Browse by Tags

Tagged Content List
  • Wiki Page: DNS Server Event IDs

    DNS Server Event IDs DNS Server Active Directory Integration Event ID 4000 Event ID 4001 Event ID 4002 Event ID 4003 Event ID 4004 Event ID 4006 Event ID 4007 Event ID 4010 Event ID 4011 Event ID 4012 Event ID 4013 Event ID 4014 Event ID 4015 Event ID 4016...
  • Wiki Page: Troubleshooting SRV Record Registration

    Troubleshooting SRV Record Registration 1. Verify that the DC is trying to register the correct records. To do this, stop the "Netlogon" service on the DC and then delete the "Netlogon.dnb" & "Netlogon.dns" fiies located in the %systemroot%\System32\Config folder...
  • Wiki Page: LDAPs(636) and MSFT-GC-SSL(3269) Service

    Table of Contents PortQry output after promoting a DC for SSL ports LDP.EXE output after connecting the SSL ports. NETMON capture for SSL Ports Network capture without netmon Cert server into a domain controller is not recommended. Publish a cert Template certutil -v -template LDAPSSL Find the Template...
  • Wiki Page: Converting DNS "A" Record From Lowercase to Uppercase

    Introduction I have seen a weird problem in DNS last week. One of my colleagues was asking a host (A) record in all uppercase. I am not sure why that is required because Microsoft DNS is not case sensitive. The colleague told that is required for SAP but I don't have the clear idea about...
  • Wiki Page: AD Integrated Conditional Forwarder

    Normally if we put the forwarder from DNSMGMT.MSC, those are static forwarder. Those are not replicated to all DCs and there is no any GUI option in 2003 for creating the AD integrated forwarder. How to create AD integrated forwarder on Windows 2003? http://msmvps.com/blogs/ulfbsimonweidner...
  • Wiki Page: DNS Design-DNS Zones for per Organization Units

    Table of Contents 1. Add the "Primary DNS Suffix 2. Need to allow an attribute(Write dNSHostName); please find the below link for that. You can modify that attribute Domain/OU level 3.Now the time for the delegation for Regional Administrators who will be managed their own DNS Zone Suppose...
  • Wiki Page: PowerShell Handy Commands

    These are very helpful commands for PowerShell Beginner, so keep them handy. How to find installed Modules? PS C:\> Get-Module How to find available modules? PS C:\> Get-Module -List How to import a Module? PS C:\> import-module activedirectory How to get help for...
  • Wiki Page: How a Client Application Finds a Service (SPN)

    Table of Contents How a Client Composes an SPN Differences between the delegation tab betweens the DC, Client computer & User account Credits See also Clients find service objects by querying the directory. The client can limit the scope of the query to its domain, or it can search the entire...
  • Wiki Page: Replication Troubleshooting

    1. First try to ping the DC. Second are you able to ping the DSA GUID?If the DC is pingable but GUID is not pinging , see the below link for that. http://www.windowsitpro.com/blog/active-directory-troubleshooting-tips-and-tricks-blog-34/active-directory/how-dcs-find-one-another-137278 ...
  • Wiki Page: Active Directory: DSQUERY Commands

    DSQUERY Commands to query AD objects:- 1. How to find all members for a particular group dsget group "<DN of the group>" -members 1a. How to find all groups for a particular member (including nested groups) dsget user "<DN of the user>" -memberof -expand...
  • Wiki Page: Active Directory LDAP Policy

    How to check LDAP Policies from LDP.EXE How to check LDAP Policies from NTDSUTIL How to check LDAP Policies from ADSIEDIT.MSC Community Resources Override the hardcoded LDAP Query limits introduced in Windows Server 2008 and Windows Server 2008 R2 http...
  • Wiki Page: PKI Store

    Sometimes we can see the same certificates in certificates store. Why this is like that? There are various stores are available for certificates. Logical store , Physical store and also we can see the certificate purpose view. 1.MMC->Certificate->View->Option 2. You can change...
  • Wiki Page: Account Locked Out Troubleshooting

    Table of Contents Download the Account Lockout and Management Tools. EventCombMT Windows Server 2008 log the event with ID 4740 for user account locked out Windows Server 2003 log the event with ID 644 for user account locked out Audit Events for disabled user Account Lockout Tools Maintaining and...
  • Wiki Page: DNS Read-Only Console on 2003-Multi Domain Environment

