Directory Services

• _ldap._tcp Name does not exist
• _msdcs could not be resolved , DNS error
• _msdcs for domain.com in dns mgmt points to old, nonexistent server plus NO OTHER FOLDERS
• : The security descriptor propagation task could not calculate a new security descriptor for the following object.
• .bat file to Run after the user's logon
• 'ms-DS-MachineAccountQuota' Recommendation
• 'object * contains other objects are you sure you want to delete * object?' When trying to delete retired servers in AD
• "Access is denied" message when trying to edit logon bat scripts in C:\Windows\SYSVOL\domain\scripts on DC
• "Account is Locked Out" Grayed Out in AD Account Properties
• "Allow replication with divergent and corrupt partner" - bring a tombstoned DC back to life.
• "Authenticated Users" vs. "Users"
• "Backup" Scenario for an active directory schema upgrade
• "Connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise"
• "Domain not Available"
• "Domain Users" in local users group isn't appropriate for us. Can I safely remove it?
• "Drive is not accessible. Access is denied"
• "Enable computer and user accounts to be trusted for delegation" rights is disabled for Administrator account despite delegation option in the "AD Computer Properties" being "Trust this computer for delegation to any service (Kerberos only)"
• "Error issuing replication: 8453 (0x2105)" when doing a repadmin /syncall
• "Experienced the following operational errors trying to retrieve replication information:" 55
• "Last Login" Reports for Active Directory (2003)
• "Managed By"
• "managed by" attribute of computer object
• "Mutual authentication failed. The server's password is out of date at the domain controller."
• "New Trust" and "Remove" option greyed out on Windows Server 2012 R2
• "RPC Server Unavailable" while attempting to Join domain
• "Some of the object names cannot be shown in their user-friendly form"
• "The configuration information describing this enterprise is not available" 2008 r2 while opening active directory domain and trusts
• "The home folder could not be created because the network name cannot be found" error in AD users and computers
• "The program cannot open the required dialog box because it cannot determine whether the computer named ... is joined to a domain".
• "The server does not support the requested critical extension." Exception
• "The server is not operational"
• "The specified user already exists" While Promoting a domain Controller
• "the user's password must be changed before signing in"
• "Try Next Closest Site" GPO setting and Windows 10
• "Unable to update the password. The value provided for the new password does not meet length, complexity, or history requirements of the domain."
• "User must change password at next logon" settings
• "value for the attribute was not in the acceptable range" error when trying to edit attribute value in ADLDS instance
• "verification of prerequisites for domain controller promotion failed. Certificate server is installed" error when promoting Windows server 2012 to Domain Controller
• "WhenChanged" Attribute timestamp updates without having made changes.
• “All extended rights” permission in AD
• “tattooing” the Registry
• (Server 2008 R2) Active Directory returns the UID attribute (not the GUID) in Base64 instead of plain text?
• (Urgent) Can I track down ALL the LDAP authentication log with username & source IP
• [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
• [Forum FAQ] Setting up a Stand-alone DNS Server for Active Directory Service
• [SOLVED] Active Directory Saved Query - Group Member Listing
• [Solved] Biometrics with Windows Server 2012 R2 and Windows 10
• *Solved* Account lockout troubleshooting
• \\fileserver is not accessible. You might not have permission to use this network resource. Logon failure: the target account name is incorrect.
• %logonserver% shows DC from different site.
• ``repadmin /replsummary reports a DC hasn't replicated in >60 days. What do I do?
• 0x0000232B RCODE_NAME_ERROR [DNS name does not exist]
• 0x2081 Multiple values were specified for an attribute
• 0x523 The name provided is not a properly formed account name
• 0x8007052e LDAP_INVALID_CREDENTIALS while using ADsOpenObject()
• 0x8009001d (-2146893795 NTE_PROVIDER_DLL_FAIL).
• 1 Domain Controller with replication in progress
• 1 of 2 domain controllers down and users cannot login to the domain
• 1153 errors after performing the Server 2012 schema update on a 2008 domain
• 1694 error - "Active Directory Domain Services could not update the following object with an attribute value change received from the following source directory service" after adding "Manager" (under Organization Tab) to user object
• 2 different domain controller on the same network
• 2 domains in 1 forest and problems related
• 2 factor authentication for windows desktop login with RADIUS
• 2 new DC not replicating. EVENT 13508 - NtFrs
• 2 ntds.dit files in Windows Server 2008 R2 and Active Directory logging
• 2008 R2 AD search for multiple computers
• 2012R2 DC - AD LDS Service Principal Names - Duplicates
• 2012R2 Web application proxy ADFS error - event 383 - corrupted config file
• 2019 Domain Controller Firewall Best Practices
• 3 Domain controllers, migrate SYSVOL replication from FRS to DFS but then had to restore PDC to a backup which he was to FRS... now cannot replicate
• 389 and 3268 port difference
• 5722 error. The session setup from the computer .... failed to authenticate
• 8007200A "specified directory service attribute or value does not exist" error
• 8451 The replication encountered a database error
• 8524 The DSA operation is unable to proceed because of a DNS lookup failure.
• 8606) Insufficient attributes were given to create an object. This object may not exist because it may have been deleted and already garbage collected.
• A constraint violation occurred - when uploading picture in Active Directory
• A couple more questions about Kerberos cross forest trusts
• A critical system process, C:\Windows\system32\lsass.exe, failed with status code c0000005. The machine must now be restarted.
• a global catalog cannot be located to retrieve the icons for the member list
• A Global Catalog Server could not be located - All GC's are down.
• A global group cannot have a cross domain member
• A member could not be added to or removed from the local group because the member does not exist.
• A question about adminSDHolder and AdminCount = 1
• A question about RepAdmin and 'Largest Delta"
• A record in DNS created in separate folder
• A script or a way to assign a GPO to multiple OUs ?
• A script to find if a computer is member of a domain or in workgroup ?
• A time server could not be located error message...
• A user account was changed by ANONYMOUS LOGON
• A user in active directory is every morning blocked
• A warning event occurred. EventID: 0x80000746 This is the replication status for the following directory partiti
• A warning event occurred. EventID: 0x80001396
• A warning event occurred. EventID: 0x800034C4
• A.D passwords not updating on Windows 10 pc's after change
• About to migrate AD from 2003 to 2008R2 - any comments/issues?
• Access denied on user profile
• Access denied trying to add a computer alias
• Access denied trying to remove Server 2008R2 DC
• Access Denied when trying to remove extinct domain controller from AD
• Access Denied while updating GPO from Domain Controller &
• Access is denied error when create an GPO
• Access is Denied when renaming a computer
• Access share via UNC locks account
• Access to another domain without trust
• Access to the domain UNC path
• accessing a UNC Share via Alias name prompts for credentials
• Accessing Active Directory using PrincipalContext (C# .Net)
• Accessing LDAP on Active Directory.
• Accidental Deletion Prevention DNZ Zone
• Account Disabled attribute
• Account disabled attribute question
• Account Expiration Date report shows different date than the date displayed within Active Directory Users and Computers.
• Account expired and Account Disabled. What is the difference?
• account getting locked out
• Account locked (4740) with no preceding invalid attempts (4625) for one specific user
• Account lockout
• Account Lockout
• Account Lockout 4740 with no caller computer and no bad password attemps
• Account Lockout and Automatic Email notification to Managers
• Account Lockout as a Mitigation for Brute Force Attack
• Account Lockout every few minutes
• Account lockout from non domain caller computer name
• Account lockout issue
• account lockout on windows 2008 r2 and windows 7
• Account lockout replicating slowly between sites (intersite replication)
• Account lockout through LDAP connection
• Account lockout with no bad password attempts in registry
• Account Operator Rights
• Account Operators couldn't reset their own passwords
• Account Operators group best practice
• Account Operators Group doesn't have permissions to remove "CN=ExchangeActiveSyncDevices" values so they can't delete users.
• Account options password after migration via ADMT
• Account policy settings not being enforced
• Account Unknown on Active Directory
• Accounts get AD locked constantly
• accounts getting locked - workstation name does not exist
• accounts in AD
• Accounts of trusted domain shown as placeholder instead of UPN and real location in foreign domain
• ACL change for users in Active Directory
• Active Directory - Basic Report showing group membership
• Active Directory - Dasable Account with future date
• Active Directory - Add multiple managers
• Active Directory - can userPrincipalName be empty
• Active Directory - Creating Users
• Active Directory - Get What Effective Permissions Certain groups have on Specific Objects
• Active Directory - Give parent domain users access to child domain
• Active Directory - How long does it take to push out changes?
• Active Directory - Microsoft Windows SMB Shares Unprivileged Access
• Active Directory - Unnest AD groups from nested AD group
• Active Directory - Users and Computers - Reset Account
• Active Directory : How to Add Additional Attributes to the User Objects in Active Directory
• Active Directory "Location" field update location?
• Active Directory | User keeps getting locked out
• Active Directory 2016 Compatibility
• ACtive directory 2016 maximum limit
• Active directory 2016 supported Clients
• Active Directory 2019 - did something change with how member, memberOf, and whenChanged operate?
• Active Directory access via Excel data connection
• Active directory accounts are getting disabled automatically what could be the problem?
• Active Directory Administrative Center
• Active Directory Administrative Center must close due to an unknown error.
• Active Directory Administrative Centre, how to see if an account is locked or not?
• Active Directory allowing adding already existing computer name
• Active directory and Syslog server
• Active directory and Windows server 2019
• Active directory and/or Windows Authenication
• Active Directory Attribute - Can we use the Flags attribute?
• Active Directory attribute size limit
• Active Directory attributes 'name' and 'Name'
• Active Directory backup and restore best practice
• Active Directory Certificate Services - Server Automatically Stopping / Disabling the Service
• Active Directory Certificate Services could not find required Active Directory information.
• Active Directory Certificate Services could not publish a Certificate for request - the administrative limit for this request was exceeded
• Active Directory Certificate Services service could not be started
• Active directory Change Schema Attribute ADSI Error Code 0x213b
• Active Directory clean up/ restructure
• Active Directory client Exception while accessing /creating user : Exception 0000202B: RefErr: DSID-031007EF, data 0, 1 access points" [extended Error 8235]
• Active Directory clone for test environment
• Active directory command lines
• Active Directory Compatibility Between Server Versions
• Active Directory computer account rename permission
• Active directory configuration between Private and public network
• Active Directory could not resolve the following DNS host name of the source domain controller to an IP address.
• Active Directory Daily Check list
• ACTIVE DIRECTORY DCDIAG ERROR.. please someone help me to fix this. thanks and regards
• Active directory Deep dive understanding
• Active Directory Default Language can change?
• Active Directory Delegated Permissions and Powershell
• Active Directory Design ... Multiple Domains or Organizational Units
• Active Directory Design Strategy - Child Domain versus OU
• Active Directory Diagnostics not running in PerfMon
• Active Directory disaster recovery (test scenario)
• ACTIVE DIRECTORY DOMAIN AND EXTERNAL WEBSITE FOR OUR COMPANY IS SAME
• Active Directory Domain Services attempted to perform a remote procedure call (RPC) to the following server. The call timed out and was cancelled.
• Active Directory Domain Services could not resolve the following DNS host name of the source domain controller to an IP address.
• Active Directory Domain Services Exception
• active directory domain services was unable to connect connection with global catalog
• Active Directory Domain Services was unable to establish a connection with the global catalog.
• Active directory Domain users not able to login to client machine
• Active Directory Domains and Trusts snapin; Access is denied coming up with domain admin privileges.
• Active Directory Error
• Active DIRECTORY ERROR CODE 1355
• Active Directory error message "the following object is not from a domain listed in the Select location <forestB\username>
• Active Directory Error SvcErr: DSID-031A107A, problem 5003 (WILL_NOT_PERFORM)
• Active Directory Failing: Windows Naming Information Cannot Be Located Because: The interface is unkown
• Active Directory Federation - SPN error
• Active Directory Federation Services - Enable CAPTCHA option in ADFS page
• Active directory folder does not appear while browsing My Network Places
• Active Directory freezes
• Active Directory Group name character limit
• Active Directory Group Scope - Local Domain, Global Group, Universal Group
• Active Directory Hardware Suggestions
• Active Directory Home Folder Renaming
• Active directory integrated DNS vs standalone DNS.
• Active Directory Integrated DNS zone on member server
• Active Directory LDAP over TLS
• Active Directory LDAPs: how to force TLS v1.2?
• Active Directory Management Gateway Service
• Active Directory Mandatory Fields
• Active Directory memberOf attribute
• Active Directory Merge and rename. Best approach rename or migrate
• Active Directory Migration without Trust
• Active directory not replicating after full server restore
• Active Directory not synced password change to PC
• Active Directory not syncing, DHCP and DNS not working remote location
• Active directory object limit
• Active Directory Operations Master Shows Error in RID,PDC and Infra =TAB
• Active Directory password change by schedule automation
• Active Directory password expiration time
• Active directory password reset event
• Active Directory Query Tool
• Active Directory question
• Active Directory Replication Errors - help and advice please...
• Active Directory Replication not Working
• Active Directory Replication Problem
• Active directory replication related
• Active Directory Replication Status Tool Keeps Crashing
• Active Directory Replication Status Tool Keeps Crashing
• Active Directory Replication with state DsBindWithCred Error.Error of 1722 (0x6ba): The RPC server is unavailable
• active directory reporting tool
• Active Directory required ports - Windows Server 2016
• active directory rights to set attribute using powershell
• Active Directory scope differences
• Active Directory Security Group membership based on specific attribute
• Active Directory Security Groups as part of User or separate OU - best practice ?
• Active Directory Security Permissions (Account Unknown)
• Active Directory Server 2008R2 - You do not have permission to modify the group $%#
• Active Directory server without internet acces
• Active Directory Site Without Domain Controllers
• Active Directory Sizing tool
• Active Directory support for Digest-MD5
• Active Directory sync errors: 2148074274 The target principal name is incorrect
• Active Directory Temp 24 Hour Password
• Active Directory Topology service on server 'TopologyClientTcpEndpoint (localhost)' returned an error
• Active Directory U&C - Linking Users to Computers
• Active Directory upgrade path from 2008 R2 to 2016 ?
• active directory user
• Active Directory User Account Question - Object "name" contains other objects. Are you sure you want to delete object "name" and all of the objects it contains?
• Active Directory user with computer mapping
• Active Directory Users and Computer Freezes when setting passwords, Powershell and / or ADAC times out.
• Active Directory Users and Computer not displaying column data?
• Active Directory Users and Computers Ask For Password
• Active Directory Users and computers Starting Slowly
• Active Directory users can access with the old password !!!!
• Active directory users not replicating
• Active directory web service not available
• Active Directory Web Services
• Active Directory Web Services Event Log - can't change size
• Active Directory Web Services was unable to determine if the computer is a global catalog server
• Active Directory Web was unable to determine if the computer is a global catalog server.
• Active Directory working flow diagram
• Active Directory: Cannot create new user on operations master, but can on other DCs in domain.
• Active Directory: How to add additional department attribute to the User Properties
• Active Directory: last modified date for an attribute
• Active Directory: Permission to read users' groups.
• Active Directory: Recovery of accidentally deleted OUs and their objects
• Active Instance not set. To set an active instance use "Activate Instance ".” is displayed when you attempt to perform an authoritative restore with ntdsutil
• Active Vs Passive Authentication (WS Federation vs WS Trust)
• ActiveDirectory - Rename Computer Name
• ActiveDirectory 1005 (CONSTRAINT_ATT_TYPE) - manager
• ActiveDirectory member vs Members
• ActiveDirectory_DomainService EventID 1481 Error
• AD - Can I have overlapping subnets specified?
• AD - domain rename operation is in progress...
• AD - Slow Login Issues
• AD 2012 R2 - How to force deletion of tombstoned objects manually ? Object restore is unecessary.
• AD 2019 and client XP´s
• AD account keeps locking out every 10-15 minutes references tmg server
• AD accounts randomly locking out
• AD accounts that have been set up to never expire are expiring
• AD accounts with same CN
• AD Attribute IPv4Address
• AD attribute WhenCreated is empty when using PS or DSGET
• AD Attributes -Object class posixaccount and posixgroup
• AD auth & Wireshark
• AD Automation for account expiration
• AD backup and Managed service accounts
• AD Best Practice: disable/terminate/delete user accounts
• AD Built-In Administrator Account Question
• AD Can not Replicate Error : 2148074274 and Event ID : 1925 and Target Principal Name is Incorrect
• AD Cannot Copy User Object
• AD check health
• AD Clock Time is not accurate
• AD Communication Ports Between Domain Controllers and the client for communication.
• AD Computer Names over 15 characters?
• AD Computer Object LastLogon 0 or not filled
• AD computer object's modified date the last logged on date?
• AD cross domain authentication, GC server
• AD CS - Need to Export Certificate as PFX File
• AD CS (Certificate Services) revocation errors. How to configure CS with a offline root?
• AD CS: Cannot request certificate using Webserver Template
• AD DB corruption
• AD department attribute
• AD Domain modes
• AD domain name vs DNS domain name
• AD domain users can not read group memberships
• AD DS and DNS didn't work after restart
• AD DS and RPC Ports
• AD DS BPA Data Collection Error
• AD DS Start and Stop
• AD DS unable to establish connection with a Domain Controller
• AD field name which hold user's Secondary Email address
• AD Forest Trust User Account
• AD FS Windows 2012 R2 exception occurred in service
• AD FS Windows 2012 R2: adfssrv hangs in starting mode
• AD group members disappearing
• AD group verses OU and sub-OUs: Why would you choose one over the other?
• AD Health Check
• AD Health Issues and NTDS Shadow Copy Freeze Messages
• AD help changing old user to a new user but with same profile on the same pc
• AD ID Account lockout with caller computer name blank.
• AD Integrated DNS Zone export
• AD Kerberos question
• AD LDS - Create new application partition
• AD LDS Administrator?
• AD LDS and locked out accounts response codes
• AD LDS Group/Role Permissions/ACLs - Difference between Readers and Users
• AD LDS LDAP Error 32 No Object Found
• AD LDS new instance vs replica
• AD LDS Password Policy
• AD LDS Replication
• AD LDS Replication
• AD LDS Stand Alone SSL gives error 81 (x51) when trying to connect with LDP.exe 3.0
• AD LDS, unable to bind with the DOMAIN\administrator
• AD LDS: how to control userAccountControl property ?
• AD login details
• AD logon name change
• AD Managed by Attribute
• AD Migration with Exchange
• AD Nested Groups not always receiving permissions
• AD not working on Port 636 from external
• AD Object recovery\restore
• AD objects without BitLocker keys stored in AD
• AD OU best practices
• AD Performance
• AD Permission to add/remove from groups
• AD port requirements when DCs and clients segmented by firewall.
• AD Query users by date created
• AD Recycle Bin, Recycle object lifetime
• AD Replication Error
• AD replication error (Event ID 1864) / deleted DSA / AD cleanup
• AD Replication Error 1726
• AD Replication Errors
• AD Replication Failure Between Server 2008 R2 and Server 2003 - LDAP bind failed with error 8341
• Ad Replication failure DNS Issue ?
• AD Replication issue - the destination server is rejecting replication
• AD Replication issue from Forest Root
• AD Replication Issues - Event ID's 1865, 1311, 1566
• AD replication latency & required bandwidth question
• AD Replication Not Working - Last error: 1256 (0x4e8):
• AD Replication only works one way
• AD Replication Problem with Event ID 2022 & 2091
• AD replication problems due to Tombstone.
• AD Replication Status Tool Download version 1.1
• AD Replication Topology Best Practice
• AD saved query operating systems edition
• AD Schema - Create Attribute - Option is grayed out
• AD Schema update from 2012 to 2019
• AD Security Audit - User32 Logon Process
• ad security tiered accounts questions
• AD Server Behind NAT.
• AD Service Accounts - Owners
• AD Services account's last activity!
• AD sets Account Expiration Date one day less than the date passed through powershell
• AD Site Cost Calculation
• AD Sites and Services - adding subnets
• AD Sites and Services and subnet question
• AD sites vs LdapSrvPriority for LDAP services
• AD sites with no subnets listed
• AD Troubleshooting...
• AD Trust - Conditional forwarder aganist secondary DNS zones
• AD Trust and Required Ports - Firewalls
• AD Trust Cannot Connect
• AD User Accounts Best Practice: Delete & Reuse or Disable
• AD User Accounts that will expire between 90 and 180 days
• AD user Attribute
• ad user attributes backup & restore
• ad user name alias ??
• AD user properties tab
• AD User?computer License(CAL)
• AD Users and Computers "A global catalog (GC) cannot be contacted" Server 2008 R2
• AD Users and Computers cannot open on WIndows 2012 R1, dsa..msc
• AD Users and Computers: The domain xxx could not be found because: A local error has occurred.
• AD Users Disabled Date
• AD Users Profile Picture
• AD vs AD DS
• AD Web Service Error 1202
• AD- DNS - Reverse Lookup Zone
• AD-LDS: simple LDAP bind with authentication against SAM
• AD-Time sync issues
• AD/DNS problem? dcdiag failed test Connectivity
• AD/DNS setup in an internet-isolated environment
• ADAM and replication
• ADAM - replicate or export/import
• ADAM "The directory property cannot be found in the cache"
• adam.Events.xml could not enumerate
• ADAMSync / LDS - How to change the standard port
• ADAMSYNC- Constraint Violation
• ADCS Domain Controller Template Provider Category Greyed Out
• ADCS: Autoenroll working for users, not computers (RPC unavailable)
• Add Custom Attributes to AD LDS
• Add custom tabs to users in AD?
• Add distribution group in to a security group
• Add dns record for .com in .local domain
• Add existing Domain Tree into a forest
• Add host machine to Domain.
• Add LMHOST Entry
• Add mac address (hardware) attribute to AD schema
• Add one more SID for active directory User
• Add roles and feauture failed
• Add SID to sIDHistory AD attribute
• Add tab to active directory
• Add User button is grayed out in User Rights Assignment
• Add user to a Distribution List in a Trusted Domain
• add users from a trusted domain to domain admins group
• Add Windows server 2019 to Active Directory DFL/FFL 2003
• Add-Computer error - Cannot establish WMI connection to this computer
• Add-kdsrootkey child domain
• Adding 'manager' from seperate trusted forest
• adding a custom attribute to the list of available columns in AD
• Adding a Windows Server 2019 Domain Controller
• Adding accounts to local admin group on DC
• Adding AD users from one forest into a different forest
• Adding additional details to the user fields in Active Directory
• Adding additional domain controller to existing one.
• Adding birthday to Active Directory user property
• Adding custom DNS A record for a public domain
• Adding Internal DNS server in Host file
• Adding multiple computers to Domain .
• Adding multiple users to groups in Active Directory
• adding new server 2012 DC in existing 2003 forest
• Adding other columns to AD Administrative Center views
• Adding OUs and Users to an LDS Partition
• Adding Pager Field When Creating New AD Users in PowerShell & Importing CSV
• Adding photo tab in AD User properties
• Adding the first 2012 R2 domain controller to your 2008 R2 domain
• Adding user from tusted domain to grups in other trusted domain
• Adding user to Active Directory Group Using Java
• Adding Users from Trusted Domain
• Additional DC LDAP Bind function call failed.
• Additional permissions required in order to delete a computer object using VBScript compared to ADUC
• ADDS Installation Error on Windows Server 2012
• ADFS - Consequenes of enabling Forms Authentication
• ADFS 2.0 - Error sync'ing from Primary ADFS to Secondaries
• ADFS 2.0 ADFS/LS error EventID 364
• ADFS 2.0 End of Life date?
• ADFS 2.0 move configuration database from one SQL to another SQL server
• ADFS 2016 failing to add a node to farm - missing SPNs
• ADFS 3.0 login failing from IE8
• ADFS 3.0 problem! No registered protocol handlers on path /adfs/oauth2
• ADFS 3.0, Error Installing "The Server is not operational"
• ADFS and Google Apps SSO - Signout URL?
• ADFS and new Domain Controllers
• ADFS Authentication with AD Forest trust
• ADFS doesn't have P3P policy
• ADFS error event 356 - Urgent Help Require
• ADFS on a Domain Controller
• ADFS proxy error: An error occurred when attempting to establish a trust relationship with the federation service
• ADFS SSO and SAML
• ADFS Version not able to get the check
• ADLDS 0000202B Ref Err:DS ID-03100742
• ADLDS query
• ADLDS replication process step by step
• AdminCount Attribute
• administrative limit was exceeded
• Administrators Active Directory Report
• Admins sporadically getting "You do not have sufficient privileges to delete <computer>" but they have sufficient permissions to delete the object
• AdminSDHolder - Deny Change Password for Account
• ADMT 3.2 - How to migrate file Server
• ADMT 3.2 - SystemPropertiesToExclude Script don't get results
• ADMT 3.2 "Could not verify auditing and TcpipClientSupport on domains. Will not be able to migrate Sid's. Access is denied."
• ADMT 3.2 Database issue.
• ADMT 3.2 problems with the exclusion and Error 0x80004005
• ADMT 3.2 RPC Problems. ERR3:7585
• ADMT 3.2, Migrate User SIDs, fails with ERR2:7111 Failed to add sid history for USER to USER.test RC=1722
• ADMT Error 7585, An operations error occurred.
• ADMT Group Migration - Confused by Copy Group Members
• ADMT user migration using include file
• ADMT: Unable to create or merge object as another instance of ADMT is...
• Adprep encountered an LDAP error.(Error code: 0x20. Server extended error code: 0x208d, Server error message: 0000208D)
• ADPREP Error when promoting Windows Server 2016 in 2008 R2 forest/domain
• ADPrep execution failed --> System.ComponentModel.Win32Exception (0x80004005): A device attached to the system is not functioning.
• Adprep.exe in server 2012
• adsi edit cnf
• ADSI Edit user security permission
• ADSI Linked Server Query Group Members
• ADSIEdit error code: 0x57 - FGPP
• ADU&C - LDAP Query - Find users with account expiration date between now and one month in future
• ADUC Can't double click to open container????
