Admin Tips
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
  - Windows Server 2008
    - Admin Tips
      - Active Directory

Knowledge Base Tips topic

[	4013	]	Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base	Last updated: Feb 08, 2012
[	593	]	Admin Tips	Last updated: Dec 02, 2010
[	9	]	Accounts	Last updated: May 12, 2005
[	7	]	Administrator	Last updated: Dec 02, 2010
[	15	]	Booting	Last updated: Mar 07, 2005
[	10	]	Commandline	Last updated: Apr 20, 2004
[	18	]	Email	Last updated: Apr 20, 2004
[	16	]	Event Logs	Last updated: Apr 20, 2004
[	15	]	File Systems	Last updated: Jul 22, 2009
[	17	]	IE	Last updated: Apr 20, 2004
[	16	]	IIS	Last updated: Apr 20, 2004
[	10	]	Installation	Last updated: Apr 20, 2004
[	26	]	Logon	Last updated: Apr 20, 2004
[	114	]	Miscellaneous	Last updated: Aug 24, 2008
[	98	]	Network	Last updated: Jul 22, 2009
[	13	]	Passwords	Last updated: Sep 07, 2004
[	20	]	Print	Last updated: Nov 05, 2004
[	15	]	Registry	Last updated: Nov 30, 2010
[	33	]	Security	Last updated: Feb 04, 2009
[	13	]	Services	Last updated: Apr 20, 2004
[	6	]	Shutdown	Last updated: Apr 20, 2004
[	30	]	TroubleShooting	Last updated: May 12, 2005
[	74	]	Utilities	Last updated: Apr 07, 2005
[	421	]	Registry Tips	Last updated: May 03, 2011
[	147	]	User Tips	Last updated: Jun 08, 2011
[	15	]	Applications	Last updated: Apr 01, 2009
[	10	]	Boot	Last updated: Apr 20, 2004
[	12	]	Command Prompt	Last updated: Apr 20, 2004
[	26	]	Customization	Last updated: Jun 22, 2004
[	13	]	IE and Explorer	Last updated: Jun 15, 2006
[	35	]	Miscellaneous	Last updated: Jun 08, 2011
[	10	]	Performance	Last updated: Apr 20, 2004
[	9	]	Security	Last updated: Aug 21, 2008
[	17	]	TroubleShooting	Last updated: Jan 07, 2009
[	17	]	Miscellaneous	Last updated: Feb 08, 2012
[	188	]	Admin Tips	Last updated: Jan 17, 2012
[	48	]	Administration	Last updated: May 03, 2011
[	1	]	Application Compatibility	Last updated: Jan 17, 2008
[	2	]	Built-in Diagnostics	Last updated: Apr 08, 2010
[	48	]	Deployment	Last updated: Mar 15, 2011
[	14	]	Misc	Last updated: Jan 17, 2012
[	34	]	Networking	Last updated: Jul 07, 2011
[	16	]	Security	Last updated: Mar 16, 2011
[	25	]	Troubleshooting	Last updated: Oct 14, 2010
[	13	]	Registry Tips	Last updated: Jan 30, 2012
[	43	]	User Tips	Last updated: Jul 14, 2011

Active Directory Tips

Sort By: Title | Date | Rating

Folder Redirection and Group Policy: Date - Feb 08, 2012; Rating - Not Rated; Author - Mitch Tulloch; Why does any change to a Folder Redirection policy require that users log off and then log on again before the policy change takes effect?
Forcing Server 2008 Domain Controller Demotion: Date - Jun 30, 2011; Rating - Not Rated; Author - Chris Sanders; When forcing the demotion of a domain controller in Windows Server 2003 there was a caveat that limited your ability to perform this action. This tip explains the caveat and its removal in Server 2008.
Minimize Number Of Repeated Entries In System Log By NetLogon: Date - Mar 03, 2011; Rating - Not Rated; Author - Nirmal Sharma; This article explains how you can use a registry hack to increase the interval for logging duplicate event entries in the System Event Log by the NetLogon service.
