Admin Tips
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
  - Windows Server 2008
    - Admin Tips
      - Active Directory

Knowledge Base Tips topic

[	3440	]	Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base	Last updated: Mar 09, 2010
[	748	]	Windows 2000	Last updated: Feb 18, 2010
[	489	]	Admin Tips	Last updated: Feb 18, 2010
[	123	]	Registry Tips	Last updated: Feb 18, 2010
[	136	]	User Tips	Last updated: Jan 27, 2010
[	523	]	Windows 2003	Last updated: Feb 18, 2010
[	1155	]	Windows NT	Last updated: Jul 22, 2009
[	197	]	Windows Server 2008	Last updated: Mar 09, 2010
[	188	]	Windows Vista	Last updated: Mar 03, 2010
[	628	]	Windows XP	Last updated: Jan 14, 2010

Active Directory Tips

Sort By: Title | Date | Rating

Verifying DNS Server Configuration Using Nslookup: Date - Feb 24, 2010; Rating - 3; Author - Mitch Tulloch; How to verify the configuration of a DNS server by using Nslookup.
Verifying DNS Server Configuration Using the DNS Console: Date - Feb 24, 2010; Rating - 3; Author - Mitch Tulloch; How to verify the configuration of a DNS server by performing test queries against it.
What Is Offline Domain Join?: Date - Feb 18, 2010; Rating - 3; Author - Nirmal Sharma; This article explains a new feature in Windows Server 2008 R2 called "Offline Domain Join". This article applies to Windows Server 2008 R2 only.
MaximumPasswordAge DisablePasswordChange On Client Computers: Date - Jan 27, 2010; Rating - 3; Author - Nirmal Sharma; This article explains how a domain client computer changes its password with the domain controller.
A Quick Tip To Check If DCs Can Register Records With DNS Dynamically: Date - Jan 21, 2010; Rating - 4.5; Author - Nirmal Sharma; This article explains a registry key which you can query to know if DCs are using Dynamic DNS protocol to register records with DNS Servers.
How To Change The Default DNS Interval For Domain Controllers?: Date - Jan 14, 2010; Rating - 1; Author - Nirmal Sharma; This article explains how you can use a registry entry to change the default DNS Referesh interval for a domain controller.
How To Designate A Domain User To Manage A RODC?: Date - Jan 14, 2010; Rating - Not Rated; Author - Nirmal Sharma; This article explains how you can delegate administration of RODC to a domain user.
Configuring Zone Transfers using DNSCMD: Date - Nov 05, 2009; Rating - 5; Author - Mitch Tulloch; How to configure and force zone transfers using DNSCMD.
Configuring Conditional Forwarders using DNSCMD: Date - Nov 05, 2009; Rating - 5; Author - Mitch Tulloch; How to configure a conditional forwarder for your DNS server from the command-line.
Configuring Forwarders using DNSCMD: Date - Nov 05, 2009; Rating - 3; Author - Mitch Tulloch; How to configure a forwarder for your DNS server from the command-line.
Creating Resource Records using DNSCMD: Date - Oct 29, 2009; Rating - 5; Author - Mitch Tulloch; How to use the DNSCMD command to create a resource record from the command-line.
Creating a Reverse Lookup Zone using DNSCMD: Date - Oct 29, 2009; Rating - Not Rated; Author - Mitch Tulloch; An example of how to use the DNSCMD command to create a reverse lookup zone from the command-line.
Creating a Forward Lookup Zone Using DNSCMD: Date - Oct 29, 2009; Rating - 3; Author - Mitch Tulloch; Here are five examples of how to use the DNSCMD command to create forward lookup zones from the command-line.
A Quick Tip To Strict AD Replication To A Specific Port: Date - Oct 22, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains a registry entry which can be used to strict the AD Replication traffic to a specific port.
A Quick Tip To Allow DSRM Account To Log On Normally: Date - Oct 22, 2009; Rating - 5; Author - Nirmal Sharma; This article explains a registry heck which can be used to allow DSRM User Account to log on normally in Windows Server 2008. This applies to Windows Server 2008 only.
A Quick Tip To Place Authenticating DC In DFS Referral List: Date - Oct 08, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains a registry entry which can be used to place the authenticating domain controller on top of the DFS Referral list.
A Quick Tip To Alter Default Behaviour Of GlobalNameZones: Date - Oct 08, 2009; Rating - 5; Author - Nirmal Sharma; This article explains how you can change the default behaviour of GlobalNameZone zone.
A Quick Tip To Get List Of RODC Administrators: Date - Oct 08, 2009; Rating - 1; Author - Nirmal Sharma; This article explains the registry key which contains the list of RODC Administrators. This article applies only to Windows Server 2008 RODC.
