Account lockout Account lockout is the most common issue in windows environment, I will discuss about the frequent account lock out issues and how to troubleshoot frequent account lockout issue In a windows 2000/2003 domain environment if the password and account lockout policy enabled, then according to the lock out policy if the user wrongly… Read More »
Group Policy Processing over Slow Links (Part2) Windows method for locating a domain controller is that the workstation checks connectivity with the DC it first uses a normal ICMP ping. If the normal ping succeeds it then tests the connection speed with an oversized ping. Specifically the size is 2048k* which puts the total packet… Read More »
Group Policy Processing over Slow Links Applying and updating Group Policy to the client from Domain controller will check the network bandwidth, depends on the bandwidth Group Policy will be processed and the default value defines a rate slower than 500 Kbps as a slow link.If the client from the site without DC and the… Read More »
Will share Collection on Windows group policy interview question with details answers, start with simple L1 questions and continue to L3 questions What are group policies? Group policies specify how programs, network resources, and the operating system work for users and computers in an organization. They are collections of user and computer configuration settings that… Read More »
Updated IP address of Domain controller Updated IP address of Domain controller For windows servers DNS entries are dynamically updated, we shouldn’t update manually, especially for domain controllers DNS entry should be updated dynamically, use the below command to register its DNS records dynamically. 1. Then stop/start the netlogon service to update DNS records2. Use… Read More »
Island Issue A potential problem with this configuration arises when the IP address of a domain controller is changed. Since the domain controller is known to its replication partners by its former IP, they will not be able to replicate and get the address change. To resolve this problem, configure the domain controller with the… Read More »
Changing the DHCP scope subnet mask Change the subnet mask in the existing DHCP scope You can’t change the subnet mask of the DHCP scope directly without deleting the scope, need to delete the DHCP scope first then recreate the scope with the new subnet, but this will lead to the large amount of manual… Read More »
Command to add members of one group to the other group (Group migration) If you want to add all the members from group1 to the group2 user the below command syntex: dsget group “Source group DN” -members | dsmod group “Destination group DN” -addmbr Example: dsget group “CN=Group1,OU=Test,DC=test,DC=com” -members | dsmod group “CN=Group2,OU=Test,DC=Test,DC=com” -addmbr Check… Read More »
Members from Nested Group To display the list of members, recursively expanded In the below command, you can extract the group membership details, if you have a group that member of this group then this command will extract all the members including the nested groups(group with in the group) So you will get all the… Read More »
To find all users in only the current domain, who have been inactive for 3 weeks or more, and display their DNs: dsquery user domainroot -name -inactive 3