When was an Active Directory Object created on a Domain Controller?
I wanted to find out what date an Active Directory object was created on / replicated to a Domain Controller. Actually, you can find that information in the meta-data of...
Articles related to Active Directory administration. (user, computer and group management)
How to make an Active Directory SnapShot
Windows Server 2008 provides you with the possibility to create an online snapshot of the Active Directory database. You can load the AD snapshot with Windows standard tools and make...
Set up an unidirectional Active Directory Trust
The following outline clarifies the terms needed for setting up an unidirectional Trust. (more…)
QMM Quest Migration Manager for AD – Checking Directory Synchronization DSA
I was looking for a possibility to check and supervise the synchronization of user-objects with Quest Migration Manager for Active Directory. In addition, I was missing a good overview to...
Xenserver – VM is not working anymore and can neither be rebooted nor shut down
The following instructions make it possible to reboot and immediately afterwards shut down a non working virtual machine on a Xenserver. (more…)
Trust between Windows 2008 R2 and NT4 does not work „by design“
Trust between Windows Server 2008 R2 and NT4 does not work „by design“ It is not possible to create a trust between a Windows Server 2008 R2 domain and a...
Transferring FSMO roles
FSMO or Flexible Single Master Operations is a specialized domain controller set of tasks. Specialized tasks can be spread to several servers, but only one server can act as FSMO...
“Try next closest site” group policy – the DC Locator in Windows
With Windows Vista / 7 / 8 the “DC Locator Algorithm” has been improved. However, it needs to be activated by a group policy (GPO) first. The article will tell...
Redirecting the containers “Users” and “Computers” in Windows Active Directory domains
The Standard “Users” and the standard “Computers” container (in which new objects are to be created in default) can be easily changed with Windows standard applications. Benefits, requirements and the...
Kix Script – After renaming an AD group InGroup does not work anymore
Many administrators use KiXtart and have developed their own login script. The script checks group memberships of the users during the log-in process to connect network drives, assign printers and...
Dynamic AD Groups
Dynamic Entra ID Groups
