Category Archives: Microsoft Active Directory

Windows Server 2008 R2 ADDS – Remember to Open Firewall–TCP5722 and…

Was troubleshooting recent issue on AD Replication. What we found out is that we actually need to open up the following port on our firewall appliance. TCP-UDP 135 and TCP 5722 Note: TCP 5722 is needed for Windows Server 2008 … Continue reading

Posted in IT Security, Microsoft Active Directory, Windows Server | Tagged , | Leave a comment

Be careful when setting user “password never expires” using DSMOD

Today, yes.. Today (Sat), I got a last minute request to set all the users “password never expires” to “yes” for a short period of time. For this AD I am working on consist several OU contain users (approx 100 … Continue reading

Posted in Microsoft Active Directory | Tagged | Leave a comment

DSACLS command to Grant Domain Groups Password Reset and Unlock Account Rights to Specific Org Unit (OU)

Got a last minute request to set permission to more than 200 over OUs. Each OU are to be granted the rights to reset password and unlock users accounts to specific domain user groups. If you were to use the … Continue reading

Posted in Microsoft Active Directory, Microsoft Windows | 2 Comments

Active Directory and GPO – Going back to the Fundamental

Going back to fundamental When I say going back to fundamental, what I mean is actually – One should do proper design and planning before implementation. Active Directory Service During the past few months, I have been working on designing … Continue reading

Posted in Group Policy, Microsoft Active Directory | Leave a comment

Can customize what to redirect under Folder Redirection?

Sometime, we really think too much when we read the words – folder redirection under the GPO. Or maybe just me. 🙂 Share with you all something that I was working on recently using GPO for Windows 7. I have … Continue reading

Posted in Group Policy, Microsoft Active Directory, Microsoft Windows | 4 Comments

What to Do when Your RID and PDC Emulator DC is having AD Database Corruption?

One of my engineer ask me if demote and promote the DC can solve the problem… I almost fainted and give call him back immediately before he were to do that. Why Not? And actually, if he were to try, … Continue reading

Posted in Microsoft Active Directory, Troubleshooting | Leave a comment

Client going to different Domain Controller randomly for authentications (Cause and Solution)

Link to the blog which I have posted weeks before. http://sgwindowsgroup.org/blogs/panda/archive/2010/03/03/client-going-to-different-domain-controller-randomly-for-authentications.aspx Re-cap of the issue I encountered Using domain account A and login to the client machine for 5 times, the logon server randomly hop between 3 different domain controller … Continue reading

Posted in Microsoft Active Directory, Microsoft Windows, Troubleshooting | Leave a comment