A Quick Tip To Change KCC Interval: Date - Mar 02, 2011; Rating - Not Rated; Author - Nirmal Sharma; This article explains how you can change the KCC Interval on Windows Domain Controllers.
Prevent Accidental Object Deletion in Active Directory: Date - Jan 19, 2011; Rating - 5; Author - Chris Sanders; If you work with Active Directory long enough, chances are that you will accidentally delete something you shouldn’t. Windows Server 2008 puts a new feature in place to prevent this from happening.
A Quick Tip To Prevent NetLogon Service From Registering SRV and Domain Records: Date - Jan 05, 2011; Rating - Not Rated; Author - Nirmal Sharma; This article explains how you can use a registry hack to prevent NetLogon from registering SRV, CNAME and Domain DNS Records in the DNS Server.
A Quick Tip To Prevent Registration Of A and GC Records For Domain Controllers: Date - Jan 04, 2011; Rating - Not Rated; Author - Nirmal Sharma; This article explains how you can prevent NetLogon service from registering A record for Domain Name and Global Catalog.
How To Recover From A Corrupt Registry Branch: Date - Dec 29, 2010; Rating - Not Rated; Author - Nirmal Sharma; This article explains how you can recover from a corrupted registry branch.
Default Dynamic Port Range: Date - Dec 23, 2010; Rating - 3; Author - Nirmal Sharma; This article explains the default dynamic port range used by the client computers.
Functions Of NetLogon Service On Domain Controllers: Date - Dec 22, 2010; Rating - 3; Author - Nirmal Sharma; This article explains the functions of NetLogon Service on domain controllers.
What Are The Two Things Required To Recover From AD Disaster?: Date - Dec 21, 2010; Rating - 1; Author - Nirmal Sharma; This article explains the two important things required to recover from AD Disaster.
Group Policy Objects and Gpotool.EXE: Date - Dec 15, 2010; Rating - 5; Author - Nirmal Sharma; This article explains how you can use Gpotool.exe to check the sync problem with Group Policy Objects.
Group Policy Processing At Client Computers: Date - Dec 14, 2010; Rating - 5; Author - Nirmal Sharma; This article explains how Group Policy processing happens at the client computers.
Delegating Server Controls: Date - Dec 10, 2010; Rating - Not Rated; Author - Nirmal Sharma; This article contains a few links you can use to delegate basic server administrations to junior Administrators.
A Quick Tip Restrict Users From Modifying The Schedule Tasks: Date - Nov 17, 2010; Rating - Not Rated; Author - Nirmal Sharma; This article explains how you can restrict users from deleting a schedule task created by an administrator
A Quick Tip To Check For Morphed Folders In An Active Directory Forest: Date - Nov 16, 2010; Rating - Not Rated; Author - Nirmal Sharma; This article explains how you can check for morphed folders in an Active Directory forest.
Allowing Shortcuts When Using Software Restriction Policies: Date - Mar 24, 2010; Rating - 1; Author - Chris Sanders; In its default configuration, software restriction policies will not allow programs to be executed by means of shortcuts. Here is how we can allow this and still maintain the security SRP offers.
Verifying DNS Server Configuration Using Nslookup: Date - Feb 24, 2010; Rating - 3; Author - Mitch Tulloch; How to verify the configuration of a DNS server by using Nslookup.
Verifying DNS Server Configuration Using the DNS Console: Date - Feb 24, 2010; Rating - 2; Author - Mitch Tulloch; How to verify the configuration of a DNS server by performing test queries against it.
What Is Offline Domain Join?: Date - Feb 18, 2010; Rating - 3.7; Author - Nirmal Sharma; This article explains a new feature in Windows Server 2008 R2 called "Offline Domain Join". This article applies to Windows Server 2008 R2 only.
MaximumPasswordAge DisablePasswordChange On Client Computers: Date - Jan 27, 2010; Rating - 3.4; Author - Nirmal Sharma; This article explains how a domain client computer changes its password with the domain controller.