• ADUC Unix Attributes
• Advanced Audit Policy configured settings do not show in rsop.msc
• Advanced Audit Policy not showing up in GPMC Preview pane
• Advanced Audit Settings
• Advantages of deleting obsolete computer accounts
• ADWS Error 1202 This computer is now hosting the specified directory instance, but Active Directory Web Services could not service it
• ADWS error event ID 1202
• After joining the client mahine in domain not able to ping any hostname or fileshare.
• After removing users from Domain Admins group, then delegating control, these users cannot change their own passwords
• Alerts on Admin Logins
• Alias CNAME: The record cannot be deleted. The name does not exist
• All Users password expired when disable the "password never expires" flag
• All users properties
• Allow AD users to modify values in the attribute editor
• Allow help desk to manage open files on file server
• allow local admin account remote desktop after join domain ?
• Allow non Domain Admins to install patches on Domain Controllers
• Allow Normal User to Login to Domain Controller
• Allow user to shutdown server
• Allowing a specific group to restore deleted AD objects
• Allowing a user to add members to a group but not remove them
• Allowing access to an AD domain for users in another AD domain
• Allowing intranet access while blocking internet access (web access) for a few users
• An active directory domain controller cannot be contacted
• An error has occurred while collecting data for Administrative Templates.
• An invalid dn syntax has been specified when using the dn that is in Active Directory on ADsOpenObject call
• An LDAP client connection was closed because of an error
• An object named "****" cannot be found
• anonymous active directory searches
• Anonymous user can enumerate domain users and connect to IPC$ on domain controller
• Antivirus exclusions for ADFS 3.0
• Any reason not to enable AD Recycle Bin??
• Any recommedations for setting page file size on domain controllers
• Applocker logs(Exe and dll) are not generated in Eventviewer after adding a registry key for Microsoft-Windows-AppLocker/EXE and DLL in regedit
• Apply GPO to the entire forest
• Apply Group Policy to User from Domain A logging into Computer in Domain B
• Are Global groups and domain local groups replicated to Global Catalog ?
• Are server 08 R2 event 1153 post promo logs expected?
• Are Service Principal Names (SPN) case-sensitive?
• Are there any way to show How Many Times Password has been entered before Log-out
• Assign 'Self' Permissions to allow user to add/remove self from group
• Assign Normal Domain User to Unlock Domain Admins Account
• Assign two IP addresses on domain controller
• Assigning permissions to OU
• Assigning profile picture for all domain users using Group policy
• Attribute Editor doesn't appear
• Attribute missing from some AD users and does not show for any new users created
• Attribute PhysicalDeliveryOfficeName
• Audit account logon events and other types of audit doesn't work
• Audit account logon events not working on Domain Controllers
• Audit failure 4776, blank workstation
• Audit log [LAPS]
• Audit or Event Logs for IP Setting Change
• Auditing Why the User Account is Getting Locked Out
• Authenticate to a child domain via a parent domain account
• Authenticate to Internal Trusted Domain From DMZ App Server
• Authenticated Users will not resolve when adding to a group in AD
• Authenticating agains AD with Kerberos, by a user with an explicit UPN
• Authenticating to Active Directory using an alternate UPN?
• Authentication Error - KDC
• Authentication Policies and Silos not working properly
• Authentication using a AD LDS
• Authoritative restore and Non Authoritative restore
• Authorized DHCP servers in the domain.
• Authorizing DHCP failed error 20079
• Automatically Add Users to a Security Group
• Automatically change AD User's password hourly
• automatically delete or move old user accounts
• Automatically populate email attribute on user creation
• Azure AD Connect – Excluding Organizational Units (Syncing)
• AZure Ad connect Location
• Azure AD Connect Microsoft PolicyKeyService Certificate Authority
• Backing up and Restoring a Domain Controller hosted on Amazon Web Services
• Backup Operators not able to backup system state on Domain Controller
• Backup Restore Test- Sysvol and Netlogon shares are missing
• Bad Password Count and Last Logon different between 2 domain controllers
• BadLogonCount and LastBadPasswordAttempt
• BadPwdCount reset after a successful logon?
• Base and Bind distinguished name in active directory
• Base DN for LDAP
• Basic question of a beginner: does moving users into a sub OU have any impact?
• Batch file attachement with ADS user's profile
• Best Microsoft practice NTDS Settings replication among domain controllers
• Best possible way to deploye RODC on remote location
• best practice / procedure to move a windows server 2016 domain controller to another site
• Best practice for designing AD sites without domain controllers
• Best practice on Active Directory Sites and Services?
• Best practice to create a DNS zone for each new subdomain?
• Best Practice? Deleting User Accounts - OnPrem AD and Office 365 Mailbox hybrid
• Best Practices - Active Directory and Domain Controllers for Public / Internet Facing
• Best Practices for AD sites and services
• Best practices for maintaining the disabled user accounts
• Best practices for Microsoft CA root server design and operations
• Best practices on resetting KRBTGT password
• Best practise disable NTLMv1
• Best replacement for the msg.exe in windows
• Best way of searching for those members of a group that also match some other filter?
• Best way to force password policy on users within 1-2 weeks?
• Best way to implement active directory in multiple locations
• Best Way To Remove All Manually Created Site Connections
• Best Way to Remove Server from Active Directory
• Best way to resolve Account lockout issue
• Bind DN/Username for LDAP
• bind secondaries
• BLACK SCREEN DURING REMOTE ASSISTANCE
• Block access to Control panel for specific local User with GPO
• Block Attribute View From Certain Users
• block Bluetooth via group policy
• Block CDROm throgh reg
• Block Event viewer Access to users
• Block Internet access on Domain controllers
• Block websites on windows server 2012 for active directory users
• Block websites using AD
• Blocking ldap (port 389) on the DC?
• Blocking UDP 137
• Bridge All Site Links
• Bridgehead server selection process
• Broken delegated domain _msdcs.domain.local (demoted last 'legacy' DC)
• Broken delegated domain errors in DCDIAG /test:DNS for all DCs in domain and DCs of all trusting domains
• Broken replication after DC demotion
• Building Organisation Hierarchy with Active Directory
• BuiltIn Administrators groups in Domain Controller feature?
• Bulk change of the fomat of users phone numbers in AD
• bulk import / create users
• Bulk update 'manager' AD attribute from CSV containing samAccountNames (of user with respective manager)
• bulk Update attribute in AD, best way to get this done?
• Bulk update user login names in active directory
• C drive is getting full due to log file
• C:\Windows\System32\lsass.log
• CA Certificate Renewal - Screen for Request does not popup
• CA migration: SHA1 to SHA2 in Windows 2016 OS
• cache lookup DNS
• Calculate Hardware requirements for Active directory Server
• CALLBACK MESSAGE: The following server could not be reached (topology incomplete):
• Can a 2003 domain controller be taught to issue AES128 or AES256 kerberos tickets?
• Can a Domain Controller be assigned to multiple AD Sites
• Can a managed Service Accout have a mailbox ?
• Can account SUPPORT_388945a0 be deleted from domain controller?
• Can AdminCount be set to 1 on any accounts in Active Directory
• Can an administrator override enforce password history and minimum password age settings in ADUC?
• Can DC be multihomed in Windows 2008 Server?
• Can I determine the AD site for a AD computer account?
• Can i have Multiple Domains in a Server 2012 R2
• Can i hide SYSVOL & NETLOGON ???
• Can I install Hyper V role on Domain Controller server
• Can I join a computer to a domain through the Internet?
• Can I know which user is logged in from an ip address?
• Can I move the default domain Admins ,Enterprise Admins and Administrator account to another OU like builtin OU without breaking something?
• Can I Recover a account in AD using SID
• can I redirect https with DNS record in 2012R2 Domain?
• Can I remove SRV records?
• Can i repair OS of a Windows 2012 domain controller?
• Can I safely delete and recreate Reverse Lookup Zone in AD?
• Can not access external website from inside the domain of the same site
• Can not join Windows xp to Windows 2012 R2 on Domain
• Can not restore a deleted AD Object on Windows 2012 Server using several different methods
• Can only log into Windows with pre-Windows 2000 login username
• Can ping a server by fqdn but not by host.
• Can Server 2016 Nano Server run the AD DS role and run as a Domain Controller?
• Can the disabled user still able to access resource?
• can we add universal group into global group
• Can We Do Remote PSSession Without Using Domain Admin Credential to ADServer?
• Can we remove the Authenticated Users permission for DNS record Creataion
• can we remove? default-first-site-name
• Can we set email alert mechanism if any changes made in Active Directory
• can we transfer the fsmo roles during the production hours
• Can Windows 2016 domain controller join to Windows 2003 active directory?
• Can you allow MMC/ADUC Snap-in for a Domain User on a Domain Controller
• Can you create a Child domain on the same server as parent domain
• Can you reset/modify/unlock same members of account operators?
• Can you run LDAP & LDAPS at the same time?
• Can't access ADFS federationmetadata.xml
• Can't Access SYSVOL Using FQDN
• Can't add domain user account to local admin group properly
• Can't add subnet to AD Sites and Services
• Can't add user to a group from Active Directory "Member Of" tab in Windows 2003
• Can't add users or groups to local Administrators group on Server 2008 server in another domain
• Can't assign user attribute across a Forest Trust
• Can't authenticate to PC in another Domain
• Can't Change Domain Password from Another Domain
• Can't change the Current Directory Server on Windows 2016 Server
• Can't clear security log on DC
• Can't connect to AD on any DC after forceful removing an old domain controller
• Can't connect with secure LDAP through PHP in IIS (W2012 R2)
• Can't Copy User in AD User and Computers
• Can't create a local user by Group Policy Preference
• Can't enable LDAPS on Windows 2008 R2 domain controller
• Can't find domain local group using Select Users, Computers, or Group
• Can't find Remote Server Administration Tools under Programs...
• Can't get all member objects from Domain Users in LDAP
• Can't join AD Domain using FQDN - Fails with Error 53 "Network Path not Found"
• can't log into domain controller username password error
• can't login after renaming domain controller
• Can't login remote desktop to parent domain Controller
• Can't Login to Windows Server 2008, it says User name or Password Incorrect
• Can't logon to DS Restore Mode with local administrator
• Can't open Active Directory Users and Computers console and DNS error 4000
• Can't perform an NSLookup to domain controllers from member servers.
• Can't push remote Group Policy update: "No computer objects can be found in this OU or sub OUs"
• Can't transfer FSMO roles
• Can't use NETDOM to reset password for DC that has Target Principle Name is incorrect error
• [Cant rename computer computer account is already exists](/archive/msdn-technet-forums/1ec9608e-4f40-4e08-81fd-7bb9d9b7c504 "Cant rename computer computer account is already exists")
• [Cant see users property from ForeignSecurityPrincipals OU](/archive/msdn-technet-forums/da8f550f-e4b8-4a12-86c7-2c4f9e4f8e74 "Cant see users property from ForeignSecurityPrincipals OU")
• Cannot access Active Directory on Windows 2016 server
• Cannot access company site from internal network
• Cannot add a domain controller to an existing domain
• Cannot add AD user in to the local administrators account..."Name Not Found" error...But I can with a VB Script...Why??
• Cannot add Forwarders to DNS server "Forwarders are not avaiable because this is a root server."
• Cannot Add SPN - Duplicate Found
• Cannot apply GPO to default container
• Cannot complete this function error while try to join 2012 r2 server to 2008r2 server domain in hyper-v
• Cannot connect to a partition in LDS with ADSIEdit - The directory property cannot be found in cache
• Cannot Connect to Domain through Windows Server Core
• cannot connect using LDP.exe to DC on 636 SSL LDAPS
• Cannot create a new user object in AD
• Cannot create new users in Active Directory
• Cannot delete an user that only shows in ADSIEdit
• Cannot delete Computer from Active Directory and PC cannot join domain
• Cannot delete old SRV records of demoted DCs in DNS
• Cannot Delete the Roaming Profile on Shared Folder
• Cannot delete trust between domains
• cannot delete user account directory Object cannot be found
• Cannot determine cause of Event ID 7062
• Cannot DsBind to Domain (\\DC02).Status = 1722 0x6ba RPC_S_SERVER_UNAVAIL ABLE
• Cannot Edit AD attributes
• Cannot find SID for Accounts in Group Policy
• cannot install additional domain controller at this time because the RID master is offline 2008 R2
• Cannot join domain "the network path was not found"
• Cannot join server to domain through RODC
• Cannot login to Domain Controller after promote it
• Cannot login to restored domain controller unless NIC removed
• Cannot login to windows 2016 domain controller - the user has not been granted the requested logon type at this computer.
• Cannot make a new site in Active directory sites and services, can anyone help me?
• Cannot manage computers through "Active Directory Users and Computers"
• Cannot open advanced audit policy configuration
• Cannot ping DC, but DNS service on the box is working for all workstations
• cannot ping default gateway, cannot access the internet
• Cannot promote DC as RODC, Replication operation failed because the target object referenced by a link value is recycled
• Cannot raise the domain functional level - The server is unwilling to process the request
• Cannot remove an account from Administrators group (built-in)
• Cannot Remove User From Active Directory
• Cannot remove user from AD, access is denied
• Cannot replicate DS between primary and secondary DC (running Window Server 2008)
• Cannot see AD object properties
• Cannot see the members of the local group on member server!
• cannot telnet on port 4172
• Cant access Local Users and Groups from AD
• Cant create a new OU
• Cant delete default domain policy
• Cant find Enterprise Admins Security Group ? Pls help
• Cant join domain.. "the format of the specified network name is invalid"
• Capture source IP address in security event
• CCertRequest::Submit: The RPC server is unavailable. 0x800706ba (WIN32: 1722)
• Cert Enrollment Folder Permissions
• Certain AD user accounts get deleted automatically
• Certificate based WiFi authentication for Mobile devices (iOS, Android) manually
• Certificate enrollment failed - 0x8007054b
• Certificate enrollment for Local system failed to enroll for a DomainController certificate with request ID N/A from (The RPC server is unavailable. 0x800706ba (WIN32: 1722)).
• Certificate Renewal for Domain controller and Domain controller Authentication.
• Certificate renewal in the AD LDS service's personal store
• Certificate server replication question
• Certificate Services throws 404 error on Server 2008 R2
• certificate template could not be loaded. element not found
• CertificateServicesClient-CertEnroll EventID 13
• Certification Authority Web Enrollment Error: An unexpected error has occurred: The Certification Authority Service has not been started. when open link 'Download a CA certificate, certificate chain or CRL'
• Change Account Expiration Date
• change account user logon name to lower case
• Change Active Directory Computer Object Attribute "Computer Description"
• Change AD Trust type from External to Forest
• Change CN
• Change Computer Name on Domain Without Removing From Domain
• Change Domain Controller Weight and Priority
• Change Domain user's password from outside the domain
• Change IP address on Issuing CA's
• Change Join OU from "Computers" to another OU
• Change Local Administrator Password with group policy
• Change machine name via domain controller?
• Change Notification across AD Sites
• Change of Active Directory Password Policy - impact current users
• Change or add a NetBIOS Domain Name
• Change primary DNS suffix when domain memebership changes
• Change primary SMTP address using powershell for AD NOT Exchange
• Change replication parter for a RODC because of remove of a DC
• Change replication partner domain controllers setting
• Change subnet association to different site
• change the primary domain controller computer
• Change the priority for DNS SRV records
• change time zone of system from IST to EST through group policy
• Change UPN for all users
• Change upper case to lower case for users e-mail addresses and AD account names
• change User Profiles path in Active directory
• Change Word Template File Location with Group Policy
• Changed the SOA record for a zone to a different Server, but it keeps changing itself back again
• changes i made in users attributes got reverted automatically
• Changin the ip address of authorized dhcp server
• Changing a username after a marriage
• Changing Active Directory Computer Name
• Changing fSMORoleOwner to different DC
• Changing IP address on Domain Controller
• Changing letter case of domain name in active directory
• Changing password option is greyed out after joining the machine to the domain
• Changing permissions on NETLOGON
• Changing preferred AD language for accounts and groups
• Changing Primary DNS Entry via Group Policy
• Changing Server Name in Inter site topology Generator
• Changing the gid for a group in Active Directory
• changing the primary domain dns name of this computer to "" failed
• Changing the Primary Domain DNS name of this computer to "" failed. The name will remain
• Changing the SOA for DNS Zone
• Changing Updating Object's DistinguishedName DN Attribute
• Character Limit in "Description" Attribure
• check Ad account delete log
• Check Authentication Protocol in windows domain
• Check empty attribute Active Directory
• Check if AD Group has members
• Check Last logon more than 90 Days for all enable user only
• Check Point Identity Awareness
• Check replication topology -> "the directory property cannot be found in the cache"
• Child domain and Tree domain‏
• Child domain Benefits in large environment
• Child domain replication
• Child domain users cannot login when Parent domain not available
• child domain's user can't see parent domain's location
• [Child OUs in Domain Controllers OU](/archive/msdn-technet-forums/3360ef39-a527-4cbc-85f5-a65c9f84d8a7 "Child OUs in Domain Controllers OU")
• Chrome Single Sign on not working correctly.
• CIFS SPN Missing
• Cisco ISE and AD Authentication
• Clean up DFSR folder after replication group reconfiguration
• Cleaned up old GPO's, but they're still in SYSVOL
• Cleaning up DCs SYSVOL FRS Member Object
• Cleaning up FRS Sysvol Morphed Folders without Rename
• Cleanup Failover Cluster after Cluster is already shut down
• Clear login cache
• Client not registering in DNS
• Clients authenticating to wrong Domain Controllers
• Clients talking to the wrong domain controller
• CN=Deleted Objects missing
• CN=Deleted Objects missing from Active Directory Administrative Center
• CN=DFSR-LocalSettings Missing
• CNF remove from AD
• command insted of DSGET and DSQUERY to pullout data from AD
• Command Line show LastLogonDate for computers in my AD but filter by date.
• Command to display current default containers?
• Compare AD Migration - Intra Forest and Inter Forest
• Completely hide OU for users - AD/OU segregation
• Complexity Password: Restrict words in user passwords
• Computer account "userAccountControl" property question
• computer account auto-disabled in AD
• Computer account getting deleted automatically
• Computer account is not removed when disjoined from active directory.
• Computer accounts mysteriously dissappearing in active directory
• Computer Domain-join with external DHCP/DNS-server
• Computer icons represented as users in the group
• computer joins the domain but doesn't appear in Active directory
• Computer not visible in active directory after joining to domain.
• Computer object in the Administrators group on a domian controller
• Computer Object Management - How to move computer from one domain to another?
• Computer object password resets through an RODC
• Computer password expiration in AD - please, help to understand
• Computer Rename : Computer account does not update/change, but DNS Name DOES. Help?
• Computers are being disconnected from domain
• Computers are contacting a DC in a different site for domain join operations
• Computers in domain with Windows Time service disabled
• computers last logon from an input list
• Computers not showing in Active Directory
• Computers point to DC in wrong DC Site Name
• Con't login with domain account after restore machines using adrestore.exe
• Configure administrative accounts to prevent delegation
• Configure and Enforce the Setting "Manage auditing and security log" via GPO
• Configure Domain Controllers for NTP
• Configuring Active Directory to use External LDAP for Authentication
• Configuring Kerberos Authentication for certsrv web application
• Configuring LDAP Browse Permissions
• Confirm Subtree deletion when deleting computer account
• Confirm Subtree Deletion dialog when removing Site?
• Confirm Subtree Deletion....Why this??
• Confused about ms-DS-MachineAccountQuota
• Connect to AD over VPN?
• Connecting to a dfs root with a workstation from a different domain
• Connecting to AD LDS instance via AdsiEdit.
• Connecting two Domains on Different Networks
• Connection Logger tool used for Logging DNS Traffic.
• Consequences of restarting active directory domain services in production
• container named Keys
• Control Network Shared Folder and File Permissions within AD
• Controlling LDAP queries against an AD domain with multiple sites.
• Convert a Global group to Local
• Convert a RODC to R/W domain controller
• Convert domain global group to local.
• Convert External Trust to Forest level trust
• convert user acount to a service account
• Copy database of AD from my domain to other domain new
• copy OU delegation
• Copy SidHistroy from one domain to another domain with trust in place
• Core Scanning ServerEX
• Correct way to change the CA Cryptographic Provider
• Corrupt OU in Active Directory
• Could not obtain information about Windows NT group/user 'DOMAIN\user', error code 0x5
• Could not read from the registry sub-key
• Could we have same name's for User and Groups in Active directory
• counting the number of machines in my AD
• create a automatic disable user account GPO when user account move to this disable user group
• Create a dynamically updated Security Group, based on membership of an OU or Container
• Create a GPO to set IE as the default browser in domain
• Create a subdomaing on active directory
• Create AD Groups with the same name !!
• Create Child domain - child folder always grey in DNS
• create computer account before join to domain
• Create krb5.ini file
• Create new folder in SYSVOL?
• Creating a custom class/object and using it in active directory
• Creating a failover cluseter: "cannot reach a writable domain controller" Why?
• Creating a trust relationship using hosts file instead of DNS ?
• Creating a Unique x500 Object ID
• Creating alias in Active Directory
• Creating LDAP alias
• creating multiple users
• creating new site and add subnets on ad sites and services
• Creating non-interactive accounts
• Creating Power Users using Active Directory in Windows Server 2003
• Creating Registry key and subkey using GPO pereference
• Creating replica of ADAM instance using Adamntds.dit
• creating trust domain across VPN
• Creating two way domain trust failing, error: Getting DC name failed: Status = 1355 0x54b ERROR_NO_SUCH_DOMAIN
• Creation of trust fails: cannot continue
• Cross Domain Authentication Not Working As Expected
• Cross Forest authentication issue Event ID 4625 and Netlogon logs
• Cross Forest LDAP Query and sub domains.
• Cross Forest trust was working now getting Parameter is incorrect when checking on side
• Cross Forest Trust with one way domain trust issue
• Cross-Forest Kerberos Authentication Delegation of client credentials
• Cross-Forest LDAP Queries
• Cross-Forests LDAP Connection string
• CSVDE Error while importing
• CSVDE to export computers
• Current User Session Details - Against Domain Controllers
• Custom AD Attributes using powershell
• Custom User Attributes - Adding them to ADUC
• Customize AGDLP strategy for specific needs
• Data Collector Sets: Active Directory Diagnostics
• Data from active directory users and computers is not available from domain controller
• Data from servers is not available from domain controller
• Data from Servers is not available from Domain Controller when trying open the server folder under the sitename in ADSS
• Data loss when changing a local user account password with a domain account?
• Database Engine is initiating recovery on W2K8R2 DC
• Date modified on computer objects
• DC - refuses administrator log on
• DC 2019 - ERROR_NO_LOGON_SERVERS
• DC An error occured during logon Event ID: 4625
• DC and ADC replication/ Sync do not work
• DC Demotion Log
• DC Diag - Failed BASC test
• DC don't have A (Same as parent folder) record in DNS
• DC failed test Connectivity
• DC offline for 2 months, best way to handle?
• DC Physical or Virtual
• DC Promo failing: LDAP connection error
• DC Promote Permission
• DC Weight and Priority
• DCDiag - Failed Connectivity
• DCDIAG - NCSecDesc error
• Dcdiag - WMI error
• DCDIAG : DC2 Failed test advertising
• DCDIAG * Missing SPN
• dcdiag /q, Missing Expected Value, Q312862
• DCDIAG /Test:Connectivity reveals DCs can't connect to the PDC DC?
• DCDIAG /test:DNS The host could not be resolved to an IP address
• dcdiag /test:dns fail - [00000007] Microsoft Virtual Machine Bus Network Adapter has invalid DNS Server
• dcdiag /Test:services failed with invalid service type error
• dcdiag AAAA record not found
• DCDiag DNS Delegation Errors
• DCdiag DNS Forw Failures
• dcdiag DNS test - Missing AAAA records
• DCDIAG DNS tests shows warnings for my two 2008 DCs
• DCDiag error Got error while checking LDAP and RPC connectivity. Please check your firewall settings. ........................xxxxxxxx failed test Connectivity
• Dcdiag error - 0x6d9 "There are no more endpoints available from the endpoint mapper."
• DCDIAG Error - failed NCSecDesc
• DCDiag error - failed test systemlog
• dcdiag errors KccEvent 0x8000082D 0xC0000748
• DCDIAG failed system log
• DCDiag failed test DFSREvent
• dcdiag failed test Services
• dcdiag failed to delete test record
• DCDIAG fails with: call failed, error 1722, Could not open pipe with [server]:failed with 53 etc
• DCDIAG failure
• DCDIAG frsevent test failed
• DcDiag KCC error 0x800004c0
• DCDIAG output
• DCDIAG Result A net user or LsaPolicy failed with error 67
• DCDIAG showing multiple errors for enterprise tests - error 1355
• dcdiag shows Latency information
• DCDiag test fail on one of my DC's.
• dcdiag test failed on knowsofroleholders - error 58
• Dcdiag test failed on VerifyEnterpriseReferences
• DCDIAG test on DNS returns with a Basc failure.
• DCDiag, There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. failed DFSREvent
• Dcpromo - DNS delegation issue.
• DCPROMO (retiring a 2003 Domain Controller)
• dcpromo /forceremoval
• dcpromo /forceRemoval results in "DFS Replication: Access is denied." error and endless password prompts.
• DCPromo Demotion Failure - could not transfer the remaining data in directory partition
• DCPromo doesn't lanch stuck at checking binaries
• DCPromo error: The wizard cannot gain access to the list of domains in the forest
• DCPROMO FAILS -The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles.
• DCPROMO FAILS -The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles.
• DCPromo failure - NetGetDCName failed: Status = 2453 0x995 NERR_DCNotFound
• DCPromo Logon Failure
• dcpromo remove domain controller failed
• DCPromo was unable to remove DNS delegations...
