Update for SetSPN – Syntax for SetSPN.exe

Breaking guidance change: Although you can use Setspn -A, you should use Setspn -S instead because -S will verify that there are no duplicate SPNs. However, if you are using Windows Server 2003 or earlier, you will not be able to use the -S switch because it is not available for that platform. In the…

0

Finding the RIDs in your domain video

Here is a video I shot a while back that demonstrates how to use ADSI Edit to find the number of RIDs remaining in your domain. However, you can do this more quickly by running the following command: dcdiag /test:ridmanager /v | find /i "available RID" How to find the RIDs left in your domain…

0

Forest schema version 47: Windows Server 2008 R2 Adprep /forestprep

When you run adprep /forestprep, you are updating the Active Directory schema forest version. Several people have asked, what is the forest schema version for Windows Server 2008 R2. To learn more about adprep and forestprep and schema versions, read Running Adprep.exe (http://technet.microsoft.com/en-us/library/dd464018.aspx). If you run adprep /forestprep for Windows Server 2008 R2, confirm that…

8

A delegation for this DNS server cannot be created because the authoritative parent zone cannot be found or it does not run Windows DNS server.

A common warning message for anyone who has installed Active Directory on Windows Server 2008 or Windows 2008 R2, especially on the first domain controller in a forest or domain is: A delegation for this DNS server cannot be created because the authoritative parent zone cannot be found or it does not run Windows DNS…

17

Incompatibilities with CNG or V3 templates

If you have heard of Certificates Next Generation (silly name, I know), which is why people call them V3 templates at Microsoft most of the time, then you might wonder or already know that there could be some compatibility issues – the same is true for all “new” things. Just like my new office power…

0

Active Directory Troubleshooting

We are developing an Active Directory troubleshooting guide on the TechNet Wiki. Been working on it since February, so it is ready for some feedback and feel free to help us out with comments, feedback, and so on. del.icio.us Tags: Active Directory troubleshooting,AD DS,AD troubleshooting,troubleshooting SPNs

0

DSForum: Event ID 5719 source Netlogon

The DS forum posts, Netlogon error 5719 and Event 5719 Netlogon Problem, have been consolidated into the following TechNet Wiki article: Event ID 5719 source Netlogon (dsforum2wiki) Please look the article over and let us know what you think.  You can edit the Wiki article directly or provide a comment stating what you think should be corrected.  As always,…


Active Directory Troubleshooting "Survival Guide"?

This week we started pulling together resources that will hopefully become a central location to help people troubleshoot Active Directory issues in the Active Directory Troubleshooting Survival Guide. Right we’ve only just begun, but this will be an ongoing effort. Right at the start we had a discussion about whether it should have “Survival Guide”…

3

Registering and Troubleshooting Service Principal Names (SPNs)

Last night I published an article titled Service Principal Names (SPNs) on the TechNet Wiki. Actually, I’ve been working on it on and off this entire week. This is something I was asked to do a while ago by Customer Support Services (CSS). The goal of the article is help administrators resolve issues with SPNs…

4

Other places to find good information

I want to take the opportunity to thank the people who are out there providing information everyday to people using Active Directory. As I say thank you, I will link to their sites, so our readers can find them easily: ActiveDir.org Ask DS (Active Directory Customer Support Services blog) del.icio.us Tags: Active Directory Helpful sites,Active…

2