Admin Tips
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
  - Windows 2003
    - Admin Tips
      - Active Directory

Knowledge Base Tips topic

[	2903	]	Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base	Last updated: May 08, 2008
[	657	]	Windows 2000	Last updated: Nov 13, 2007
[	432	]	Admin Tips	Last updated: Nov 13, 2007
[	99	]	Registry Tips	Last updated: Mar 18, 2005
[	126	]	User Tips	Last updated: May 04, 2005
[	450	]	Windows 2003	Last updated: May 07, 2008
[	440	]	Admin Tips	Last updated: May 07, 2008
[	5	]	Registry Tips	Last updated: Apr 18, 2006
[	3	]	User Tips	Last updated: Jun 30, 2005
[	1141	]	Windows NT	Last updated: Jun 15, 2006
[	583	]	Admin Tips	Last updated: Oct 19, 2005
[	415	]	Registry Tips	Last updated: Mar 22, 2006
[	143	]	User Tips	Last updated: Jun 15, 2006
[	8	]	Windows Server 2008	Last updated: Apr 30, 2008
[	8	]	Admin Tips	Last updated: Apr 30, 2008
[	62	]	Windows Vista	Last updated: May 08, 2008
[	60	]	Admin Tips	Last updated: May 08, 2008
[	1	]	Registry Tips	Last updated: Mar 26, 2008
[	1	]	User Tips	Last updated: Feb 08, 2007
[	584	]	Windows XP	Last updated: Apr 23, 2008
[	319	]	Admin Tips	Last updated: Dec 19, 2007
[	80	]	Registry Tips	Last updated: Aug 07, 2007
[	185	]	User Tips	Last updated: Apr 23, 2008

Active Directory Tips

Sort By: Title | Date | Rating

Creating Dummy (Test) Users: Date - Mar 20, 2008; Rating - 2.8; Author - Mitch Tulloch; How to create a bunch of dummy or test users quickly in Active Directory.
Troubleshooting the Domain Controller Locater Process: Date - Jan 15, 2008; Rating - 1; Author - Chris Sanders; The more complex the network, the more complex the problem that can occur is. Here is a quick run down on some of the steps required in troubleshooting the domain controller locater process.
Understanding the DNS Resolver Host File: Date - Jan 10, 2008; Rating - 4.5; Author - Chris Sanders; The DNS Resolver host file can be used to increase performance of DNS services as well as a few other things. This tip aims at giving a better understanding of the DNS resolver host file and its capabilities.
Using the Employee-ID attribute in Active Directory: Date - Dec 20, 2007; Rating - 1; Author - Mitch Tulloch; Using the Employee-ID attribute in Active Directory.
Finding global catalog servers: Date - Dec 18, 2007; Rating - Not Rated; Author - Mitch Tulloch; How to find all GCs in a domain
Prevent accidental deletion of OUs: Date - Dec 12, 2007; Rating - Not Rated; Author - Mitch Tulloch; Trying to prevent accidental deletion of OUs
Editing the DNS Root Hints Files: Date - Dec 06, 2007; Rating - Not Rated; Author - Chris Sanders; DNS Root Hints are essential for the location of records that takes place during DNS recursion. Here are a couple of quick tips regarding DNS Root Hints.
Missing Delegation tab: Date - Nov 08, 2007; Rating - Not Rated; Author - Mitch Tulloch; Why the Delegation tab might be missing.
Finding schema differences: Date - Nov 06, 2007; Rating - 1; Author - Mitch Tulloch; How to find schema differences between two forests.
Dumping group memberships: Date - Oct 09, 2007; Rating - Not Rated; Author - Mitch Tulloch; A useful tool for dumping groups and membership info.
Port 445 and trust creation: Date - Oct 04, 2007; Rating - 1; Author - Mitch Tulloch; How port 445 is used in trust creation
Using AGPM for Advanced Group Policy Delegation: Date - Sep 05, 2007; Rating - Not Rated; Author - Chris Sanders; Microsoft’s AGPM tool is a great way to have an extra layer of security when managing group policy on your network.
