Menu Sidebar
Menu

Author: mo wasay

Force synchronization for DFSR-replicated SYSVOL

One of my clients had a problem with processing GPO on client computers. Different computers applied different settings from the same GPO but from different domain controllers. All tests related to replication was successful, all GPOs are applied, but replication between domain controllers was a problem, and because of that most clients had a different […]

Backup & Restore Active Directory integrated DNS zones

DNS is one of the core components for Active Directory Domain Services. In a disaster scenario, it becomes impossible to locate resources within the network and all AD operations come to a screeching halt. Therefore, it’s absolutely necessary to restore the DNS servers. One way to set this right is by performing an AD DS […]

Fix Active Directory broken security inheritance problem

Ran into a situation at a client location where in Active Directory, the security permissions applied to an OU were not getting inherited permissions on to the objects. Basically, security inheritance was broken.This causes a problem when the administrative accounts or groups needing to modify an attribute on the AD object throw errors, or are […]

Missing SYSVOL & NETLOGON after domain controller promotion

Recently I found an issue with a newly promoted domain controller missing the SYSVOL and NETLOGON shares. Most of the cases it would also be a new domain controller for an existing or new forest. In most cases, you would need to update the flag below. Open Regedit Browse to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters Set SysVolReady  from 0 to […]

List all SPNs in Active Directory

Ran into a situation where I needed to get all the SPNs that are listed in AD. Find duplicate SPNs Listing duplicate SPNs is fairly easy, just use setspn -X on your command-line and you’ll find out. What is a SPN? An SPN or Service Principal Name is a unique identity for a service, mapped with a specific account (mostly […]

Get All DCs in the Entire Forest

Getting a know a new environment for a new client and I a quickly needed information about all domain controllers in the entire forest. Wrote a small little script to provide me all the information I needed:

 

Older Posts

Mohammed Wasay

Dallas based Design Technologist & Hybrid Developer