This article will help you to understand the basic concept of AD sites, subnets, and site. Also helps you effectively manage sites and their implementation in Active Directory Domain Services. AD Sites overview Sites in AD DS represent the physical structure, or topology, of your network. AD DS uses network topology information, which is stored in the directory… Read More »
This article will explain how to fix time sync issue on Hyper-V virtual domain controller. Normally domain controllers in the domain use the PDC as their central time source. However, a Hyper-V virtual DC would normally synchronize time with it’s hyper-v host instead of PDC. This would cause time difference between virtual DC and other… Read More »
I am going to list down some key areas which need to be covered in any Active Directory health check: Replication health: A healthy replication is important for any Active Directory infrastructure. All domain controllers in the infrastructure need to be aware of every change to the Active Directory database. There are tools and techniques… Read More »
There are five flexible single master operations (FSMO) roles in the Active Directory infrastructure. Each of them will be performing specific Active Directory tasks that other domain controllers in the infrastructure are not permitted to perform. These five FSMO roles are divided into two categories based on their operation boundaries: Forest Level> Schema operations master>… Read More »
Global catalog servers are responsible for keeping a fully writable copy of objects in its own domain and a partial copy of all other domain’s objects in the forest. It facilitates querying about objects in the entire forest. Global catalog service is part of the domain controller services, and it cannot be separated. In a… Read More »
It’s ultimately whether a global catalog is needed for users to log on to the domain is dependent on whether you are in a single or multiple domain forest. Single Domain Environments and the Global Catalog In a single domain environment, all domain controllers are capable of processing logon requests without contacting a global catalog… Read More »
Many of us have questions about how often does the machine account password change in AD on various Windows operating systems So, by default, the machine account password change is initiated by the computer every 30 days. Since Windows Server 2000, all Windows versions have the same value. Admins are allowed to modify his behaviour… Read More »
What is Secure Channel in AD? In Windows AD environments, secure channel provides an encrypted way of communication between clients and domain controllers. By clients I mean different editions of operating systems including client’s operating systems like Windows 10/8/7/vista/XP or server operating systems which operate as Domain Controllers or member servers. In another word when… Read More »
Item-Level Targeting with Group Policy Preferences Item-level targeting is a one of the feature of Group Policy preferences that allows preference settings to be applied to individual users and/or computers within the scope of the Group Policy Object (GPO) that contains the preferences. Policy settings can also be filtered, but there are several important differences… Read More »
Migrate SYSVOL from FRS to DFSR SYSVOL is a shared folder on domain controllers to hold its logon scripts, group policies and other items related to Active Directory. The SYSVOL folder content will get replicated between all the domain controllers in domain. The default path for SYSVOL folder is %SystemRoot%\SYSVOL. This folder path is defined… Read More »