Security policies were propagated with warning. 0x534 : No mapping between account names and security IDs was done. Advanced help for this problem is available on http://support.microsoft.com. Query for “troubleshooting 1202 events”. Error 0x534 occurs when a user account in one or more Group Policy objects (GPOs) could not be resolved to a SID. This… Read More »
To to add a DC to a domain over a slow link? SYSVOL replication going slow? Use Install From Media instead! Install an Additional Domain Controller from IFM (Install From Media) in Windows Server 2012 Install an Additional Do…er 2012 _ MS Server Pro
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] “EnableLinkedConnections”=dword:00000001 Computer Configuration -> Preferences -> Windows Settings -> Registry. Create a DWORD with a name EnableLinkedConnections and a value of 1
http://www.expta.com/2009/02/how-to-configure-ipv6-using-group.html
Check time on DC and workstation is within 5mins 😉 Also… One additional thing I found very handy was the ability to join the domain using a specific server. The best way I found to do this in our situation was with powershell. All systems were Windows 7. Open powershell Type add-computer -? Specifically: “add-computer… Read More »
http://technet.microsoft.com/en-us/library/ee791886(WS.10).aspx (Not tested as on 21-03-2013 10:35)
You’re seeing the dreaded scourge of asynchronous policy processing. It’s not a “feature” (and was default-off in Windows 2000 but default-on in Windows XP and above) and causes exactly what you’re seeing– non-deterministic behavior with processing some types of GPO settings. In a GPO that applies to that computer, add the following setting: Computer Settings Administrative Templates… Read More »
C:\Windows\System32\mtedit.exe Or Migrate GPO’s Between Domains http://technet.microsoft.com/en-us/library/cc781458(v=ws.10).aspx
A flexible Active Directory reporting tool with over 170 built in reports as well as the option to create your own With more flexability than other Active Directory reporting tools and a modern user friendly interface, AD Info lets you easily query your Active Directory domain for the information you need. Use one of the… Read More »
To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Destop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop… Read More »
WMI Filtering With this method, you can filter the computers which are affected by your policy, based on common properties of the Operating System. For example, some packages might distinguish between 32-bit and 64-bit, some packages might only work on Vista or later, whereas other packages apply only to servers. With WMI, you can target… Read More »
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d Download Remote Server Administration Tools for Windows 7 with Service Pack 1 (SP1) 1. On a computer that is running Windows 7 or Windows 7 with SP1, download the Remote Server Administration Tools for Windows 7 with SP1 package from the Microsoft Download Center. 2. Open the folder into which the package downloaded, double-click… Read More »
http://buffalo.nas-central.org/index.php/Joining_Active_Directory
include “functions.kix” $startTime = @Ticks $welcome = “Weclome to @Domain, @Fullname (@WkSta)” SetTitle($welcome) cls COLOR W+/n ? $welcome /************************************************** ** ** Mapping network drivers ** **************************************************/ COLOR Y+/n ? ? “Mapping drives” ? “————–” map_drive(“S:”, “\\econel\shared”) map_drive(“T:”, “\\econel\talisman”) /************************************************** ** ** Sync workstations times with cadserv for ** Teamwork software to work. ** **************************************************/ COLOR… Read More »
Function map_drive($drive_letter, $unc) COLOR W+/n ? “Mapping $drive_letter to $unc” USE $drive_letter /del /persistent USE $drive_letter “$unc” If @ERROR == 0 COLOR G+/n ? ” Connection succesful” Else print_error(@Error, @SError) EndIf EndFunction Function print_error($errorno, $errorstr) COLOR R+/n ? ” Error $errorno – $errorstr” EndFunction Function connect_printer($unc) COLOR W+/n ? “Connecting to $unc” If ADDPRINTERCONNECTION ($unc)… Read More »
GPO Exclude DirectoriesIn Windows 2003 (2000 and 2008) you can use group policies to manage users and computer settings. Most companies have servers where all the data is saved and users should not save any data locally. A lot of companies also use roaming profiles so users can basically sit anywhere and have their data… Read More »
[gview file=”http://www.stephen-scotter.net/wp-content/uploads/2011/01/Seizing-FSMO-Roles.pdf”]
[gview file=”http://www.stephen-scotter.net/wp-content/uploads/2011/01/Transferring-FSMO-Roles.pdf”]
[gview file=”http://www.stephen-scotter.net/wp-content/uploads/2011/01/Determining-FSMO-Role-Holders.pdf” force=1]
[gview file=”http://www.stephen-scotter.net/wp-content/uploads/2011/01/Migrating-Windows-Small-Business-Server-2003-to-New-Hardware.pdf”]
In the last few months of the Windows Server 2008 development, a good friend of mine was discussing a problem they have been seeing with customers. The problem, lovingly titled as the “Large Time Jump” issue involves a machine in the domain (usually the PDC) making a large jump in time, either forward or backwards.… Read More »
Windows operating systems include the Time Service tool (W32Time service) that is used by the Kerberos authentication protocol. Kerberos authentication will work if the time interval between the relevant computers is within the maximum enabled time skew. The default is 5 minutes. You can also turn off the Time Service tool. Then, you can install… Read More »
The following knowledgebase will help you to remove completely orphaned Domain Controller Back to the top RESOLUTION 1.Use the following knowledgebase to remove common Domain Controller settings… 1.Use the following knowledgebase to remove common Domain Controller settings from the Active Directory. http://support.microsoft.com/kb/216498 Note 1: : You may need to seize the FSMO to alternative Domain… Read More »