• DCs in default-first-site-name site that shouldn't be
• Decommission of Wins server
• Default domain administrator password
• Default Domain and Default Domain Controller policies are broken
• Default Domain Controllers OU vs other OU with Domain Controller Policy Applied?
• Default Domain Policy Default Settings
• Default domain policy vs Get-ADDefaultDomainPasswordPolicy
• Default Logon server
• Default security AdminSDHolder
• DEFAULTIPSITELINK removal with one site
• Deference Between Employee ID and Employee Type in Active Directory 2008 R2
• Define LogonServer for sites
• Delay in passwrod changed in Active Directory 2012
• Delegate Ability to use AD Recycle Bin
• Delegate change logon hours.
• Delegate Computer Renaming
• Delegate Control - User Home Folder
• Delegate control in AD to update city and state/province
• Delegate Control not applying to existing user objects
• delegate control to enable and disable computers in active directory
• Delegate edit permissions to help desk group doesn't work if user object is expired
• Delegate password reset for domain admins
• Delegate permission to manage Computer objects with ADUC
• Delegate permission to modify user properties in AD
• Delegate permission to remove "prevent object from accidental deletion"
• Delegate Permission To Specific OU - Allow User The Permission To Delegate Permission
• Delegate permissions in OU's: cannot move objects
• Delegate permissions on user objects based on group
• Delegate permissions to rename user accounts
• Delegate Permissions to User the 'User must change password at next logon'
• Delegate Restore objects
• Delegated access for specific users to add and remove users from a group and all of its child groups
• Delegated Ou to just create users
• Delegated OU, allow specific account to join computer to a specific targeted OU
• Delegating Active Directory - Naming information cannot be loaded because the logon attempt failed
• Delegating create/modify record rights to a single DNS zone
• Delegating DCDIAG - How can I find the required permissions.
• Delegating group membership just from specified OU
• Delegating rename a computer name to a domain user
• Delegating the ability to trust a computer for delegation
• Delegation for rebooting Domain Controller
• Delegation not working properly
• Delegation permissions required to create a KEYTAB
• Delegation Rights to Security groups
• Delegation tab is missing for user account in AD
• Delegation tab is missing for user account in windows server 2012 R2
• Delegation to allow HelpDesk users to Enable and Disable accounts
• delegation to change phone numbers
• Delegation to Read All Users Properties in the domain
• Delete a computer account
• Delete a SIP address from AD using PowerShell
• Delete AD Group
• Delete All Child Computer Object Vs. Delete
• delete bulk users from csv
• Delete Computer object VS Disjoin
• Delete deleted and recycled Objects from Active Directory Recycle Bin
• Delete Domain Controller - Access is denied
• Delete multiple AD user through command Line
• delete sysvol folder
• Delete User Object from the Deleted Objects Container
• Deleted "Managed Service Accounts" Container
• Deleted DNS record keep coming back
• Deleted failed DC from the domain (Server 2012 R2) - Now after doing metadata and DNS cleanup, I can no longer promote a new DC to the domain
• Deleted SPN's keep coming back
• Deleting a DNS resource record in an AD integrated system
• Deleting msFVE-RecoveryInformation entries with ADSIEdit.msc
• Deleting object protected by accidental deletion on server 2012?
• Deleting services in services.msc
• Demoted Domain Controller still showing up in AD Sites and Services
• Demoting 2012R2 DC asking to Remove DNS Delagation
• Demoting a DC using dcpromo
• Demoting a Domain Controller Error
• Demoting and installing again a RODC
• Demoting Last Domain Controller in a Child Domain - Parent Domain Listed
• Demoting Win 2008 Std (32-bit) DC - Remove DNS Delegation question
• Demoting windows server 2012 R2 additional domain controller
• Deny Read and List content on an OU for a specific group of users
• Department attribute more than 64 character
• Deploy printers via GPP
• Deploying Fonts via GPO or any other means
• Deploying LAPS -Local Administrator Password Solution- error while trying to update the schema
• Detailed explanation of the SELF user group and when\why it is used?
• Determine how Password is reset?
• Determine User Last Logon to computer
• determine what user account was used to join a computer to a domain
• Determining GPO of remote user
• Determining Whether AdPrep Has Completed
• DFS 2008 R2 to DFS 2016 Name Space Migration
• DFS and roaming profiles and home folders
• DFS Error 6004 - AD 2016
• DFS Event ID 5014
• DFS health check
• DFS Health Report = inconsistent configuration detected (conflict)
• DFS Management shows SYSVOL member is missing
• DFS namespace redundancy - is this how to achieve it?
• DFS Replication - DFSREvent Failed
• DFS Replication Errors
• DFS Replication Failing for Domain System Volume
• DFS replication is only one way
• DFS replication issue
• DFS replication issue in secondary AD
• DFS replication port
• DFS Share not showing up when browsing \\Domain
• DFS Shares randomly not accessible
• DFS site shows unknown
• DFSR - This member is waiting for initial replication for replicated folder SYSVOL Share - How long should it take?
• DFSR Error - The Replication Group Cannot Be Found
• DFSR error ID:5008/4612 Towards demoted/removed DC
• DFSR Event 5014 - DFS Replication service is stopping communication
• DFSR Event ID 4012 MaxOfflineTimeInDays
• DFSR fails with partner that no longer exists
• DFSR fails with partner that no longer exists.
• DFSR Migration State Stuck on Eliminating
• DFSR Migration Stuck
• DFSR not working Event_ID 6104
• DFSR Private folder huge and doesn't match DFS management console.
• DFSR replication SYSVOL broken - error 6002
• DFSR replication with one hub and two spokes
• DFSR Staging File - There are folders numbered 00-99 Please explain.
• DFSR SysVol replication goes to status 2 when all DCs are shut down.
• DFSR sysvol replication issue Event 5008
• DFSR Unsuccessful on New Domain Controller (EventIDs 1058, 5014)
• DFSR Warning/Backup information
• DFSRDIAG - Problem running command
• DFSSVC Error - Event ID 14530, 14529 & 14532
• DHCP Lease Expiration and Type
• dhcp log files
• DHCP server unauthorized automatically. Event ID 1046 [OS Ver: WIN2K8]
• DHCP Users group can not Access DHCP Server Console
• Difference between Kerberos and LDAP in Active Directory
• Difference between .cer and .pfx certificates
• difference between "power users" and "remote desktop users" groups
• Difference between "Replicating Directory Changes", "Replicating Directory Changes All", and "Replication Directory Changes in Filtered Set"
• Difference between a subsub domain and subdomain/child domain?
• Difference between ADAM and AD LDS
• Difference between assigning home folder using local path and connect to option.
• Difference between Bad Host Name, Request Timeout, TTL Expired In Transit
• difference between canonical name and distinguished name
• Difference between disabling a GPO link and deleting a GPO link
• Difference between Domain Admins & Built-In Administrators Group ?
• Difference Between Domain Admins, Enterprise Admins, and Schema Admins Built-in Group Accounts...
• Difference between having a site without DC and assign all subnets to a site with DC.
• Difference between lastlogon and lastlogontimestamp
• Difference between member and member of
• Difference between profile path and local path under Profiles tab of a user account.
• difference between Replmon and repadmin tool in Active directory
• Difference between roaming profile, folder redirection and home folder
• Difference Between Service Account and User Account
• Difference Between the NetBios Name and the SAM Account Name?
• difference between user account and computer account in active directory?
• difference between user object and contact object in active directory?
• Difference between Write and Write All Properties?
• Difference in Kerberos settings
• Difference of date/time in event ID 4624 and Last Logon Timestamp
• Different dates of an AD Expired account
• Different DNS forwarder setting in different DC but in domain
• Different Pre-Windows 2000 domain and FQDC.
• Differentiate between DC and ADC
• Directing Multiple Vlans to a single Active Directory
• Directory Service Event 1083 and 1955
• Directory Service has exhausted pool of relative identifiers
• Directory Services could not start
• Directory Services Recycle Bin - Will not restore computer accounts.
• DirSync does not update group name
• Disable TCP SACK option
• Disable "Client Certificate Request" during TLS handshake for AD DS/LDAP
• Disable AD User after period of inactivity?
• Disable automatic computer object creation
• Disable computers/users older than 90 days and move them to an OU
• Disable KDC to Access Domain Controller.
• disable kerberos?
• Disable ldap anonymous directory access in Windows server 2008 R2 SP1 Domain Enviorment.
• Disable Logon Locally and Interactively for A User (Not By GPO)
• Disable Nic teaming on DC
• Disable non secure LDAP 389
• Disable option " user must change password at next login"
• Disable Proxy setting through GPO
• Disable replication between two DCs
• Disable Single user multi login
• Disable SSL 2.0, 3.0, TSL 1.0 on DC's
• Disable the option of User Must Change Password at Next Login only for a group of users while resetting the password of users in an OU
• Disable TLS 1.0 and TLS 1.1 on Windows 2008 R2 Domain Controller
• disable user interactive logon to a domain
• Disable users to join computer to domain
• Disable users who never logged on
• Disable Windows Desktop Search with GPO
• Disable Windows Null Sessions
• Disabled Account Gets Locked Out
• Disabled domain controller computer account
• Disabled user account can still login, machine is on the network, DC's are all synced and have the user as disabled.
• disabledomaincreds
• Disabling Account Lockout Policy on specific OU
• Disabling AdminSDHolder for specific accounts
• Disabling NTLMv1
• Disabling SMBv1 on windows 2012R2 Domain controller
• Disabling users that have been inactive for longer than 45 days. Question about msDS-LogonTimeSyncInterval
• Disabling WSH and it's impact on Logon Scripts
• Disadvantages to making all DCs a GC?
• Discovering Service Account Usage
• Discovering Source of Malicious Authentications
• Dism /online /enable-feature /featurename:Server-Gui-Mgmt /featurename:Server-Gui-Shell /featurename:ServerCore-FullServer
• Display Computers IP address in Active Directory Users and Computers
• Display name in AD
• display the users middle initial or middle name in active directory and it shows in outlook 2010 as well.
• Display user password changeable date with PowerShell
• Distinguish Name of object(DN)
• Distributed COM Users
• Distributed File System (DFS) across two domains
• DMZ Domain Best Practises
• DN attribute disappeared from users details
• DNS _sites shows entries of demoted sites and DCs
• DNS - (same as parent folder) - issue and question...
• DNS 6004 Error
• DNS A Record Add Button is GREY OUT
• DNS after DCPromo
• DNS aging and DHCP lease
• DNS Alias used for SMB share faile - SPN ... or ???
• DNS and its related services not starting in the Domain controller ......error 1068 displayed
• DNS Cache Data display
• dns cache error
• DNS cannot be installed on this domain controller because this domain does not host DNS.
• DNS Client registration failing
• DNS conditional forwarder do not work
• DNS Configure wizard error. The forward lookup zone cannot be added to the server. The specified directory partition does not exist
• DNS console readonly permission for a security group
• DNS DCDIAG Forwarders and Root Hints Failure
• DNS Delegation for seconday DC
• DNS does not work. Access denied
• DNS Domain Name - DHCP Scope Option
• DNS DomainDNSZones missing in Child Domain
• DNS enable round robin
• DNS entry keeps changing
• DNS Error - 4015 in Windows server 2012
• DNS Error 9002
• DNS error on new 2012 DC
• DNS Error, cannot join domain.
• DNS event 4010
• dns event 4016 timed out attempting an active directory service operation
• DNS event error 4016
• DNS Event ID 4010 - The DNS server was unable to create a resource record
• DNS Event ID 4015
• DNS Event ID: 4006,4015,4004,410,419 issue + background zone loading issue
• DNS failing to register
• DNS Forward lookup Zone not resloving name to IP address
• DNS forward lookups failing
• DNS Forwarder data replication - promotion of 2012r2 domain controller
• DNS Forwarders Auditing
• DNS forwarders isn't working with me
• DNS Forwarders on a Parent Child Domain
• DNS host records priority
• DNS issue on second DC
• DNS Issues
• DNS Manual Backup
• DNS missing reverse DNS zones - any way to fix?
• DNS not updating on RODC Server 2008 R2
• DNS Question - OLD DC RECORDS
• DNS question when demoting a domain controller
• DNS Rebuilding - AD integrated DNS- Windows 2012
• DNS Record Creating SubFolder in Zone
• DNS Record Expire
• DNS Record for different domain
• DNS records have timestamp mismatch on different DNS servers for the forestwide _msdcs zone
• DNS Replacation Error and DCdiag replication failed
• DNS Request Timed Out While trying nslookup for External domain name like "www.cisco.com"
• DNS resolution between child and parent domain
• DNS resolution using root hints does not work
• DNS reverse Zone is not replication to all domain controller
• DNS Root Hints failing
• DNS Scavenging (lots of records with old timestamps doesn't get scavenged)
• dns server could not be contacted access denied
• DNS server failed a query with error code NAME ERROR
• DNS Server is not Creating/Updating PTR Records for Hosts
• DNS Server unable to complete directory service enumeration of zone xxx.com
• DNS Service error
• DNS setting for internal/external server
• DNS setting on Domain Controllers?
• DNS Settings for second Domain Controller
• DNS settings in the child domain
• DNS setup for different NAT'ed network
• DNS Setup for multisite
• DNS sinkhole configuration ?
• DNS SOA serial number
• DNS Stub Zone - "Zone Not Loaded by DNS Server"
• DNS suffix twice
• DNS Suffixes
• DNS Time Stamp on Static Servers
• DNS Timestamp
• dns tombstone records
• DNS zone permissions not inheriting from parent
• DNS Zone replication Scope
• DNS: root hints server must respond to NS queries for the root zone
• dnscmd and access denied errors
• dnscmd register A record and ptr
• DNSCMD to backup ALL zones
• Do all domain controller must to communicate with PDC?
• Do all Domain Controllers on both sides of an External trust need to be able to "see" each other
• Do i have to have another domain controller to create a subdomain or can i do it on one server. If yes pls tell me how. TNX
• Do I need CAL for each of the user\computer objects in a Domain?
• Do we need to change time zone after joining Domain ?
• Does a user get prompted to reenter this password when their TGT (ticket granting ticket) reaches the end of it renew until date
• Does AD Server 2016 store password hashes using the NTLM algorithm, which is essentially MD4, which is considered insecure?
• Does Cluster computer object reset their passwords?
• Does common name (cn) 64 char limit restrict max length of AD group names?
• Does LastLogonTimestamp get updated when an ADFS authentication occurs
• Does the AD Object picker UI allow the user to select a Distribution group ?
• Does the value of dscorepropagationdata in AD mean it has communicated with the DC?
• Does Windows log a "Member removed" event for security groups when an AD user account is deleted?
• Does Windows Server Active Directory have an API which allows queries to determine whether there is ANY user is currently logged in at a particular workstation ?
• Does Windows use LDAP or LDAPs or "StartTLS on LDAP"
• Domai Controller C drive fulled
• domain controller instance: unavailable
• Domain Accounts on Secure Host Baseline (SHB)
• domain admin account cannot move the user to another OU
• Domain Admin Account Lockouts
• Domain Admin account not able to login to a Domain Machine
• Domain Admin and Enterprise Admin naming convention best practices ?
• Domain Admin Cannot create users or Reset passwords
• Domain Admin cannot see groups is AD?
• Domain admin group across multiple child domains?
• Domain Admin Password issue - Windows Server 2016
• Domain administrator account lockout issue - Advapi process
• Domain administrator and a deny everyone rule
• Domain Administrator can not access user's profile folder+Server 2012
• Domain Administrators cannot delete an OU
• Domain administrators vs Domain admins group
• Domain Admins and RDP Users can not RDP into Computers (Access Denied)
• Domain Admins Denied Access To View Volume Even When Granted Full Control NTFS
• Domain computers and their accounts : SID and other identifiers
• Domain Controller
• Domain Controller and Windows Activation
• Domain Controller Certificate - Manually requested certificate - can you have CA autorenew? Possible?
• Domain Controller DCDIAG DNS Failure
• Domain Controller DCDIAG failed test KccEvent
• Domain Controller demotion PDC roles transferred cannot demote
• Domain Controller Disk Partition Best Practices
• Domain Controller Event ID 4624
• Domain Controller failed advertising test
• Domain Controller Failed Test Advertising
• Domain Controller fails with "DCDiag" in "frsevent" diagnosis but not in "frssyvol" ?
• Domain controller GUID CNAME records missing from DNS
• Domain Controller HA
• Domain Controller Kerberos Authentication via CNAME
• Domain Controller Local Policies
• Domain controller login error "There is a time difference betweein client and server"
• Domain Controller not able to find its Global Catalog Server
• Domain Controller Off For 60 Days
• Domain Controller RDP Access Permissions
• Domain Controller rebuild with same name and IP
• Domain controller rebuilding
• Domain Controller Security Log
• Domain Controller shows Public Network
• Domain controller smb null session enumeration
• Domain Controller Virtual Resources Recommendations
• Domain Controller's Staging Area missing
• Domain Controllers ADSIEdit CN=NTDS Settings Options Attribute
• Domain Controllers and Member Servers/Computers don't initially know their network
• Domain Controllers NTP Server conflicts
• domain controllers on different time zone
• Domain functional level 2019
• Domain Functional Level for child domain
• Domain Functional Level Raise from Windows 2003 to Windows 2008 R2.
• Domain GUID DNS registration conflict
• Domain join - Automation
• Domain Join against RODC
• Domain Join Issues - 'Exceeded the maximum number of computer accounts'
• Domain Join Issues - 'Exceeded the maximum number of computer accounts'
• Domain Join operation was not successful. Access Denied !
• Domain Joining Issue
• Domain Joining port
• Domain Migration Project Plan Template
• Domain Netbios name with a dot or period and compatibiilty with O365
• domain network connected vs private network connected
• Domain network connection is detected as Public
• Domain Rename: Cleaning Up After
• Domain Server Event ID to check User/Computer account domain login
• DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR.
• Domain Time Sync
• Domain trust - Cannot find a domain controller
• Domain Trust - SID's not resolving
• Domain Trust and User Permissions
• Domain Trust between Server 2016 and 2008 R2 Domain
• Domain Trust Fails With No Logon Servers Available
• Domain Trusts unable to add users to groups.
• Domain Trusts: What does a trustAttributes value of 0x0 ( ) mean?
• Domain user last logon
• Domain user re-authentication
• Domain users last login timestamp finding query
• Domain Users not showing up in "memberof"
• Domain Users unable to change their passwords.
• domain x to domain y failed with error: There are currently no logon servers available to service the logon request.
• domain\Guest Account Being Locked out Via Non-Domain Joined Workstations
• Domain$ user accounts in ADS?!
• DomainDNSZones & ForestDNSZones subfolders in DNS
• DOMAINNAME failed test DNS (Help with SRV / DNS Records RReg Failed Test)
• Downgrade Functional level from 2016 to 2012R2
• Drag/Drop versus Cut/Paste?
• DS query for users and group membership
• dsa.msc
• DSACLS and Full Control
• dsacls reset password vs. change password
• Dsacls.exe and the impact of /takeownership
• DsBindWithCred to "DCName" failed with status 1753 (0x6d9): There are no more endpoints available from the endpoint mapper.
• dSCorePropagationData attribute meaning
• dsCorePropagationData not updating
• dsget failed:Directory object not found
• Dsget group does not display member name but ID
• DSGETDCNAME advertising test failing. SYSVOL and NETLOGON shares not replicating. Please help!!!
• DSGetSiteName failed: Status = 1919 0x77f ERROR_NO_SITENAME
• DSID-0C06045C
• Dsquery command to find inactive domain users and excluded disabled users
• DSQuery for Active users only
• DSQuery Installation Help
• DSQuery Question
• Dsquery to show all Users and last login time and date
• DsRemoveDsDomainW error 0x2015 (The directory service can perform the requested operation only on a leaf object.)
• DsRemoveDsServerW error 0x5(Access is denied.) when removing failed 2003 DC using NTDSUtil
• DsReplicaGetInfo() failed with status 8453 (0x2105)
• DSRM and domain controller promotion
• DSRM Lets me Login with Domain Credentials
• Duplicate IP Address in Domain Controller
• Duplicate Ipv4 Address
• Duplicate samAccountName in the same Domain ???
• Duplicate SPN....which one do I remove?
• Duplicate SPNs and ADFS
• Dynamic updates questions
• Easy way to fill the Email field in General Tab of AD
• Echo %logonserver% vs nltest /dsgetdc: /force show different results
• Edit Passfilt.dll
• Editing AD Attributes
• Effects of changing an Active Directory user's User Logon Name?
• EFS - HowTo Recover a file with DRA (Data Recovery Agent)
• email notification after active directory password has been changed
• Empty (not missing) Netlogon Share on one DC
• Enable AES Encyption for Service Accounts exiting and future
• enable and disbale usb access group policy
• Enable Kerberos AES encryption on an existing one-way trust
• Enable option for user account in AD
• Enable password complexity in AD GPO
• Enable Remote Desktop access for Domain user
• Enabling LDAPS on Windows Server 2012 R2 Standard
• Enabling OS Feature 'NetFx3'
• Enabling windows firewall in domain controllers pros and cons
• Encryption method use to store password of active directory users in active directory DataBase
• End of support for AD functional level?
• enstart64
• Enterprise administrator and Child domain
• Enterprise vs Domain Admin rights
• Entire Directory option missing from workstation Find Printers dialog - no printers found
• ERR2:7621 Failed to move source object. AD User account migration issue in forest using ADMT 3.2
• Error - UNWILLING_TO_PERFORM - while change user password in AD ldap using python code
• Error "The encryption type requested is not supported by the KDC" when changing passwords on Accounts migrated with ADMT
• error (1256) the remote system is not availble
• Error <49>: ldap_simple_bind_s() failed: Invalid Credentials
• Error 0x00002746
• error 0x80090322 in the replication check
• Error 1311 no logon server
• error 1326 logon failure: unknown user name or bad password
• Error 1722: The RPC server is unavailable
• Error 2148074306 The encryption type requested is not supported by the KDC
• Error 2542 when promoting first DC in child domain
• Error 8341 and 58 in repadmin /replsummary
• Error Adding the Active Directory Certificate Services Role for Windows Server 2008
• Error Adding User Object to the Active Directory after adprep for Windows 2008 server
• Error attempting to transfer Infrastructure Master role
• error code 0x0000232B RCODE_NAME_ERROR when attempting to add Windows 7 workstaion to my home domain.
• Error code 1734 The array bounds are invalid when trying to install windows service
• Error code: 0x5 when trying to delete a account sidhistory in ADSI Edit
• Error code: 0x5 when trying to delete a PSO in ADSI Edit
• Error determining whether the target server is already a domain controller: The domain controller promotion completed, but the server is not advertising as a domain controller.
• Error determining whether the target server is already a domain controller: The target server is already a Domain Controller.
• error enabling the AD Recycling Bin via Enable-ADOptionalFeature
• Error ID 12294 Directory-Services-SAM
• Error in dcdiag
• Error in raising forest functional level?
• Error installing Active Directory Certificate Services
• Error joining domain - The service cannot accept control messages at this time
• Error moving computer object - The attribute syntax specified to the Directory Service is Invalid
• Error on AD itself!!! Unable to contact the server. This may be because this server does not exist, it is currently down, or it does not have the Active Directory Web Services running
• Error on Configure Active Directory Certificate Services on the Destination Server
• [Error on get-ADPrincipalGroupMembership for groupnames with \](/archive/msdn-technet-forums/23fc0c30-f7c8-4843-be99-fea9fe8ca036 "Error on get-ADPrincipalGroupMembership for groupnames with ")
• Error promoting Server 2019 domain controller
• ERROR Replication "This latency is over the Tombstone Lifetime of 60 days!"
• Error when attempting to move AD-User
• Error when copying user - The name reference is invalid.
• Error when manage certificate templates after domain rename
• Error when trying to add a user entry to Active Directory via LDAP interface
• Error when trying to raise domain functional level from 2000 to 2003
• error while joining a computer to domain.
• Error while logging into Trust domain
• Error While Query Get-AdComputer
• Error while seizing the Schema Master " ldap_modify_sW error 0x32(50 (Insufficient Rights)."
• Error while trying to use AD for user Authentication
• Error with WdiServiceHost on Default Domain Controllers Policy
• error_code:KRB5KRB_ERR_RESPONSE_TOO_BIG
• ERROR_NO_SUCH_DOMAIN
• ERROR_NO_SUCH_DOMAIN on PDC Emulator role / Windows Server 2008
• Error: "Attempt to fetch password of a group managed service account failed." (error 6)
• Error: 1726 (the remote procedure call failed) every 7 minutes + DFSR backlogs
• ERROR: Some users have been signed in with a temporary profile.
• Error: The directory service is unavailable
• ERROR: The RPC server is unavailable.
• Error: The specified domain either does not exist or could not be contacted.
• Errors CertificateServiceClient-AutoEnrollment Event ID 6 and 13
• ESENT Event 508 A Request to write to the file .... bytes succeeded, but took an abnormaly long ime
• Esport only enabled users with CSVDE
• Event - Provider: Microsoft-Windows-ActiveDirectory_DomainService, ID: 2144
• Event 11 The KDC encountered duplicate names while processing a Kerberos authentication request. (of type KEY ID)
• Event 13512 - The File Replication Service has detected an enabled disk write cache
• Event 1789, ActiveDirectory_DomainService
• Event 1908 Could not find the domain controller for this domain
• Event 4624 and 4634 frequency
• Event 4624 logon type 3 for RDP access ?
• Event 5805 -The session setup from the computer WS12 failed to authenticate. The following error occurred: Access is denied. - but computer acct deleted!
• Event 6006 DFSR SYSVOL not replicating
• Event 7036 - The Software Protection service entered the running state.
• Event Error NetBT 4321
• Event errors 1655 and 1126 - unable to establish a connection with the global catalog on 2008 DC
• Event ID - 27 on Domain controller.
• Event ID - 4015 : The DNS server has encountered a critical error from the Active Directory.
