Hi guys. Two of our domain controllers in one of our offices are having replication issues, with various errors some of which relate to Kerberos. I keep seeing ...Read more

There is a user account (not a domain admin account) that cannot be changed by normal user admins. When the user admins try to change the password through ADUC, the box for “user must change password” at next login cannot be ...Read more

Hello, I see many suggesting a role+characteristics based naming scheme (and some warning against it, citing targeting of hacking attempts). Then I see this: https://mnx.io/blog/a-proper-server-naming-scheme/ suggesting that the actual hardware/vm should be replaceable easily, and that mapping any service directly to ...Read more

I need to configure my AD instance such that regular non-admin users cannot look up any other user information in the same domain. Is there a best practices way to go about it? It’s looking like I’ll have to do ...Read more

I’m getting Adsync 6100 errors. I’m reading a post about enabling inheritance on the user objest that is being problematic. What am I going to break before I do this?

  Hi All, I have request to enable LDAPS on 2 DCs controller’s. I plan on using 3rd party certificate and would like to load balance LDAPs enabled DCs with FQDN [ldaps.domain.com](https://ldaps.domain.com). Do I need to add domain controller FQDNs to the certificate’s ...Read more

  Hi All, I have request to enable LDAPS on 2 DCs controller’s. I plan on using 3rd party certificate and would like to load balance LDAPs enabled DCs with FQDN [ldaps.domain.com](https://ldaps.domain.com). Do I need to add domain controller FQDNs to the certificate’s ...Read more