February 10th, 2011 by Awinish Vishwakarma and tagged Active Directory
Due to numerous benefits of DFSR over FRS, its time to move to DFSR, considering the acurate steps are followed else things can become awry to your environment. The issue with FRS was like Journal wrap error, blotting, inconsistent change notification etc, where as these issues has been fixed & greatly improved into DFSR. You […]
Posted in Directory Services | No Comments »
February 6th, 2011 by Awinish Vishwakarma and tagged Active Directory
Command to find the entire user in domain & redirecting the output in CSV. csvde -f c:User.csv -s dcname -t 389 -r (objectClass=user) -l co,department,distinguishedName,employeeID,facsimileTelephoneNumber,givenName,initials,l,mail,mobile,objectGUID,personalTitle, physicalDeliveryOfficeName,sAMAccountName,sn,telephoneNumber,title,userAccountControl
Posted in Directory Services, Misc | No Comments »
December 30th, 2010 by Awinish Vishwakarma and tagged Active Directory, AD RecycleBin
Windows 2008 R2 has very good built in feature to recover deleted object in AD. The AD recycle bin can only be utilised when you domain/forest functional level is windows 2008 r2. Below is nicely explained steps for configuration. http://technet.microsoft.com/en-us/library/dd392261%28WS.10%29.aspx Take a look at video, if you like graphics. http://blogs.technet.com/b/chenley/archive/2010/08/16/enable-the-active-directory-recycle-bin.aspx
Posted in Directory Services | 2 Comments »
December 24th, 2010 by Awinish Vishwakarma and tagged Active Directory, Netlogon Paused
If you encounter “Netlogon Paused” or “Rebuilding Indices” error, the recommended approach is to demote and re-promote the DC. The workaround mentioned below shall only be used in a SINGLE forest DC but not as a practice. The below explanation [In Italics]was provided by Arren Conner[MS]. [ The disabling of inbound & outbound replication, the […]
Posted in Directory Services | No Comments »
November 11th, 2010 by Awinish Vishwakarma and tagged Active Directory
Many of you know about Advanced Group policy Management which offers some really cool additions in previously GPMC tool. http://www.grouppolicy.biz/tag/agpm/ The various guide for AGPM can be downloaded from below link. http://www.microsoft.com/downloads/en/details.aspx?displaylang=en&FamilyID=ba69e774-f0d1-4b6d-be81-a8c5f27d1b8a
Posted in Directory Services | No Comments »
November 9th, 2010 by Awinish Vishwakarma and tagged Active Directory, FGPP, Fine-Grained Password Policy
Windows 2003 and below supports only single password policy in the domain and it wasn’t possible to configure multiple or different password or account lockout policy for the different set of users or groups within the same domain. The different password policy sometimes force to create different domain if you are hosting AD for the […]
Posted in Directory Services, Group Policy | No Comments »