A Quick Tip To Check The Backup Status Of Each NC In Active Directory Forest: Date - Oct 01, 2009; Rating - 1; Author - Nirmal Sharma; This article shows how you can see the backup status of each Naming Context in Active Directory using command line tool.
How To Use DsQuery To Find All The Domain Controllers In The Domain or Forest?: Date - Oct 01, 2009; Rating - 3; Author - Nirmal Sharma; This article explains DsQuery commands which you can use to find all the domain controllers.
What Is Strict Replication and How Do You Enable?: Date - Sep 08, 2009; Rating - 5; Author - Nirmal Sharma; This article explains Strict Replication and how you enable it on the domain controllers in the Forest.
Viewing the zones on a DNS server: Date - Sep 02, 2009; Rating - Not Rated; Author - Mitch Tulloch; You can use the Dnscmd command to view a list of the zones on a DNS server.
Verifying SRV resource records using Nslookup: Date - Sep 02, 2009; Rating - Not Rated; Author - Mitch Tulloch; You can use the Nslookup command to verify that the SRV resource records needed by Active Directory have been created properly when Dcpromo was run on the server.
Targeting policy for Vista computers: Date - Jul 29, 2009; Rating - 5; Author - Mitch Tulloch; If you have a mix of XP and Vista computers in a department or location, how can you configure a GPO so that it is only processed by the Vista computers?
Quickly edit a GPO: Date - Jul 22, 2009; Rating - 1; Author - Mitch Tulloch; Gpedit.msc has some command-line options that let you quickly edit targeted Group Policy OPbjects.
Using site-linked GPOs: Date - Jul 07, 2009; Rating - Not Rated; Author - Mitch Tulloch; Group Policy Objects can be linked to domains, OUs and sites, but when might you want link a GPO to a site?
Group Policy Offers New Functionality in Windows Server 2008: Date - May 12, 2009; Rating - 2; Author - Nirmal Sharma; This article explains the improvements to the Group Policy in Windows Server 2008.
Domain Controller Options Not Supported By RODC: Date - May 07, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains the DC Options which are not supported by a RODC.
DS Auditing in Windows Server 2008: Date - May 06, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains the new functionality offered by auditing in Windows Server 2008.
Fine Grained Password Policies Facts: Date - May 06, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article lists some facts about the FGPP.
Multiple PSOs To One User?: Date - Apr 23, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains the conflict which arise when multiple PSOs are applied to a user.
Troubleshooting Group Policy: Date - Apr 22, 2009; Rating - Not Rated; Author - Mitch Tulloch; Here's a three-step approach to troubleshooting Group Policy issues in Windows Vista and later.
Using GPLogView: Date - Apr 22, 2009; Rating - 5; Author - Mitch Tulloch; Some tips on using the GPLogView.exe command-line tool for troubleshooting Group Policy issues.
A Quick Tip To Configure Time Service In Active Directory Environment: Date - Mar 24, 2009; Rating - 3; Author - Nirmal Sharma; This article explains how you can configure time service for an active directory environment.
AvoidPDCOnWan and PDC Emulator: Date - Mar 19, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains how you can control a domain controller contacting a PDC which is out of the site.
Tip To Check Network and DNS Settings Before Deploying A DC or Domain: Date - Mar 19, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains a small tip or syntax of a command you can use to check the network and DNS settings before deploying a child domain or additional domain controller in an existing forest.
What is Replication Queue and who manages the Queue?: Date - Mar 19, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains the mechanim Bridgehead Servers use to process the replication changes.
SYSVOL Replication Notes: Date - Mar 17, 2009; Rating - 5; Author - Nirmal Sharma; This article explains some notes related to the FRS and SYSVOL replication.
What All Ports Are Rrequired By Domain Controllers And Client Computers?: Date - Feb 04, 2009; Rating - 4.2; Author - Nirmal Sharma; This article explains the key port requirement for Client computers and Domain Controllers communicating with each other.
A Quick Tip To Check If PDC Emulator Is Working: Date - Feb 04, 2009; Rating - 4.5; Author - Nirmal Sharma; This article explains how you can tell if PDC Emulator in an Active Directory Domain is working.
How To Browse NTDS.DIT Offline: Date - Jan 22, 2009; Rating - 5; Author - Nirmal Sharma; This article shows how you can browse the NTDS.DIT (Active Directory database file) offline by using the DSAMIN command in Windows Server 2008.
