Set up an unidirectional Active Directory Trust
The following outline clarifies the terms needed for setting up an unidirectional Trust. (more…)
Articles related to Active Directory administration. (user, computer and group management)
QMM Quest Migration Manager for AD – Checking Directory Synchronization DSA
I was looking for a possibility to check and supervise the synchronization of user-objects with Quest Migration Manager for Active Directory. In addition, I was missing a good overview to...
Xenserver – VM is not working anymore and can neither be rebooted nor shut down
The following instructions make it possible to reboot and immediately afterwards shut down a non working virtual machine on a Xenserver. (more…)
Trust between Windows 2008 R2 and NT4 does not work „by design“
Trust between Windows Server 2008 R2 and NT4 does not work „by design“ It is not possible to create a trust between a Windows Server 2008 R2 domain and a...
Transferring FSMO roles
FSMO or Flexible Single Master Operations is a specialized domain controller set of tasks. Specialized tasks can be spread to several servers, but only one server can act as FSMO...
“Try next closest site” group policy – the DC Locator in Windows
With Windows Vista / 7 / 8 the “DC Locator Algorithm” has been improved. However, it needs to be activated by a group policy (GPO) first. The article will tell...
Redirecting the containers “Users” and “Computers” in Windows Active Directory domains
The Standard “Users” and the standard “Computers” container (in which new objects are to be created in default) can be easily changed with Windows standard applications. Benefits, requirements and the...
Kix Script – After renaming an AD group InGroup does not work anymore
Many administrators use KiXtart and have developed their own login script. The script checks group memberships of the users during the log-in process to connect network drives, assign printers and...
Empty password in Active Directory despite activated password policy
Lately we found a security gap in Active Directory. We noticed that some accounts in Active Directory were active, but contained an empty password. This should not be possible if...
Active Directory Nested Groups: Overview group nesting
After looking for the Microsoft KB article on Active Directory Group Nesting for the umpteenth time today, because I wasn’t sure on a particular issue, I decided to create a...
Dynamic AD Groups
Dynamic Entra ID Groups
