Press "Enter" to skip to content

Posts tagged as “Active Directory”

LAPS – Securing Local Administrator Accounts

0

LAPS (Local Administrator Password Solution) is a free solution provided by Microsoft that allows the security of workstations. LAPS allows for each computer in OR to randomly generate a password for the local Administrator account and store it in an Active Directory attribute (ms-Mcs-AdmPwd). It ‘relies on the SID of the account which is structured in the same way on…

Active Directory: Migrate SYSVOL Folder from FRS to DFSR

0

Presentation Since Windows Server 2008 and its 2008 domain functional level, replication of the SYSVOL folder is supported by DFSR, before it was done by FRS. If your domain controllers are running Windows 2012R2, it is advisable to use DFSR for the SYSVOL folder. Since Windows Server 2016 (build 1709), it is no longer possible to install a domain controller…


Active Directory : increase the functional level of the domain and the forest

0

Presentation The functional level of the domain and forest corresponds to the “version” of your Active Directory environment and allows access to more or fewer features depending on the level of each. Mainly this level change occurs when upgrading to Windows when replacing / migrating domain controllers. The version change may also be necessary for the installation of new service…

Setting up a read-only domain controller – RODC

0

Introduction In this article, we are going to have how to set up a read-only domain controller (RODC). This type of controller, as the name suggests, is read-only, so it can not change user attributes or even add objects. There are several implementation scenarios for this type of domain controller, here are two that I have already used: On remote…

Active directory: Delete a child domain

0

In the article Active directory: setting up a child domain where I explain how to configure a child domain in an Active Directory environment, I will explain here how to delete a child domain. As a reminder, when setting up the child domain, a trust relationship was created between the two domains and DNS delegation on the parent domain’s controlling…

Remove an Active Directory Domain Controller

0

In this article, we will see how to remove a domain controller in an Active Directory environment. The deletion is done in two steps: Demote the domain controller: remove the controller configuration. Delete roles. Before downgrading the server, ensure that the server does not have an FSMO role and always have at least 2 active Active Directory controllers. If you…

Printer mapping: GPO and Script

0

When setting up an Active Directory, one of the things you want to set up automatically is the printer mapping to the different users. Before setting up GPOs, you must have shared your printers. As for mapping network drives, I’ll introduce you to two ways, the first using Group Policy (GPO) and using a vbs script that should run when…

Enable Windows Active Directory Recycle Bin 2012/2016/2019

0

Introduction The Active Directory Recycle Bin is a feature that came with Windows 2008R2, which is disabled by default. To activate the recycle bin, the domain and drill level must be at least 2008R2. Once the trash is activated, it is not possible to go back. To use the Active Directory Recycle Bin, use the ADAC (Active Directory Administrative Center)…

GPO: Make users administrator of their post

0

Presentation In this tutorial, we are going to have how to set up a GPO to make the admin domain users of their post. The goal is to add the Domain Users group in the Administrators 1 group of the user station. The Domain Admins group is already a member of the group. How to 1. From a domain controller,…

It looks like you're using an adblocker.
We use ads to keep our content free. Please support us by turning off your adblocker.