While Editing NameServers Tab MMC Console Freezed

Install Hotfix Below, it worked for me.

https://support.microsoft.com/en-us/help/2581690/dns-management-snap-in-console-stops-responding-when-you-edit-the-name-servers-tab-in-windows-server-2008-r2

Read more...

Active Directory Object Creation Date Report (Quest ActiveRoles Management Shell)

Computer accounts created in last 321 Days.

Get-QADComputer -CreatedAfter (Get-Date).AddDays(-321) | Export-CSV c:\SAMReport\AdReportComp.csv


User accounts created in last 321 Days.

Get-QADUser -CreatedAfter (Get-Date).AddDays(-321) | Export-CSV c:\samreport\AdReportUSer.csv

Read more...

Allowing server machine to use filesharing with itself via the DNS Alias (BackConnectionHostNames) (Windows Server 2008 & 2012)

This change is necessary for a DNS alias to work with filesharing from a machine to find itself. This creates the Local Security Authority host names that can be referenced in an NTLM authentication request.
To do this, follow these steps for all the nodes on the client computer:

1. To the registry subkey HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0, add new Multi-String Value BackConnectionHostNames
2. In the Value data box, type the CNAME or the DNS alias, that is used for the local shares on the computer, and then click OK.
   • Note: Type each host name on a separate line.

Read more...

Active Directory Accounts that do not have Thumbnail Photo

First please download and install  Quest ActiveRoles Management Shell for Active Directory.

and execute the command below;

Get-QADUser -IncludedProperties "thumbnailPhoto" | Where-Object {$_.thumbnailPhoto -eq $null}
Read more...

Enforce Minimum Password Length of 15 or More by using GPO

By Default you can not enforce user accounts to use more than 14 charachters passwords.

In order to increase this limit;

You should edit GptTmpl.inf file located in the address below;


\\domainname\SYSVOL\domainname\Policies$\PolicyGUID\Machine\Microsoft\Windows NT\SecEdit


How to find GUID for GPO



Read more...

How to find GUID for Group Policy Object (GPO)

 

 

cscript search.vbs "LDAP://dc=mydomain,dc=com" /C:"&(objectClass=groupPolicyContainer)(displayName=Default Domain Policy)" /P:name /S:SubTree

 

Read more...

Active Directory Query

Active Directory Query for Enabled user

(&(objectCategory=person)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))


Active Directory Query for Disabled User

(&(objectCategory=person)(objectClass=user)(!sAMAccountType=805306370)(userAccountControl:1.2.840.113556.1.4.803:=2))

Password Never Expire Users

(&(objectCategory=person)(objectClass=user)(!sAMAccountType=805306370)(userAccountControl:1.2.840.113556.1.4.803:=65536))

Open Active Directory Users and Computers
Right Click your Domain name and Click Find
Choose Custom Search
Click Advanced TAB, paste the code. Click Find Now.
Read more...

List domain user's folder access permissions

Download to tool from link.  Install it to your computer,

Go to the folder that you install subinacl from command prompt and execute the command.


subinacl /testmode /noverbose /outputlog=c:\permission.TXT /subdirectories=directoriesonly h:\*.* /findsid=domain\username
Read more...

Windows Server 2012 Active Directory Installation by using PowerShell Commands.

We will Configure our server as the first Active Directory domain controller in a new forest.
The new domain name is "2012test.com". This is also the name of the new forest.
The NetBIOS name of the domain: 2012TEST
Forest Functional Level: Windows Server 2012
Domain Functional Level: Windows Server 2012
Additional Options:
  Global catalog: Yes
  DNS Server: Yes
  Create DNS Delegation: No
Database folder: C:\Windows\NTDS
Log file folder: C:\Windows\NTDS
SYSVOL folder: C:\Windows\SYSVOL


PowerShell Script

Import-Module ADDSDeployment
Install-ADDSForest `
-CreateDnsDelegation:$false `
-DatabasePath "C:\Windows\NTDS" `
-DomainMode "Win2012" `
-DomainName "2012test.com" `
-DomainNetbiosName "2012TEST" `
-ForestMode "Win2012" `
-InstallDns:$true `
-LogPath "C:\Windows\NTDS" `
-NoRebootOnCompletion:$false `
-SysvolPath "C:\Windows\SYSVOL" `
-Force:$true
Read more...

Disable SID Filtering

If you have established trust(s) between your domains and you will migrate users, preserve their SIDs and give them them security rights for resources you should disable SID filtering mechanism.

To disable SID filter quarantining for the trusting domain

Open a Command Prompt.
At the command prompt, type the following command, and then press ENTER:

Netdom trust  /domain: 

/quarantine:No /userD: /passwordD:

Example:

netdom trust  otkn.local /domain:otkn.arg /quarantine:No /UserD:otkn.local\cad /passwordD:caduserpassword

http://technet.microsoft.com/tr-tr/library/cc794801(v=ws.10)

Read more...