Change Management Using AGPM: Date - Aug 09, 2007; Rating - 3.5; Author - Chris Sanders; Keeping track of Group Policy changes can be a daunting task if done manually. Luckily, Microsoft’s AGPM utility makes this process a whole lot easier.
Enabling Windows Firewall on domain controllers: Date - Aug 08, 2007; Rating - 3.7; Author - Mitch Tulloch; Steps for enabling WF on domain controllers.
Identifying Unused Accounts: Date - Jul 11, 2007; Rating - 4.3; Author - Mitch Tulloch; How to identify unused user accounts.
Schema vs. Enterprise vs. Domain Admins: Date - Jun 20, 2007; Rating - 2; Author - Mitch Tulloch; Domain admins can basically do anything, anywhere in the forest.
Exempting User Accounts from Domain Password Policies: Date - Jun 14, 2007; Rating - 1; Author - Mitch Tulloch; There's one exemption to how domain password policies are applied.
Preventing Orphaned GPO’s: Date - Jun 13, 2007; Rating - 3; Author - Chris Sanders; When you remove a computer from a domain there are a few steps you should take to ensure that its GPO settings are removed properly as well.
Forcing Group Policy to Run at Startup: Date - Jun 12, 2007; Rating - 5; Author - Chris Sanders; Group policy can be quirky in the way it runs at startup, often taking two or three reboots before it actually applies to a machine. Here we are going to look at the cause of this and how to fix it.
Group Membership in Multi-Forest Scenarios: Date - May 30, 2007; Rating - Not Rated; Author - Mitch Tulloch; Clearing up uncertainty around some Microsoft documentation on how groups can be nested.
Active Directory replication in a multilingual environment: Date - May 29, 2007; Rating - 1; Author - Mitch Tulloch; Active Directory replication in a multilingual environment
Prevent saving to desktop: Date - May 10, 2007; Rating - 2.7; Author - Mitch Tulloch; How to prevent users from cluttering up their desktops with files.
Disabling network configuration settings using Group Policy: Date - May 08, 2007; Rating - 2; Author - Mitch Tulloch; How to disable network configuration settings using Group Policy
Check for problems with GPOs: Date - May 02, 2007; Rating - 2.5; Author - Mitch Tulloch; How to check for possible problems with your GPOs.
Comparing RSoP before and after: Date - Apr 26, 2007; Rating - 5; Author - Mitch Tulloch; How to compare RSoP before and after making changes to your Group Policy infrastructure.
Pre-staging computer accounts: Date - Apr 25, 2007; Rating - 3.5; Author - Mitch Tulloch; How to ensure client computers are not left in an unmanaged state after joining a domain.
Group Policy in mixed environments: Date - Apr 24, 2007; Rating - Not Rated; Author - Mitch Tulloch; How to target Group Policy differently for different OSes.
How to remove unwanted local user accounts: Date - Apr 10, 2007; Rating - 3.8; Author - Mitch Tulloch; How to get rid of those pesky local user accounts on your workstations, or at least mitigate their unwanted presence.
Setting Up Disk Quotas with Group Policy: Date - Apr 03, 2007; Rating - Not Rated; Author - Chris Sanders; Setting up disk quotas manually is good for small networks but for larger ones group policy can make this a lot easier.
Get control of your severs using Startup/Shutdown Script: Date - Oct 18, 2006; Rating - 3.3; Author - Santhosh Sivarajan; In many situations we need to reset the Local Administrator password and add Domain Admins to the Local Administrator group on a server or client machine without visiting each machine. If you don’t know the password and don’t have access to the severs, you can run this simple script as a Startup/Shutdown script in conjunction with Group Policy.
Forcing Active Directory Replication: Date - Jul 27, 2006; Rating - 4; Author - Chris Sanders; There may be some instances where you need to force replication between active directory replication partners. Here I will show you one method of doing this.
