Showing posts with label Active Directory. Show all posts
Showing posts with label Active Directory. Show all posts
Monday, September 25, 2023

Modifying AdminSDHolder Permission Delegation

›
Description: You want to delegate permission to write certain user attribute for member of protected groups in Active Directory to a "n...
Saturday, March 11, 2023

Cannot Delete DNS Zone - Access was Denied

›
Description: You have several DNS Zone listed in your Active Directory Integrated DNS Server. One day, you want to remove one of the DNS Zon...

How to Fix "Trust Relationship Failed" error without Rejoin Domain

›
Description: One of your users suddenly sees the error message "Trust Relationship Between This Workstation And The Primary Domain Fail...
Thursday, October 20, 2022

PowerShell Command to Identify Local Admin Account

›
Description: You have several local account on your computer. One day, you need to find out which one is the real local Admin Account. Resol...
Friday, June 3, 2022

Error while creating Windows 2016 Cluster at "Find a suitable Domain Controller"

›
Description: You want to create Windows 2016 cluster on Windows 2012 R2 Domain. You run the Wizard, however encountered error and the cluste...
Thursday, February 3, 2022

DNS Event 4015 on Windows 2012 R2 Domain Controller

›
Description: At DNS Server which also a Domain Controller, you notice the Event Viewer is full with the following error. T he DNS server has...
Tuesday, January 25, 2022

Invalidate RID Pool Script

›
  To invalidate the current RID pool in Active Directory Open an elevated Windows PowerShell session, run the following command and press EN...
Monday, January 10, 2022

Clear Cached Kerberos Tickets

›
To clear the cached Kerberos tickets: Open Command Prompt with Administrative permission Type: Klist purge klist purge –li 0x3e7
Tuesday, December 28, 2021

Cannot Re-Install NPCAP

›
Description: You are trying to re-install NPCAP as part of Microsoft Defender for Identity Sensor deployment on a Domain Controller. However...
Sunday, November 14, 2021

Cannot Delete Domain Controller - Access is Denied

›
Description: You are using Domain Admins account and wanted to delete a "stale" Domain Controller (DC) from Active Directory Users...
Thursday, September 9, 2021

Error connecting to SQL Server after changing Service Account to normal domain users

›
Description: As security best practice, we should not run SQL Server Services with domain admin credential. However after changing it to the...
Wednesday, September 8, 2021

How to Rename A Domain Controller

›
Description: During Active Directory Upgrade, you might need to maintain the old Domain Controller name because of certain application requi...
Saturday, August 28, 2021

Migrate SYSVOL from FRS to DFSR

›
Migration of SYSVOL from FRS to DFSR is actually quite simple. First, you need to make sure all the Domain Controllers (DC) in the Domain ar...
Thursday, June 17, 2021

BitLocker with MBAM Failed to Encrypt because Access Denied by Remote Endpoint

›
Description: You have configure MBAM Application server, MBAM Database server and set GPO for Drive Encryption to run automatically with min...
Sunday, March 28, 2021

Azure AD Connect account usage

›
Azure AD Connect uses 3 accounts in order to synchronize information from on-premises or Windows Server Active Directory to Azure Active Dir...

How to Add NT Service\All Services group to Active Directory User Rights Assignment

›
Description: You want to use a group Managed Service Account (gMSA) on multiple domain in your forest. You also have Group Policy that manag...
Saturday, March 27, 2021

Error when Configuring Azure AD Connect - Authorization Manager check failed

›
Description: When you configure your Azure AD Connect, you encounter Authorization Manager check failed error message. It said "An erro...
1 comment:
Friday, March 26, 2021

Removing Extended Rights delegation on AdminSDHolder

›
Description: You have Active Directory and Exchange servers running in your environment. One day, the Security team told you that they encou...
Sunday, March 14, 2021

Recover Active Directory after Ransomware Attack if you only have VM Snapshot

›
Description: You have a security incident in Active Directory where a ransomware attack encrypt your VCenter infrastructure. All you have le...
Sunday, March 7, 2021

Point Client Machine or Member Server to a Specific Domain Controller

›
There maybe times when you want to restrict client machine or member server authentication to a specific Domain Controller only. One possibl...