Category: Active Directory

PROBLEM: You need to check if two domain controllers are in sync with each other. SOLUTION: To do this you need to understand a bit about how Active Directory reports if a domain controller replication is in sync. There is something called a UTDV up-to-dateness vector that is basically a number representing what the domain […]

Using powershell you can get the value of a specific attribute of a user. To do this run the below, this will get all the user objects in the OU called “Users” and display the samAccountName and extensionAttribute10 attribute.

So here is an example you want to set all the users in the OU called “Users” to have the extensionAttribute10 with the value “student” to do this you can run the below script:

With the prevalence of mobile devices this is becoming more of a problem, you have a user who comes in every day and swears blind nothing has the wrong password, but something is locking them out. Here is how to fix it: Firstly you must ensure that you are logging the stuff correctly on your […]

When depromoting a domain controller I started to get this error: “The operation failed because Active Directory could not configure the computer account <COMPUTERNAME>$, on the remote domain controller <COMPUTERNAME>$ “Access is denied.” What I did to try and fix it: ·          Verified the “protect from accidental deletion” tick box not […]

A odd problem with Active Directory that I came across this week; a user object keep on “losing” its permissions. When adding the “Send As” permissions for Exchange on a AD user object all seemed to go okay, then about 20 minutes or so later the permission would just vanish! After much rumaging around I […]

While setting up my new domain controllers, came across this site, looks to offer some good tips about AD. http://www.tech-faq.com/configuring-and-troubleshooting-active-directory-replication.shtml