Authoritative vs. Non-Authoritative Restoration of Active Directory: Date - Jul 20, 2006; Rating - 4; Author - Chris Sanders; It is the absolute worst case scenario possible; your domain controller has crashed. So what type of restore do you do?
Default GPO Permissions: Date - Jul 13, 2006; Rating - 4.4; Author - Chris Sanders; It is very important to assign appropriate permissions to every GPO you create. Here I list the default permissions given to a new GPO.
Increase file server performance: Date - Jul 12, 2006; Rating - 2.9; Author - Mitch Tulloch; Don't use your domain controller as a file server--here's why.
Why do we still need WINS?: Date - Jul 11, 2006; Rating - 4.2; Author - Mitch Tulloch; Why do we still need WINS servers on AD networks?
How to change membership in groups based on attributes of users in AD automatically: Date - Jun 01, 2006; Rating - 3; Author - Rostislav Soukup; If your company has a complicated structure, you may need to filter members of your security or distribution groups automatically based on changes to some attribute of users in Active Directory – let's say Department.
Web-based AD management: Date - May 31, 2006; Rating - 2.3; Author - Mitch Tulloch; A web-based interface to Active Directory you should know about.
Pruning Old Computer Accounts in AD: Date - May 25, 2006; Rating - 4.5; Author - Chris Sanders; In large organizations the task of keeping Active Directory cleansed of inactive computer accounts can be daunting. Here are a few ways to ease the process.
Avoiding Legacy Built-in Groups: Date - May 10, 2006; Rating - 4.7; Author - Mitch Tulloch; How you can avoid using legacy built-in groups to grant admin-level privileges.
Who's logged on?: Date - Apr 06, 2006; Rating - 3.2; Author - Mitch Tulloch; How to tell who's currently logged on to an Active Directory domain.
Configuring Wireless Security Settings via GPO: Date - Mar 23, 2006; Rating - 3.1; Author - Chris Sanders; Using Group Policy wireless extensions you can more easily manage security and encryption settings for your networks wireless clients.
Managing SRV Records in DNS: Date - Mar 21, 2006; Rating - 2.3; Author - Mitch Tulloch; Tip for troubleshooting SRV records.
Quick tips on troubleshooting FSMO roles: Date - Mar 14, 2006; Rating - 3; Author - Mitch Tulloch; Here are some tips on troubleshooting FSMO roles.
Using a Batch File for Resetting Domain Passwords: Date - Mar 02, 2006; Rating - 4.1; Author - Chris Sanders; Occasionally someone in your organization will need to be able to reset passwords of others without having access to active directory. This can be achieved with a simple batch file…
Avoiding Group Policy Bloat: Date - Jan 03, 2006; Rating - 4; Author - Mitch Tulloch; How to save disk space on SYSVOL when you have lots of Group Policy Objects (GPOs) for your domain.
Checking Local Group Policy: Date - Dec 21, 2005; Rating - 3.7; Author - Mitch Tulloch; There may be times when you want to check the Local Group Policy Settings on a desktop machine.
When to use and not use universal group membership caching: Date - Dec 20, 2005; Rating - 4.4; Author - Mitch Tulloch; This tip explains when to use and not use universal group membership caching.
More Grace Period for Restoring Active Directory: Date - Dec 14, 2005; Rating - 3.3; Author - Mitch Tulloch; Watch those tombstones when restoring Active Directory from backup--but there's less worry if you have Service Pack 1 installed.
When Delegation Doesn't Seem to Take: Date - Dec 09, 2005; Rating - 4; Author - Mitch Tulloch; Sometimes you delegate a task to a user, and then later on they can't perform that task. Why?
Avoid Overuse of Protected Groups: Date - Dec 07, 2005; Rating - 2.7; Author - Mitch Tulloch; protected groups, user rights, PDC Emulator
Avoid Mapped Drives: Date - Nov 10, 2005; Rating - 1.7; Author - Mitch Tulloch; Why mapped drives can be a bad idea on today's networks.
