Tag Archive: Active Directory

Jan 04 2016

How to enable WinRM (HTTP) via Group Policy

Windows Remote Management or WinRM for short, exist in the Windows world for a long time and until now you probably never had anything to do with it. WinRM is a Microsoft implementation of WS-Management Protocol, that allows hardware and operating systems, from different vendors, to interoperate. If enabled, you can run scripts, install roles and …

Continue reading »

May 21 2015

How to transfer or seize Flexible Single Master Operations (FSMO) roles

As you probably know, when you promote the first domain controller in a forest, is granted five Operations Master or Flexible Single Master Operations (FSMO) roles, pronounced “fizz-moe”. Two of the roles are forest wide and the rest of them are domain specific, meaning if you have multiple domains, every domain will get the three domain specific …

Continue reading »

Feb 18 2015

Restoring failed Active Directory Domain Controllers

Just when you think everything is going well, disaster happens, and one or more of your domain controllers gets offline. This can happen due to a hard disk crash, a bad network card, file system corruption or corruption of the Active Directory database. Even if you have good backups somewhere on the shelf that’s only …

Continue reading »

Dec 15 2014

Add Domain Users to Local Groups using Group Policy Preferences

Until server 2008 came out, every time you wanted to add domain users or groups to computers local groups you had to rely on scripts or use Group Policy Restricted Groups to make the changes. The last one worked great but it failed working when you wanted to modify those local groups on your client …

Continue reading »

Sep 17 2014

Configuring Hyper-V Replica using Certificate-Based Authentication (HTTPS)

You know that starting with Windows Server 2012 Hyper-V has a new feature that replicates VMs from one host to another for a disaster recovery scenario! I talked about it in this article; but configuring replication that way over non-trusted networks

Continue reading »

Sep 02 2014

Enabling the Active Directory Recycle Bin in Server 2012/R2

I don’t wanna be wrong here, but I think that one of the most common Active Directory disasters that administrators face is the accidentally deleted object(s). Even if you put a strong security in place, there comes a time when you need to delegate permissions and with that accidents happen.

Continue reading »

Aug 06 2014

Set Up Automatic Certificate Enrollment (Autoenroll)

Managing certificates usually does not need to much intervention. Issuing and enrolling for certificates, again is a piece-of-cake… in a small environment. But if you are running more than let’s say 50 workstations and servers enrolling for certificates is a week job, if not more.

Continue reading »

Jul 25 2014

Changing the Directory Services Restore Mode (DSRM) Admin Password

We all know how important passwords are especially those for domain administrators accounts, because those accounts have rights to log in to domain controllers. If the password of one of those accounts is compromised, access to your domain controllers is granted. You know what could happen next.

Continue reading »

Jun 19 2014

Creating Fine-Grained Password Policies in Windows Server 2012/R2

Until not long ago if you wanted to assign different passwords policies to different users, you were forced to create a new domain in the forest. Starting with Windows Server 2008, Microsoft came with fine-grained password policies (FGPPs) a functionality that will let you have different passwords policies in a single domain.

Continue reading »

Oct 27 2013

Installing and configuring a Microsoft Online Certificate Status Protocol (OCSP) Responder

Starting with Windows 2008 Microsoft has an Online Certification Status Protocol (OCSP) Responder feature. Many of you wonder what this is, and I’m going to explain this the best I can. Until OCSP came out, those companies that have their own Certification Authority had to publish to a web server or a LDAP path the …

Continue reading »

Older posts «

» Newer posts

css.php