• Event ID : 1411 Source : NTDS Replication Category : DS RPC Client
• Event ID :- 36886 in DC
• Event ID 10016 - DCOM Error | Source - Microsoft-Windows-DistributedCOM | Level: Error
• Event ID 10016 from source Microsoft-Windows-DistributedCOM cannot be found
• Event ID 10154
• Event ID 1083 on 2 DC's for multiple users
• Event ID 1097 Windows cannot find the machine account, No authority could be contacted for authentication. .
• Event ID 1119 for Global Catalog Win2K16
• Event id 1168 Active Directory
• Event ID 1202 - SceCli on Domain Controllers!!
• Event ID 1202 - Source ADWS Registering ever minute regardless if I reboot the servers.
• Event ID 1202 0xd
• event id 1202 scecli
• Event ID 12294 - SAM database was unable to lockout account
• Event ID 13 - Autoenrollment Error
• Event ID 1302 (error 1307) DFS replication service encountered an error while writing to the debug log file
• Event ID 13508- The File Replication Service is having trouble enabling replication between domain controllers
• Event ID 13568 With Only One Domain Controller
• Event ID 1535
• Event ID 1699 : 8453 replication access was denied
• Event ID 1862, then 1864....and how do we resolve!
• event ID 1864
• Event ID 1925 Active Directory_Domain Service
• Event ID 2042 Replication Error
• event id 2513 DSA Attempting to set the desired authentication protocol for a connection to the following DSA failed.
• Event ID 256, 257 , 457 Error
• Event ID 3210
• Event ID 36886
• Event ID 4 with replication and authentication failures
• Event ID 4012 - The DFS Replication service stopped replication
• Event ID 4013 , 4015 - ADDS - Server 2012
• event id 4097 netjoin
• Event ID 4097 The machine attempted to join the domain but failed. The error code was 1231.
• Event ID 4515, DNS warning
• Event ID 4625 not getting logged with username
• Event ID 4740 User Account Management Account Locked Out but Audit Success
• Event ID 4776 failure events on the domain controller, even username and password is correct
• Event ID 5014 ( Error: 9033 - Error: 9036 )
• Event ID 5141 and 4662. DNS entry for DC getting deleted by System
• Event ID 5504
• Event id 5722 Source netlogon shows access denied
• Event ID 5723 NetLogon...
• Event ID 9, Event ID:_139, Event ID 18054
• Event ID Error 2974
• event ID for adding user in admin group
• Event ID for change password
• Event ID for Changes to AD User "Job Title" and "Manager" in Organization Tab
• Event ID for Password Change
• Event ID for user attributes change like first name, last name or email?
• Event ID: 1126 Directory Service/AD/GC Help.
• Event id: 13568
• Event ID: 13575; File Replication Service (NtFrs)
• Event ID: 1864 - Replication Issues
• Event ID: 1864 ActiveDirectory_DomainService Replication Error
• Event ID: 1988 - lingering object
• Event ID: 2089 - This directory partition has not been backed up since at least the following number of days.
• Event ID: 2886
• Event ID: 2887 : Display Error again and again
• Event ID: 4004 DNS server was unable to complete directory service enumeration of zone _msdcs.xxx.com
• Event id: 4321 Source NETBT
• Event ID: 4625 - Account For Which Logon Failed: NetworkService
• Event ID: 4729 and 4728 not logging
• Event ID: 5168 / Spn check for SMB/SMB2 fails
• Event id: for GPO changes
• event id14 Microsoft-Windows-Kerberos-Key-Distribution-Center
• Event IDs 5805 and 5723 are reported in the System Event Log
• Event IDs for joining & disjoining PCs / Servers to domain
• Event log 4625, Status =0xc000006D, 0xc0000064 , what is this log and why getting generate.
• Event log readers AD group
• Event Logs for Group Policy Changes
• Event logs not generating
• Event Source is LsaSrc and Event ID is x - 40960
• Event Viewer cannot open the event Log or Custom view. Verify that the Event log service is running or query is too long. The instance name passed was not recognized as valid by a WMI data provider(4201).
• Event-ID 4738: user account was changed. BY ANONYMOUS
• eventID 1126, unable to establish a connection with the global catalog
• eventid 4010 DNS The Active Directory definition of this resource record is corrupt or contains an invalid DNS name
• EventId 4231 and 5719 - server is loosing connection with AD controller
• EventID 467 AD database corruption
• EventID: 1006
• Eventlog subscription not successful in production domain controllers
• Exact location of DNS records
• Exception details: Microsoft.IdentityServer.Web.RequestFailedException: MSIS7012: An error occurred while processing the request. Contact your administrator for details. ---
• Excessive 4624 and 4634 events
• Exchange Mailbox sent and received email count for a specific user mailbox and date range
• Exhaust pool of RID in windows 2008 r2 server
• Existing AD User Details Bulk Update.
• Expired CA certificate
• Export / Import ADSI objects between Forests?
• Export AD Groups and Last Password Change
• export ad user with passwords
• Export AD users Employee ID
• Export all attributes for a user in Active Directory
• Export Distribution group member list
• Export list of all users with their management hierarchy from AD
• Export list of computers with IP addresses...
• Export Site Name and Subnet from AD Sites & Services using Powershell
• export the ad users list with created date and last login date
• Export Token Signing certificate private key from ADFS
• Export User/OU Information from AD
• Export Users created after a specific date with their created date
• Export users from Distribution list in Active directory
• export users in multiple sub-folders and OU's in AD to text or csv
• Export Users to CSV
• Exporting AD Objects by creation date
• Exporting AD user list to a text or excel document
• Exporting and importing users and groups uisng CSVDE tool
• Exporting users, groups and their members from a currently installed and importing them to a new active directory (server 2003)
• extend schema for windows server 2019 DC
• Extend the schema for the Microsoft LAPS Tool
• Extending AD Schema for Exchange for Office 365
• ExtensionAttribute not found in Attribute Editor
• ExtensionAttribute1 to 15 is missing in AD Attribute Editor
• External Domain Trust - Need help ASAP!!!
• External trust error -The secure channel reset failed with error 1787-The secure channel reset failed with error 1311
• Extract AD permissions
• Extract Password Hash from AD DS
• failed KccEvent in dciag
• Failed Logins on AD
• failed system log test in dcdiag
• Failed to authenticate - event id 14
• failed to authenticate to DC (event ID 3210)
• Failed to delete the test record dcdiag-test-record in zone test.com
• Failed to open the Group Policy Object. You may not have the appropriate rights. The system cannot find the path specified.
• Failed to ping or bind to the Infrastructure Master FSMO role holder"
• Failed to push down GPO policy to specific OU.
• Failed to set machine SPN
• Failed to set the object. A required privilege is not held by the client. (Delegation of SPNS)
• failed to transfer the operations master role
• Failing Services test - RpcSs WIN32_OWN_PROCESS, expected WIN32_SHARE_PROCESS
• Failure to join the domain with the error
• Fatal Error:DsGetDcName (servername) call failed, error 1355 The Locator could not find the server.
• Federation server proxy could not establish a trust with the federation service
• fetch all users from active directory
• Fetch the list of all deleted object (last one week) from AD.
• Fetching the enabled attribute with ADObject.
• Few DC status is showing Unavailable in Change Directory Server mmc
• File Replication Service is disabled by Default
• File Replication Service is taking a long time to scan the system volumn
• File Replication Service JRNL_WRAP_ERROR
• Find all access rights of a user on Domain computers including NTFS permissions, Services using that user as login, Local Group membership etc.
• find all applications that are doing ldap queries against AD
• Find Computer Name User is Logged Onto
• Find enabled computer in Disabled OU
• Find last login machine details for user
• Find objects trusted domain ...
• find out if a user has got the password prompt or not in windows server 2008 or at the client machine
• Find out inactive computers based on Server Operating System
• find out what servers, shares a user has access to
• Find out who deleted an AD object without security logs?
• Find out who disabled User ID in AD
• Find the GPO name with GUID
• Finding AD username of AD GUIDS
• Finding computers with duplicate SID?
• Finding Duplicate computer objects in Active Directory
• Finding how many computers are joined to AD
• Finding out who is doing the LDAP/AD queries
• Finding out who is logged into what computer ? To find out where user logged in?
• Finding Password Age
• Finding Primary group of users in AD
• Finding the accurate last logon time of an AD account
• Finding the source of repeated AD account lockouts
• Fine Grained Password Policies not being applied to Security groups
• Fine Grained Password Policy Not Taking Effect
• Fine Grained Password Policy-Password expiration reminder frequency and custom message
• Firewall ports between domain controllers
• Firewall ports for RODCs in a DMZ - A DEFINITIVE LIST
• First Name and Last Name Variables
• Fix We can’t sign you with this credential because your domain isn’t available
• Fix: Active directory corrupted (NTDS ISAM Database Corruption errors in eventlog)
• Fixing group policy (GroupPolicyContainer) objects- After Domain Renaming
• [Flags for NTP server list?0x1 or 0x9 ?](/archive/msdn-technet-forums/623227da-31b7-465e-9bbc-d1d2740aa7c8 "Flags for NTP server list?0x1 or 0x9 ?")
• Folder limit size increase on Mapped network drive
• following error occurred during the attempt to synchronize naming context
• Force Demote DC
• Force Logon script to run on users PC after PC is logged in
• Force NTLM authentication
• Force password to expire for testing
• Force Replication
• Force Replication on all Domain Controllers in the same site
• Force sync on AD workstation record
• force to user's password expire in Active Directory
• Forcing a specific DC for trust relationship purposes but without limiting the ability to lookup other zone records ?
• ForeingSecurityPrincipals Cleanup
• Forest / Domain split into 2 seperate entities
• Forest & AD Domain Name Change
• Forest and Domain Functional Level and Windows 7 Compatibility
• Forest LDAP Query seeing all sub domains
• Forest Prep and Domain Prep
• Forest Trust - Authentication problems
• Forest Trust - DNS/DC's visibility
• Forest Trust between server 2016 domain and Server 2003 domain
• Forest trust can't share same UPN Suffixes
• Forest Trust domain admins to manage both domains
• Forest trust fails with : The attempt to read the names claimed by the specified domain has failed.
• Forest trust option is not showing while creating a trust between 2 domains
• Forest Trust Relationship and Raising Forest / Domain Funtional Levels
• ForestDNSZones and DomainDNSZones have wrong infrastructure role record
• ForestDNSZones have old DC entries
• Forum FAQ: How is user password of user objects stored in Active Directory? Can I view it? Can I modify it?
• FQDN is the LDAP Address
• FQDN need for a device without Domain joining
• Free up disk space on the drive containing the Active Directory database files
• Frequent domain Account lockout issue
• FRS to DFSR migration and forest and domain functional level
• fsmo tansfer error
• FSMO Transfer Roles automatic
• FSMOCheck failure
• fSMORoleOwner really messed up. Unable to change it!
• Function level of a forest is incompatible with this operating system.
• Future Date enabling of an Active Directory User Account
• Generate a certificate for paloalto firewall
• Generate report to list users who has access to Share folder
• Generating Event ID 91, 44 with CA (In Event Viewer with source as Certsvc)
• Get a AD user account login and logoff activity audit report for n days
• Get a list of all local admins on computers in a specific OU in ADDS
• Get All users in a specified OU in server whose password set to expire
• Get Computer SID
• Get GPOs both linked and inherited for every OU powershell
• get IPAddress of user login [Active directory]
• Get LDAP (389) to reply in TCP and not UDP
• Get list of deleted AD users
• Get List of Empty AD Groups in a Domain
• Get list of users authenticating to DC sites.
• Get password change dates history
• Get Password Expiration Date of All Users in Active Directory
• Get Password Expiration Date of Group members in Active Directory
• Get the "Name" column in AD Users/computers to show Username and not full name
• Get the logon script path for all users in the domain
• Get UPN list against names
• Get User Reporting Manager Details from User objects in Active Directory
• get value of 'msExchHideFromAddressLists'
• Get-ADGroup Member with Displayname
• Get-ADGroupMember -Identity "Domain Admins" | "export by name and by status whether "Disabled or Enabled"
• Get-ADGroupmember with Users in different Forest's
• Get-ADOrganizationalUnit -Filter {distinguishedname -like "*something*"}
• Get-ADPrincipalGroupMembership - Global Catalog Issues???
• Get-ADUser -Filter {extensionAttribute1 -ne "aaa"} to get the users
• Get-ADUser -Filter for blank Attribute
• Get-ADUser -Identity $aduser.SamAccountName -Properties * not showing all properties/attributes
• Get-ADUser "msDS-UserPasswordExpiryTimeComputed" value empty
• Get-Aduser collecting attribute property whenCreated
• get-aduser FROM excel
• Get-aduser This operation returned because the timeout period expired
• GET-ADUser, enabled and disabled users..AND NULL users...
• Get-Certificate - Failed
• Getting "RPC server is unavilable " error whiel opening active directory user and computers console.
• Getting "You do not have sufficiant privileges to create a container in Active Directory" error during ADFS farm configuration
• Getting 4776 Events Saying Account does not exists on IIS server
• Getting constraint_att_type error from LDAP
• Getting error in domain controller
• Getting error in KMS
• Getting error message when adding role and features in server 2012
• getting error while migrating user account in admt 3.2
• getting error while migrating user via admt 3.2
• Getting Kerberos error in system events and id : 3...... See below details of error event
• Giving access to a folder outside domain
• Global Catalog Error
• Global catalog ldap search
• Global Catalog not finished promoting to be GC
• Global Catalog on RODC
• Global Catalog Unavailable
• Global catalog Vs Active directory
• Global Catalogue stuck on step 4
• Global Groups vs Universal Groups vs Domain Local - Differences in brief?
• Global query block is causing a DNS server to fail a query with error code Name Error exists in the DNS database for WPAD
• GMSA and permissions
• GMSA login failure after reboot
• Got error while checking LDAP and RPC connectivity. Please check your firewall settings
• GPMC console is very slowly opening in Domain Controller
• GPO - Minimum password length = 15 not applying
• GPO - Registry (First Day of Week)
• GPO Computer startup script fails to run. (EventID 1130 Error code 267)
• GPo corruption
• GPO creator
• GPO error while doing GPUPDATE-Windows server 2012
• GPO for disabling client administrator accounts on my Domain.
• GPO for mapping a Printer
• GPO for removing domain user for Local Admin
• GPO for Scheduled Task to reboot PC's not showing up on desktops
• GPO got accidentally deleted
• GPO list with registry settings
• GPO replication check
• GPO to disable Java Updates
• GPO to Exclude Location from Indexing
• GPO to install and configure SNMP
• GPO to prevent web uploads
• GPO to restrict drive mapping
• GPO to set Primary and Secondary DNS setting.
• GPO: Disable software removal
• GPO/GPP - Item level target - Security NESTED groups
• GPRESULT for different user and system
• GPRESULT return different domain type for COMPUTER & USER
• gpupdate related question
• Gracefully Shutting Active Directory Down
• Grant permissions to a single custom attribute, possible?
• Grant User Read Access to DNS Server
• Granting Domain Admin rights to users from a different domain
• Granular Password setting error
• Group Managed Service Account - 15 Character Limit?
• Group Managed Service Account (gmsa) and Certificate enrollment
• Group managed service account from parent domain on a server in a child domain
• Group managed service accounts for AD RMS and DNS Dynamic Update Credentials in DHCP
• Group Managed Service Accounts: -PrincipalsAllowedToRetrieveManagedPassword
• Group Members Restore
• Group membership update without reboot
• Group Naming Conventions
• Group Naming design question (sAMAccountName & cn/name)
• Group or User account is hidden
• Group Policy - Hide "File Explorer" / Explorer Folder Icon / Windows 10
• Group Policy - Lock drives by Type
• Group Policy Error 1006 on new 2008 DC to a 2003 domain
• Group Policy failed -help
• Group Policy for adding sites to the intranet zone.
• group policy for standard users to change IP under windows server 2008
• Group Policy Link backup
• Group Policy Preferences - Regional Options is not working !!!!!
• Group Policy Preferences Regional Settings - Regional format Unknown Locale
• group policy refresh interval is 90-120 min or 45-60 min ?
• Group policy to delete inactive users accounts and computer accounts
• Group Policy Update Failing
• Group Policy update on Domain Controller
• Group Policy's Not being Applied to Computer Objects
• Groups from another domains in same forest are not shown in users' "MemberOf" property
• Groups Missing from DC Local Administrators Group
• Guest account keeps getting locked out.
• GUI tool to creare users
• Guidance in removing AD LDS instance from a configuration (replication) set
• Guide on creating trust between two domains
• Handle multiple companies with AD?
• Hardware Requirement for Active Directory
• Hardware Requirements Domain Controller
• Help Desk Group - Delegating Right to Change Group Membership
• Help Desk Group - Delegating Rights and allowing access
• Help me for this "Call was canceled by the message filter" errror while pulling information on DC through tool
• Help needed with Kerberos Constrained Delegation
• Help Required...RPC port 135 being filtered, all steps to rectify have failed
• Help with ldifde export/import
• Help with Windows 2008 SP2 Certificate Servers Upgrade/Migrate
• Help! Missing ntfrs registry keys on both DCs
• Hi why global catalog and infrastructure master not placed in same dc?
• Hide a DFS Share?
• Hide Domain Users from each other
• Hide or remove domain name at logon screen
• Hide phone number attribute in AD
• Hiding values of Active Directory Attributes
• High CPU usage on domain controller
• High Water Mark
• History of account lockouts?
• HKLM\system\currentcontrolset\control\lsa - in DC
• Home Folder - User Move to Another Server
• Home Folder Drive Mapping - Adding a label
• Home Folder on user's AD account
• Home folder won't connect automaticlly
• how can check ownership of network share folder through any tool even I don't have rights to check the permission in security tab of folder.
• How Can I change default port of active directory in windows 2008
• How can i check the current Active Directory Database Size..
• How can I check what 3rd party applications are using LDAP/AD integration
• How can I check what machines I'm logged into within a domain?
• How can i Clear the Internet Explorer cache with GPO ?
• How can I connect remotely to Active Directory from a command line?
• How can I convert a list of Active Directory Display Names in User Names?
• How can i create alias for existing user account in Active Directory
• how can i discover service accounts in a domain !
• how can i filter the all users last logon time in active directory?
• How can I force a client logon in a different Domain controller?
• How can I get the attributes details like user name, mail , from sAMAccount csv or notepad file through powershell or any other command in AD?
• How can I get user's Manager attribute as email/UPN format,
• how can i get which PC(server) a domain user last logon from?
• How can I increase maximum items in a folder in AD LDS/ADSI Edit
• How can I install just csvde?
• How can I limit the number of allowed concurrent sessions per user in an Active Directory (AD) domain? without 3rd party tools and any scripts
• HOW CAN I LOCATE ALL GC'S
• How can I Map Network Drive thru Group Policy
• How can I prevent files from being copied by specific users?
• How can i pull the report of Created/Modified/Disabled account in month?
• How can I read and write Password Hashes in AD to a user's account?
• How can I show the File Version of files with DOS
• How can i stop Trailing dot being added at the end of the computer Full Name?
• How can I synchronize the AD credentials to local client machine credentials after a password change WITHOUT VPN
• How can I tell if 2008 R2 AD recyle bin is turned on?
• How can I use ADRAP tool. Is it freeware or any free tool which work like ADPRAP?
• how can i use Proxy group policy using wpad and pac file?
• How can make one user member of two ou
• How can track the Group policy changes or created new group policy? is there any event id for this or any tool for tracking of users?
• How can troubleshoot the trust issues in AD and how all trust works in backend?
• How can we check is attribute indexed or not, apart from searchFlag?
• How can we clear user’s Manager field in Active directory through attributes?
• How can we lock a specific AD User Account using Powershell
• how can we view tombstone objects in AD?
• How can you determine the last time an AD group was used?
• How can you promote a Secondary Domain Controller to Primary Domain Controller considering the PDC is inaccessible
• How could i get the list of all users who didn't changed the password from last 365 days
• How do detect unused security groups?
• How do Domain Controllers interact with each other? Specifically regarding AD user authentication.
• How do I add all domain users to a single group?
• How do i delegate the role to access the event viewer of all DCs in the forest to a particular user(only event viewer right)
• How Do I Disable Anonymous LDAP Binding
• How do I exclude users from my domain-password policy ?
• how do I find "delegated rights" assigned to Groups and Users
• How do I find the IP address a User Account last logged on to?
• How do I find users who are not part of a group in Active Directory?
• How do i find what is accessing my ldap servers
• How do I get Kerberos to Work on Windows Server 2008 R2
• How do I get list for all DCs for the entire forest?
• How do i get logs of Domain admin group changes
• How do I know how many users are logged in to domain at a time
• How do I know if a domain controller has tombstoned?
• How do I know which application trigger Werfault.exe?
• How do I make a custom attribute appear in the Exchange GAL??
• How do I manually remove an ADLDS replica host from the instance configuration when the server is gone for good?
• How do I Modify Password Complexity Requirements?
• How do I modify the filter settings in the Active Directory Users and Computers view?
• How do I poll domain controllers from a PowerShell ADSI script to determine account values not in GC such as last login time?
• How do I query active directory for all rooms?
• How do I remove a "dead" Domain Controller in AD?
• How do I remove an invalid NTP Peer
• How Do I Remove Broken or Stale Trust Relationships between Two Domains?
• How do I set the keyUsage field in my offline, stand-alone root CA certificate to Critical=Yes?
• How do I setup Active Directory Domain Services So I can Access It from outside the local network?
• How do i stop my password from expiring every 90 days? What a pain - especially when I am traveling to remote places with no internet
• How do I track user account activity on a Domain(Windows Server 2008)
• How do you access windows server domain outside the network?
• HOW do you assign these permissions to an account using group policy?
• How do you change a user's password temporarily and then revert it back in Active Directory?
• How do you configure Windows Time Synchronization in a workgroup with no servers?
• How do you disable the "Password never expires" option?
• How do you give AD users the ability to install programs without making them a domain admin?
• How do you manage different internal and External Domain names?
• How do you prevent ldap enumeration?
• How do you restore active directory database without system state backup. I do have a full backup with 3rd party s/w. What files do I need?
• How do you search for a domain + samAccountName in active directory?
• How do you specify a preferred login server?
• How does Active Directory track how many computers a user has joined to the domain?
• How does conditional forwarder choose IP addr?
• How i am able to find out the User creation time and date in Active Directory
• How is the IPV4Address Computer attribute populated?
• How is the logon hours attribute set in Active directory (windows server 2008 r2) ?
• How long can a DC be offline before it begins to affect the entire AD topology?
• How long can a DC be offline?
• How long can a domain be shut down
• How long can a domain member be disconnected to an AD ? (but not switched off)
• How long can a domain member be switched off for?
• How long can a system be disconnected from the domain?
• How long can FSMO holder be down for?
• How many Active Directory OU's is too many
• How many domain controllers are recommended?
• How many users can log in to one account at a time?
• How open and see Log File in Active Directory
• How prevent domain administrators to access on workstation ?
• How properly setup DNS (Reverse Lookup Zone) with multple VLANs
• How RPC works in Active Directory and How RPC port binding in Active Directory?
• How Sites and Services Works
• how to Undo udpated schema attributes from active directory schema
• How To Access Active Directory Domain from Workgroup Machine?
• How to access Certificate Authority on Windows Server 2012 R2
• How to add a network place / shared folder without a Drive letter
• how to add addional clock( UK , UAE, Srilanka, Singapore time zone) to machine ussing group policy
• How to add existing user to an organisational unit?
• How to Add MY Employee ID Active directory.?
• how to add user in child domain thorugh parent domain.
• How to add users to Organizational Unit
• How to apply fine grained password policy to an OU
• How to assign an ID card to a (Active Directory) user account
• How to Audit Access Granted (Delegations) to a User in Active Directory?
• How to audit DNS (AD Integrated) changes
• How to authenticate to AD LDS?
• How to back and restore AD integrated DNS with example and images
• How to backup and restore Windows 2012R2 ADFS
• How to broadcast message to all client in AD
• How to capture LDAP requests/traffic
• How to change Active Directory object owner?
• How to change domain administrator password
• How to change duplicated domain controller SID correctly ?
• How to change my full DC to Read Only DC
• How to change Name (Full Name) field in Active Directory
• how to change password with Domain controller not available anymore : configuration information could not be read from the domain controller, either because the machine is unavailable, or because access is denied
• How to change the default way of CN name is built in AD, just as KB250455 say?
• How to change the full name (cn,distinguishedName) of a user account?
• How to change the IP addres of a client system in Active Directory?
• How To Change The whenCreated field in Active Directory
• How to change time/date of domain controller
• How to change User Logon Name in bulk ?
• How to change wireless(SSID) password (Pre-Shared Key) by GPO in active directory Server
• how to check AD replication latency between 2 different sites domain controllers?
• How to check AD users last log on time stamp?
• How to check for LDAP problems? (logs, events etc)
• How to check if AD has any errors or problems?
• How to check if clients still use SSL2, SSL3 prior disabling vulnerable protocols?
• How to check if Domain Controller is in use or not.
• How to check LDAP version on domain controller
• How to check our passwords are encrypted or decrypted
• How to check replication status of sysvol folder
• How to check users authenticated form wich AD
• How to check whether we have DFSR on our DC's
• how to check which DC is running LDAP
• How to check/get the logged in users from a Particular DC ?
• How to check\test that my DNS is working fine(Replication, Resolution etc...)
• How to compare users in Active Directory with PowerShell v2?
• How to completely remove an orphaned child domain without its DC.
• How to config AD DNS in multiple VLAN
• How to configure and use StartTLS on Windows AD server (2008 R2 or 2012) ?
• How to Configure DNS to Redirect domain.com to www.domain.com
• how to configure DNS to support ipv4 and ipv6
• How to configure Primary group for AD user?
• How to configure Service Account on Active Directory?
• How to connect to AD on Windows Server 2016 via LDAP?
• How to control removable usb devices basing upon serial number?
