I want to introduce to you a function of Windows Server 2008 domain functional level: LastSuccessfulInteractiveLogonTime Basically it is about finding out when a user has logged on last.
Articles related to Active Directory administration. (user, computer and group management)
Yesterday I faced the problem that I couldn’t save data on an external USB-hard drive on my Windows / client anymore. Folders couldn’t be created either. The hard drive was listed as “write-protected” in the disk management of Windows.
Which authorizations are necessary to join a computer to a AD domain? The aim of a granular delegation concept is to assign only those rights that are necessary for the operation of the assigned role.
The requirements for an Intra-Forest migration are much different compared to an Inter-Forest Migration. Intra-Forest Migration: migration between domains of the same Forest. Inter-Forest Migration: migration between domains of different Forests. What is the difference and how can QMM help with the single SID problem?
I wanted to find out what date an Active Directory object was created on / replicated to a Domain Controller. Actually, you can find that information in the meta-data of the Active Directory Object!
Windows Server 2008 provides you with the possibility to create an online snapshot of the Active Directory database. You can load the AD snapshot with Windows standard tools and make it available as LDAP Directory at a TCP port of your choice. This “Snapshot Directory Service” contains all information of the AD domain and can […]
The following outline clarifies the terms needed for setting up an unidirectional Trust.
I was looking for a possibility to check and supervise the synchronization of user-objects with Quest Migration Manager for Active Directory. In addition, I was missing a good overview to answer the question: Were new user-accounts created in the target-domain? Both problems could be solved with a little Powershell script.
Trust between Windows Server 2008 R2 and NT4 does not work „by design“ It is not possible to create a trust between a Windows Server 2008 R2 domain and a NT4 domain. However, a trust can be created between a Windows Server 2008 domain and a NT4 domain by adapting certain parameters.
FSMO or Flexible Single Master Operations is a specialized domain controller set of tasks. Specialized tasks can be spread to several servers, but only one server can act as FSMO at a specific time.
- AD LDS Proxy Authentication
- PowerShell: Find active computer objects
- Nesting groups in Active Directory
- Create home directory and grant permissions with PowerShell
- Creating an individual random password with PowerShell
- Retrieve Active Directory subnets with PowerShell
- Editing users of other domains – with PowerShell
- Azure Basics: Connecting with Azure (PowerShell)
- PowerShell Custom Objects
- Logon Script does not start on Windows Server 2012 R2 domain