Kerberos: Problems after Schema Update to Server 2012 R2
After a Schema Update for Windows 2008 R2 on Windows 2012 R2 we had a problem with an older application on Windows 7. But the...
Articles related to Active Directory administration. (user, computer and group management)
Read Kerberos Token with PowerShell
Active Directory offers you many different ways of authentification. Most common are NTLM and Kerberos. This article is about how to read the Kerberos Token...
NTFS: Users can see folders without “Read” permissions
Sometimes Read and Write permissions that users get through authorization groups do not work properly on the file servers: – Users without “Read” permissions can...
PowerShell: Finding the Next Closest Domain Controller
I am currently supporting a bigger enterprise with their Active Directory Migration. A colleague asked me “Could you write a Powershell script to comb the...
AD PowerShell Basics 1: New-ADUser
In this small series, I want to introduce the most common Active Directory PowerShell cmdlets to you like New-ADUser. With the cmdlet New-ADUser you can:...
DCPROMO: Domain Controller promotion fails
Lately, I wanted to add a new domain controller to a domain. At first, the Configuration Wizard ran as expected. But just as the process...
AdminSDHolder – Delegate administration of admin accounts?
Every now and then, the user administration staff (UA) has to administer groups for which domain admin rights are required. However, “admin accounts” of the...
Active Directory FAQ – Relaunch 2016
We have updated and relaunched our tech blog activedirectoryfaq.com for you. Like our software, we wanted to make it more user friendly for our readers....
Microsoft Azure: Change Static IP Address of a Virtual Machine
Sometimes it can be necessary to change the network structure of the virtual machines in Azure, e.g. to move VMs into a virtual network for...
Create Active Directory Sites with PowerShell
I thought about how to automate AD sites with PowerShell – and found a solution. At the end of this article, I provide a complete...
Exchange: Distribution Lists with Multiple Managers
It is common knowledge that by setting the configuration “Managed By” and “Manager can update membership list”, users can be authorized to administrate members of...
Active Directory Structure Diagram in Visio with ADTD
Documentation is a very important issue – nevertheless it’s not a favorite one. With the Microsoft Active Directory Topology Diagrammer (ADTD), Microsoft offers a very...
AD Account Logout Strategy
Settings in the Account Lockout Policy of the Active Directory Default Domain Policy can lead to unexpected account lockings. This article explains why… (more…)
Inconsistent permissions in Global Catalogue
If you want to use AD groups to assign permissions for ressources, you usually do it this way: Bind permissions to local groups Nest global...
Active Directory – SID Filtering
Everyone planning a domain migration probably has to deal with Active Directory SID Filtering sooner or later. While setting up an Active Directory Forest Trust,...
Our software solutions