• how to control sequence of domain controllers a client computer logging on
• How to control the cellular settings in Windows 10 Enterprise edition? (Registry question)
• How to convert Local Profiles to Roaming Profiles?
• How to copy Active Directory objects from one Forest to another Forest
• How to correct FSMOroleowner attribute (DSQuery shows incorrect, ADSI shows correct)
• How to Count Sub Ou's Under the Specific OU
• how to create an active directory user along with an uid attribute
• How to Create a Domain Controller Accessible Without VPN
• how to create a LDAP user who has read only access to AD user objects
• How to create a user without any password required to logon?
• How to create an internal SSL certificate
• How to create and add a new user to existing group in Active Directory via Java client
• How to create Contacts in PowerShell
• how to create service account in windows server 2012 R2
• how to create temporary user using Active directory
• How to debug 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED) in Certificate server
• How to delegate Installation rights to specific users in Active Directory domain environment
• How to delegate permission to a user to allow them to edit Contact objects?
• How to delegate permissions to a User/group to delegate access
• How to delegate to change the field email in AD DS
• How to delete a crashed DC from AD
• How to delete keytab files created by ktpass command
• How to Delete Multiple Users from specific OU through CSV from AD
• How to delete old vector & invocation id's for replication latency check !
• How to delete the dns record automatically after delete a domain computer ?
• How to delete user from deleted objects.
• how to demote old DC but keep the DNS role
• How to Deny Permission for Renaming OU
• How to design and configure Active directory in DR site
• How to Design and Devide Multiple Subnet for Active Directory Sites
• How to detect group membership delta changes using LDAP query
• How to determine current windows user is local or domain
• how to determine when a computer joined to a domain
• How to determine when a server was promoted to a Domain Controller
• How to determine which application is using wrong passwords and locking out accounts?
• How to disable a dll file using Group policy
• How to disable kerberos for specific domain (kerberos realm)
• How to disable LDAP and force LDAPS?
• How to disable Local Administrator account in client PCs on organization network using PowerShell.
• How to disable ntlmv2
• How to disable the proxy setting of mozilla by using group policy AD 2008
• How to Display a List of Users Currently Logged On to Domain
• How to display gender attribute in active directory.
• How to display last login user account in active directory ?
• How to draw OU Active Directory Structure (tree style) without Visio/AD Topology Diagrammer?
• How to Enable "Protect Object from accidental deletion" for entire organization.
• How to enable "The user must logoff and then logon again for the change to take effect"
• how to enable employee id in active directory and login with that???
• How to enable LDAP over SSL on Winodws 2008 R2
• How to enable ntfs audit permission?
• How to enable read-only access to AD integrated DNS for a group of users when they use the DNS Administrative Tool?
• How to exclude a computer/user from a group policy
• How to exclude disabled AD accounts from ADAMSYNC
• How to export AD configuration and objects (users/groups) to a test AD enviroment?
• How to export all active users detail from AD
• how to export All computer list with operating system from AD and all attributes like disable or enable and OU location also?
• How to export domain system login and log off report from active directory
• How to Export Names of all AD Groups with their members list
• How to Export OU Permission Delegation Info in Windows Server 2003 AD?
• How to export the ACL list of a Folder
• How to export the local group membership to a text file?
• how to find computer name where AD user logged in
• How to find the password reset history of a particular user account?
• How to find 90 days inactive computers from dsa.msc?
• How to find a Distinguished Name in AD
• How to find Access token size of each user
• how to find accounts whose passwords will expire in future
• How to find Computers with Trust relationship
• How to find file servers and exchange servers in AD ?
• How to find if service account is running on server or from workstation
• How to find inactive and disabled users in AD
• How to find ldap attributes for each property of user object?
• How to find list of all the domains in your environment?
• how to find list of list of domain admin and local administrator user through command line
• how to find locked out user account in active directory
• How to find out Apple MAC computers into my AD
• How to find out if domains belong to the same Forest
• How To Find Out If The Computer Account(s) Is Active?
• How to find out servers still querying old DC for DNS, We need to decommison the old DNS but we dont know what servers still pointing to this
• How to find out the SID history of a computer account in AD
• How to find out unused security groups
• How to find out when your domain password will expire
• How to find out where an account is being used
• How to find out which applications are hard coded with domain controller name or ip address
• How to find the creation date of a Distribution Group
• How to find the Creation Date of Active Directory object Creation Date
• How to find the last logon computer name of an AD user
• how to find the ldap servers in a domain
• How to find the list of AD users log in on specific Date?
• How to find the server restarted Time in windows 2003?
• how to find the source generating DNS Query
• How to find the which users not logged in AD for 90 days?
• How to find total number of users in AD (dsquery)
• How to find user's IP on domain network ???
• How to find user/group known only SID
• How to find what permissions an AD group has ?
• How to find which devices are still using affected domain controller
• How to Find Which Programs running in my Domain Computers
• How to find who deleted computer object from AD?
• How to find who disabled AD account?
• how to fing ADMT logs
• HOW TO FIX 'Authorizing DHCP failed error 20079'
• how to fix DNS error?
• How to fix missing CNAME record: <guid>._msdcs.mydomain
• how to force all domain joined clients be shutdown at specific time ?
• How to force DC replication after a long period of offline time?
• How to force DHCP to register addresses with DNS?
• How to force logoff all users in the Domain
• How to force replicating SYSVOL contents?
• How to fully remove Identity manager for UNIX components
• How to generate a report of inactive users and export it to a csv file ?
• how to generate or change automatically generated connections
• How to get a computer SID using a doss command
• How to get AD Site name from IP address or subnet.
• How to get all active computer list in domain with some attributes?
• How to get custom Attributes to show up in Users&Computers Attribute Editor
• How to get Get-AdUser to work with different domains
• How to get Job title for an user in Active Directory
• how to get list of active users with the details like samaccountname, name, department, job tittle, email in active directoy?
• How to get the list of all AD computers with last logged in user Name
• how to globally disable "user must change password at next logon" checkbox for all new users?
• How to grant "Write ServicePrincipalName” and “Write validated SPN” rights to the directory for service account
• How to grant a domain user manager group membership permission
• How to grant a non administrator the right to start/stop any service on W2K8 R2 Server
• How to grant a user "rights" "only" to create new users over a OU
• How to grant AD DS Users access to Objects in AD LDS?
• How to grant Admin rights on DC without giving Domain Admins rights?
• How to grant Read/Write Access for domain users on local computer “C” Drive or that file/Folder using GPO
• How to hide and then unhide AD objetcs?
• How to hide user account
• How to I export all AD attributes for user object
• How to I leave a domain and workgroup
• How to identify interactive logons in windows event logs
• How to identify the computer name using SID?
• How to identify which computers are authenticated off a particular domain controller
• How to identify who own a specific account
• How to Impersonate as Group Managed Service Account (GMSA) in Application
• How to implement the different password policy on a particular OU
• How to import a certificate into the AD DS personal store in Server Core
• How to import ldif into AD LDS (data is from Oracle DSEE7 (Oracle Directory server enterprise edition).ldif
• How to import Photos into Active Directory
• HOW TO INCREASE OR CHANGE TRUST RELATIONSHIP TIME LIMIT on domain controller
• How to install Active Directory on Windows 10
• How to join AD domain via script?
• How to Join Computer to a Domain (When DNS name does not exist) Comments (101) | Share When you are going to join any computer from domain controller the following error will be appeared on your computer screen. Full Error Message
• How to know Domain users installed a unwanted softwares on PC
• How to know ReadOnly domain controller
• How to know the expiration date of LDAP certificates?
• how to know the SID information belong to which account through command line?
• How to know when user change the password in AD
• How to know when was an Account Disabled
• How to list all domain groups in a different domain
• How to list folder permissions for an Active Directory user
• How to list security group information in active directory?
• How to Make a copy of Production AD for Test Lab
• How to make a domain user a power user in local computer using Active Directory
• How to make a Non Domain Aministrator an admin on the Domain Controller server?
• how to make clone of active directory security group
• How to make Secondary domain controller to Primary domain controller?
• How to manage "unix attributes" in Windows Server 2012?
• How to manually create/add sID History?
• How to monitor if LDAP queries are failing or slow thus affecting performance
• How to monitor the logedin users activity in active directory.
• How to mount NFS share on windows 10 pro and use unix attributes from Active Directory for permission
• How to move DNS from Bind to Windows Server?
• How to move GC role to another DC?
• How to move many AD accounts that are located in different OU to a OU at one time
• how to move users from security group to OU in Active Directory 2003?
• How to obtain user email address from windows user id using DSGET and DSQUERY?
• How to perform the merge of two users in Active Directory
• How to prevent a user account from being locked out by other's users?
• how to prevent a user from running outlook
• How to prevent deletion of a single user account?
• How to prevent group membership copying to new user account when copying existing user
• how to prevent reuse of account names
• How to Prioritize Logon Server Selection
• how to Promote Additional Domain Controller when DC is not available.
• how to properly remove a tombstoned DC
• How to protect AD user objects from deletion?
• how to put a domain controller in maintenance mode
• how to query custom attributes (extended) of AD objects
• how to query ldap users who are at different sub-ou
• How to remove AD Permissions from all child OU's and Objects in AD
• How to remove an Inter Domain Trust Account
• How to remove delegate control rights in AD
• How to remove Delegated Control from Users and User Groups on Window Server 2012?
• How to remove RODC role without affecting existing server environment
• How to remove WINS from DHCP
• How to rename domain netbios name ?
• How to rename massively security groups on AD? [SOLVED with SOLUTION]
• How to reset Active Directory Domain Controller Administrator account Password?
• How to reset badpwdcount value
• How to reset Default Domain Policy???
• How to Reset Password of AD User while not connected to Domain network
• How to restore AD OU objects from system state backup.?
• How to restore deleted active directory user account from active directory recycle bin in windows server 2008 r2?
• how to restore fsmo roles
• how to restrick/block rename computer and disjoin domain
• How to restrict a computer to specific user login !?
• How to restrict Active Directory forest trust communication to specific Domain controllers
• How to restrict changing local admin password.
• How to run gpupdate /force on remote computer?
• How to runas powershell script
• How to search Deleted Objects by SID
• How to see active directory users local disk space details ?
• how to see SID Filtering is enabled
• How to set a new bridgehead server
• How to Set Account Expiration date with Set-Aduser
• How to set auto start & auto shutdown (server 2008 r 2)
• How to set KDC server on windows client ?
• how to set netbios over tcp/ip enabled or disabled from command line ?
• How to set password for an user with ADAM adsi Edit tool?
• How to set the "Manager can update membership list" on an Active Directory Group from Python?
• How to set UPN suffix for new users?
• How to setup an LDAP server on windows server 2012
• How to setup trust relationship in workgroups
• How to show employee ID and employee number in ADUC?
• How to solve event id 5504
• How to sync certificates generated by external Root CA with internal CA
• How to tell how many computer accounts a specific user has joined to the Domain?
• How to tell if domain is a child domain?
• how to tell if i´m using DFS or DFSR to replicate sysvol?
• how to tell what users are logged into machines on the network 2008
• How to test an LDAP connection via dsquery command
• How to trace who created the account in active directory
• How to track incoming LDAP queries to Domain Controllers?
• How to Track User Logon and Logoff reports in Active Directory (Server 2016)
• how to update the lastlogontimestamp? What exactly triggers the update of the LastLogonTimeStamp?
• How to use AD Web Services
• How to use excel macro to query AD user data?
• How to use host name to connect to a computer using remote desktop connection?
• How to use KerbTray?
• How to Verifiy If CA Certificate Will Auto Renew Or Not
• How to verify a particular user is member local computer, domain group or delegated rights
• how to verify DC's are performing fsmo role properly?
• how to verify if an account has permission to do AD query?
• How to verify user in AD by Last + First Name + Mid
• How to verify where a user tries to login in from?
• How to view the value of MaxGroupOrMemberEntries
• How to write LDAP query to exclude certain computer objects from existing collection
• howto obtain email addresses from AD using PowerShell
• Http Error 500 when browse to ADFS federationmetadata.xml
• Hundreds of CLOSE_WAIT TCP states - Kerberos
• Hybrid Joined Devices - Windows Hello for Business
• Hyper-V Domain Controller with Dynamic Memory allocation
• hyphen instead of dot for internal hostname
• I can't delete a security group. The property has no unique identifier.
• I accidentally deleted a computer account from Active Directory how can i recover those computer account without disjoint client computer from the server?
• I am unable to create new objects on AD - Windows cannot create object because the directory service was unable to allocate the relative identifier
• I can't logon after Active Directory installation.
• i configured the schedule to sync between domain controllers but its not working
• I need last month or last 30 days disabled users list with name, samaccount, email, diplayname and when was disabled or modified ?
• i need to find which users are using roaming profiles
• I need to generate Subordinate Certificate Authority but I unable to select from the AD CA CertSRV page ?
• I want to restrict the access to domain controller for desktop team.
• I want to send Messages from my Active Directory Server to all currently logged on Users. My Active Directory Server is Windows 2012 R2 & Client Operating Systems are Win7, win8 & Win10. Please provide the resource about this.
• I want to view existing user delegation in active directory
• I_NetLogonControl failed: Status = 5 0x5 ERROR_ACCESS_DENIED
• I_NetLogonControlfailed: Status = 1355 0x54b ERROR_NO_SUCH_DOMAIN on 2008 r2 PDC
• Identify Bridgehead Server
• Identify locked out account
• Identity synchronization Error
• If all domain controller down, what happen or what can we do for exchange server user?
• if both DC and ADC can have all or some FSMO rolls, then what is the difference between DC and ADC ?
• If I can remove built-in account from built-in Administrators Group?
• IF our DC Down user not able to access file folder and network printer or network resource
• Immediate and Urgent Replication.
• Immediate replication between sites
• Impact of adding an additional UPN?
• Impact of resetting the password of the krbtgt account?
• Implications of Renaming sAMAccountName
• Import DNS records from a .csv or .txt file
• Import Telephone numbers from CSV file into Active Directory 2008
• Importing / Exporting scheduled tasks from Server 2008 to server 2016
• importing csv file to active directory
• in Active Directory ,why by default everyone group has change password permission on all newly created user accounts ?
• In Active Directory, the Everyone Permission has access "FullControl" in all objects of Users
• In AD Sites and Services Missing the Connection In NTDS Setting
• in joined to clients , in registry , where the name of the site to which the client belongs is stored ?
• In NTDS folder Some log files is there what is the function ?
• in which Attribute "this account supports AES encrption 128 bit"option in account tab in user object will be stored ...
• In WPAD.DAT file bypass URL is not bypassing to proxy server while i am using wpad.dat file through IIS6.0 see below wpad.dat script?
• Include enabled/disabled User account status of LDAP User in results
• Incorrect Group Membership for a user account in GPResult output
• Increase Size Limit for AD Query
• Increase the maximum number of values for an attribute in Active Directory 2008r2
• Increase the number of workstations a user can join to a domain
• INFO: The user "Domain\user" does not have RSOP data
• Infrastructure fSMORoleOwner ForestDnsZones and DomainDnsZones empty
• Infrastructure Master Down
• Install-ADServiceAccount : An unspecified error has occurred
• Install-AdServiceAccount : Unable to contact the server.
• Install-ADServiceAccount Error Message: An unspecified error has occurred
• Installing gMSA on a server without AD cmdlets
• Inter-Site Topology Generator shows Invalid Server and Site
• Internal Error An Active Directory Domain Services error has occured
• internal error while joining a pc to domain
• Internal error: An Active Directory Domain Services error has occurred.
• Internal event: The LDAP server returned an error.
• internal vs. external name space
• Interpreting netlogon errors
• Interveiw question for AD L3 and L4 level
• IP Addresses for time.windows.com
• IP of old Domain Controller showing in nslookup <domain>
• IPC$ presence for a healthy domain controller?
• IPv6 Default Gateway Address
• Is a password encrypted during a logon for a Active Directory user?
• IS Account lockout only processed on the PDC emulator ?
• Is an Event ID for a completed Domain Controller promotion logged on the PDC?
• is any reason to define FQDN name different as Net-bios name?
• is dns server required to install active directory
• Is Extension Attribute Replaced by msDS-cloudExtensionAttribute?
• is IPv6 causing domain controllers between sites communication problems
• Is it a good practice to configure DNS and DC on same server
• Is it any possible way to increase AD user name limit 20 to 40..?
• Is it better that a server be domain member before being promoted to DC?
• Is it ok to change the PDC time type from NT5DS to NTP
• Is it possible to access Active Directory via LDAP API ?
• Is it possible to change LDAP attributes like 'CN','ObjectClass','ObjectGUID' in Active Directory ?
• Is it possible to copy password from one user to other?
• Is it possible to create two users with the same Full Name and User Principal Name, one in parent domain and one in child domain?
• Is it possible to have 2 Active Directories in 1 domain?
• Is it possible to have Active Directory login as an email address
• is it possible to set AD logon hours with half hour like 6.30am to 5.30pm?
• Is it wise to put domain controllers behind a load balancer
• is ldap attribute are case sensitive ?
• Is LDAP on Port 3269 Secure?
• Is NETLOGON folder necessary for domain controller?
• Is NT Authority\System (Local System) a part of Authenticated Users ??
• Is NTLM officially supported in a organization with all DCs running Windows 2016 and forest /domain lever either running Windows server 2012 or 2016
• is objectGUID unique in the domain\forest
• Is port 593 "RPC over HTTP" needed on a domain controller
• Is possible to convert a RODC to writable DC without demoting the RODC?
• Is Remote Registry required for Domain Controllers
• Is server or service reboot required after editing registry in 13568 event
• Is SID filtering enabled on forest trust?
• Is the internet needed for Active directory and why ?
• Is there a limit to the amount of SPN's you can register against a single account?
• Is there a way to give a user access to active directory users and computers without being an administrator
• Is there any disadvantage of Enabling the Active Directory Recycle Bin
• Is there any event log on client PC when changing the AD user password?
• Is there any GUI free tool to create bulk users in AD after importing details from .xls or CSV?
• Is there any impact by enabling restrict Anonymous in Domain Controller
• Is there any impact by renaming OU in ADS?
• Is there any possible to create a local account on domain controller, not domain account?
• Is there any way to get Active directory Password in plain text format
• is there any way to update windows cached credentials with out contacting the domain?
• ISO Policy for Active directory
• Issue a certificate with the manually set serial number (Certificate Transparency TBSCertificate)
• Issue creating AD-integrated DNS zones
• Issue with Active Directory module for PowerShell
• Issue with command-let Get-ADDomainController
• issue with LDAP
• Issues Implementing the Microsoft Online Responder
• Job Title field length
• Join & Unjoin a domain Delegation Control
• Join a server to the domain remotely without having the local admin password
• join domain overwrites existing computer name...
• Join network computers in the domain with same name
• Join server to domain controller behind NAT
• Joining a computer to the domain using the netbios name VS the FQDN
• Joining a domain: LDAp search failed with error 58
• joining domain error
• Joining remote computer to a domain
• joining to domain on same computer account name
• KCC cannot compute a replication path - SCOM messages
• KCC could not add this Replica Link due to error
• KCC could not add this REPLICA LINK due to error - Network issue?
• KCC could not add this REPLICA LINK due to error.
• KCC event failed on Domain Controller which holds schema and domain naming master role
• KDC Error Messages when Rebooting Domain Controller
• KDC Event ID 29 - The KDC cannot find a suitable certificate to use for smart card logons...
• KDC is taking hgh utilization
• KDC reports inconsistent supported encryption types after AS-REQ
• Kerberos - MIT and Heimdal
• KERBEROS - reasons for getting KRB5KRB_ERR_GENERIC from KDC
• Kerberos and Alternative UPN's
• Kerberos auth error krb5kdc_err_c_principal_unknown (6)
• KERBEROS AUTHENTICATION ERRORS ON DOMAIN CONTROLLER Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN AND Error Code: 0xd KDC_ERR_BADOPTION
• Kerberos authentication fails, RFC 4120?
• Kerberos client received a KRB_AP_ERR_MODIFIED error
• Kerberos error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
• Kerberos Error after remote Cluster-Aware Updating
• Kerberos Error on client
• Kerberos Event ID 4 (KRB_AP_ERR_Modified)
• Kerberos Event ID 9 - but all of the certificates seem to be valid
• Kerberos Event ID every 15 min
• Kerberos Event ID: 4768 | Result Code 0x12
• Kerberos Event ID: 7
• Kerberos KCC_ERR_S_PRINCIPAL_UNKNOWN
• Kerberos Key Service won't start on domain controller
• Kerberos KRB_AP_ERR_MODIFIED error
• Kerberos pre-authentication failed
• Kerberos Pre-authentication Failed
• Kerberos Pre-Authentication Failed ID 4771 (code: 0xE)
• Kerberos problem in domain controllers. Event ID 14.
• Kerberos SPN Clarification
• Kerberos SRV Records
• Kerberos token sizes for editions of Windows server
• Kerberos-Key-Distribution-Center , Event-ID - 16
• Kerberos-Key-Distribution-Center Warning Messages
• kerbos srv record missing for my RODC
• Keyboard Shortcut to Find Users, Contacts, and Groups in AD Console
• keytab contents
• Keytab files and KRBTGT reset
• Keytab Merging using Kerberos Utilities
• kinit command is not able to fetch/read C:\Windows\krb5.ini file on widnows 2012 server R2
• kinit: Cannot find KDC for realm "contoso.com" while getting initial credentials.
• klist shows no tickets
• KMS Activation for Windows 10 Pro
• Knowledge Consistency Checker
• KRB_AP_ERR_MODIFIED error on 2016 Domain Controller after upgrading from Server 2003 Domain
• KRB5KDC_ERR_PREAUTH_REQUIRED
• KRB5KDC_ERR_PREAUTH_REQUIRED and KRB5KRB_ERR_RESPONSE_TOO_BIG
• KRBTGT object
• ktpass and UPN
• KTPASS Getting error "Failed to retrieve user info for <UserName>: 0x5
• Ktpass: failed getting target domain for specified user
• LAPS - Extending schema error
• LAPS : Find out who has read/write permission to ms-Mcs-AdmPwd and ms-Mcs-AdmPwdExpirationTime attribute
• LAPS and RODC's
• LAPS and the dreaded “Trust Relationship Failed”
• LAPS GPO deployed, Fat client UI missing
• LAPS Implementation Issue
• LAPS Install: Update-AdmPwdADSchema : The requested attribute does not exist
• LAPS Install: Update-AdmPwdADSchema Error
• LAPS installed, but can't read password or expiration attributes
• LAPS password database and recovering previous local admin passwords
• LAPS security group permission to read the password
• Largest Delta in AD Replication
• Last error: 8457 (0x2109): The destination server is currently rejecting replication requests.
• Last log-on attributes value not showing in some AD user account
• Last Logon Date is showing future Date on few AD Computer object
• Last Logon Inaccurate
• Last logon time stamp from WMI
• Last logon time stamp not showing
• Last logon user more than 180 days
• Last Modified date for Active directory groups
• lastLogon and lastLogonTimestamp <Not Set>
• lastlogon vs. lastlogontimestamp
• lastlogondate has a recent value; lastlogon attribute is unset or 0; how?
• LastLogonTimeStamp - what updates this attribute?
• LastLogonTimestamp < PasswordLastSet
• LastLogonTimestamp again
• lastlogontimestamp and 1601
• LDAP - is it possible to combine a username and password with an LDAP URL
• Ldap Active directory change password Unwilling to perform Error 53
• ldap active directory debug
• LDAP add fails with CONSTRAINT_VIOLATON instead of INSUFFICIENT_ACCESS or ACCESS_DENIED
• LDAP Attribute for SID
• LDAP attributes for properties of computer object
• LDAP Authentication after password change
• LDAP authentication error: LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 52e, vece
• LDAP authentication how to restrict it
• LDAP bind account privileges for user password verification
• LDAP Bind function call failed
• LDAP Bind function call failed - How to correct LDAP bind function failed?
• Ldap Bind Time - Max safe value of
• LDAP Channel Binding and Signing issue
• LDAP Chase Referrals
• LDAP Client Sessions
• LDAP connection error over SSL 636 port
• LDAP connections/queries logging
• LDAP connectivity with simple, DIGEST-MD5 and GSSAPI mechanism
• LDAP Distinguished Name
• LDAP Error
• LDAP Error 1216
• ldap error 81 (server down) win32 err 58 in windows server 2008 r2 upgrading from windows 2k3
• LDAP Error 81(0x51): Server Down Server Win32 Error 0(0x0):
• ldap failover
• LDAP Filters - Filter out users based on OU AND username strings
• LDAP Group Membership for >1500 Members
• LDAP Interface Event on one server only
• LDAP Lookups across multiple forests
• LDAP Over SSL communication failing with Exception-"The user name or password is incorrect.\r\n"
• LDAP over SSL fails with Event ID 1220 and "No credentials are available in the security package"
• LDAP Query - All users in one specific OU
• LDAP Query - Finding account that have a logon script entry
• LDAP query against Domain Controller is not working.
• LDAP query assist please
• LDAP Query does not show all Attributes
• ldap query find active users
• LDAP Query for all active users
• LDAP query for expired accounts
• LDAP Query for group members
• LDAP query for the OU the user is in
• LDAP Query for Users with password set to never expire
• LDAP Query in Active Directory - NPS Network Policy Attribute
• LDAP query memberOf group with users from root domain
• LDAP query results in "An operations error occurred."
• LDAP query to add ForeignSecurityPrincipals to a group
• LDAP query to fetch users from Two different OU
• LDAP Query to find all user object from multiple OUs
• ldap query to get the users of a OU
• LDAP Query to get user properties
• LDAP query to port 389 failed
• ldap query to pull members of an AD group in AD Modify
• LDAP query to return users and groups recursively?