Migrating ADM Files to the New ADMX Format: Date - Dec 04, 2008; Rating - 5; Author - Chris Sanders; The new Group Policy ADMX format is XML-based and provides a myriad of enhancements. Here we look at how to migrate old ADM files to this new format.
Service Records of Domain Controller used by Various Services and Components: Date - Dec 03, 2008; Rating - 2.8; Author - Nirmal Sharma; This article explains what all components or Services use the SRV records of domain controller.
A Quick Tip To Fix DC SRVs in Active Directory Domain: Date - Dec 02, 2008; Rating - 1; Author - Nirmal Sharma; This article explains how you can use few simple commands to fix the SRV records of a Domain Controller in an Active Directory Domain.
When Should You Restart FRS?: Date - Nov 19, 2008; Rating - Not Rated; Author - Nirmal Sharma; This article discusses the Regsitry entries of File Replication Service and when should you restart the FRS service for the changes to take effect.
Which DC Is Selected When Promoting A Member Server To DC?: Date - Nov 11, 2008; Rating - 2.7; Author - Nirmal Sharma; This article discusses the a mechanism used by the DCPromo.exe to select a DC when promoting a member server to Domain Controller.
FRS D2/D4 - When Should You Use Them?: Date - Nov 11, 2008; Rating - Not Rated; Author - Nirmal Sharma; This article discusses about D2 and D4 of File Replication Service in Active Directory and when should you use them?
How To Know The Primary Member of A SYSVOL Replica Set?: Date - Nov 06, 2008; Rating - 2; Author - Nirmal Sharma; This article explains how to determine the Primary Member of a SYSVOL Replica Set in an Active Directory domain.
A Quick Tip To Make Sure FRS Is Working In A Domain: Date - Oct 29, 2008; Rating - Not Rated; Author - Nirmal Sharma; This article explains a small mechanism you can use to make sure FRS is working.
Accessing Directory Services Restore Mode Remotely: Date - Sep 25, 2008; Rating - 5; Author - Chris Sanders; Directory Services Restore Mode can be accessed remotely using some unique procedures. Here we look at how this is done.
How To Check If A PSO Has Been Applied To A User Or Group: Date - Sep 11, 2008; Rating - 5; Author - Nirmal Sharma; Checking users' password policies in Windows Server 2008 domain.
Securing DNS with Secure Dynamic Updates: Date - Sep 04, 2008; Rating - Not Rated; Author - Chris Sanders; DNS is crucial to the operation of a DNS domain. Using Secure Dynamic Updates is something you can do to make your DNS infrastructure a bit more secure.
Preparing an Existing Domain for a Windows Server 2008 Domain Controller: Date - Aug 14, 2008; Rating - 3.4; Author - Chris Sanders; Implementing a Windows Server 2008 domain controller in your already existing Windows Server 2003 domain requires a bit of prep work. Here is what needs to be done.
A Quick Tip to designate a domain controller for client authentications.: Date - Aug 13, 2008; Rating - 4.8; Author - Nirmal Sharma; This article explains the use of SRV priority. This applies to Windows 2000, Windows 2003 and Windows Server 2008.
How does Windows Server 2008 resolve Domain Controller Load Balancing problems: Date - Aug 07, 2008; Rating - 4; Author - Nirmal Sharma; This article discusses a new Group Policy setting which solves the Load Balancing issues with the domain controllers.
Promoting Server Core to a Domain Controller: Date - Jun 17, 2008; Rating - 2.3; Author - Chris Sanders; This quick tip will show you how to promote a Windows Server 2008 Server Core device to domain controller status.
A Quick Tip to make sure Adprep /ForestPrep for Windows Server 2008 has run successfully: Date - Jun 04, 2008; Rating - 3.6; Author - Nirmal Sharma; Adprep /ForestPrep must be executed to introduce a Windows Server 2008 in an existing Windows 2000 or Windows 2003 domain environment. This will show you how to make sure that it has run successfully.
Introducing the Read-Only Domain Controller: Date - Jun 03, 2008; Rating - 4.5; Author - Chris Sanders; A new Windows Server 2008 feature that is drawing great praise is the introduction of the Read-Only Domain Controller. Let’s look at what this means to you.
Creating a Central Store for Group Policy Templates: Date - May 28, 2008; Rating - 3; Author - Chris Sanders; Windows Server 2008 and Windows Vista utilize the ADMX format for a more efficient group policy implementation in regards to administrative templates. You can better manage administrative templates for group policy by using a central store.