The Event ID 2042 update is now posted on the Windows Server 2008 library: Event ID 2042: It has been too long since this machine replicated Now we have included some potential causes and some text to warn you not to initialize replication again until...

Though this is not a direct Active Directory post, I think many of you will find this video I ran across, Hypervisor is not running error: How to fix ( http://www.microsoft.com/video/en/us/details/25d07f2e-b2e0-4c0c-b456-79b08bfe58be ), interesting. Since...

Microsoft has released a new technology (maybe not so new to many of you) that is designed to automate fixes in KB articles. Instead of performing the manual steps to fix a problem (i.e. sound issues), you can click the Fix it button or link, and a script...

Lately, there have been lots of questions around placing more than one RODC in the same site for load balancing and disaster recovery purposes. We, the AD UA team, recently published an article, Placing Several RODCs in the Same Site (http://technet.microsoft...

Some people call it prune and graft, others call it breaking off a domain from the forest. These things are not supported by Microsoft in Windows Server 2008 R2 or earlier. You cannot move domains between forests, but you can migrate. For more information...

The Active Directory Management Gateway Service could be referred to as the Active Directory Web Service (ADWS) for Windows Server 2008 and Windows Server 2003. Why? Well, Windows Server 2008 R2 domain controllers have a built-in service called the Active...

You can find the RTM version of the Windows 7 RSAT tools at the following location: Remote Server Administration Tools for Windows 7 The download page gives instructions on how to install and configure the RSAT tools on Windows 7. The RSAT tools...

DMZ, which actually stands for demilitarized zone, is a very popular term to refer to the concept of a screened subnet, perimeter network, or essentially a network that is divided from your internal network by a firewall. The problem with the term DMZ...

Metadata cleanup is a required procedure after a forced removal of Active Directory Domain Services (AD DS). You perform metadata cleanup on a domain controller in the domain of the domain controller that you forcibly removed. Metadata cleanup removes...

If you are looking to sysprep your computers to remove the unique information, you can find sysprep in its new location under the %windir%\system32\sysprep folder. There isn’t much to the interface, but if you are just trying to remove the unique information...

A few days ago we posted a document to TechNet that outlines some of the various port requirements for Active Directory. We gathered the port information from various KB articles and consolidated them into one document. I think it should serve as a great...

Windows Server 2008 R2 domain controllers include a new feature named Offline Domain Join. A new utility named Djoin.exe lets you join a computer to a domain, without contacting a domain controller while completing the domain join operation, by obtaining...

Account Operators is a default groups located in the Builtin container. Members of this group can create, modify, and delete accounts for users, groups, and computers located in the Users or Computers containers and organizational units in the domain...

When you delete or recover an Active Directory object with link-valued attributes, AD DS must process the object’s link value table to maintain referential integrity on the linked attribute’s values. Because deleting or recovering an Active Directory...

This posting is provided "AS IS" with no warranties, and confers no rights. In Windows Server 2008, there are new tools you can use to create a snapshot of your Active Directory database at a point in time, ntdsutil snapshot , and then you can view...

UPDATE: A faster way to open the UAC settings in Windows 7 was just brought to my attention by Dean Wells. Click Start , type UAC and press ENTER. Thanks, Dean! If that doesn’t work for some reason, you can do the following: Run wscui.cpl from...

While this has been true for a while, I figured that it is worth mentioning that if you are running Windows 7, you can download the Remote Server Administration Tools (RSAT) for Windows 7 . If you’ve used the Administration Tools for Windows XP (Adminpak...

del.icio.us Tags: RID , SID , Active Directory , maximum number of accounts Are you in danger of running out of relative identifiers (RIDs) in your domain? If you have not heard of this before, you should see Active Directory Maximum Limits - Scalability...

You can use Active Directory and Active Directory Domain Services (AD DS) to implement limitations on the number of objects that a security principal (a user, computer, and group) can create in a directory node. You can define these limitations through...

Kurt Hudson from the Active Directory documentation team will be presenting the session Best Practices for Virtual Domain Controllers at TechMentor in Orlando . See the conference ad video . LiveJournal Tags: conference , Active Directory Domain Services...

If you are looking for Active Directory scalability information for Windows Server 2003 or Windows Server 2008, you should check out the Active Directory Maximum Limits ( http://technet.microsoft.com/en-us/library/cc756101.aspx ) document. This may answer...

Active Directory objects can have several different types of attributes. The two basic types are single valued and multivalued. The most frequently asked question regarding attributes that I have seen is that regarding the member attribute because it...

Launching Tools Using Alternate Credentials from a Command Prompt Window One of the easiest ways to launch tools using alternate credentials is to first launch a Command Prompt with the credentials you want to use. Once the Command Prompt is launched...

Active Directory Administrative Center provides network administrators with an enhanced Active Directory data management experience and a rich graphical user interface (GUI). Administrators can use Active Directory Administrative Center to perform common...

Active Directory Domain Services (AD DS) Best Practices Analyzer (BPA) is a server management tool that can help you implement best practices in the configuration of your Active Directory environment. AD DS BPA scans the AD DS server role as it is installed...