I currently have two domains with bi-directional parent/child trust:- Domain A (Forest root domain)- Domain B (child domain in forest)   I’m trying to give users in Domain A access to resources in Domain B through a domain local group in Domain ...Read more

I’m setting up AD (WS2016) at home to admin my kids PCs. What would anyone recommend for limiting their accounts, I’ve blocked the Control Panel and CLI and limiting logon times. I would describe their tech knowledge as enough to be ...Read more

Can someone advise open source tool for self service password reset for Domain users. Can someone advise open source tool for self service ...Read more

Evening everyone…so I have Server 2012 and with my current on-prem ad server I’m finding that some some people are showing as: last name, first name and ...Read more

As the title says. We have a request for an end user to be able to add/remove colleagues from an on-premise active directory distribution group. Is ...Read more

I need to configure my AD instance such that regular non-admin users cannot look up any other user information in the same domain. Is there a best practices way to go about it? It’s looking like I’ll have to do ...Read more

DC 2012 migrate to 2022 …failure Hi , I think I am screwed :(… I had an old server 2012 that was dying and I ...Read more

What happen if PDC goes down?

Thought Exercise: AD Greenfield As a though exercise and to improve my mental model of AD security & resilience, I tasked myself to plan a ...Read more