    Table of Contents 1. For read-only permission you have give the below three permissions. 2. Follow the AGUDLP guideline for providing the permission 3. On 2008 you can go ahead with RODC for DNS Read-Only Console. 1. For read-only permission you have give the below three permissions. 1....
  • Wiki Page: Windows Debug Logging

    The below article has got information about enabling different debug logging which are required for troubleshooting various Windows issues. UserEnv Debug Logging Userenv logging is useful when troubleshooting group Policy application related issues or User profile related issues. Enabling...
  • Wiki Page: Query a Registry Key for Bulk Computers

    On Error Resume Next Set objShell = CreateObject("Wscript.Shell") Set oFso = CreateObject("Scripting.FileSystemObject") sDesktop = objShell.SpecialFolders("Desktop") spath = sDesktop & "\Dclist.txt" Set oT = oFso.OpenTextFile(spath,1) Do Until oT...
  • Wiki Page: Servers Inventory Report

    Table of Contents Hard drive capacity, Hard Drive free Space, RAM Capacity, OS, OS Architecture, IP V4, IP V6, IP is static or dynamic, Global Catalog is Yes or No, Virtual or Physical Given the sample output. Need to create a computers.txt at the same place of this script. I have tested it 2008R2...
  • Wiki Page: Exclusion for a Group Policy Object

    I have seen numarous post for a simple GPO query that how do I exclude some users/computers for a Group Policy object. I have given every screenshot for excluding a GPO. You have to install the GPMC for 2003 but in 2008 GPMC is available in any DC. Open the GPMC Select the GPO...
  • Wiki Page: Microsoft Outlook Safe-Sender List Through GPO

    Some time outlook safesender list is not updated. Please check that text file is accessible from the client machine. If still problem is there replace the safesender file with outlook safe sender text file (Export from outlook and replace in sysvol). Check the permission of that text file ( authenticated...
  • Wiki Page: Quest Powershell for Active Directory

    Guys, Believe me or not? If yes and you are a MS-Directory Professional try it. Benefits: 1. Where WAN connectivity is very slow you can work through command line. 2. Prevent accident deletion until you put exact deletion command. 3. You can automate you’re your AD environment. 4. Commands...
  • Wiki Page: Difference Between Forwarder and Stub Zone

    Both the zones are used for name resolution but when we are used stub and when we are used forwarder. I am trying to say as small as possible. Ex: We need a trust between domain A and domain B and am a system admin of domain A and in future any changes happen in domain B, we may not get those update...
  • Wiki Page: Active Directory Administration One Liners

    Table of Contents 1.DCDIAG 2. NSLOOKUP 3. Repadmin 4. W32TM 5. NLTEST 6. PortQuery 7.How to check the delegation 8. DNSlint 9.RUNAS 1.DCDIAG To deploy an additional domain controller: Dcdiag /test:dcpromo /DnsDomain:domain_name.com /ReplicaDC To deploy a child domain: Dcdiag /test...
  • Wiki Page: Security Filtering Using GPMC

    1. Security filtering using GPMC You have to install the GPMC for 2003 but in 2008 GPMC is available in any DC. Remove the Authenticated users and add a security group, find the screenshot for the same. See the below links for implemainting the Security filtering. You will get the...
  • Wiki Page: ADMT

    Table of Contents Blogged by Patris Blogged by Tom Blogged by Santhosh Blogged by me My Tread TechNet ADMT Platforms:- Blogged by Patris Interforest Migration with ADMT 3.2 - Part 1 Interforest Migration with ADMT 3.2 - Part 2 Interforest Migration with ADMT 3.2 - Part 3 Blogged...
  • Wiki Page: WMI Filter for Windows Operating Systems

    Windows Server 2012 DC select * from Win32_OperatingSystem where Version like "6.2%" and ProductType = "2" Windows Server 2012 select * from Win32_OperatingSystem where Version like "6.2%" and ProductType = "3" Windows 8 select * from Win32_OperatingSystem...
Page 2 of 3 (72 items) 123
Can't find it? Write it!