Tag Info

Hot answers tagged

6

This is because the -properties switch is not a formatting tool, it is intended as a way to receive more information than the default values already included. From the Get-ADOrganizationalUnit article. Specifies the properties of the output object to retrieve from the server. Use this parameter to retrieve properties that are not included in the default ...


5

You would need to use both, to specify which properties to retrieve from the DC, and which ones to select and ultimately display. -Properties * is a potential performance basher since the DSA will need to return every attribute that has a value, including certificates and other binary values you might not have need for In a script utilizing the AD cmdlets I ...


2

If you're buying the domain purely to reserve the name (And that's fine and recommended because you shouldn't be using AD Domain Names that you don't control) then it simply doesn't matter. It doesn't need to resolve to anything externally at all - you're just ensuring that the domain belongs to you and that you can buy certificates for it in future etc. I'd ...


1

All the AD bindings are made on reboot but that means that is has been moved from the OU structure. It might be worth it to have a look over here https://technet.microsoft.com/en-us/library/cc754697.aspx . The computer will only see the change after the reboot.


1

I wouldn't say redoing, but you cannot change existing certificates, because they are digitally signed and any change will break digital signature. They will remain SHA512. Deal with it. In your case you need to reissue and replace problematic certificates. edit1: signature algorithm is server-wide. You cannot designate signature algorithm on template ...


1

It does, yes. It even installs and runs on Server 2008 R2. Having said that, the service itself has been deprecated, so you're going to run into out-of-support issues with DSML even if you move it to a newer OS platform. The current Microsoft solution for communication with AD over web protocols is ADWS (Active Directory Web Services), which you will ...


1

Take another look at the sssd.conf I gave you on your Wheezy SSSD-AD question over on StackExchange. You need the ldap_group_nesting_level = 5 entry to enable nested groups.


1

I just ran into this situation and scoured unsuccessfully for an answer until now. Old Server: Server 2003 with DC(domain1 active), DHCP(disabled), DNS(disabled and role removed) New Server: Server 2008 R2 with NEW DC(domain2 active), NEW DHCP(active), NEW DNS(active) Clients are XP and Win7. Clients were all set to dynamic DNS and DHCP. Ipconfig /renew ...


1

I realize this is a few years old, but I come across this problem a lot at work with our DCs running Server 2003. I've found that if I manually disable the AD account and then re-enable it, it clears whatever hidden flag is tripping the locked message.


1

Just disable the second NIC, join the domain, and restart. Then you can re-enable the other NIC.



Only top voted, non community-wiki answers of a minimum length are eligible