Active Directory Migration Tool v3.2 (ADMT) and Migration Guide released

ADMT v3.2 has been updated and re-released at https://connect.microsoft.com/site1164. To download the tool, you will need to sign in to the Connect site and sign up for the "Azure AD connection program." The tool version remains 3.2 because the update does not include any new functionality. The main changes were to allow the tool to…


Introducing Active Directory Administrative Center

Active Directory Administrative Center provides network administrators with an enhanced Active Directory data management experience and a rich graphical user interface (GUI). Administrators can use Active Directory Administrative Center to perform common Active Directory object management tasks (such as user, computer, group, and organization units management) through both data-driven and task-oriented navigation. Administrators can use the enhanced Active Directory Administrative…

20

A delegation for this DNS server cannot be created because the authoritative parent zone cannot be found or it does not run Windows DNS server.

A common warning message for anyone who has installed Active Directory on Windows Server 2008 or Windows 2008 R2, especially on the first domain controller in a forest or domain is: A delegation for this DNS server cannot be created because the authoritative parent zone cannot be found or it does not run Windows DNS…

17

Clarification regarding the status of Identity Management for Unix (IDMU) & NIS Server Role in Windows Server 2016 Technical Preview and beyond

Note: The original blog article has been updated to address a number of questions we received and to further clarify what has been removed and what remains. Due to the Active Directory Documentation Blog being retired in October 2015, the comments have been removed. Please post your questions/comments in the Directory Services TechNet Forum. With…


New Djoin.exe utility in Windows Server 2008 R2

Windows Server 2008 R2 domain controllers include a new feature named Offline Domain Join. A new utility named Djoin.exe lets you join a computer to a domain, without contacting a domain controller while completing the domain join operation, by obtaining a blob from a Windows Server 2008 R2 domain controller at an earlier point in time. The computer is…


Windows Server 2008 and Windows Server 2008 R2 and RSAT Active Directory Users and Computers Automate Metadata Cleanup

Metadata cleanup is a required procedure after a forced removal of Active Directory Domain Services (AD DS). You perform metadata cleanup on a domain controller in the domain of the domain controller that you forcibly removed. Metadata cleanup removes data from AD DS that identifies a domain controller to the replication system. Metadata cleanup also…

10

After installing the AD DS server role on Windows Server 2012, where is the option to configure the DC?

Some users have run into this problem in Windows Server 2012 when they try to install a domain controller using Server Manager. They start the Add Server Roles Wizard in Server Manager and run through the steps to install Active Directory Domain Services (AD DS) and when they get to this page, they click Close….


Conditions for Kerberos to be used over an External Trust

We have updated the TechNet article, Technologies for Federating Multiple Forests, to include the prerequisites for employing Kerberos over external trusts. Highlights of the updates from the article are: The trust has to be created using the fully qualified domain name (FQDN). Kerberos referral fails if the FQDN is missing from the TDO. Windows Server 2003 Add Trust…


Forest schema version 47: Windows Server 2008 R2 Adprep /forestprep

When you run adprep /forestprep, you are updating the Active Directory schema forest version. Several people have asked, what is the forest schema version for Windows Server 2008 R2. To learn more about adprep and forestprep and schema versions, read Running Adprep.exe (http://technet.microsoft.com/en-us/library/dd464018.aspx). If you run adprep /forestprep for Windows Server 2008 R2, confirm that…

8