Setting up a read-only domain controller – RODC

Introduction In this article, we are going to have how to set up a read-only domain controller (RODC). This type of controller, as the name suggests, is read-only, so it can not change user attributes or even add objects. There are several implementation scenarios for this type of domain controller, here are two that I …

Read more



Apply a GPO to an Active Directory Group

Introduction In this article, I will explain how to apply a Group Policy (GPO) to an Active Directory group that contains multiple users. The tutorial also applies in case you want to apply the policy to a particular user. Prerequisites Have created the Active Directory group Having created the strategy The policy must be correctly …

Read more



Active directory: Delete a child domain

In the article Active directory: setting up a child domain where I explain how to configure a child domain in an Active Directory environment, I will explain here how to delete a child domain. As a reminder, when setting up the child domain, a trust relationship was created between the two domains and DNS delegation …

Read more



Remove an Active Directory Domain Controller

Supprimer controleur de domaine

In this article, we will see how to remove a domain controller in an Active Directory environment. The deletion is done in two steps: Demote the domain controller: remove the controller configuration. Delete roles. Before downgrading the server, ensure that the server does not have an FSMO role and always have at least 2 active …

Read more



Printer mapping: GPO and Script

When setting up an Active Directory, one of the things you want to set up automatically is the mapping of printers to users. Prerequisite: Have a server with the Print Service role (optional). It is possible to share a printer from the control panel. Have one or more shared printers. As for the mapping of …

Read more



Enable Windows Active Directory Recycle Bin 2012/2016/2019

Delete Objects - Trash

The Active Directory Recycle Bin is a feature that came with Windows 2008R2, which is disabled by default. To activate the recycle bin, the domain and drill level must be at least 2008R2. Once the trash is activated, it is not possible to go back. To use the Active Directory Recycle Bin, use the ADAC …

Read more



Approval relationship between this workstation and the primary domain failed

Windows 7/8/2008/2012 Here is how to fix this problem : 1. Log in with a local administrator account 2. Launch a command window in administratorr 3. Enter the following command: NETDOM RESETPWD /s:fqdn.controleur.de.domaine /ud:[email protected] /pd:MotDePasse 4. Restart the computer Windows 10/2016/2019 With Windows 10, there are several solutions to fix the problem, which we will …

Read more



GPO: Make users administrator of their computer

Presentation In this tutorial, we are going to have how to set up a GPO to make the admin domain users of their computer. The goal is to add the Domain Users group in the Administrators 1 group of the user station. The Domain Admins group is already a member of the group. Group Policy …

Read more



Exchange 2016: Installation and Configuration

Exchange 2016 - page de connexion

Introduction In this tutorial, we will see how to install and configure Exchange 2016. Exchange is a mail server designed by Microsoft, it is the professional version of Hotmail (Outlook). Environment Prérequis 1. On the server open a PowerShell command prompt and enter the command below to install the necessary roles. 2. Restart the server. …

Read more



Active directory: How to set up a child domain

Domaine enfant objectif

In this tutorial, we will see how to put a child domain in an Active Directory tree. A child domain is a subdomain of one of the component domains in your Active Directory forest. Subdomain segmentation allows for logical partitioning of the domain. Active Directory and also to apply rights delegations on children.