One of the questions asked most frequently by the system administrators is how to check the Active Directory replication or how to monitor the AD replication, most of the AD administrates know about the repadmin /showreps command however this command will provide the Last attempt status, like “Last attempt @ 2008-10-31 13:51:13 was successful” if… Read More »
Script to find the subnet conflict in AD In a small environment with few sites and subnets, it’s very easy to find the subnet conflict especially when you have request to create a new subnet and associate to the site If it’s a large environment with more number of sites and subnets, it’s very diffeclect… Read More »
Some time we need to create or modify the AD object (like DNS change) this change should be happen immediately to some of specific DC’s in different site, normally we wait for normal replication Some time this is schedule change, some site need this change immediately to all the list of DC’s, we sync the… Read More »
DFS Client side troubleshooting DFS will work depends on the site and subnet configuration so while checking the client side issue, you have to check the client network configuration and corresponding site and subnet configuration, If you have complex DFS setup, then it’s very difficult to troubleshoot In the below Example: Domain name = Microsoft.comDFS… Read More »
IE7 group policy Normal Home page configuration for IE6 will not work for IE7, for IE6 we have to use below group policy settings (this group policy setting will not work for IE7) That User configuration>>Windows settings>>Internet explorer maintenance>>URLs>>Important URLs (does not work with IE7) If you have IE7 or Windows Vista or Windows 7… Read More »
Application Directory Partition In Windows Server 2003, Active Directory Domain Services support application directory partitions. Applications and services can use application directory partitions to store application-specific data. Application directory partitions can contain any type of object, except security principals, and can be configured to replicate to any set of domain controllers in the forest. Unlike… Read More »
Network shares on test01.test.com server, we have created the DNS alias test004.test.com pointing to test01.test.com host, while accessing the network shares on test01.test.com through DNS alias (\test004.test.comshare name) getting the below error, however while access this same network share through original server name able to access successfully \test004.test.comshare name You were not connected because a… Read More »
Loopback policy can be used in special computer scenario, such as for schools, reception areas, or other zones whrere it is important that no matter who logs on, the computer settings must always remain in the same secured sate. Since user settings are applied after computer settings in the application order, GPO’s allow you to… Read More »
How to enable Strict Replication Consistency If you enable the Strict Replication Consistency then the Lingering Objects will not replicate to other domain controllers, it’s used to isolate the issue with the site and very easy to find the affected domain controller that contains the lingering object if you enable the Strict Replication Consistency Registry… Read More »
Tool for Removing Lingering Objects On domain controllers running Windows Server 2003 or Windows Server 2003 with SP1, use Repadmin.exe (in Windows Support Tools) to remove the lingering object or objects. Windows Support Tools are available on the operating system CD in the SupportTools folder. The version of Repadmin that ships with Windows Server 2003… Read More »