Category Archives: Microsoft Active Directory

Windows Server 2008 R2 ADDS – Remember to Open Firewall–TCP5722 and…

Posted on May 13, 2012 by vbzine

Was troubleshooting recent issue on AD Replication. What we found out is that we actually need to open up the following port on our firewall appliance. TCP-UDP 135 and TCP 5722 Note: TCP 5722 is needed for Windows Server 2008 … Continue reading →

Posted in IT Security, Microsoft Active Directory, Windows Server | Tagged , | Leave a comment

Be careful when setting user “password never expires” using DSMOD

Posted on June 11, 2011 by vbzine

Today, yes.. Today (Sat), I got a last minute request to set all the users “password never expires” to “yes” for a short period of time. For this AD I am working on consist several OU contain users (approx 100 … Continue reading →

Posted in Microsoft Active Directory | Tagged | Leave a comment

DSACLS command to Grant Domain Groups Password Reset and Unlock Account Rights to Specific Org Unit (OU)

Posted on May 14, 2011 by vbzine

Got a last minute request to set permission to more than 200 over OUs. Each OU are to be granted the rights to reset password and unlock users accounts to specific domain user groups. If you were to use the … Continue reading →

Posted in Microsoft Active Directory, Microsoft Windows | 2 Comments

Active Directory and GPO – Going back to the Fundamental

Posted on November 7, 2010 by vbzine

Going back to fundamental When I say going back to fundamental, what I mean is actually – One should do proper design and planning before implementation. Active Directory Service During the past few months, I have been working on designing … Continue reading →

Posted in Group Policy, Microsoft Active Directory | Leave a comment

Can customize what to redirect under Folder Redirection?

Posted on September 22, 2010 by vbzine

Sometime, we really think too much when we read the words – folder redirection under the GPO. Or maybe just me. 🙂 Share with you all something that I was working on recently using GPO for Windows 7. I have … Continue reading →

Posted in Group Policy, Microsoft Active Directory, Microsoft Windows | 4 Comments

What to Do when Your RID and PDC Emulator DC is having AD Database Corruption?

Posted on June 23, 2010 by vbzine

One of my engineer ask me if demote and promote the DC can solve the problem… I almost fainted and give call him back immediately before he were to do that. Why Not? And actually, if he were to try, … Continue reading →

Posted in Microsoft Active Directory, Troubleshooting | Leave a comment

Client going to different Domain Controller randomly for authentications (Cause and Solution)

Posted on March 19, 2010 by vbzine

Link to the blog which I have posted weeks before. http://sgwindowsgroup.org/blogs/panda/archive/2010/03/03/client-going-to-different-domain-controller-randomly-for-authentications.aspx Re-cap of the issue I encountered Using domain account A and login to the client machine for 5 times, the logon server randomly hop between 3 different domain controller … Continue reading →

Posted in Microsoft Active Directory, Microsoft Windows, Troubleshooting | 1 Comment

Slow Boot Up of Domain Joined Windows XP Client Machine…

Posted on March 11, 2010 by vbzine

  I know… everyone is talking about Windows 7 nowaday and Windows XP is about to EOL. However, my whole environment is still running on Windows XP under AD 2003. And what I see here is that knowing the fundamental … Continue reading →

Posted in Managing Active Directory, Microsoft Active Directory, Microsoft Windows, Troubleshooting | Tagged | Leave a comment

How to extend the Security and Compliance of Active Directory to Unix, Linux and Mac Platforms – through Quest Authentication Services (QAS)!

Posted on January 8, 2010 by vbzine

Facing situation where there is an increase in Mac machine in your working environment that runs on Microsoft Active Directory Services? And you are facing the challenge on how to manage them? Recently, I have the chance to test on … Continue reading →

Posted in Microsoft Active Directory | Leave a comment