Browse Blog Posts by Tags

All Tags » Active Directory » Windows Server 2003 (RSS)

MVP WordPress Blogs

Browse Blog Posts by Tags

Showing related tags and posts for the Blogs application. See all tags in the site

Upgrading an Active Directory Domain from Windows Server 2003 or Windows Server 2003 R2 to Windows Server 2012

!!!NEVER START BEFORE HAVING CREATED AND TESTED A BACKUP OF YOUR DOMAIN/DATA/MACHINE!!! A new OS Domain Controller installation should always start with the support tools, to check the Domain and Domain Controllers for errors that must be resolved before. The following command line tools and programs...

Posted to MWeber's Blog by mweber on Mon, Jul 30 2012
Filed under: Filed under: Migration, Active Directory, Windows Server 2003, Windows Server 2012
A Couple Quick Active Directory One-Liners

Here is a few one-liner commands to help get info on your Active Directory environment. I don’t think there is any mind blowing commands here but they’ve helped me out. There are literally hundreds of these around the web as well as PowerShell ones but these are the ones that I’ve been using...

Posted to The Life of Brian by BrianM on Tue, Nov 9 2010
Filed under: Filed under: Active Directory, Windows Server 2003, Scripting, Windows Server 2008, W32Time, Windows Server 2008 R2
Everything you wanted to know about Active Directory Replication but were afraid to ask

I was thinking about writing a post about Active Directory replication but thankfully soon realized that by doing so I could be severely depriving my kids and wife of a happy life. Its not that Active Directory replication is bad or harmful, its just that there is so much about it. I don...

Posted to The Life of Brian by BrianM on Tue, Sep 28 2010
Filed under: Filed under: Active Directory, Windows Server 2003, Windows Server 2008, Windows Server 2008 R2
Find and Disable Stale User Accounts

Stale user accounts can be a big problem…even more so when they are not disabled. I’m a firm believer that if you have an account that is not being used it should be disabled. However depending on the size of your Active Directory that can be a daunting challenge. Below you will find...

Posted to The Life of Brian by BrianM on Thu, Jul 22 2010
Filed under: Filed under: Active Directory, Windows Server 2003, Scripting, Windows Server 2008, Windows Server 2008 R2
How to Delegate the Right to Delegate Kerberos Constrained Delegation

Wow, that is a lot of delegating…seriously how many times can you say it in one sentence. Today’s post is one that threw me for a loop. As a domain admin I have the right to configure constrained Kerberos delegation. There may come a time when you want to delegate that out to a user...

Posted to The Life of Brian by BrianM on Thu, Jul 15 2010
Filed under: Filed under: Active Directory, Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, SPN, Kerberos
Time configuration in a Windows Domain

In a domain one of the most important settings is the time. It has to be as close as possible for all domain machines, which is realized with the setup of the hierarchy how the domain time is prepared. One important information to have is, that the Windows Time Service is NOT built to be a high accuracy...

Posted to MWeber's Blog by mweber on Sun, Jun 27 2010
Filed under: Filed under: Active Directory, Windows Server 2008 R2, Windows Server 2008, Windows Server 2003
What are Service Principle Names (SPNs)?

SPNs seem to get more and more use these days so I thought it be nice to give an explanation of what SPNs are. SPNs are used for mapping a service to a user account. You will find SPNs used predominantly with Delegation and Impersonation and a lot of times this is between a web server and another server...

Posted to The Life of Brian by BrianM on Fri, Jun 4 2010
Filed under: Filed under: Active Directory, Windows Server 2003, Windows Server 2008, IIS, SQL, Windows Server 2008 R2, SPN, Kerberos
Exchange Server and its relationship to Active Directory

Updated on 25.03.2013 This article should give an overview about the relationships with the different Exchange Server versions and the requirements for Windows server 2008/2008R2 and Windows Server 2012 Domain controllers. Even if some are NOT supported i will list them here as they should work. Within...

Posted to MWeber's Blog by mweber on Sun, May 23 2010
Filed under: Filed under: Migration, Active Directory, Exchange, Windows Server 2008 R2, Windows Server 2008, Windows Server 2003, Windows Server 2012
Active Directory Metadata Cleanup

Sometimes it can/will happen that a correct removal from a Domain Controller isn’t possible because of a hardware crash, you have to force the removal of a DC or the previous admin have left some “garbage” for you. So you have to do a metadata cleanup, otherwise all other DCs will try...

Posted to MWeber's Blog by mweber on Sun, May 16 2010
Filed under: Filed under: Active Directory, Windows Server 2008 R2, Windows Server 2008, Windows Server 2003
Enable advanced logging on a Domain Controller

If you run into problems in a Domain and have the need for more information, you have the option to enable an advanced logging of specific settings. This can be done with changing a registry setting on a specific Domain Controller, keep in mind that this setting is not replicated to other Domain controllers...