A Quick Tip To Check If DCs Can Register Records With DNS Dynamically: Date - Jan 21, 2010; Rating - 4.5; Author - Nirmal Sharma; This article explains a registry key which you can query to know if DCs are using Dynamic DNS protocol to register records with DNS Servers.
How To Change The Default DNS Interval For Domain Controllers?: Date - Jan 14, 2010; Rating - 1; Author - Nirmal Sharma; This article explains how you can use a registry entry to change the default DNS Referesh interval for a domain controller.
How To Designate A Domain User To Manage A RODC?: Date - Jan 14, 2010; Rating - Not Rated; Author - Nirmal Sharma; This article explains how you can delegate administration of RODC to a domain user.
Configuring Zone Transfers using DNSCMD: Date - Nov 05, 2009; Rating - 4; Author - Mitch Tulloch; How to configure and force zone transfers using DNSCMD.
Configuring Conditional Forwarders using DNSCMD: Date - Nov 05, 2009; Rating - 5; Author - Mitch Tulloch; How to configure a conditional forwarder for your DNS server from the command-line.
Configuring Forwarders using DNSCMD: Date - Nov 05, 2009; Rating - 3; Author - Mitch Tulloch; How to configure a forwarder for your DNS server from the command-line.
Creating Resource Records using DNSCMD: Date - Oct 29, 2009; Rating - 5; Author - Mitch Tulloch; How to use the DNSCMD command to create a resource record from the command-line.
Creating a Reverse Lookup Zone using DNSCMD: Date - Oct 29, 2009; Rating - 5; Author - Mitch Tulloch; An example of how to use the DNSCMD command to create a reverse lookup zone from the command-line.
Creating a Forward Lookup Zone Using DNSCMD: Date - Oct 29, 2009; Rating - 4; Author - Mitch Tulloch; Here are five examples of how to use the DNSCMD command to create forward lookup zones from the command-line.
A Quick Tip To Strict AD Replication To A Specific Port: Date - Oct 22, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains a registry entry which can be used to strict the AD Replication traffic to a specific port.
A Quick Tip To Allow DSRM Account To Log On Normally: Date - Oct 22, 2009; Rating - 5; Author - Nirmal Sharma; This article explains a registry heck which can be used to allow DSRM User Account to log on normally in Windows Server 2008. This applies to Windows Server 2008 only.
A Quick Tip To Place Authenticating DC In DFS Referral List: Date - Oct 08, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains a registry entry which can be used to place the authenticating domain controller on top of the DFS Referral list.
A Quick Tip To Alter Default Behaviour Of GlobalNameZones: Date - Oct 08, 2009; Rating - 5; Author - Nirmal Sharma; This article explains how you can change the default behaviour of GlobalNameZone zone.
A Quick Tip To Get List Of RODC Administrators: Date - Oct 08, 2009; Rating - 1; Author - Nirmal Sharma; This article explains the registry key which contains the list of RODC Administrators. This article applies only to Windows Server 2008 RODC.
A Quick Tip To Check The Backup Status Of Each NC In Active Directory Forest: Date - Oct 01, 2009; Rating - 1; Author - Nirmal Sharma; This article shows how you can see the backup status of each Naming Context in Active Directory using command line tool.
How To Use DsQuery To Find All The Domain Controllers In The Domain or Forest?: Date - Oct 01, 2009; Rating - 4; Author - Nirmal Sharma; This article explains DsQuery commands which you can use to find all the domain controllers.
What Is Strict Replication and How Do You Enable?: Date - Sep 08, 2009; Rating - 5; Author - Nirmal Sharma; This article explains Strict Replication and how you enable it on the domain controllers in the Forest.
Viewing the zones on a DNS server: Date - Sep 02, 2009; Rating - Not Rated; Author - Mitch Tulloch; You can use the Dnscmd command to view a list of the zones on a DNS server.
Verifying SRV resource records using Nslookup: Date - Sep 02, 2009; Rating - 2; Author - Mitch Tulloch; You can use the Nslookup command to verify that the SRV resource records needed by Active Directory have been created properly when Dcpromo was run on the server.
