Archive for 2008

How to find out your server uptime

Using Uptime utility from Microsoft you can get your server uptime (i.e time since the last reboot) which can come in handy particularly when you are trying to troubleshoot a server’s unexpected reboot and failures. Uptime.exe can be used to display the current uptime of the local or remote system. Optionally, it can also scan [...]

  • Find out the available RIDs on your DC

    In a previous post we discussed the FSMO Roles and we know that one of the FSMO Roles is RID Master. What a RID Master does and whats its significant, let’s recap. RID Master – Each object must have a globally unique number (GUID). The RID master makes sure each domain controller issues unique numbers [...]

  • How to rename a Windows Server 2008 domain

    Previously you have been able to use RENDOM utility provided by Microsoft to rename your Window 2000 and Windows Server 2003 domains. However in Windows Server 2008 domain you don’t have to separately install Rendom utility. It gets installed as part of “Active Directory Domain Services” role when you promote a server to the DC [...]

  • Prevent users from joining workstations to domain (at their will)

    Every domain has a default setting for ms-DS-MachineAccountQuota value 10. This means that any user can add up to 10 machines to a domain. You can modify this object in directory by using ADSIedit tool to prevent this behavior. Warning: Using ADSIedit can have adverse effects on your Active Directoy environment, if not handled with [...]

  • Find out where and why an Account Lockout happened

    Where Account Lockouts save us from brute force password attacks and help us standardize our environment for password policies, sometimes it can be painful to troubleshoot and find out why and where it happened. Microsoft does provide us with the ‘Account Lockout Management Tools’ suite which can be very handy to diagnose the root cause [...]

  • Import AD subnets into Reverse Lookup Zones

    Sometimes you have a task on your hand for your Active Directory environment but it isn’t an easy one, or lets just say that not many people have come across having a need for it (so not a whole lot you can google for). I recently had a situation like this. Basically in our AD [...]

    posted in Active Directory, Windows by Rick

  • Reset Active Directory Restore Mode password

    Maybe the most forgotten password is the one for Directory Services Restore Mode (DSRM) because it’s created only when a DC is built, and used only during critical DC recovery operations, which hopefully does not happen very often. Not knowing this password can prevent a successful recovery. If you don’t know your DSRM password and [...]

  • Installing VMAdditions on Windows Server 2008 Core

    Installing VMAdditions on Windows Server 2008 Core can be tricky. In my virtual lab I have Virtual Server 2005 R2 SP1, I recently decided to test drive the much hyped Server Core from the Windows Server 2008 lineup. For those of you who don’t know what Server Core is and what it will cater to; [...]

  • A quick way to tell where your FSMOs are

    In my last post, I talked about what FSMO roles are how to retrieve them thru GUI. In this post I am showing you a quick way to tell what DCs are holding which FSMO roles in your forest/domain. It can be done by running NETDOM QUERY FSMO command at one of your DCs. Notice, [...]

  • So really, what are FSMO roles ?

    FSMO (pronounced – fiz-mo) roles are essentially domain controllers with higher power than their peer DCs hence the name Flexible Single Master Operation, the word flexible is perhaps in there since you do have the flexibility to move these roles around (the word floationg has been referenced at some places as well). From the name [...]

  • Updating Schema for Windows Server 2008

    Updating schema for your forest is not something you do very often, however, it is a requirement when you introduce a Windows server 2003 DC in a Windows 2000 domain or when you introduce the first Windows Server 2008 in your Windows Server 2003 domain. (There may be other times when you have to do this such as [...]

  • Extend your Windows Server 2008 Eval

    You can extend the Windows Server 2008 Evaluation copy you have running for trial/demo/testing purpose for up to 240 days now. “Evaluating Windows Server 2008 software does not require product activation. Any edition of Windows Server 2008 may be installed without activation, and it may be evaluated for 60 days. Additionally, the 60-day evaluation period [...]

  • Check your DCs replication

    Apart from great tools such as command line Repadmin and GUI based Replmon, Dsastat (Windows Support Tool) is a command line utility that allows you to check your DCs replications, it compares and detects differences between directory partitions on domain controllers. The tool retrieves capacity statistics such as megabytes per server, objects per server, and megabytes [...]

  • Group Policy Basics

    Group Policy has been an extremly handy tool for last few years for System Admins, yet an equally complex topic to digest and you need to know it inside-out in order to effectively troubleshoot the problems that occur from time to time in your environment. Lets start with the basics of Group Policy Mechanism. A GPO is a virtual [...]

  • 24 Hours of Exchange Server 2007

    I would highly recommened watching this webcast series by Harold Wong, Micrsosoft on Exchange Server 2007. He starts from the basics, lays down a solid foundation and builds on some of the advanced topics and techniques. I think its worth watching If you are looking to upgrade your current Exchange 2000 or 2003 organization or moving [...]

  •  
    (c) 2008 - 2012 Shariq Sheikh. All Rights Reserved.