Active Directory attributes
Dear Team I hope you all are doing good. I have arequirement where in i need to add below attribute for AD users. gender nationality Division Sub Division Unit Direct Manager's Name Matrix Manager's Name I am not able to locate above…
Upgrading Domain Controllers
Hi, We're looking at upgrading most of our DCs which consists of both datacenter and remote sites DCs. We are looking to go from Windows 2008 R2, 2012 R2 to 2019. There are already a few 2016 DCs which were recently built for some remote sites. DNS…
Windows 2019 ADPrep and DomainPrep
Hey all I'm planning to promote a Windows 2019 DC (And another one shortly thereafter) in an isolated Forest that currently is Schema version 47 (Windows 2008R2) There's only one other DC in this current setup, Windows 2008 R2, so there is currently…
Windows 2008 R2 DC Time Drift - Windows 2019 DC promotion
Hi all Just started at new company, they've got an isolated Forest\Domain setup for a specific client with 1 very old Physical Windows 2008 R2 server in it, acting as DC\File and Print. It's 15 mins drifted from the real world because it was never…
"Random" HTTPS issues, possibly related to DNS server
Hi, this is a rather strange problem and I'm stuck at this point. Several users have issues with HTTPS connections not working or only working after multiple attempts. This may or may not only occur with certain applications and usually is not…
Two domain controllers on same subnet
Will it cause an issue if I have two domain controllers on the same subnet? I'm wanting to migrate my current domain controllers to new hardware and I'm wondering if I can just stand up another domain controller locally and then decommission the old…
Sync ad password policy to azure ad
Hi all, We have a requirement to sync our local ad password policy to azure ad so if the local pass policy has pass expiration date 60 days we want to match that with azure so that all cloud pass also expire at the same time. We are using password hash…
Server 2019 steady state software
I'm looking for the roll and feature that enables the windows server steady state software. I can't remember which one it is.
why forest domain name is listed under network adaptor for Domain network instead of child domain
why forest domain name is listed under network adaptor for Domain network instead of child domain
365 ProPlus Trial Information Banner Error
Problem: One of our users is receiving a persistent "Trial Information: This trial of Microsoft 365 ProPlus expires in 365 days" banner. (it always says 365 days no matter the day) Active Licenses: Enterprise Mobility + Security…
![](https://techprofile.blob.core.windows.net/images/xgCloIrQvUeqYfAqQE8a0A.png?8D8342)
domain controller logon / logoff user audit logs
Hi, we have 20 domain controllers and need to forward audit logs (user logon / logoff ) to syslog server. Below are the query. whether the audit log will get sync between all the domain controller ? what is best practice to send audit logs to…
Laps Saved password count
Is there any way we can count how many passwords are stored in our LAPS database?I have a command to export all the passwords but I don't want to export them I just want to count how many passwords of systems are available.
![](https://techprofile.blob.core.windows.net/images/_Ozga5vpLEWcN4kRmMzTeA.png?8D8390)
How do I migrate my domain conroller to new hardware with same name and IP?
I have 4 domain controllers in my environment that all have the domain controller role and file server role. I'd like to update the hardware on these four domain controllers and would like to use the same name and IP for the new domain controllers. Is…
Group Policy NTP and regional setting
Hi all, I have some issue with NTP inside LAN of a customer. I would that all computers and servers will have same Time, Date and Time Zone (I'm in Italy but I configure many laptop in english language). My goal is: Set sync with external NTP…
get-spn syntax
Hi all i have created spn entries using the below syntax. is there any syntax like get-spn to validate if i have added correct entries rather than checking from AD attribute editor of the service account setspn -s HTTPS/server01.contoso.com…
Setting up remote apps securely with work folders
I'm looking for some information and guidance on setting up and securing Remote Desktop apps and work folders. I have setup remote apps but am paranoid about putting the server on the internet. Currently users use a VPN and I would like to set this up…
Demoting DC/DHCP
Hi, WE have 5 virtualized server 2012 DC's in 4 different subnets and a single physical server 2016 DC. In site A we have 2 VM 2012 DCs and singel 2016 physical DC. One of the VM 2012 DC has all of the FSMO roles plus DHCP. The Physical DC also has…
DWM account showing logon type 2
I found an interactive logon log entry on one of our Domain Controllers for one of the DWM virtual accounts on that machine. Why and how would a DWM virtual account create an interactive logon session?
start a script at session start
Hi everyone, I must start a script at start the session not desktop not other programs. I have tried has create user on activity directory and in the tab "Environment" I have set to the path of script. but in my laboratory it works.…
SharePoint Authentication and AD
Hi All, We adjusted domain user that can be log on to limited computers with AD "Log On To .. " Now, users cannot be login to SharePoint from personal computers unless add their computer's NetBIOS or DNS name. Is there a solution that…