• LDAP Query to search all active users that are NOT member of a Distribustion Group
• LDAP query will not work if OU name contains a space. Error: There is no such object on the server
• ldap query: group membership recursive to trusted domain
• LDAP Referrals in Active Directory
• LDAP RefError
• LDAP round robin
• Ldap search all users within an OU
• LDAP search cross forests
• LDAP SEARCH leading space problem
• LDAP search strings
• LDAP Server is down
• LDAP server is unavailable
• LDAP Simple Bind failing
• Ldap string to query multiple domain controllers
• LDAP User's Logon Name must match Display Name
• LDAP VIP name configuration
• ldap_query all users ine one OU
• LDAP: error code 12 - 00000057: LdapErr: DSID-0C090831, comment: Error processing control, data 0, v2580”
• LDAP: error code 49 - 8009030C: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 534, v1db0^@]
• LDAP: error code 50 - 00000005: SecErr: DSID-03152857, problem 4003 (INSUFF_ACCESS_RIGHTS)
• LDAPerr: DSID-0C090FB4
• LDAPS and NTDS\Personal Question
• LDAPS and Wildcard cert
• LDAPS Error <0x51>
• LDAPS not working
• LDAPS not working with IP Address
• LDIF File Import Into Active Directory
• LDIFDE - export users and their memberOf attribute
• Ldifde command to export everything
• ldifde import on sub domains - 0000202B: RefErr: DSID-03100781, data 0, 1 access points
• LDIFDE No Such Attribute
• LDIFDE Syntax Error - The Last Token Starts with...
• LDP.EXE
• ldp.exe unable to create new document
• LDS Sync Failed
• Let a user in one domain use a printer in another domain
• Licensing requirement for deploying Certificate Authority Server
• Limit AD security Group to just one OU
• Limit group membership on a security group
• Limit Number of allowed Concurrent connections to AD DS
• Limit specific administrators to view only specific OUs within the domain(Windows Server 2008)
• Limiting Special Characters in a Password
• LimitLogin or UserLock
• Linux computers cannot access DCs using secure LDAP
• List active computers in AD
• List Active Directory Groups with their descriptions
• List AD accounts that have not been used for months?
• List all DNS servers in an AD Forest
• List all groups in AD
• List all permissions in AD for a specific group
• List groups having a user as a member
• List of all AD Fields
• List of all default attributes found for user object in Active Directory 2003.
• List of all Managed Service Accounts
• List of all rights and privileges assigned to Domain Admins
• List of all servers in the domain
• List of default permissions in AD for well-known groups
• list of last logon users on Specific system
• List of PCs currently logged onto the domain
• List of servers in Active Directory
• List of services needed to run on Domain controller.
• List of users with paswords expiring within a certain date range
• List users in a OU using powershell with dsquery
• List users in shared folder permission group
• Listing all groups in AD containing a given string
• Load balancing Domain Controllers?
• Load balancing LDAP/SLDAP only....
• local account with same name as domain account locking out domain account
• Local Administrator password expiry on Domain machines
• Local user account is trying to autenticating against domain controller
• LocatorCheck Test Failed -- PDC_REQUIRED
• Lock Down/Restrict Domain Admins
• Lock User down to only one OU
• LOCKED ACCOUNT ON MSFT-WIN-3/10.0.18362
• Locked out of all Domain Administrator accounts on Windows Server 2008 R2 DC
• lockoutstatus tool
• Log and track LDAP logins authenticated against Active Directory
• Log off all devices of a user in a domain
• Log out / in abs necessary after security group add?
• login into domain controller using non administrator user account...
• Login to domain from a different forest computer ?
• Login vbs script does not run
• login when windows offline
• Logon Failure Attempt from a Disabled Account - "Guest"
• Logon failure the target account name is incorrect
• Logon Hours - different time zones
• Logon information of service accounts
• logon script - local copy/cache?
• Logon script doesn't run using GPO
• Logon Script in AD Not Running Anymore
• logon script in AD profile not running
• logon script location
• logon script path was not found
• Logon Script using Active Directory?
• Logon scripts and printers
• Logon Scripts, Can you run more than one at logon?
• Logon Server
• Logon Server N/A
• Logon types in Windows Server
• LOGONSERVER environment variable
• LOGONSERVER not updated after site change
• Looking for an Active Directory phone book
• Lost And Found Folder in Active Directory
• lost Enterprise Root CA
• Lots of Kerberos Errors (EventID 16) logged on 2012 R2 DC
• Lsass Handle Countis crossed 40000 in few of the Domain Controllers
• lsass.exe and KDC High utilization on Domain controllers
• Lsass.exe sending excessive data outside the local network
• lsass.exe uses huge amount of bandwidth
• Machine spontaneously disconnects from domain
• MAIL attribute in AD
• mailNickname user attribute not found in Schema
• Managed by attribute usage
• Managed Service Account container does not exist
• Managed Service Account Error 1297
• Manager from another another forest
• Managing Certificate Private Key permissions (Server 2016)
• Manual copy of sysvol files from one DC to another
• Manual Schema Upgrade from Windows Server 2008R2 to Windows Server 2012R2
• manually configure NetBIOS name resolution using LMHOST file only
• Manually Create a Computer Account in AD before join it to AD
• Manually Edit LastLogonTimeStamp Attribute
• Map Home Folder in AD through VPN
• Mapping Z drive for all user using GP
• Master AD and Slave AD
• max number of users per domain controller
• Maximum Length User Logon Name (Pre Windows 2000)
• Maximum Password Length
• Maximum users per Active Directory Server
• Md5 passwords in Active Directory.
• Member of the Event Log Readers group removed by System.
• Member Server cannot search AD user (another domain) but DC can
• Member server failed to join domain, "Changing the primary domain dns name of this computer to "" failed. the rpc server is unavailable."
• MemberOf attribute missing
• merge multiple forest to single forest tree
• Message: The SAM database was unable to lockout the account of Administrator due to a resource error, such as a hard disk write failure (the specific error code is in the error data)
• Microsoft Account Lockout Status popup error when reset password
• Microsoft Active Directory exactly needed ports to be allowed on Firewals
• Microsoft Active Directory Topology Diagrammer is here!
• Microsoft authentication package keeps locking account out
• Microsoft DNS TTL Setting
• Microsoft Remote Desktop unable to connect Code ox104
• Microsoft Windows Security Events, 4625, 4771 etc.
• MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 package
• Microsoft-Windows-ActiveDirectory_DomainService, Event ID 2887
• Migrate a Windows Server 2000 to 2012
• Migrate domain controllers but keep ip addresses
• Migrate GPO settings to another domain
• Migrate Rackspace VM to Azure
• Migrate Roaming User Profiles from Server 2008R2 to Server 2012R2
• Migrate servers between domains
• Migrating SYSVOL to DFSR, One Server 'stuck' when using getmigrationstate, but it looks OK locally
• migration user from one domain to another domain
• Minimal ports required for trust
• Minimum permission require to modify user attributes in Active Directory
• Minimum permissions required to create gMSA account
• Missing "Enterprise domain controllers"
• Missing AD Attributes ??
• Missing DO_NOT_REMOVE_NtFrs_PreInstall_Directory
• Missing glue A record - Error details: 9714 (Type: Win32 - Description: DNS name does not exist.)
• Missing GPO Settings in RSOP - Folder Redirection
• Missing in Attribute Editor
• Missing tabs in AD:Users and Computers
• Modified field in Object Tab - AD user account
• Modify Custom AD Attribute Syntax?
• Modify granular permission on Active Directory Deleted Objects container
• Modify rangeUpper value of Log on to Workstation attribute in Active Directory Schema
• Modifying a User's Attribute that has no editor
• Modifying attribute of AD object
• Monitoring AD Performance Counters
• Monitoring LDAP queries to Active Directory
• Monitoring when an administrator account has been used for logon on a domain PC
• Move AD LDS on another server
• Move Computer Accounts from Computers container to OU
• Move computers in AD to specific OUs beased on their IP addresses
• Move DC Form Domain Controllers OU
• Move Domain Controller Virtual Machine from one Hyper-V Host to another.
• Move domain to another forest (forest trust)
• Move ISTG to another DC
• Move the SYSVOL and NTDS folder to another drive
• Move-ADObject return Access Denied
• Moving a Domain Controller to a different subnet
• Moving an OU with a GPO....
• Moving and reorganizing an AD domain for users and computers - some basic questions
• Moving computer object to another OU during joining domain process
• moving objects between different OU's in same domain
• Moving the domain from a .local to a .com
• ms-DS-MachineAccountQuota
• MSA Account Naming Rules?
• msDS-cloudExtensionAttribute attribute
• msds-deletedobjectlifetime and tombstoneLifetime
• msDS-UserPasswordExpiryTimeComputed returning "01.01.1601 01:00:00" for most users
• msg command is not working
• MSSOAP
• Multiple A record for single ip address in DNS
• Multiple Active Directory Domains in One IP Network?
• Multiple AD servers, see who's primary
• multiple domains on one machine under one active directory on window server 2008 r2??
• Multiple group policy link on one OU with one settings, which will win or apply for same settings.
• Multiple IPs for the same domain controller - MS Supports this?
• Multiple Netlogon errors - 5723 and 5805
• multiple NICs on the same DC
• Multiple Passwords for Users (different passwords for accessing different servers-applications)
• Multiple SPNs for same server
• my DC have not NTDS service and GC is also not responding. it does not open the group policy editor console
• My Network Places wont show 64bit domain controller, and its connected workstations
• My user account is locked out automatically in a couple of minutes again and again after I unlock it
• Name of computer doesn't match name in Active Directory
• Name Suffix Routing shows Conflict
• Naming ifnormation cannot be located because access is denied
• Naming information cannot be located because: The Specified Domain either does not exist or could not be contacted
• Naming Information cannot be located for the following reason : The Server is not operational.
• NCSecDesc: Error: No Replication Access Rights for Schema Configuration
• Need to Unlock AD user Accounts Automatically
• Need help renew domain controller authentication certificate.
• Need help with Active Directory Permissions delegation to Helpdesk
• need help with broken parent child trust
• Need Powerhell script to delete multiple users from Active Directory
• Need to collect security logs from all domain controller to Central location
• Need to export a list of computers in OUs and Sub OUs
• Need to get Unique User Identifier in Active directory
• Need to know the default value for LdapSrvPriority and LdapSrvWeight for Read Only Domain Controller Windows 2008R2
• Need to know who removed someone from a group
• need to remove dc, don't know local admin password for accessing server after AD removal
• Need to set extensionattribute1 of an ADGroup through powershell
• Need to uncheck the 'user cannot change password' box on all users in a group.
• Neltogon failed to authenticate
• net time is not working in the domain
• NET USER -password expires not showing the password expire time
• net user /domain returns "Access is denied"
• netapp filers have intermittent authentication issue with domain controllers
• Netdiag and what it did/does for us and its replacements ? +Dcdiag remote
• NETDOM TRUST error
• NETLOGON 5788 & 5789 on domain member server
• Netlogon Error 5719 and 5783
• Netlogon error 5781, Dynamic registration or deletion of one or more DNS records..failed. Missing subdomains of _mscds
• NETLOGON error 5807
• NETLOGON Error event ID 5723
• Netlogon error with event log 5783, only reboot can solve the problem.
• Netlogon error, event id 5722
• NETLOGON Event ID 5721 after DJOIN
• NETLOGON Event ID 5782
• NETLOGON folder not replicated correctly across DC's
• Netlogon need permission to perform this action
• Netlogon not starting - RPC_S_OUT_OF_RESOURCES 1721 (0x6B9) - Solved but not answered...
• Netlogon service stop or paused after reboot the active directory server.
• NETLOGON Share - Everyone Read permissions required?
• Netlogon share does not exist and DCDIAG failed test "netlogons" 67
• NetpCheckDomainNameIsValid error joining server to AD Domain
• NetRemoteTOD error 2184
• netsh http add sslcert - The parameter is incorrect - Windows Federation Services 3.0 - Server 2012R2
• Network Path Cannot Be Found for Windows Server 2016
• Network Path Cannot Be Found for Windows Server 2019
• Network Teaming on Domain Controller is recommended?
• Network Time is off, not sure how to fix it
• New Active Directory Site
• New created user not able see in additional domain controller
• New DC never shares sysvol or NTDS and gets Event 13565 and then 13508 Trouble replicating?
• New Domain Controller is failing NetLogons and Advertising DCDiag tests, old domain controller is failing EventLocator test
• new Domain Controller is not advertising as a domain controller
• new domain controller not replicating DNS forward lookup zones
• New to ADSI Edit - cannot find CN=Activation Objects,CN=Microsoft SPP,CN=Services,CN=Configuration
• New-ADOrgranizationalUnit - Access Denied
• Newbie Question. Joining domain Error 1355
• Newest LastLogon date is very different than LastLogonDate
• newly created groups from ECP adding random numbers to display name in AD Group
• NIC Teaming - Windows 2016 server and Active directory ADDS
• NLTEST /DSQueryDNS failing with Status 50 0x32c:\windows\system32> ERROR_NOT_SUPPORTED
• Nltest /dsregdns shows ERROR_NO_LOGON_SERVERS
• Nltest /dsregdns: ERROR_NO_LOGON_SERVERS on Domain Controller Server 2016:
• nltest /query Connection Status = 1311 0x51f ERROR_NO_LOGON_SERVERS
• nltest /sc_query
• nltest /sc_reset:domain\domain controller returns I_NetLogonControl
• nltest /trusted_domains reports no logon servers available
• NLTEST ERROR_NO_SITENAME
• NLTEST flags - full list? What does 0x20000 mean?
• NLTEST Flags - HAS_IP, HAS_TIMESERV?
• NLTM authentication
• No cached kerberos ticket on multiple clients, but not always...
• NO cert coming back from server
• No DHCP Administrators Group
• No DNS servers configured for local system.
• No event ID 4768 on my domain controllers... WHY?
• No Kerberos Tickets Generated
• No Key to Generate Kerberos Ticket
• No Key to Generate Kerberos Ticket alert in SCOM for a specific service account
• No Logon Servers Available???
• No mapping between account names and security IDs was done. (Exception from HRESULT: 0x80070534)
• no more connections can be made to this remote computer at this time because there are already as many connections as the computer can accept
• No NETLOGON or SYSVOL Shares in New Domain Controller
• No suitable default server credential exists on this system
• No SYSVOL_DFSR on newly added Domain Controller
• NO WINS Server but WIN7 Client Default netBios Setting
• NO_CLIENT_SITE messages
• NO_CLIENT_SITE: error, but site is defined
• Non Replicated attributes in user objects?
• Non-admin domain user can join his computer on the domain
• NOOB Question I'm sure
• Normal User can create folder in Map Drive but cannot delete it?
• Not able to change "Job Title" attribute of a user in Active Directory 2008
• Not able to create username having more than 20 characters in active directory
• Not able to disable the user useraccountcontrol 546
• Not able to find objects of a trusted domain
• Not able to rejoin machine in domain
• Not able to set the encryption type for Ticket granting ticket of kerberos ticket
• Not able to transfer the FSMO Roles
• Not being prompted to change the expiring password for my Active Directory domain account
• Notes field attribute name - group creation
• nslookup - unknown server name + cant list domain xxx.local: query refused
• Nslookup Default Server:  UnKnown Address:  fe80::7562:c550:c96f:218c
• nslookup DNS request timed out. timeout was 2 seconds. *** Can't find server name for address 172.10.1.25: Timed out
• NSLOOKUP is not working
• NSLOOKUP is not working properly
• nslookup returns incorrect non-authoritative server
• nslookup returns Query refused
• nslookup timed out
• Nslookup timeout, and ping doesn't work. But I can open the site with browser.
• nslookup: DNS request timed out. time out was 2 seconds. (When the primary DNS is down)
• NT Authority\Anonymous Login displaying as the user in event logs
• NT5DS on Domain Controllers VS All Domain Controllers NTP
• NTDS Folder in 2016
• NTDS Internal Processing error
• NTDS ISAM 508 and 509
• NTDS KCC Error - Replication problem - Where should I start ?
• NTDS Replication Event_ID 1864
• NTDS Settings - How to stop 'Automatically Generated' connection from generating?
• NTDS settings missing
• NTDS Settings not created automatically
• NTDS Site Settings Change Schedule
• NTDS Writer missing
• ntds.dit
• ntdsutil error: Unable to connect to my DC controllers
• NtFrs service cannot be started (Win 2008R2 SP1)
• NtFrs service cannot be started (Win 2008R2 SP1)
• NTFS permission for renaming a file or folder
• NTFS Permissions showing SID not names
• NTLM authentication failed
• NTLM over LDAP against Active Directory
• NTP authentication key to configure with PDC emulator
• NTP Network Time Protocol
• NTP Server - SpecialPollTimeRemaining
• NTP Server DNS record question
• NtpClient error on domain controller
• NtpServer Registry Key
• Null SID, Unknown user name or bad password & Event ID 4625
• Number of LDAP connections on Domain Controllers
• Numerous Machines losing Domain Trust periodically
• Numerous Schannel Warnings Event 36886
• Object name that already exists on the local directory service
• Object types missing from selection in Select Groups
• Objects are not shown in Active Directory Users and Computers
• objects disappear from active directory
• Objects not visible in Active Directory, but visible from search and child Domain Controller
• Odd process is running named 30000
• office365 unable to telnet from windows 2012R2 server
• Offline domain join using djoin questions
• Offline files disappear when going back online
• Old DC Still in DNS as NS Record: How can I delete?
• Old Domain Password still remain useable
• Old domain trusts still showing up on 2008 R2 DC
• Old IUSR and IWAM accounts in Users container
• One user simultaneously logged in to multiple PCs - any issues?
• One-Way Domain Trust - The user name or password is incorrect
• One-way trust between domains - can't see domains in ADUC
• Online - Cannot manage a client-based operating system
• Online Responder Location Error
• Only domain admins can see memberof
• Only Domain Controller cannot find itself
• Only one SSL VPN user unable to login with LDAP
• OpenLDAP to Active Directory Migration Procedure
• OperatingSystemVersion Attribute Update
• Or operator in LDAP queries
• Order of LDAP search response entries from Active Directory
• Orphan domain controller removal
• Orphand trust- unable to remove - assistance needed...
• Orphaned DC
• Orphaned dc entry in REPADMIN /SHOWVECTOR /LATENCY
• Orphaned fSMORoleOwner entry for DomainDnsZones
• OS based Active Directory Query
• otherMailbox attribute
• OU - Naming best practice
• OU Deletion - Event Log
• Override Group Policy firewall
• Override: The driver disabled the write cache on device \Device\Harddisk0\DR0
• pam_ldap: ldap_simple_bind Can't contact LDAP server
• Partial Date match in LDAP query
• Password change problem at site with RODC
• Password changes not propagating
• Password Complexity GPO not working for domain users
• Password expiration warning not appearing
• Password Expired, But still able to login
• Password Expiry Dates Incorrect using Net User
• Password Hash
• Password last set is showing Blank in Get-ADUser Report
• Password last set.
• Password Never Expires - Turning Off Isn't Working
• Password Never Expires- Check Box Rights Delegation
• Password not required flag set to true on defaultaccounts
• Password Reset denied on some accounts
• Password reset for GMSA
• Password Settings Container missing in the AD Administrative Center and ADSI Edit
• password to expire after a day
• PC logs into Domain Controller in wrong site
• PDC emulator not configured to correctly synchronize time
• PDC not loading NTP Time source and defaults to local CMOS?
• PDC SRV record missing in DNS - Howto recreate
• Performing Domain Controller rollback via VM snapshot or Image backup?
• Permission for add computer accounts to a Domain
• Permission Matrix for AD Administrators
• Permission on AD user account keeps reverting
• Permission to create security group within organizational unit
• Permission to install printers in Domain [AD]
• Permission to recreate computer object
• Permissions - Remote Server Administration Tool Windows 8.1
• Permissions are incorrectly ordered Error
• Permissions for a dedicated user to join computers to a specific OU in domain
• Permissions NOT propagating properly
• Permissions to add/remove computer accounts from domain
• Permissions to create Reverse Lookup Zones in DNS
• permissions to delegate repadmin
• Permissions to modify a computer's sn attribute
• Physically moved DC to new site - Does not update to correct site
• Ping Domain returns another site dc address
• Ping domain.net does not resolve to nearest DC
• Pinging or connecting to domain.local
• PKI Certificate Auto Enroll and Renewal
• Planning for raising Domain/Forest functional level and roll back plan
• Please explain: "Replication Synchronization" permission in Active Directory
• Please Help Me how to show accounts lock out report from active directory
• Please I need to get Users list with comma delimited output using power shell from Active Directory.
• Please tell me the check list of pre and post patching of active directory DCs
• Port 138 137 issue
• Port 389/UDP
• Port 49155 and 49159 on domain controller
• Ports Needed for Forest, Domain Trust
• Ports needed to open to communicate with Schema Master
• Ports needed to re-register domain controller with DNS
• Ports required for firewall communication between DC to DC and Client to DC
• Ports required for robocopy
• Ports Required for Trusts bidirectional or unidirectional for Internal client–External domain domain controllers ?
• Ports required to join DMZ machine to domain controller and CA Server
• Ports to be opened for DC - Clients communication
• Ports used for Password Changes
• Possibility change "pwdLastSet" to Today?
• Power shell Script to check/remove lingering objects
• powershell - How to add/remove users to msExchCoManagedByLink of AD Group
• Powershell - Remove ALL Proxy addressess
• powershell active directory module for windows server 2008
• Powershell command to change Attribute Editor field adminDescription
• Powershell Command to Disable user account older then 90 days
• powershell command to get AD groups without memebers using get-adgroup in Domain
• Powershell Command to Set Logon Hours Status to Denied
• Powershell error - Server instance not found on the given port.
• PowerShell for Domain Controller cleanup
• Powershell Question, get-addomain' is not recognized as the name of a cmdlet
• PowerShell script for Event ID LDAP
• Powershell Script pwdlastSet
• Powershell Script replace an attribute Value for User in AD
• Powershell script to export all computers in domain, including OS and the OU they are in?
• Powershell Script to get all users not member of groups required
• Powershell script to get user details for multiple DL groups in Active Directory
• Powershell script to move users from one security group to another, setting the new one as primary, based on where their account is in AD.
• Powershell script to set AD users Logon workstations for multiple users or OU's
• Powershell script to show what users in a particular OU are members of a specific group
• powershell script to update DNS records
• Powershell that disables Active Directory Users that have not logged on for x number of days
• Powershell to add SMTP ProxyAddress based on user UPN
• Powershell to Create Alternate Username if one already exists
• Powershell to update "Manager can update membership list" of AD Group.
• PowerShell: Removing unresolved SIDs from AD Group populated with cross-forest members
• Pre-Authentication Failed - Event Log ID 4771
• Pre-Windows 2000 Compatible Access Group
• Pre-Windows 2000 Compatible group and CA Servers
• Preferred Bridge Head Server
• Preferred Domain Controller (Single Site)
• Prevent active directory enumeration
• Prevent internal Ldap Queries
• Prevent join a computer to domain if it does not have a computer account in active directory
• Prevent Same User Login to Multiple Computers Simultaneously in Domain environment
• Prevent User Login to Multiple Computers Simultaneously at a time in Domain environment
• Prevent user to access particular registry key.
• Preventing multiple logins using the same credentials at the same time
• Preventing unauthorized AD users from seeing sensitive attributes
• Primary & Secondary Domain Controller Died Unable to Join to Domain
• Primary DC not sync to Secondary DC after longtime down
• PRIMARY DOMAIN CONTROLLER
• Primary Domain controller (DC) is down and currently ADC is working. how can i recover DC.
• Primary Domain Controller (PDC) & Additional Domain Controller (ADC) concept in server 2012
• Primary Domain Controller Replacement
• Print server On a Domain Controller
• Printer & User name in every print of Domain user
• Printers not appearing in Active Directory search by “Shared name”
• Problem creating AD zones
• Problem in connecting to an AD LDS instance by using ADSI Edit...
• Problem in enabling Active Directory Recyclebin
• Problem in Generic Read and Generic Write Permission on Active Directory
• problem in seize schema master and resseting domain controller computer account
• Problem of the long shutdown of Windows 10 in the domain
• Problem promoting a Windows Server 2016 ADS DC
• Problem running bcdedit to set server to AD restore mode
• Problem with AD DS Best Practice Analyzer and DNS
• Problem with GPO replication
• Problem with group members : Directory object not found
• problem with pagination control "1.2.840.113556.1.4.319 (pagedResultsControl)" in 2008 r2
• Problem with RPC and Active Directory
• Problem: Missing Expected Value with dcdiag
• Problems with Group Managed Service Accounts in Server 2012
• Problems with latency on RADIUS responses
• problems with migration of FRS to DFSR SYSVOL
• Problems with SID history between domains in forest trust
• Problems with syncing
• Procedure for adding new 2016 Domain controllers and Decommision old 2008 R2 DC's
• Procedure to shutdown and reboot Root Domain Controller in downtime maintenance
• promote Additional domain controller as Primary domain controlller
• Promote and demote a domain controller windows server 2008
• Promote new Windows Server 2016 to PDC
• Promoting secondary DC as primary DC still relevant in Windows Server 2012?
• Prompt for Credentials when Accessing DFS share in Trusted Forest!!!
• Proper Configuration of DNS server for our new branch office
• Pros and cons in setting AD domain trust into my AD domain for more than 10+ AD domain and some with same FQDN or label ?
• Protect object from accidental deletion and delegated rights over computer objects
• protect object from accidental deletion greyed out
• proxyAddresses attribute not migrated with ADMT 3.2
• PS Script to import AD computer objects attributes from CSV to AD?
• PSRemoting 0x80090322 error
• PTR RECORD IS NOT UPDATING AUTOMATICALLY IN REVERSE LOOKUP ZONE
• PTR Record not Automatically Created in dns server
• PTR records for a Domain Controller
• Publish Certificate using certutil -dspublish
• Pull Computer name, Description and last logon from certain OU's in AD using powershell.