Targeting policy for Vista computers: Date - Jul 29, 2009; Rating - 5; Author - Mitch Tulloch; If you have a mix of XP and Vista computers in a department or location, how can you configure a GPO so that it is only processed by the Vista computers?
Quickly edit a GPO: Date - Jul 22, 2009; Rating - 1; Author - Mitch Tulloch; Gpedit.msc has some command-line options that let you quickly edit targeted Group Policy OPbjects.
Using site-linked GPOs: Date - Jul 07, 2009; Rating - Not Rated; Author - Mitch Tulloch; Group Policy Objects can be linked to domains, OUs and sites, but when might you want link a GPO to a site?
Group Policy Offers New Functionality in Windows Server 2008: Date - May 12, 2009; Rating - 2; Author - Nirmal Sharma; This article explains the improvements to the Group Policy in Windows Server 2008.
Domain Controller Options Not Supported By RODC: Date - May 07, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains the DC Options which are not supported by a RODC.
DS Auditing in Windows Server 2008: Date - May 06, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains the new functionality offered by auditing in Windows Server 2008.
Fine Grained Password Policies Facts: Date - May 06, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article lists some facts about the FGPP.
Multiple PSOs To One User?: Date - Apr 23, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains the conflict which arise when multiple PSOs are applied to a user.
Troubleshooting Group Policy: Date - Apr 22, 2009; Rating - Not Rated; Author - Mitch Tulloch; Here's a three-step approach to troubleshooting Group Policy issues in Windows Vista and later.
Using GPLogView: Date - Apr 22, 2009; Rating - 5; Author - Mitch Tulloch; Some tips on using the GPLogView.exe command-line tool for troubleshooting Group Policy issues.
A Quick Tip To Configure Time Service In Active Directory Environment: Date - Mar 24, 2009; Rating - 3.7; Author - Nirmal Sharma; This article explains how you can configure time service for an active directory environment.
AvoidPDCOnWan and PDC Emulator: Date - Mar 19, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains how you can control a domain controller contacting a PDC which is out of the site.
Tip To Check Network and DNS Settings Before Deploying A DC or Domain: Date - Mar 19, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains a small tip or syntax of a command you can use to check the network and DNS settings before deploying a child domain or additional domain controller in an existing forest.
What is Replication Queue and who manages the Queue?: Date - Mar 19, 2009; Rating - Not Rated; Author - Nirmal Sharma; This article explains the mechanim Bridgehead Servers use to process the replication changes.
SYSVOL Replication Notes: Date - Mar 17, 2009; Rating - 5; Author - Nirmal Sharma; This article explains some notes related to the FRS and SYSVOL replication.
What All Ports Are Rrequired By Domain Controllers And Client Computers?: Date - Feb 04, 2009; Rating - 4; Author - Nirmal Sharma; This article explains the key port requirement for Client computers and Domain Controllers communicating with each other.
A Quick Tip To Check If PDC Emulator Is Working: Date - Feb 04, 2009; Rating - 4.5; Author - Nirmal Sharma; This article explains how you can tell if PDC Emulator in an Active Directory Domain is working.
How To Browse NTDS.DIT Offline: Date - Jan 22, 2009; Rating - 3; Author - Nirmal Sharma; This article shows how you can browse the NTDS.DIT (Active Directory database file) offline by using the DSAMIN command in Windows Server 2008.
Migrating ADM Files to the New ADMX Format: Date - Dec 04, 2008; Rating - 5; Author - Chris Sanders; The new Group Policy ADMX format is XML-based and provides a myriad of enhancements. Here we look at how to migrate old ADM files to this new format.
Service Records of Domain Controller used by Various Services and Components: Date - Dec 03, 2008; Rating - 2.8; Author - Nirmal Sharma; This article explains what all components or Services use the SRV records of domain controller.
