add an cross-forest object to an AD built-in group object, e.g. ...
1 comment:
Tuesday, October 23, 2012

Verifying SIDHistory of user accounts

›
When you're performing user and resource migration between forests with trust, it's important to enable SIDHistory and disable SID ...
Thursday, October 18, 2012

Setting the ACL for Home and Roaming Profiles

›
Wonder how should you set the ACL of Share and NTFS of the network share for Users' Home folders and Roaming Profiles? Check out this T...
Thursday, November 17, 2011

How to rebuild AD-integrated DNS servers

›
What if a joker wipe out your AD integrated DNS zones accidentally? And there's no backup? You'll find out soon enough that AD opera...
1 comment:
Thursday, September 15, 2011

AD authentication for Dell iDRAC6

›
The well-known default login name and password for iDRAC6 are "root" and "calvin" respectively. You should change it imm...
2 comments:
Sunday, June 26, 2011

Credential Roaming

›
Credential Roaming (CR) is especially useful in situations whereby the following 2 conditions exist: (1) user certificate auto-enrollment...
1 comment:
Sunday, June 5, 2011

Migration from FRS to DFRS with RODC

›
Traditionally, File Replication Service (FRS) is used for replicating the contents of the SYSVOL share between Windows domain controllers (a...
Friday, May 27, 2011

Resetting Computer Account

›
A domain computer account synchronizes with the Domain Controller (DC) on a regular basis. This means that the computer checks with the DC o...