• Pulling User Info from Multiple Domains - Powershell
• Purpose of Built-In Group "Server Operators"
• Purpose of checkbox - "Manager can update the membership list"
• Purpose of Primary group
• PwdLastSet - possible to change ?
• pwdLastSet attribute blank on AD user objects
• pwdLastSet timestamp changing with every "net user /domain" command.
• pwdLastSet timestamp changing without actual password change
• Qualys showing "Null Session/Password NetBIOS Access" on DCs - Not Sure How/If this can be fixed.
• Queries about creating Group Managed Service Account in Windows Server 2016
• query active directory for windows 7 32bit computers
• query AD domain to get all users
• Query AD for Password Information
• Query AD for Users that are members of the Domain Admin and Exchange Admins
• Query AD user's "Web page" attribute?
• Query Department field from AD users
• Query for exporting user details
• Query to get users from Multiple AD groups
• Query using AD Module Timed Out
• Querying a Trusted Domain User
• Querying Custom AD Attributes with LDAP
• Querying how many users used this domain controller for authentication ?
• Question about 'account options' on the AD user need to include 'this account supports AES 256 bit encryption'
• question about AD domains and trusts trust password
• Question about using an LDAP filter to get memberOf from an AD Group
• Question service control manager issue
• Questions to be asked to client before designing an AD
• Raise Domain and Forest function level to Windows 2012R2.
• Raise the functional level of the Active Directory domain 2012 R2 ,Is this functional level supports XP and 2003
• Raising Domain functional level from 2008R2 to 2016
• RDN vs DN
• RDP error message: Your interactive logon privilege has been disabled.
• RDP using an account without admin rights
• RE: Freeing up space on domain controller
• Read access on AD container "Deleted objects container"
• Read Domain Controller Event Logs from Non-Admin
• Read only access to DNS zones
• Read Only access to Event viewer
• Read only domain admin access
• Read Only Domain Admin Account
• Read Only Domain Controller (RODC) in DMZ
• Read pwdLastSet and Write pwdLastSet attributes are not available while delegating a user to reset user passwords...
• Read-Only User
• Reason of account lockout.
• reasons for not able login to a server
• Rebooting Domain Controller in production environment
• Rebooting Domain Controllers
• Receiving a error on AD DS The File Replication Service has detected an enabled disk write cache on the drive containing the directory c:\windows\ntfrs\jet on the computer VANDC01. The File Replication Service might not recover when power to the drive is
• Recommend System Requirements for server 2012 r2 domain controller
• Recommended NTFS permissions for Home folders - Windows 2016
• Recommended order for setting up Active Directory, DNS and DHCP services
• Recommended way to test the secure channel between DCs
• Reconnect old DC
• Recover Active Directory with NTDS.dit
• Recovering DFS replication group child object links following a restore of a deleted computer object from AD recycle bin
• Recovering FSMO roles after a bad move on my part....
• Redundancy in Active Directory
• Registering an SPN for CIFS/domain.com
• Registry key Src Root Doamin Srv has old Domain Controller as value
• Regular user not seeing Employee ID
• Relationship between Active Directory and Mail Server
• Relative Distinguished Names and Built-In Security Groups - where are they listed and explained?
• Remote Access to read and fetch security logs on Domain Controllers.
• Remote Control a user in Active Directory
• remote desktop access rights to domain controller without administrator rights
• Remote desktop session logged off immediately after login
• Remote User List Disclosure Using NetBIOS Vulnerability with Windows 2012 R2 Domain Controllers
• Remotely Change/Reset Password on other Domain AD
• Remotely tell which DC a computer logged in through
• Remove Account Expiration Date
• Remove AD domain from Forest Root
• Remove corrupted RODC from AD.
• Remove DNS from Domain Controller.
• Remove Exchange attributes in Active Directory?
• Remove Lingering Objects with status 8440 (0x20f8)
• Remove old and false DNS Entries
• Remove Orphaned Domain
• remove read-only domain controller from active directory
• REMOVE REPLICATION ACTIVE DIRECTORY
• Remove SPNs of DC's previous name after renaming DC
• Remove this DNS zone -- DC demotion
• Remove Unused or Expired Certificate Through Group Policy from the Domain Clients
• Remove Web Application Proxy from ADFS 3.0
• Removed a faulty domain controller from the AD Sites and Services
• Removing "List Contents" and/or "Read" permissions from Authenticated Users on the root of a domain.
• Removing a computer from a domain does not deletes the computer object fom active directory.
• Removing a DNS Server
• Removing Authenticated users from 'Pre-Windows 2000 Compatible Access'
• Removing External Trust Type Domain
• Removing Tombstone Server 2016 Domain Controller, re-add to domain and promote to DC
• Removing Windows 2008 R2 Domain Controller from the Domain
• Rename a Custom Attribute
• rename buitlin group such as Administrators
• Rename computer Account: "The account already exists"
• Rename DEFAULT-FIRST-SITE-NAME Site
• Rename domain user's computer name
• Rename the objects and observe the impact on the ntfs permissions
• Renamed DC - AD broken
• Renaming a computer object that already exists
• Renaming a Domain Controller
• Renaming a Domain Controller to an old and removed system name
• Renaming AD Groups
• Renaming Member Server OK?
• Renaming New Domain Controller name
• RENDOM - Error during step 7 (rendom.exe /prepare)
• rendom /end failed
• Renew an expired certificate with Enterprise CA
• Renew Code Signing Certificate same key?
• repadmin /bridgeheads show many sites without a bridgehead server
• repadmin /replsum
• repadmin /replsum command results
• repadmin /replsum dcdiag and nltest errors 1818.
• repadmin /replsummary error 1326 dcserver.domain.com
• repadmin /showmeta shows old and decomissioned Site and DC information: 0ADEL
• repadmin /showreplsummary largest delta for one server ? How to solve ?
• repadmin /showreps
• Repadmin /syncall
• Repadmin /syncall causes DC01 to try and replicate to itself and gets "Access Denied"
• Repadmin check sshows replication error 58
• Repadmin check sshows replication error 58 even after metadata
• Repadmin fails 8341 and 58
• repadmin replsum still shows old DC which completely demoted
• repairing ntds.dit file
• Repeating Directory Service event ID 2899 & 2889 in our DNS servers.
• Repl & TsInternetUser domain accounts - are they needed?
• Replacement for NIS server role?
• Replacing Domain Controllers - reuse IP and Server DNS names?
• Replacing Domain Controllers with new OS version
• Replacing Old Domain controller, but keeping same name and IP
• Replicaction problems on SYSVOL
• Replicating Domain Controller between PROD and TEST Environments
• replication between AD and RODC
• Replication between site
• Replication Error : SyncAll exited with fatal Win32 error.
• Replication Error "The target principal name is incorrect."
• Replication Error "The target principal name is incorrect"
• Replication error 8453 (0x2105)
• Replication error 8456 and 8457, Source|Destination server is currently...
• Replication Errors (The target principal name is incorrect )
• replication latency warning
• Replication of updated .admx files in PolicyDefintions
• Replication Problem in a small Domain
• Replication Problems - Event ID 2092
• Replication timelines with RODC in remote AD site
• Report All Computers and Last Logged on User to those computers from Active Directory.
• Report from users activity in active directory
• Report LDAPS port in SRV record
• Reporting/Querying Active Directory - Accounts with User Must Change Password
• Reports from Active Directory
• Request OID for a new attribute
• required field to create user account
• Required firewall ports for One way external Trust
• Required ports for AD to replicate
• Required ports to communicate with Domain controller.
• Reset cluster name object password
• Reset lastLogonTimestamp attribute currently in the future
• Reset password for users in the particular OU
• Reset Secure channel and Reset Machine Password
• reset trust between Parent and Child Domains
• Resetting a computer account in active directory
• Resetting password of 'Administrator' Account in AD
• Resetting the krbtgt account password.
• Resetting the trust passwords between Parent-child domain
• Restore AD Object with defunct attributes
• Restore default security on OU and objects in OU
• Restore Managed Service Accounts container
• Restoring Active Directory files (NTDS.DIT and SYSVOL folder)
• Restrict Access to Active Directory OU
• Restrict access to Safe Mode
• Restrict Access to specific base schema attributes
• Restrict administrators through GPO
• Restrict LDAP access to OU
• Restrict local user login through group policy
• Restrict MMC and RSAT Access to My Domain Servers
• restrict normal users from joining computers to domain
• RestricT USER ACESS FOR RSAT Tools
• Restricted Groups vs GPP Local Groups
• Restricted or Limited Access rights for AD Users & Computers
• Restriction and delegate ldap query?
• Retreiving userPassword using LDAP
• Retrieve Domain Admins Members of every domains in the forest; and Enterprise Admin
• Retrieving Deleted User from AD By Using LDAP query.
• Reverse Lookup not working
• Reverse Lookup Zone (DNS) Not Populating
• Reverse lookup zone resolution in conditional forwarder
• Revoke Net user command for non admin users
• RID master offline error
• Rid Pool Less than 7% available.
• RidManager - rIdSetReferences missing from DC
• rIDSetReferences attribute missing on new domain controller
• Risks of raising domain/forest functional level from 2003 mixed to 2008 native
• Roaming Profile not populating folder...
• RODC - logonserver
• RODC - no login servers - unidentified network
• RODC and External Trusts
• RODC Authentication not working
• RODC DNS Problem
• RODC dynamic DNS update
• RODC in DMZ with LDAPS integration
• RODC Netlogon Events 5723 & 5805
• RODC not listed under nslookup
• RODC Options - Could not retrieve default replication accounts. Unable to retrieve read-only account groups
• RODC or RWDC in Branch
• Role separation (ARS) on regular DC
• Root CA Error
• Root Certificate Authority Server has lost Trust with Domain
• ROOT domain user lists not shown in child domain
• Root Domain and Primary Domain Controllers
• Root Domain controller cannot connect to child domain on ADUC
• router identity object
• RPC Error 1753 There are no more endpoints available from the endpoint mapper
• rpc logon failure
• RPC server is unavailable 0x800706BA, while updating password for user in active directory
• RPC, WMI query
• RSAT not showing under Windows features
• RSOP Red cross - what does that mean?
• Run AD Users & Computers As Another User
• Run as admin event log
• Run kerberos over external trust in windows server 2012
• sam account name vs UPN??????
• SAM denied remote call on a 2019 DC
• SAM error administrator
• SAM vs NTDS.DIT
• samAccountName and user logon name. Different methods of logon
• Same name two certificate can create issue ?
• Same user account in different domain.
• SAML Transfer failed. Detail: FAILURE: Failure response from IdP. urn:oasis:names:tc:SAML:2.0:status:Responder.
• SANs on LDAPS certificate
• SASL GSS-API Integrity
• SCCM report - User history for a specific computer?
• Schannel error, Event ID 36888? - IS there a way to Identify what causes Schannel to log error?
• schedule backup for GPOs using a script
• Schema Management - Insufficient access rights to perform the operation
• schema master change greyed out
• Schema Master role owner is a deleted DC
• Schema Snap-in missing
• Schema Transfer Problem
• Script Folder is missing
• Script for verifying the Windows Time on all domain controllers (Windows2003)
• Script to add sip address to users in Local Active directory to work with office365 Lync
• Script to get computer modified date
• Script to get the user list who are logged in on the system from active Directory
• Script to remove Disabled Users from All AD Groups
• Script to reset pwdlastset for all user in the OU
• Script to set "Password Never Expires" & "User Cannot Change Password"
• Script to unlock a single user automatically
• scripts, tools to monitor DC
• Search a user in AD + LDAP query string.
• Search Active Directory by SN using LDAP Query
• Search in the LDAP does not work
• Search Serial-Number attribute of Computer object in AD
• Searching Active Directory Objects with C#
• Searching AD Computer object by Location Field
• Searching AD with distinguished name
• searching for duplicated SPNs with setspn.
• Searching for objectGUID using LDAP
• Searching within ADSIedit
• Second Domain Controller does not authenticate when DC1 is turned off
• Second Static IP Address for a Domain Controller
• secondary active directory not authenticating users
• Secondary UPN suffix not showing up for Domain Admins
• Securing SYSVOL access best practice recommendation ?
• Security Event Log - High CPU Usage
• Security groups cross forest trust
• Security Log Not Logging Events
• Security logs Event ID 4740 shows Caller Computer Name field empty
• Security Permission of an AD Group
• Security policy cannot be propagated. Cannot access the template. Error code = 3
• Security vulnerability "Nameserver Processes Recursive Queries" - how to fix it?
• Security-Kerberos Event ID 4 KRB_AP_ERR_MODIFIED for DC, target name cifs/domain
• Security-Kerberos Event ID 9 - Smart Card not working for Login due to CRL download failure
• seize a roles
• Selecting default Domain Controller
• selection of DC during a workstation join to domain operation
• Send ldap query to forest, the query results located in domain inside the forest
• Sending Windows Events to a Linux Syslog Server
• Separating a child domain from a forest/parent domain
• Serial number attribute of computer object
• server 2012 -DCDIAG result for Netlogon "An net use or LsaPolicy operation failed with error 67"
• Server 2012 DC Promotion Bug
• Server 2012 R2 - Home folder was not created because you do not have create access on the server
• Server 2012 R2 Password Hash
• Server 2012 showing SID in group members
• Server 2012 Users cannot delete files that they have full access to
• Server 2019 SYSVOL DFSR Replication Issue
• Server cant determine user name, just show SID, and then disappear
• Server certificate for RADIUS server (self-signed or via PKI)
• Server did not respond to LDAP query to port 389 UDP
• Server Domain login issue.
• Server dops communication to domain
• Server Failed FSMO Test
• SERVER has not finished promoting to be a GC
• Server in WRONG site even though shows up correctly in AD Sites and Services
• Server is not operational - only for group related cmdlets
• SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE ......................... ad2008R2 failed test Advertising
• SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE. Backup domain controler issue.
• Server is not responding to directory service or login requests - HELP!
• Server is not showing the exact time and running fast.
• Server Manager complains Domain Controller isn't promoted if Install-ADDSForest run twice
• Server Manager online - cannot get role and feature data
• Server Reporting Incorrect AD Site
• Servers missing from sites and services
• Service account creation without machine login permission
• Service Account Lockout
• Service fails to start, error 1297 and 7000
• Service Principal Name not ressolving correctly?
• Set AD account to never lock out
• Set AD Computer Object Location based on User Object Location attribute
• Set extension attribute for users in OU
• set logonserver command
• Set msDS-AllowedToDelegateTo to
• Set Password expiration date to 27/04/2017 for AD user(via Powershell)
• Set Replication to Happen More Frequently Than Every 15 Minutes
• Set time zone using GPO in windows 2008 r2
• Set-ADDomainMode - ResourceUnavailable
• setspn fails for fqdn query
• setspn to add spn results in error 8344 insufficient access rights.
• Setting Attributes for new Users
• Setting custom attribute to AD user account
• Setting Homepage for Chrome via GPO
• Setting multiple values to the "mail" attribute in AD
• Setting password policy in OU
• setting permissions to be able to read a document but can not copy it
• Setting up a limited rights domain admin type account or group for allowing local software installs on domain workstations.
• Setting up a Windows Domain lab at home
• Setting up Network Access permissions under dial-in tab
• Setting up NTLM v2 in Windows Server 2003
• Setting up NTP client and NTP Server on windows 7
• Setting up Trust between different domain (companies)
• Setup LDAPS on AD LDS ?
• Share is not accessible between two trusted domains
• Share permission got only SID and not user friendly name
• Shared Folder Access only For Particular OU
• Shared folders in trusted (2-way) domain
• Short Lived Account in Active Directory
• Should i Backup all my domain controllers
• Should I Enable AD Recycle Bin?
• Should I install LAPS on a Domain Controller?
• Should I use GPO or PSO
• Should the Default Domain Policy be enforced ?
• Should the Enterprise Domain Controllers group exist on windows 2000 server
• Show disabled accounts in group with many accounts
• SID History not migrating when using ADMT forest migration even though auditing is fully enabled
• SID history reporting - Migration
• SID is a variable length identifier
• SID only shows up when adding a domain user account from an external trusted domain
• SID shows instead of Friendly Name
• SID still showing in security of a folder after deleting the user from AD
• sIDHistory for groups
• sidHistory question once a domain is gone
• Single Computer joining to Multiple domains
• Single Forest ,& SIngle Domain VS Multiple Forest with Multiple Trees and Domain
• Single Forest with Multiple Domains
• Sites and Services - Client authenticating on wrong DC
• sites and services NTDS Autogenerated missing
• Sites and Services NTDS Settings
• size limitation for all attributes in user objects in Active Directory????
• Skewing the SAMLP NotBefore in ADFS v2
• Slow Domain Computer Logon - 2 to 5 Minute Hang On Welcome Screen
• Slow Intrasite replication
• slow ldap query
• Slow logon (Running startup scripts...)
• Slow Logon and Roaming Profile issues
• Slow Network Logon at Remote Site
• Slow performance from Domain Controller
• Slow response in Active directory
• small and capital letters in DNS / Active Directory
• Smartcard Logon: The domain specified is not available. Please try again later
• smartcard required for interactive logon + warning when AD account will or is expired + ability to change password from the computer
• SMTPSVC
• SOA FOUND, but Root zone on this DC/DNS server was not found.
• Software installation permission in all domain client machines
• Solved: LDAP authentication: error code 49 - 80090308, comment: AcceptSecurityContext error, data 525
• Some Domain computers have communication problems to the DC
• Some domain users can install software like Telegram, Browsers, ...
• Some failures in DCdiag.exe
• Some Issues With Security Permissions
• Some users account getting locked frequently without typing wrong password
• Speed Up AD Site Replication?
• Splitting AD - Basic questions
• SPN gets removed few seconds after get registered
• SPN on a computer object
• SPN Question
• spn registration - 0x7 - KDC_ERR_S_PRINCIPAL_UNKNOWN
• SPN value created in one Domain can be added to another domain account delegation?
• SQL 2012 support for ADFS 2.0
• SRV not created automaticly for _ldap._tcp.dc
• SSO Failing (Single Sign-on)
• stand alone AD-LDS instance : when adding a newly defined USER to the CN=Administrators ROLE, error code 0x20B5
• Start/Restart NetBackup Services using cmd
• Starting services using group policy
• StartTLS Support In Active Directory
• Static DNS A records deleted automatically
• Steps for deleting a server from AD Sites and Services that has not been decomm'd
• Stop Active Directory Replication between specific servers..
• Stopping Domain controllers from Authenticating Users/Computers
• Strange Behavior with gMSA in Server 2012 R2
• Sub-Domain and Trust
• Sub-OUs in the USERS Container?
• Sub-OUs not listing in Alphabetical order
• Subject: Error Message - "Permissions on "domain name" are incorrectly ordered"
• sync a ldap group with more than 1500
• Sync AD data with MySql
• Sync Time Through Startup Policy
• Synchronize passwords between two domains?
• Sysprep.exe with or without "Generalized"?
• SYSTEM account in Domain Controller
• System Event ID 6033, LsaSrv (anonymous session attempted open LSA policy handle, rejected), is it a hacking attempt?
• System LOg Error in Window server 2016 for dc diag
• System proxy setting set to false at random interval
• System.DirectoryServices.DirectoryServicesCOMException: A constraint violation occurred
• System.Runtime.InteropServices.COMException (0x8007203A)
• SYSVOL and NETLOGON folders not shared
• SYSVOL folder is empty
• SYSVOL Migration to DFSR - Errors going to 'Prepared State' - Access Denied
• SYSVOL not replicating between DCs
• SYSVOL not replicating through DFS, msDFSR-Member object missing
• Sysvol rebuild on a single domain controller
• SYSVOL Replication Failing - 13508
• SYSVOL showing NtFrs_PreExisting___See_EventLog folder and no GUIDS
• SYSVOL status inaccessible in group policy management console
• Target computer not accessible
• Task Scheduler logon failure error using gMSA
• TCP/IP error when runnig Active Directory set up
• Temp file cab_xxxx
• Temp profile loaded every time when i logged in to a domain controller
• Temporarily Disable Domain Controller
• Temporary Admin privilege
• Temporary Admin Rights - How to???
• Test LDAP
• Test-ComputerSecureChannel fails on domain controller
• Test-ComputerSecureChannel is false and minutes later is true
• Testing AD-LDS examples
• Testing client LDAP signing
• the account used for this test must have network logon privileges
• The Active Directory definition of this resource record is corrupt or contains an invalid DNS name. The event data contains the error.
• The Active Directory Domain Services Installation Wizard (Dcpromo) was unable to establish connection with the following domain controller.
• The Active Directory Domain Services Object could not be displayed.
• The Active Directory Domain Services service on Local Computer started and then stopped.
• The AD DS BPA should be able to collect data about the number of global catalogs in the site
• The advanced page cannot be opened because of following error the server is not operational
• The Array Bounds Are Invalid error while accessing the Windows Server
• The certificate received from the remote server was issued by an untrusted certificate authority. Because of this, none of the data contained in the certificate can be validated. The SSL connection request has failed. The attached data contains the se....
• The computer did not resync because the required time change was too big."
• The computer SID with Windows 7
• The current fsmo holder cannot be contacted - FSMO transfer between 2 dc (Windows 2012)
• The current operations master is offline. The role cannot be transferred (Windows 2008)
• The DFS Replication Service Encountered an Error Communicating with Partner
• The DFS Replication service failed to initialize replicated folder C:\Windows\SYSVOL\domain
• the dfs replication service stopped replication on the replicated folder (ad domain controllers x 2)
• The Directory Schema is not accessible because...
• the directory service is missing mandatory configuration information and is unable to determine the ownership of floating single-master opertaion role
• The directory service is unavailable error while migrating FSMO
• The DNS server has encountered a critical error from the Active Directory. and a number of other errors
• The DNS server is waiting for Active Directory Domain Services (AD DS) to signal that the initial
• The DNS server recv() function failed. The event data contains the error.
• The encryption type requested is not supported by the KDC
• The error was: "DNS name does not exist." (error code 0x0000232B RCODE_NAME_ERROR)
• The extended server error is: 000020E7: SvcErr: DSID-03152DB9, problem 5003 (WILL_NOT_PERFORM), data 1317
• The File Replication Service has detected that the replica set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR.
• The File Replication Service is having trouble enabling replication
• The following Domain Controllers are not in sync with Global state ('Prepared'):
• The following error occured attempting to join the domain
• the following error occurred attempting to join the domain the target account name is incorrect
• The FSMO role ownership could not be verified because its directory partition has not replicated successfully with at least one replication partner.
• The import failed because the store was read only, the store was full or the store did not open
• The KDC encountered duplicate names while processing a Kerberos authentication request.
• The KDC received invalid messages of type changepassword.
• The Kerberos client received a KRB_AP_ERR_MODIFIED error
• The kerberos client received a KRB_AP_ERR_MODIFIED error Between DC after Primary DC migrated to VM
• The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server
• The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server AD1
• The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server adfs. The target name used was HTTP/fs.domain.com
• The Knowledge Consistency Checker (KCC) could not run successfully!
• The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition.
• The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition.
• The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site.
• The local security authority is unable to obtain an RPC connection to the active directory domain controller xxxxxx
• The mapped network drive could not be created because the following error has occurred: The system cannot find the path specified.
• the name you specified is not a valid windows domain name
• The naming context is in the process of being removed or is not replicated from the specified server
• the netbios domain name is already being used!
• The Netlogon service could not create server share ,, Event ID 5706
• the network is not present or not started
• The new Trust wizard cannot continue because the specified domain cannot be contacted
• The operation failed because: and dcpromo
• The operation failed: A domain controller could not be contacted for the domain xxx that contained an account for this computer
• The pre-Windows 2000 logon name you have chosen is already in use in this domain. After joining new computer to Domain!
• The processing of Group Policy failed.
• The requested certificate template is not supported by this CA. 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE).
• The requested object has a non-unique identifier and cannot be retrieved.?
• The RPC server is unavailable.(Error 1722)
• The Search Filter cannot be recognized. Try again later, or choose another DC by selecting Connect to Domain Controller on the Domain Context menu.
• The secure channel (SC) reset on domain controller
• The secure channel (sc) verification on active directory domain controller failed with error: the security database on the server does not have a computer account for this workstation trust relationship
• The security database on the server does not have a computer account for this workstation trust relationship
• The security descriptor propagation task could not calculate a new security descriptor for the following object.-EventID:1450
• The security of this directory server can be significantly enhanced by configuring the server to reject SASL
• The Security System detected an attempted downgrade attack for server
• The server with this IP address is not authoritative for the required zone.
• The session setup from computer 'XYZ' failed because the security database does not contain a trust account 'XYZ$' referenced by the specified computer
• The session setup from computer 'XYZ' failed because the security database does not contain a trust account 'XYZ$' referenced by the specified computer.
• The sign in method youre trying to use isnt allowed.For more info contact network your Network Administrator
• The Sign-in method you're trying to use isn't allowed
• The SOA record for the Active Directory zone was not found - Windows 2008
• the specified account already exists join domain
• The specified account already exists.
• The specified dns server can not be contacted
• The specified domain either does not exist or could not be contacted
• The specified network password is not correct. (Exception from HRESULT: 0x80070056)
• The target principal name is incorrect
• The task you are trying to do can't be completed because Remote Desktop Services is currently busy
• The time service has stopped advertising as a time source because the local clock is not synchronized.
• The trust relationship between this workstation and the primary domain failed
• There are currently no power options available for some Windows users on a domain
• There is a naming violation. LDAP Error
• There is a time and or date difference between the client server
• there is a time and/or date difference between the client and server on 2012r2
• There is no editor registered to handle this attribute type ADSIEDIT
• There is no such object on the server - Active Directory Services message
• Thinking of using Active Directory-Based Activation
• This operation returned because the timeout period expired." (error code 0x000005B4 ERROR_TIMEOUT)
• This server is the owner of the following FSMO role but does not consider it valid - Error 2902
• This server is the owner of the following FSMO role, but does not consider it valid
• This tool was unable to recreate the EFS certificates in the Default Domain Policy GPO.