A Quick Tip To Fix DC SRVs in Active Directory Domain: Date - Dec 02, 2008; Rating - 1; Author - Nirmal Sharma; This article explains how you can use few simple commands to fix the SRV records of a Domain Controller in an Active Directory Domain.
When Should You Restart FRS?: Date - Nov 19, 2008; Rating - Not Rated; Author - Nirmal Sharma; This article discusses the Regsitry entries of File Replication Service and when should you restart the FRS service for the changes to take effect.
Which DC Is Selected When Promoting A Member Server To DC?: Date - Nov 11, 2008; Rating - 2.7; Author - Nirmal Sharma; This article discusses the a mechanism used by the DCPromo.exe to select a DC when promoting a member server to Domain Controller.
FRS D2/D4 - When Should You Use Them?: Date - Nov 11, 2008; Rating - Not Rated; Author - Nirmal Sharma; This article discusses about D2 and D4 of File Replication Service in Active Directory and when should you use them?
How To Know The Primary Member of A SYSVOL Replica Set?: Date - Nov 06, 2008; Rating - 2; Author - Nirmal Sharma; This article explains how to determine the Primary Member of a SYSVOL Replica Set in an Active Directory domain.
A Quick Tip To Make Sure FRS Is Working In A Domain: Date - Oct 29, 2008; Rating - Not Rated; Author - Nirmal Sharma; This article explains a small mechanism you can use to make sure FRS is working.
Accessing Directory Services Restore Mode Remotely: Date - Sep 25, 2008; Rating - 4.5; Author - Chris Sanders; Directory Services Restore Mode can be accessed remotely using some unique procedures. Here we look at how this is done.
How To Check If A PSO Has Been Applied To A User Or Group: Date - Sep 11, 2008; Rating - 5; Author - Nirmal Sharma; Checking users' password policies in Windows Server 2008 domain.
Securing DNS with Secure Dynamic Updates: Date - Sep 04, 2008; Rating - Not Rated; Author - Chris Sanders; DNS is crucial to the operation of a DNS domain. Using Secure Dynamic Updates is something you can do to make your DNS infrastructure a bit more secure.
Preparing an Existing Domain for a Windows Server 2008 Domain Controller: Date - Aug 14, 2008; Rating - 3.2; Author - Chris Sanders; Implementing a Windows Server 2008 domain controller in your already existing Windows Server 2003 domain requires a bit of prep work. Here is what needs to be done.
A Quick Tip to designate a domain controller for client authentications.: Date - Aug 13, 2008; Rating - 4.8; Author - Nirmal Sharma; This article explains the use of SRV priority. This applies to Windows 2000, Windows 2003 and Windows Server 2008.
How does Windows Server 2008 resolve Domain Controller Load Balancing problems: Date - Aug 07, 2008; Rating - 4.5; Author - Nirmal Sharma; This article discusses a new Group Policy setting which solves the Load Balancing issues with the domain controllers.
Promoting Server Core to a Domain Controller: Date - Jun 17, 2008; Rating - 2.3; Author - Chris Sanders; This quick tip will show you how to promote a Windows Server 2008 Server Core device to domain controller status.
A Quick Tip to make sure Adprep /ForestPrep for Windows Server 2008 has run successfully: Date - Jun 04, 2008; Rating - 4; Author - Nirmal Sharma; Adprep /ForestPrep must be executed to introduce a Windows Server 2008 in an existing Windows 2000 or Windows 2003 domain environment. This will show you how to make sure that it has run successfully.
Introducing the Read-Only Domain Controller: Date - Jun 03, 2008; Rating - 4.5; Author - Chris Sanders; A new Windows Server 2008 feature that is drawing great praise is the introduction of the Read-Only Domain Controller. Let’s look at what this means to you.
Creating a Central Store for Group Policy Templates: Date - May 28, 2008; Rating - 3.7; Author - Chris Sanders; Windows Server 2008 and Windows Vista utilize the ADMX format for a more efficient group policy implementation in regards to administrative templates. You can better manage administrative templates for group policy by using a central store.