Internet Explorer GPO keeps re-appearing after being removed
A few months back we disabled IE in Group Policy for security concerns by adding a policy to not run its .exe which worked fine. When the security concern was addressed we attempted to remove the...
View ArticleComplex Password Policy
I set up a test OU and added one computer to it. I also set up a complex password policy and attached it to the OU.The GP is not working, even after GPUPDATE /FORCEAm I correct in my assumption that...
View ArticleWdws Server 2012 GP Setting for allowing Win Zip Self Extractor Installs
I am receiving error messages in regards to not being able to allow Win Zip Self Extractor installs due to Group Policy. I have searched through GP and cannot find where to make this change to allow...
View ArticleWhat's the easiest way of getting group policy management across multiple sites?
I've setup Windows Servers for single site access or for single user VPNs (work from home scenarios) but never for a dozen sites, each with about 6 to 15 computers. I'm picking up a client with this...
View Articleform fill then use the pc
we are planning to have a option in the pc that when new users login to the pc for the first time they need to fill a form related to their contact address and all other details, then only they can...
View ArticlePassword policy for a particular OU in AD
Hi All,I have Server 2008 R2 AD with Default Domain Policy where max password age is 42 days.I have an OU with users where I want to change max password age to 90 days. I wanted to create a new GPO...
View ArticlePrimary Domain Controller Broken after Windows Updates
Hi Guys, Little Stressed at the moment, Left work last night with my Primary DC finishing Windows Updates, and told it to reboot when done - Simple Right....Well to my horror I came in this morning...
View ArticleInterforest AD domain restructure
Hi Spice Heads,I am planning for interforest Active Directory migration in a MS 2008 Std R2 environment as my employer recently changed their trading name. After careful consideration, we decided not...
View ArticleAD FS Proxy Help
We currently have a single AD FS machine with a proxy in front of it working fully.I've been asked to setup network load balance proxy so that we can bounce them whenever we needed to.I did not setup...
View ArticleIssues with Domain Controllers Replicating after Acronis Recovery
Back in early July we had software that was installed on our secondary domain controller (DC2) that we had to rollback. Unfortunately at that time the only way we could accomplish this to resolve...
View Articleproper way to rename the DOMAIN Administrator account
Hello All,i want to rename the domain administrator account. seems pretty straight forward but as a good admin i always research even the most mundane task. so i read microsoft's tech net article that...
View ArticleWINS/NetBIOS - 2 Computers w/ same name on different sub networks?
We have a vendor who as of recently has been setting up their computers with the same name (i.e. SNOWBUNNY). I found this out after being alerted today that one of them cannot join the wireless network...
View ArticleAD Sites and Services Connections - KCC
As I understanding it, the KCC will auto generate connections for replication. I was told by a co-worker that this only occurs for the first 5 domain controllers, which is why he has manually created...
View ArticleAD FS 2.0 Issues
I recently installed AD FS so that we could pass our internal credentials to a vendors site for ease of login for the vendors website.I used their instructions to configure their site and add them as a...
View ArticleInernet Lockdown
I'm looking at restricting internet access on some machines and I have some ideas I got from another thread, but thought I would run it by the community to see if I missed something elegant.Here's the...
View ArticleAdding OS/X to Active Directory: invalid user name and password combination
Okay, this is driving me nuts.First time in a long while I am dealing with Apple products. But due to some company changes, the new owners have brought their macbook pro systems into the mix. So I am...
View ArticleASP.NET page to change AD passwords
I found an ASP.NET site to change AD passwords online (http://unopasscore.codeplex.com/) and modified it for my environment. I tested it and it works fine at my local site, but it doesn't work at my...
View ArticleGPO Application
Hello everyone! I have a rather... Annoying question related to GPOs on Server 2012R2.I need to grant Local Admin rights to certain users on the domain. I already have the appropriate workstations put...
View Articledemote a domain controller
First off please excuse my ignorance when it comes windows servers. I know just enough to be dangerous. My company recently acquired a small office and I am taking over their server. They have a 2008...
View ArticleLog on as a Service Domain GPO - add local accounts
How do I add local accounts on particular servers to a domain based GPO that is adding users to the log on as a service setting?I can add things like:domain\user1domain\administratorNT Service\All...
View Article