Re-add 'NT AUTHORITY\Authenticated Users (S-1-5-11)' to users
I removed both "NT AUTHORITY\Authenticated Users (s-1-5-11)" and "NT AUTHORITY\INTERACTIVE (S-1-5-4)" from the Users group of a machine via AD users and computers. Now I cannot add them back. Does...
View ArticleFind which GPO is causing Event 1202 error - no mapping between account and SID?
I have a domain controller generating a lot of errors after some old accounts were cleaned up. A previous IT firm had added a bunch of accounts into GPOs, so when we cleaned out the accounts, the DCs...
View ArticleOffline AD and GPO Viewing Tools
So here's the situation. Often times we find ourselves in a situation where a domain controller has died (not too often) in a single controller environment. Usually its an older box so instead of using...
View ArticleWhere is sysvol.db located? Trying to reapply the default sysvol settings.
I'm having a hard time locating where this database is located. Our sysvol is having problems and I'm following a procedure for reapplying the default sysvol settings but it asks for:"Specifies the...
View ArticleManaging Windows 7 printing for users via group policy
Hey everybody...I've been a Mac guy for some time. I manage a K12 school district with both Mac and Windows PCs. I've been away from the Windows side for a while. But back when Windows XP was the...
View ArticleUpgrading Active Directory to 2012 R2
Well it's that time again where enough water has flowed under the bridge and it may be time to upgrade AD.I'm interested in hearing about any gotchas.Some things I am concerned about with legacy...
View ArticleHow to disable sharing of users folder on domain computers
I use Windows server 2012 and to my surprise every computer that joins the domain has the users folder on c: shared by default. Is this normal and how can I disable it?
View ArticleGPO to map network drives
I do hope some one has seen something like this.Background and Goal.We are a school so on a basic level our network drives are divided into staff only, pupil only and shared between the 2. then there...
View ArticleWhat's your AD Structure?
Hello all,I'm opening another discussion, (this must be my 3rd now)Basically, I'm wondering, how is your AD Users and computers structured. I would like to redesign our structure in a way that allows...
View ArticleClients Time goes out of sync
I have an NTP server locally. Is there something I need to do special for the clients to sync? It is a domain controller. I run into an issue with servers getting out of sync every once in a while...
View ArticleGeeks! How long has this been here? lol
I just spent about 20 minutes trying to figure this out over wmic and then I come across this in GPMC. How long haven't I known about this? lol
View Articlesecurity log 80% full warning
I've configured 2008 GPO to set the max size, backup when full of the security/audit log.Is there a GPO setting to give a warning when the log is at 80% full? Tom
View ArticleAnyone use Smartcards for windows and application authentication
If so what are you using, why and how do you like it (Pros/Cons)?
View ArticleAD Domain Name
I've been reading up on best practices for AD domain names. Seems the consensus is to use something like ad.company.com.In our environment, our AD domain is a public domain, and the domain name is not...
View ArticleAdd to groups VIA GPO but allow users to add other groups
Hey everyoneI need to add a group to every machine's Local Administrators group, but I don't want to remove any accounts that are already there. How can I do this? When I use the standard GPO option...
View ArticleTrocar Imagem Background do Windows Seven
Amigos,Gostaria de Inserir uma imagem de meu interesse na Tela Inicial em Background do Windows 7 via Script ou GPO. Pois, são muitas Estações de Trabalho, preciso de algo mais comodo e automático.
View ArticleAD Trust woes... will remote desktop break if domain PC is moved to workgroup?
Hi all,Forgive this amateur question - I'm still learning the network admin ropes!I have made the age-old mistake of booting a PC with a duplicate computer name to one already running on the...
View ArticleGPO in Server 2012R2 doesn't work
Hi I did change the GPO settings in Server 2012 for users not to see the c:\ drive but they are still able to see it ,I did create an ou for our TS users and created the policy for that ou ,We Are...
View ArticleProxy Versões Posteriores do IE 8
Amigos de Ti,Atualmente estou passando por Problemas, no quesito Proxy nas Estações Win 7 com as Novas Versões do Internet Explorer. Simplesmente, as definições de Página e Proxy não funciona, apenas...
View Article