Awinish's

Due to numerous benefits of DFSR over FRS, its time to move to DFSR, considering the acurate steps are followed else things can become awry to your environment. The issue with FRS was like Journal wrap error, blotting, inconsistent change notification etc, where as these issues has been fixed & greatly improved into DFSR. You […]

Command to find the entire user in domain & redirecting the output in CSV. csvde -f c:User.csv -s dcname -t 389 -r (objectClass=user) -l co,department,distinguishedName,employeeID,facsimileTelephoneNumber,givenName,initials,l,mail,mobile,objectGUID,personalTitle, physicalDeliveryOfficeName,sAMAccountName,sn,telephoneNumber,title,userAccountControl

Windows 2008 R2 has very good built in feature to recover deleted object in AD. The AD recycle bin can only be utilised when you domain/forest functional level is windows 2008 r2. Below is nicely explained steps for configuration. http://technet.microsoft.com/en-us/library/dd392261%28WS.10%29.aspx Take a look at video, if you like graphics. http://blogs.technet.com/b/chenley/archive/2010/08/16/enable-the-active-directory-recycle-bin.aspx    

If you encounter “Netlogon Paused” or “Rebuilding Indices” error, the recommended approach is to demote and re-promote the DC. The workaround mentioned below shall only be used  in a SINGLE forest DC but not as a practice. The below explanation [In Italics]was provided by Arren Conner[MS]. [ The disabling of inbound & outbound replication, the […]

Many of you know about Advanced Group policy Management which offers some really cool additions in previously GPMC tool. http://www.grouppolicy.biz/tag/agpm/ The various guide for AGPM can be downloaded from below link. http://www.microsoft.com/downloads/en/details.aspx?displaylang=en&FamilyID=ba69e774-f0d1-4b6d-be81-a8c5f27d1b8a

Windows 2003 and below supports only single password policy in the domain and it wasn’t possible to configure multiple or different password or account lockout policy for the different set of users or groups within the same domain. The different password policy sometimes force to create different domain if you are hosting AD for the […]