Which Computer Object attribute can tell me when the object was placed in an OU?
Hello,Its there an attribute of the Computer object in AD which can tell us when the object was 'placed' in a OU? When-Created and CreateTimeStamp indicates the date the object was created, so this...
View Articleadditional Server 2012 DC on a network with Server 2003 & 2008 R2 DC
Hi Following is the infastructure of my networkroot domain: abc.com DC+DNS - Server 2008 R2 (physical) DC+DNS - Server 2008 R2 (virtual) DC+DNS+DHCP - Server 2003 (virtual)child domain: college.abc.com...
View ArticleTime sync 2mins delay with external source timeanddate.com
Hi our primary DC sync with external time source, today we noticed that it was 2 mins delay with timeanddate.comour primary DC was a Hyper V Host machine, any boady help me to sync my DC with...
View ArticleCreating a custom class/object and using it in active directory
Hi,I would like to create a new object in my active directory. I can create it via mmc->Schema Console->Classes(Right Click)->New Classand add attributes to it by Right click (Created class)...
View ArticleEvent id 1487 - 1490
Hi,how can I force Win2k8 r2 domain controller to generate replication event ID 1487 - 1490 ? Do I have to enable some audit policy? I need this event ID's for my monitoring system.ThanxTomas
View ArticleChild Domain vs Trust Relationship
So here is the scenario- We are in the process of centralizing IT to a data center in a single location. I currently have 12 different operating companies that need a shared security and exchange...
View ArticleIs it possible to assign some user to change only specified users attributes...
we use Windows2003 AD with 2008 server.s it possible to assign some user to change only specified users attributes(proxyaddresses,targetaddress,etc ) in the domain ?
View ArticleAD Trust - Conditional forwarder aganist secondary DNS zones
We are recently acquired a company and plan to setup a two way forest level trust ,i would like to know the advantage/disadvantage of setting up DNS conditional forwarder against setting up secondary...
View ArticleWhat is AD attribute of Protect Delete of OU and user ?
In windows 2008 , there is Protect Delete function of AD object.What is AD attribute of Protect Delete of OU and user ?
View ArticlePermissions NOT propagating properly
Here's the setup:E Drive |->Share A (Domain Admin Group - FULL - This and all Subfolders & Obj) (ShareA Users Group - FULL - This and all Subfolders & Obj) |-> SubFolder A (Domain...
View Articledsget failed:No superior reference has been configured for the directory...
Well, this is the stragest error I have ever seen. All of the help on the web says I have a syntax error in my query, which is (nutered):dsget group "cn=smsdesk,ou=sms accounts,ou=sms...
View ArticleWindows 2008 R2 Hyper-V Server uses "Local CMOS Clock" instead of domain time...
We have a few Sites but on the very small Sites we dont have an own DC.On the most other sites, we have a DC and the Hyper-V Server is syncing it's Clock with the virtual DC running on itself (VMICTime...
View ArticleHow do I know if a domain controller has tombstoned?
Sorry if this is a stupid question, but I tried googleing this and didn't find a definitive answer.If I suspect a DC may be tombstoned how can I definitively check for that?From what I have read it...
View ArticleADFS 2.0 "time window" configuration question
We have problems with ADFS SSO to a cloudservice, it seems like their clock/time sometimes is "earlier" that ours and we get an error:Assertion condition was not fulfilled 2013-01-08T15:19:15.393+01:00...
View ArticleError Demoting Domain Controller
I am in the process of removing a domain controller (2008 R2) from our environment. I was able to successfully transfer all required FSMO roles to the new domain controller, but receive the error when...
View ArticleOne Way Trust and GPO Processing
With a 1 way trust Domain A trusting Domain BUsers will reside in Domain B, Resources will reside in Domain A. Mainly VDI resources.Will the GPO's from Domain B process if the users login to Domain B...
View Articleupgrade from Windows 2003 Enterprise to Windows 2008 Enterprise SP2?
Current clients of the network include Windows XP Pro and Windows 7 clients. There are three Windows 2003 SP2 Enterprise domain controllers. I need to move to a Windows 2008 AD environment.1) Is it...
View ArticleWhen Applying Remote Desktop Services Profile It Changes Dial In Settings
Hi All,I seem to have a weird issue in our domain when creating new accounts.All our AD accounts should have The Dial In Option "Control Access Through NPS Network Policy" set, the new accounts we...
View ArticleWhat is the difference between "DS Directory Searches/Sec" vs. "LDAP...
Hello,In the NTDS object, I see a DS Directory Searches/Sec counter and a LDAP Searches/Sec counter. What is the difference? Is the LDAP Searches/Sec issued by an LDAP Client/Application whereas the...
View Article