The session setup from the computer %computername% failed to authenticate.

The cause of this error is the expired computer accound password. By Default computer accounts change password automaticly in every 30 days. If, replication between computer and dc's are not successfull after password changes DC will remove computer account from domain.

You can disable this behaviour from group policy settings,

Setting is under Computer Configuration -> Windows Settings -> Security Settings -> Local Policies/Security Options -> Domain Member: Domain Member: Disable machine account password changesYou should enable this settings.
Read more...

KMS Server on Windows 2003

Install KMS

KMS 1.1 Download Link
Update 1 Link
VAMT 2.0 Download Link

Install KMS1.1 then install Update then VAMT. After installation you should restart server.
Open VAMT console

1) License Installation



First Verify then add product key.

2) Add Client



3) Update Client Status to get Licensing information




4) Install Product key (Use MAK Key) (We Will use Proxy Activation)




Select Apply Confirmation ID and Activate.
Ok-->Close-->Close
Read more...

View LDAP servers by command prompt

nslookup -type=srv _ldap._tcp.aaa.local
Read more...

These settings are not available in preference mode

If you get this warning on Windows Server 2008 , while changing internet explorer Group Policy settings try the step below;

Click Reset Browser Setting in Group Policy, Under User Configuration

Read more...

Failed to find updates with error code 80244010

If you are getting this error in windowsupdate.log file while you are trying to deploy updates using wsus 3 sp1 ;

try the steps below;

Method 1: Download and install the Windows Update Agent
For more information about how to download the latest version of Windows Update Agent, click the following article number to view the article in the Microsoft Knowledge Base:
949104 (http://support.microsoft.com/kb/949104/ ) How to obtain the latest version of the Windows Update Agent to help manage updates on a computer

Method 2: Register the Wups2.dll file
To register the Wups2.dll file in Windows, follow these steps:
Stop the Automatic Updates service. To do this, follow these steps:
Open the Command Prompt window. To do this, click Start, click Run, type cmd, and then click OK.
At the command prompt, type the following command, and then press ENTER:
net stop wuauserv
Register the Wups2.dll file. To do this, follow these steps:
At the command prompt, type the following command, and then press ENTER:
regsvr32 %windir%\system32\wups2.dll


Note For a computer that is running Windows XP Professional x64 Edition, type the following command, and then press ENTER:
regsvr32 %windir%\syswow64\wups2.dll
Click OK if you receive a verification message.
Start the Automatic Updates service. To do this, type the following command at the command prompt, and then press ENTER:
net start wuauserv
Exit the Command Prompt window. To do this, type exit at the command prompt, and then press ENTER.


Source : http://support.microsoft.com/kb/943144
Read more...

Terminal Services Black Screen RDP Session

Solution Offer.
Cause to this situation can be MTU settings.

Try the following Steps Below.

1. Start > Run > Regedit
2. Navigate to HKLM \ System \ Current Control Set \ Services \ TCPIP\ Parameters
3. In the right hand pane, Right Click > New > DWORD
4. Call it EnablePMTUBHDetect set its hex value to 1
5. Reboot
Read more...

Enable HTTPS-HTTP Bridging on the TS Gateway

Open TS Gateway Manager.

In the TS Gateway Manager console tree, right click to the TS Gateway server, click Properties.

On the SSL Bridging tab, select the Use HTTPS-HTTP bridging check box, click OK.

A warning message will appear, stating that for the SSL bridging settings to take effect, you must recycle the default application pool of IIS. If you want to recycle the default application pool now click Yes. To recycle the default application pool manually later, click No.

ISA Server Configuration for TS Gateway

http://technet.microsoft.com/en-us/library/cc731353.aspx

Read more...

Disable Autorun via Group Policy

In order to disable autorun features of all drives in domain computers follow these steps below.

Open Group Policy Object Editor , and edit releated Domain Policy.

Locate Computer Policy\Computer Configuration\Administrative Templates\System in the left pane then find "Turn Off Autoplay" in the right pane.

Double click and set feature to enable set Turn of Autoplay to : All Drives

Disable Autorun in Vista;

Open : Gpedit.msc

Locate the following policy;

Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\AutoPlay Policies

Read more...

W32Time Error Event ID:48

Possible reason is you have problem about connecting to time server or time server is experiencing diffuculties.

List of time servers is available at ;
http://support.microsoft.com/kb/262680

After choosing time server follow the steps below;

net stop w32time
w32tm /unregister
w32tm /register
net time /setsntp:TimeServerIPNumber
net start w32time

If you want to use a FQDN instead of the IP address as time server, add ",0x1" at the end of the net time command

net time /setsntp:time-a.nist.gov,0x1


Read more...

Windows 2008 Certification Paths

Read more...