• thumbnail photos inAD
• thumbnailPhoto Attribute Active Directory Users & Computers
• Tier Model and exceptions: Exchange installation, Azure ADSync
• Time Based Group Membership in Windows Server 2016
• Time convergence and AD health tools
• time difference between domain controller
• time sinchronization not working
• Time Skew Problem
• Time Sync best practices
• Time synchronzation between PDC DC and other DC
• Time-service error 144 on my PDC
• TimeSync MaxPollInterval and MinPollInterval
• to check DSRM password
• To find the AD Schema attribute
• To migrate Active Directory from Windows 2003 to Windows 2016
• TombStoneLifeTime attribute is not set. Why?
• Tool for LDAP Connections
• Track service account usage across machines in a domain.
• Tracking FSMO changes
• Transfer Fsmo roles when main dc is offline
• Transfer Schema Master Fails
• Transfer Schema Master Role to Child Domain
• Transitive Network Logon attack
• Trouble joining linux server to AD domain in AWS - failed to find DC for domain
• Troubleshooting “Insufficient system resources” errors with Kerbersos
• Trust between 2 child domains under One parent domain
• Trust between two forests end with No Logon servers available to service the logon request
• Trust query
• Trust relationship - Cannot create trust between two different domains
• Trust relationship between domains
• Trust Relationship between two different forests - step by step guide
• Trust relationship DNS errors
• Trust relationship error on PDC
• Trust setup fails between Windows 2008 R2 domain and Windows 2003 Domain
• Trust this user for delegation services to specified services only” and “Use any authentication protocol.
• Trust Usage Event Logging
• Trust Verification Status = 1311 0x51f ERROR_NO_LOGON_SERVERS
• TrustAnchors erros on new AD DC/DNS server
• Trusted domains do not appear in ADUC
• Trusts and Kerberos AES Encryption
• Trying to enter Home folder Local path
• Trying to use ALTools unsuccessfully to determine where I am being locked out
• Turn off Automatic Root Certificates Update
• Turn off pre-Windows 2000 option?
• Two account with same UPN in Active Directory
• Two DNS Servers with different SOA
• Two Domain Controllers with the Same Name
• Two domains in the same forest
• Two domains with two way trust. Does anything need to be setup in Sites and Services.
• Two-way forest trust between 2003 and 2012?
• Two-way Forest Trust where AD Forest's have different Forest Functional Levels
• UAC = 0x220
• uidNumber and gidNumber - Dependency
• Unable telnet port 53 from different subnet to Active Domain Controller after upgrade from 2003 to 2008 r2
• Unable to access the CA web interface after creating an MS CA
• Unable to access UNC paths using hostnamees but working with Ip address
• Unable to accessed sysvol and netlogon folder on windows server 2016 and on windows server 2019
• Unable to add accounts in delegation tab for Kerberos
• Unable to add AD user as a manager, told the object cannot be found
• Unable to add addtional domain contoller. The new sites name isn't showing up in the active directory Domain Services Configuration Wizard
• Unable to authenticate in trusting domain
• Unable to browse users and groups from a trusted domain ( Selective Authentication )
• Unable to change an expired password with smartcard authentication
• Unable to change Direct Reports in Active Directory of a user under ORGANIZATION
• Unable to connect to the NETLOGON share! (\\servername\netlogon)
• Unable to contact Active Directory to access or verify claim types
• Unable to contact DC to join a domain, yet I can ping by name & IP - ideas?
• Unable to create a group managed service account
• Unable to create Trust between domains
• Unable to delete object because specified attribute or value does not exists
• Unable to Disjoin and Rejoin Exchange server 2019
• Unable to enable AD Recycle bin feature, Server 2016
• Unable to establish a connection with Global Catalog
• Unable to establish a connection with the global catalog
• Unable to find import-module ADDSDeployment - Local Account
• Unable To Find Source Of User Lock Out
• Unable to get a user's full list of group memberships from global catalog
• Unable to import objects using ldfide
• Unable to join a MAC PC to the Domain
• Unable to join domain - failed to find a DC having account 'COMPUTERNAME$': 0x525, last error is 0x0
• Unable to join Domain : RPC server is unavailable OR Trust relationship between this workstation and the primary domain failed.
• Unable to join domain, but I can ping by IP and by Hostname
• Unable to list group members in universal group, using net group
• Unable to load the specified offline registry hive when rejoining the domain
• Unable to login - "The user's account has expired"
• Unable to Map Network Drive using %username% variable
• Unable to Move Failover Cluster CNO to another OU - Access Denied
• Unable to obtain DNS hostname of Active Directory domain controller with ntdsa object
• Unable to open Service Manager Error Code 5
• Unable to Register SPN manually
• Unable to remove child domain
• Unable to remove child domain from AD trust?
• Unable to replicate between 2 DCs error message: 'exceeded the tombstone lifetime'
• Unable to resolve NetBIOS Domain Name
• Unable to run fixfsmo.vbs
• Unable to search user from trusted domain
• Unable to see FSMO roles while using netdom command
• Unable to start CA-Services after migration (Current log file missing 0xc8000210 (ESE: -528 JET_errMissingLogFile))
• Unable to telnet on command prompt for udp port 514, but able to on cmd for tcp port 514
• Unable to transfer infrastructure master role
• Unable to transfer roles -- DsBindWithSpnExW error 0x80090322(The target principal name is incorrect.)
• Unable to unjoin domain
• Unable to Validate Trust between two domains
• Unauthorize DHCP servers
• Undelete a user that was deleted BEFORE enabling AD recycle bin..
• Understanding the Computer login process and 'lastLogon' AD property
• Understanding the impact of missing subnets in AD Sites and Services
• Unexpected switch at this level
• Unicode character - complex password policy in AD
• Unique employee ID number in AD
• Universal groups and trusted domains
• Unix Attributes tab is missing
• Unix Services - Identity Management for UNIX
• unknown AD user accounts (deleted in past) are showing up as S-1-15-21-579150784
• Unknown Host-unable to resolve the url
• Unknown SID - How can I find out more info about when it was created etc..
• Unknown User Reference on Folder Security
• Unlock user Account Automaticaly
• Unlocking Windows 10 PC takes too long
• Unresolved SIDs
• Update Active directory attributes using employee ID as a primary key.
• update distinguishedName field in Active Directory?
• Update Pager field with set-aduser
• Update Password Not Required for domain controller machine account
• update samaccountname and upn based on email
• Update the changed administrator password in scheduled tasks
• Update/edit own profile information (Self service)
• updating Country in Active Directory.
• Updating 'mailNickname' or 'Alias' for one user in Office 365
• Updating AD proxyaddress field with Powershell, without associated Exchange mailbox
• Updating mail, mailnickname, target address and proxy address
• Updating the lastLogontimeStamp without loggin on in PCs
• Upgrade Active Directory schema
• Upgrade from 2003 SP2 to server 2008R2
• Upload photo and Remove photo
• UPN change impact
• UPN Suffix....what is this for?
• urgent replication
• Usage of -ServicePrincipalNames when creating gMSA accounts
• Use cases to publish computer certificates to AD
• Use LDAP Aliases for Authentication?
• Use LDAPS 636 and disable LDAP 389
• Use LDIFDE to export attribute information of an AD user to a text file.
• use of NT AUTHORITY\authenticated users within a Forest Trust
• Use of Powershell to Modify msExchMobileMailboxFlags Attribute
• User Account being locked out constantly
• user account is removed from a Active directory security group (server 2008 R2) after a day
• User account locked but still show active
• User Account lockout automatically
• User account that can query active directory
• user accounts ending with $ on Active Directory
• User and Group Membership Utility
• User Authentication - Specific DC Server
• User cannot change expired password
• User cannot Change password using Powershell
• User cannot logon with "Must change password at next logon" checked in AD Account screen
• User Certificates enrollment works Computer Certificates do not Server 2008 R2
• user configuration settings disabled on default domain controller policy
• User Creation Event Logs
• User Delegation Not working
• User extraction script with creation and disabled date
• User gets access denied when changing network password
• User gets locked out repeatedly for no reason
• user in AD contains other objects
• User in AD, locked out every hour
• User Last name need change to UPPERCASE for all users
• User lockout continously , svchost.exe
• User login to server in different domain causing account lockout on main domain
• User logon name (pre-Windows 2000) (sAMAccountName)
• User Logon Name domain list
• User Logon Name is missing
• User must change password at next logon option
• User name letters problem
• User or Group Owner when defining a Computer Object
• user profile migration from workgroup to domain network
• User profile migration on new domain server - same domain name
• User restrictions to Join & Remove computer from Domain
• User shows locked in AD but is not really locked.
• user startup login agreement message
• User's memberOf attribute versus Group's member attribute - can these get out of sync?
• userAccountControl & msExchUserAccountControl don't match
• useraccountcontrol 544, 66080
• userAccountControl attribute missing
• UserAccountControl flag now set as 544
• userAccountControl Setting
• Username Alias
• Username format when authenticating with AD over LDAP?
• Username in Upper case or Small letter?
• Username to be a minimum of 7 characters
• Username Variable in Profile Path ADAC
• Users and Computer In more than one OU ?
• Users cannot change their password for the 2nd time
• Users computer slow after join domain
• Users Exception for Password Policy Requirements
• Users need temporary local admin access
• Users not getting prompted of expiring/expired password...
• Users profiles in Domain Controller
• Using AD LDS as a external LDAP Proxy Server?
• Using AD to allow a user to start/stop a service
• Using ADRAP
• Using ADSI Edit to Resolve Conflicting or Duplicate AD Integrated DNS zones
• Using DSACLS and how to use objects and properties
• Using dsquery to find operatingsystem version
• Using DSquery to get computers in a specific OU and not computers in OU's below
• Using GMSA Account for LDAP Bind/Search in Java Application
• Using LDAP to search attribute bit flags using attribute OID values
• using runas /netonly /user:domain\user mmc dsa.msc /server=IP, fails to show pre-Windows 2000 name
• Using SYSVOL for things besides Policies and Scripts
• Using the whr parameter
• UUID for A Directory Services.
• Verficiation error while demote DC with PowerShell without parameter -ignoreLastDNSServerForZone
• Verification of outbound replication failed, error reading the NTDS settings on replication source domain controller server.domain.com, the RPC server is unavailable
• verification of outbound replication failed. unable to locate replication source domain controller
• Verification of prerequisites for Active Directory preparation failed
• Verification of prerequisites for Active Directory preparation failed. The specified user is not a member of the following groups: Enterprise Admins group. !!!! but it is
• Verification of prerequisites for Domain Controller promotion failed. You cannot install an additional domain controller at this time because the RID master is offline.
• Verification of replica failed.
• Verification of replica failed. Active directory domain controller for the domain XYZ could not be contacted. Ensure that you supplied the correct DNS domain name
• Verification of replica failed. The Wizard cannot access the list of domains in the forest
• Verification of replica failed. Trying to promote Server 2012 Domain Controller
• Verifying Global Catalog Replication
• Version number for GPO's not in sync with the version number for GPO's on the Baseline domain controller
• View deleted object using ldp.exe
• view domain users password
• View Password HIstory= Active Directory
• Viewing all the data in the MemberOf attribute via LDP
• Virtual Service Accounts
• W32Time - NTPServer flag question
• w32time /resync /computer is returning access denied error (0x80070005) on Server 2008 DC
• W32time configuration
• W32time SpecialPollInterval
• w32tm - 0x4c434F4c
• w32tm - Stratum Level
• w32tm - the rpc server is unavailable
• W32TM /monitor (description of results)
• w32tm /query /peers /verbose - LastSyncError: 0x800706FD (The trust relationship between this workstation and t he primary domain failed. )
• w32tm /query /status Access is denied. (0x80070005) from elevated prompt‎
• w32tm Access is denied. (0x80070005) from elevated prompt
• w32tm error
• w32tm not syncing between PDC and other DC's
• w32tm or regedit to synch time?
• Wake On Lan through GPO
• Want to modify sysvol and netlogon share permissions
• WAP - Unable to establish a trust relationship
• Warning - a delegation for this dns server cannot be created because the authoritative parent zone...
• warning "last DNS server for integrated zone" when demoting a physical DC
• Warning Event ID 40961 Source LsaSrv
• Warning: Attribute userAccountControl 0x82020 = ( PASSWD_NOTREQD | SERVER_TRUST_ACCOUNT | TRUSTED_FOR_DELEGATION )
• WARNING: Not advertising as a global catalog.
• WARNING: Error initializing default drive: 'Unable to find a default server with Active Directory Web Services
• WARNING: Error initializing default drive: 'Unable to find a default server with Active Directory Web Services running.
• Warning: no DNS RPC connectivity (error or non Microsoft DNS server is running)
• Way to force a user account to only user kerberos?
• Way to see where security group is being used?
• Ways to seamlessly migrate an existing DC (windows server 2012) to a new server (windows server 2016).
• Web Enrollment - No certificate templates could be found
• Weird - RPC Port 135 being blocked
• what about CALs when upgrading an AD.
• what access should be a domain users to access dsa.msc or active directory users and computer on windows 2008 R2 servers
• What actually happen when I delete computer account from Active Directory?
• What are AD objects that have SID?
• what are all the public and private information of a user in AD?
• what are CNAME ( alias ) records which exist in _MSDCS.Contoso.local zone ?
• What are Intra Site and Inter Site?
• What are the 'side effects' of changing a user's network login name in AD 2008 R2 (i.e. Windows 7 desktop profiles, etc.) ?
• What are the GPC and the GPT? Where can I find them?
• what command can be used for end user to refresh active directory changes gpudate takes care of that too I think
• What difference between a domain trust and a forest trust?
• What does "CN" stand for?
• What does "ipconfig /registerdns" actually do?
• What does nltest /dclist:domain.com use to compile its list
• What does the user properties---> environment tab do?
• What domain accounts have SPNs that point to a server
• What event triggers an update in the LastLogonStimeStamp information?
• What Folders a Specific AD Group has Access too
• What happen if shut down DC FMSO for a period time while other DC is running in remote offices
• What happens if the dc containing PDC emulator goes down?
• What happens when a computer joins an Active Directory domain?
• What happens when I reset a computer account while the computer in question is being used?
• What if a DC fails that had all FSMO roles?
• What if group policy is not defined, Will the Default access take effect
• What Is "Allowed to Authenticate"?
• what is "SELF" user account (Group) in active directory ?
• What is a primary Group? What are its functoins?
• What is a Site Link Cost?
• what is attribute 10 in active directory?
• what is difference between LDAP and LDAPS?
• what is diffrent between using ip or smtp in inter-site?????
• What is Event ID 8003 and should I be alarmed?
• what is max size limit for name,fullname,cn attribute in Active directory ? i can't find in adsi edit Attribute list
• what is mean of oubound and inound replication in ACtive Directory? and how can i stop replication from DC 1 to Dc 2
• What is msDS-KeyCredentialLink
• What is NTDS.DIT? Why it is used?What is EDB.CHK file?
• What is role of DomainController,Active Directory and DNS
• What is the Advantage of the Home Folder "Local Path"
• what is the benefit of Assign This Computer Account As A Pre-Windows 2000 Computer ?
• What is the best practice of decommissioning the third DC
• What is the best practice , for changing default domain policy
• What is the best practise Create New users or Rename the same account
• What is the best way to replace an existing failed domain controller
• What is the command to Time Sync a Domain Controller with PDC from cmd/powershell?
• What is the correct way to Pre-stage computers accounts before joining to domain
• What is the deal with Certreq.exe and the keyspec/keyusage policy.inf params? Seriously...
• What is the default Federation Metadata URL
• What is the difference between a domain controller on the root domain and additional domain controller?
• What is the difference between a Schema Update and Functional Level Update?
• what is the difference between Child Domain , and members domain ?
• What is the difference between idp initiated single sign on and SP initiated sign on with respect to Azure AD
• what is the difference between jpegphoto and thumbnailphoto attribute in AD?
• What is the difference between kerbticket encryption type and session key type. Why there can be difference in the encryption types used?
• What is the difference between Organizational Unit and Groups and container?
• What is the difference between replication of Sysvol and NTDS.dit database
• What is the difference between SID filtering and SID filter quarantining
• What is the diffrent bettween in coming trust and outgoing trus?
• What is the DNS record replication time across domain .?
• What is the function of security tab in Active Directory? how it works?
• What is the main difference between SYSVOL shared and SYSVOL replication?
• What is the minimum privilege to join client PC to AD Domain?
• What is the powershell command to get the user count in Active Directory
• What is the reason for creating a .local suffix domain?
• What is the role of msdcs in DNS?
• what is the usage and benefit of DNS devolution ?
• what is the use of regsrv32 schmmgmt.dll
• What is the use of canonical name attribute in active directory?
• What is UDP port 389 used for?
• What is use of CanonicalName in Active Directory?
• What kind of database is Active Directory?
• What OID should I use in capolicy.inf
• What permission is required for running the schedule task for that account?
• What permissions are needed to run scheduled task on 2008 domain controller that finds last account lockout and sends email?
• What permissions do I need to run a Powershell script on a domain controller
• What ports do I need to open to allow ADAM and AD LDS to replicate?
• What rights do I need to delete OU in active directory?
• What services will impact if I disable DNS recursion in windows 2003 server?
• What sets the "Password Required" field in the net user command?
• What should I use for Root domain name?
• What should the DNS setting on a domain controller's network adapter that NOW has the FSMO roles have been migrated to it.
• What will be the impact on production users\authentication etc..if FRS to DFSr sysvol Migration will get failed in any of stage 1,2,3..
• What would be the impact of changing Enterprise and Domain admin password
• What's the difference between domain user and domain computer?
• What's the different between builtin local/administrators and Domain Admins in AD 2003?
• What's the limit bytes(length) of the Organization Unit?
• What's the Maximum limit of user groups in the AD
• What's the meaning of these items in the attached picture
• What's the risk of updating ADMX files?
• Wheare are Pre-windows 2000 names stored?
• When a user account is locked from a Mac, the Computer Name isn't shown in Event Viewer's log.
• When Active directory domain server down...how long will workstations keep login info?
• When adding a computer to the domain NO DNS entry is created?
• When does the computer LastLogonTimestamp update
• When joining domain, there says the specified network name is no longer available
• When to apply: Allow any authenticated user to update DNS records with the same owner name
• when to download adprep.exe
• Where can I get X.500 OID during creating a new custom attribute in my schema
• Where do deleted Static DNS records go?
• Where do we store employee pictures in Active Directory?
• Where is Active Directory Sync logs are stored?
• Where is global catalog stored?
• Where is located the local cache of "My Documents" of roaming profile
• Where Is NT AUTHORITY\Network Service
• Where is the (Everyone group) inside the Built-in container.
• Where is the LanManServer service?
• Which Computer Object attribute can tell me when the object was placed in an OU?
• Which Event Viewer log is specific to GPO events? and Where is this log located within Event Viewer?
• Which firewall ports needed for PowerShell Module ActiveDirectory
• Which FSMO DC should I use to establish a two-way trusts?
• Which functional level to upgrade first -- forest or domain??
• Which Group can contain a user from another Forest? Is it even possible?
• Which port is used by MMC
• Which ports need to be opened from member servers to DC?
• Which rights is needed to add proxyaddresses attribute ?
• Which server process the password change?
• while configuring the multiple encryption type using ktpass command but the cached ticket only for one encryption type displayed
• while executing the ktpass command warning Unable to set SPN mapping data appeared
• While opening - Active directory users and services getting an error "Logon Failure: the user has not been granted the requested logon type at this computer"
• Who created the object in active directory
• Who has higher access privilege (local system, domain administrator, local administrator)
• Why "XML is invalid" when Get-CimInstance is supplied with -ComputerName?
• why $ in samaccount name of computer account in active directory?
• Why AD sets automatically PASSWD_NOTREQD-flag
• Why an attribute cannot be removed from the Active directory Schema
• Why authenticated users group is member of "Pre-Windows 2000 Compatibility Access"
• why badpwdcount, lastlogon and lastlogoff are not replicated?
• Why can't we create two user accounts ( same display name) with two different userid's in Active Directory.?
• Why cant I add Users or Groups from a Trusted Forest/Domain to the local Administrators group on a member server over a Forest Trust?
• Why did my DC servers get tombstoned, and how do I fix it?
• Why do No_Client_Site records appear in Netlogon.log on one DC and not another?
• Why does ADUC prompt for admin rights when running as different user?
• Why domain local to global (and vice versa) not possible ? - Group Scope Transition
• Why full name has two ldap attributes cn and name?
• Why I need to Enable Journal Wrap Automatic Restore
• Why is my "Current Time Zone" different from the time zone set throughout my domain?
• Why is the clocks drifting?
• why is too easy to DUMP the NTDS.DIT passwords? Get-ADDBAccount and DSInternals
• Why need to reset computer account in AD?
• why normally we choose dot local extension for domain name
• Why reset account lockout counter after should be less than account lockout duration?
• Why the Loopback IP address automatically set in Preferred DNS every time in my DC ?
• Why use domain.local?
• Why we need to disable a Guest Account ?
• Why would a domain controller be the source of an account lockout?
• Widnows OS Version not Chaged in Active Directory
• Will clients receive GPO's from a RODC if they need to authenticate to a RWDC
• Win2008 AD: Disabled account apperas to be enabled in group members list
• Win2008 R2 - "Write Member Of" missing in Advanced Security options for user object - Read is showing OK
• Windows 10 ADUC missing Dial-in tab
• Windows 10 cannot join domain or access shares - The specified network name is no longer available (System error 64)
• Windows 10 computer account disabled in AD after adding to DC
• Windows 10 GPO cache
• Windows 10 Lock Screen Slide Show (Mulitiple .JPEG images) Using group policy
• Windows 2003 server enable TLS v1.1
• Windows 2008 R2 / User account locked out numerous times a day.
• Windows 2012 AD - Reconnecting an Outdated Domain Controller
• windows 2012 r2 adprep /forestprep fails
• Windows 2012 R2 Domain controller, dcdiag error, dsbindwithspnex() failed with error 1727
• Windows 2012 R2 NETLOGON Event ID:5807 Issue
• Windows 2012 replication issue - found errors using dcdiag /e /c /q
• Windows 2016 Domain controller - lsass.exe high memory utilization
• Windows AD groups change from Upper to lower case on local systems?!
• Windows CA Certificate renewal and cross certificates
• Windows cannot access domain share \\domain.local
• Windows cannot complete the password change for User1 because: Access id denied
• Windows cannot create an object <name> because: The directory service was unable to allocate a relative identifier. ( Server 2012 R2 )
• Windows cannot create the object username because: The name reference is invalid
• Windows cannot verify that the user name is unique because the following error occurred while contacting the global catalog:Logon failure: unknown user name or bad password.
• Windows Domain account gets locked out immediately, why
• Windows Domain Controller dies, how to replace it?
• Windows domain join operation was not successful access denied
• Windows Domain Time Syncing Issues (Workstations and Servers)
• Windows Error Code [68:174] Failed to install File System Core Package
• Windows Failed to apply the Deployed Printer Connection
• Windows Global Catalog was removed by mistake how to rebuild the GC
• Windows Hello for Business - On Prem Certificates - Client Side Errors
• Windows Log Off Problems On Wireless Laptops Connected To Domain
• Windows Security Log Event ID 4776 on DC
• Windows Server 2003 Cannot Logon to Domain after Computer Account Reset in ADUC
• Windows Server 2003 Unable to Join Domain
• windows server 2008 - DCPromo was unable to remove DNS delegations from the parent zone
• Windows server 2008 DC error 1863
• Windows Server 2008 R2 and latest admx files (Windows 10 clients)
• Windows Server 2008 R2: The trust relationship between this workstation and the primary domain failed
• Windows server 2012 DC Promo fails The directory service on XYZDC has not finished initializing.
• Windows SErver 2012 R2 RID Manager
• Windows Server 2012 Standard - Domain Join Failed
• Windows Server 2016 - A directory service error has occurred - (80072095)
• Windows Server 2016 + ADMT 3.2
• Windows Server 2016 CertSrv not created and missing
• Windows Server 2016 Delegate Unlock AD Account
• Windows Server 2016 Essential vs Standard
• Windows Server Applocker blocks google chrome
• windows server network adapter speed upgrade from 1GB to 10GB network card.
• windows services auditing
• Windows Time server - Domain Controller
• Windows Time Service NTP Server flags
• Windows Time Service SpecialPollInterval and AllSync mode
• Windows Time Sync logging
• Windows Time(sntp) - Why not have all domain clients use ALLSYNC
• Windows XP and Windows Server 2016 compatibility
• Windows XP cannot join domain "The following error occurred attempting to join the domain. The specified network password is not correct."
• Windows XP supported client operating system in Windows Server 2012 R2 domain?
• WinRM load CPU 100%
• WinRM SPNs Warning in DCs
• wireless security password from Active Directory GPO
• WMI and DCOM ports
• WMI Query for Office 2016/Office ProPlus(Click to Run)
• WMIC returning printer port
• Wondering ,difference between Site Link and Site link bridge
• Workstation & User migration from one domain to another without trust
• Workstations unable to locate account on domain
• Wrong LogonServer
• x.0.0.127.in-addr-arpa Reverse Lookup Zones
• You cannot modify domain or trust information because a primary domain controller (PDC) emulator cannot be contacted.
• you cannot modify domain or trust information because a primary domain controller pdc emulator cannot be contacted
• You do not have sufficient privileges to delete etc. - but this is different
• You do not have sufficient privileges to delete username
• You don't have access to DsBind to
• You have been logged on with a temporary profile: Admin account on Server 2008
• Your account has expired. Please see your system Administrator "Server 2008 R2 Enterprise"
• Your credentials did not work. The logon attempt failed.
• Your System Administrator Has Blocked This Program. For more information contact your system administrator
• zone not loaded by DNS server - Active Directory integrated stub zone
• Zone Not Loaded by DNS Server in Forward Lookup Zones