Active Directory: Migrate SYSVOL Folder from FRS to DFSR

Since Windows Server 2008 and its 2008 domain functional level, replication of the SYSVOL folder is supported by DFSR, before it was done by FRS. If your domain controllers are running Windows 2012R2, it is advisable to use DFSR for the SYSVOL folder. Since Windows Server 2016 (build 1709), it is no longer possible to …

Read more



Active Directory : increase the functional level of the domain and the forest

The functional level of the domain and forest corresponds to the “version” of your Active Directory environment and allows access to more or fewer features depending on the level of each. Mainly this level change occurs when upgrading to Windows when replacing / migrating domain controllers. The version change may also be necessary for the …

Read more



Setting up a read-only domain controller – RODC

Introduction In this article, we are going to have how to set up a read-only domain controller (RODC). This type of controller, as the name suggests, is read-only, so it can not change user attributes or even add objects. There are several implementation scenarios for this type of domain controller, here are two that I …

Read more



Apply a GPO to an Active Directory Group

Introduction In this article, I will explain how to apply a Group Policy (GPO) to an Active Directory group that contains multiple users. The tutorial also applies in case you want to apply the policy to a particular user. Prerequisites Have created the Active Directory group Having created the strategy The policy must be correctly …

Read more



GPO: Installing the FusionInventory Agent

Following the many messages that I can see on the forum regarding the installation of the FusionInventory agent, I will explain how I have been proceeding for several years. In this article, I will explain how to install the FusionInventory agent using a script that runs when the computer starts up. It is possible to …

Read more



GPO: Run a script when the computer starts

Overview

Presentation In this article, we will see how to set up a script that runs at startup of the post using Group Policy (GPO). The advantage of using this type of script is that it is executed with the Administrators rights, which makes it possible to launch software installations on the workstation without any elevation …

Read more



Active directory: Delete a child domain

In the article Active directory: setting up a child domain where I explain how to configure a child domain in an Active Directory environment, I will explain here how to delete a child domain. As a reminder, when setting up the child domain, a trust relationship was created between the two domains and DNS delegation …

Read more



Remove an Active Directory Domain Controller

Supprimer controleur de domaine

In this article, we will see how to remove a domain controller in an Active Directory environment. The deletion is done in two steps: Demote the domain controller: remove the controller configuration. Delete roles. Before downgrading the server, ensure that the server does not have an FSMO role and always have at least 2 active …

Read more



DFS replication resolve error 4012

This article describes how to troubleshoot the DFS Replication Service 4012 error. In the Windows event log you have an error like this: The DFS Replication service stopped replication on the folder to the following local path: C: \ Windows \ SYSVOL \ domain. This server was disconnected from the other partners for a period …

Read more



Printer mapping: GPO and Script

When setting up an Active Directory, one of the things you want to set up automatically is the mapping of printers to users. Prerequisite: Have a server with the Print Service role (optional). It is possible to share a printer from the control panel. Have one or more shared printers. As for the mapping of …

Read more