Posted to MWeber's Blog by mweber on Sun, Apr 11 2010
Filed under: Filed under: Active Directory, Windows Server 2008 R2, Windows Server 2008, Windows Server 2003
Migrating Active Directory to a new Forest

When you have the need to migrate Windows Domains to a new named Domain or into a different forest, you can use the free Microsoft Active Directory Migration Tool, which exist in multiple versions. When the source Domain is built with Windows NT4 (at least with SP4 on the PDC), Windows Server 2000 or...

Posted to MWeber's Blog by mweber on Thu, Mar 25 2010
Filed under: Filed under: Migration, Active Directory, Windows Server 2008 R2, Windows Server 2008, Windows Server 2003
Is my Active Directory Backed Up?

There are a ton of methods to backup Active Directory. I’m not going to get into each method with this post. What I am going to do is share another little command that can be run to check to see if your Active Directory was backed up and when. Before I discuss that command one point I would...

Posted to The Life of Brian by BrianM on Wed, Oct 7 2009
Filed under: Filed under: Active Directory, Windows Server 2003, Scripting, Windows Server 2008, Windows Server 2008 R2
Initiate Replication across all Partitions and DCs

It seems I'm always trying to remember this little command and its about time I put here where I can always access it in the future. This isn’t a new command but it is a nifty little one that will initiate replication across your environment. Repadmin /syncall /APed I prefer to...

Posted to The Life of Brian by BrianM on Wed, Sep 30 2009
Filed under: Filed under: Tools, Active Directory, Windows Server 2003, Scripting, Windows Vista, Windows Server 2008, Windows Server 2008 R2
Viewing your FSMO Role Holders Remotely

There are quite a few ways to view what your FSMO roles are. You can use the GUI tools or even the following netdom command that I've shared in the past – netdom query fsmo However if you are working in a trusted multi-domain environment the following command can help you view the FSMO role...

Posted to The Life of Brian by BrianM on Mon, May 4 2009
Filed under: Filed under: Active Directory, Windows Server 2003, Scripting, Windows Server 2008, Windows Server 2008 R2
How to Remove a Failed or Offline DC

I’ve seen this issue come up time and time again. Some administrator decided to remove an old DC from the network but forgot to remove it from Active Directory or the DC has entered a failed state and cannot be recovered from. In a perfect world DCPROMO is all you have to do to remove a DC...

Posted to The Life of Brian by BrianM on Wed, Dec 17 2008
Filed under: Filed under: FSMO, Active Directory, Windows Server 2003, Scripting, Windows Server 2008
How to Search for an Email Address in Active Directory

From time to time I’ve had to figure out which user account has a specific email address. Actually its more like finding who has the “reallycoolemailaccount@company.com ” so another “more senior” person can get it. Well if you work in a smaller company this can be kind of easy…but if your...

Posted to The Life of Brian by BrianM on Tue, Dec 2 2008
Filed under: Filed under: Active Directory, Windows Server 2003, Scripting, Windows Server 2008, Exchange
Must Have Group Policy Setting!

I recently blogged about time and how critical it is in a domain environment. Just this morning I read a post from the Directory Services Team that shows how to configure WMI Filtering through Group Policy to ensure that the PDC Emulator always has the right time configuration. You need to read through...

Posted to The Life of Brian by BrianM on Fri, Nov 14 2008
Filed under: Filed under: FSMO, Active Directory, Windows Server 2003, Windows Server 2008, W32Time
KDC 11 Error in the System Event Log

I ran into this error awhile back after building a new root level Domain Controller (DC). My initial health checks panned out ok but after about an hour the following should up in my System Event log: Event Type: Error Event Source: KDC Event Category: ...

Posted to The Life of Brian by BrianM on Thu, Nov 6 2008
Filed under: Filed under: Active Directory, Windows Server 2003
What W32tm is it anyway?

My daughter Alyssa and I play a game…well she might not consider it a game but she is constantly asking me “What time is it without looking”. I’ve actually gotten pretty good at it and can usually get within a few minutes. Not sure why she likes to play but perhaps time is something...

Posted to The Life of Brian by BrianM on Fri, Oct 10 2008
Filed under: Filed under: FSMO, Active Directory, Windows Server 2003, Windows Vista, Windows Server 2008, W32Time
What Version is Your Schema at?

Have you ever had one of those jobs where you just weren’t sure what Schema update had been applied in an environment? The following command will let you know which of the Windows Server Schema updates have been applied. dsquery.exe * "CN=Schema,CN=Configuration,DC=domain,DC=com" -scope...

Posted to The Life of Brian by BrianM on Tue, Jul 8 2008
Filed under: Filed under: Active Directory, Windows Server 2003, Windows Server 2008

Page 1 of 2 (25 items) 1 2 Next >

Questions? Contact Susan at Susan-at-msmvps.com. Each post's copyright held by the original author. All rights reserved. Blog site is an independent site not sponsored by Microsoft.
Our servers would like to thank www.ownwebnow.com and www.exchangedefender.com. We wouldn't be here without the generosity of Vlad Mazek and his companies.

Powered by Community Server (Commercial Edition), by Telligent Systems

Theme based on the Paperclip Blog Theme included in Community Server.
Enhanced to a Site-Wide Theme by Interscape Technologies.