Finding the Groups a User Belongs To: Date - Nov 02, 2005; Rating - 3.5; Author - Mitch Tulloch; Here's a useful tool for troubleshooting permissions problems arising from membership in groups.
A Common Misconception Regarding Security Logs: Date - Oct 27, 2005; Rating - 2.6; Author - Mitch Tulloch; Do domain controllers share security logs?
Find All Locked-Out Accounts: Date - May 12, 2005; Rating - 4.2; Author - Mitch Tulloch; Use Saved Queries to quickly locate all locked out user accounts.
Troubleshooting Universal Group Caching: Date - Apr 27, 2005; Rating - 3.7; Author - Mitch Tulloch; A tip on how to troubleshoot universal group caching if it doesn't seem to be working properly.
Fast Searching of Active Directory: Date - Apr 20, 2005; Rating - 4.3; Author - Mitch Tulloch; Make life easier for your users by simplifying how they search for resources in Active Directory.
Enabling Caching of Universal Groups: Date - Apr 19, 2005; Rating - 4; Author - Mitch Tulloch; How to enable caching of universal groups in Windows Server 2003 and why this is useful in branch office scenarios.
TechNet Webcast: Windows Server 2003 Group Policy Essentials - Level 200: Date - Apr 20, 2004; Rating - 3.7; Author - Wayne Maples; In this session you'll learn just what Group Policy is, and how you can deploy it correctly. Join this webcast to hear Active Directory and Group Policy guru Jeremy Moskowitz (from GPanswers.com) and author of the recently overhauled “Group Policy, Profiles and Intellimirror for Windows 2003, Windows 2000 and Windows XP” teach you the ropes. Learn how to modify Group Policy Objects to lock down desktops and manage your user environments. Gain insights into the thorny issues surrounding permissions. Discover how to delegate the job of creating Group Policy Objects. Last, you'll learn how to troubleshoot Group Policy -- through tools and with your bare hands.
TechNet Webcast: Microsoft Windows NT 4.0 and Microsoft Windows Server 2003 Active Directory Interoperability: Date - Apr 20, 2004; Rating - 1; Author - Wayne Maples; 101:17 minutes - This session covers trust relationships, the Microsoft® Active Directory® Sizer Tool, name resolution methods, migrating accounts from Microsoft Windows NT® 4.0 to Microsoft Windows Server™ 2003, directory and file replication in Windows NT 4.0 and Windows Server 2003, and interoperation of system and group policy.
TechNet Webcast: New Features of Microsoft Windows Server 2003 Active Directory: Date - Apr 20, 2004; Rating - 3; Author - Wayne Maples; 98 minutes - addresses pain points from Microsoft® Windows® 2000 Active Directory deployments and shows how new features of Microsoft Windows Server™ 2003 address those pain points and make management and deployment easier.
TechNet Webcast: Windows Server 2003 Active Directory Diagnostics, Troubleshooting and Recovery: Date - Apr 20, 2004; Rating - 2.7; Author - Wayne Maples; 92:01 minutes - covers verifying Active Directory functionality, diagnosing and troubleshooting replication, locating Active Directory database files, backing up and recovering system state data, and seizing FSMO roles.
TechNet Webcast: Best Practices for Planning Your Migration to Microsoft Exchange 2003: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples; 96:46 minutes - diagnosing and troubleshooting replication, locating Active Directory database files, backing up and recovering system state data, and seizing flexible single master operation (FSMO) roles
Introduction to Windows Server 2003 Active Directory in Application Mode: Date - Apr 20, 2004; Rating - 2.8; Author - Wayne Maples; 368 KB Microsoft Word file : white paper introduces a new capability in the Microsoft Active Directory service: Active Directory in Application Mode (AD/AM).
Technical Overview of Windows Server 2003 Active Directory: Date - Apr 20, 2004; Rating - 3.3; Author - Wayne Maples; 250 KB Microsoft Word file : The Windows Server 2003 family makes Active Directory easier to manage, easing migration and deployment.