Active Directory Delegated Permissions (View/Remove)

Active Directory (AD) delegation is critical part of many organizations’ IT infrastructure. By delegating administration, you can grant users or groups only the permissions they need without adding users to privileged groups (e.g., Domain Admins, Account Operators). Read More …

Active Directory – Check if a DC is a Global Catalog

There are several ways to find out if a Domain Controller has the Global Catalog role enabled. In this article, Read More …

Microsoft – Changing SID of cloned VMs

On the machine level, every computer is identified by a unique value; named Security ID or SID. SID is calculated in the process of the installation of every Windows machine. Whether the computer is part of the workgroup (or it’s just a stand-alone computer), the value of SID is not crucial. Read More …

Active Directory – Schema Master FSMO Role

Schema Master is another FSMO role which is responsible for making changes to the Active Directory schema. The schema stores descriptions of all Active Directory classes and attributes (LDAP://cn=schema,cn=configuration,dc=). Read More …

Enable WinRM with Group Policy for PowerShell Remoting

PowerShell Remoting really can makes a routine work a lot easier, but it requires quite a bit of work to get all the remote computers ready to take the remoting calls, such as automatically start Windows Remote Management service. Read More …

Check DFS Namespaces (DFS-N) Configuration with dfsdiag.exe

DFS-N, as the name implies, is a distributed file system and it involves a number of components running on a set of computers (Active Directory domain controllers, DFS-N namespace servers, SMB file servers, DFS-N clients that are typically Windows clients, but also Linux ones). Read More …

Renaming Active Directory Domain Name (Microsoft)

With long checklists, constraints and precautions, renaming a domain is not a simple undertaking, and the time required to complete Read More …

Force specific sites to always run in Compatibility View using Group Policy

If you have specific sites which do not work in newer versions of Internet Explorer, you can force them to Read More …

Force Replication between Domain Controllers in Active Directory

One common task we have to perform in Active Directory very often is forcing replication between two domain controllers. By Read More …