In this blog post, I am going to walk you through how to Install, Configure and use Microsoft LAPS. But first, let’s explain what Microsoft LAPS is. Local Administrator Password Solutions (LAPS) is a solution provided by Microsoft to manage the local administrator account on domain joined computers and servers. Read more…
Recently I have needed to configure an Active Directory to replicate changes between sites straight away. They had everything set to replicate at the default 15 minutes but this was not quick enough due to a dispersed helpdesk. The best way to do this is to enable Use Notify replication. Read more…
A cool new feature of Active Directory Domain Services on Server 2016 is the ability to allow administrators to assign temporary group membership to users. This is expressed by TTL (Time-To-Live) Value. This value will be added to the Kerberos ticket. When a user is assigned to a group temporally, Read more…
Recently at work, we have had some issues on a customer site with GPO’s. As we were on a tight schedule I wanted to force replication rather than wait for the normal replication cycle to happen. It is really easy to force a replication, and this article will show you Read more…
Below I will show two ways of enabling the Active Directory Recycle Bin. AD DS Recycle Bin has been around since Windows Server 2008 R2, but it had no GUI to enable or work with it. In fact, you had to use ADSI edit. Windows Server 2012 added the ability Read more…
Now Windows Server 2016 has been out for a few months I have decided to update my lab Domain to 2016 forest functional level. But first I need to migrate the FSMO (Flexible Single Master Operation) Roles to my new Windows Server 2016 Domain Controllers. In this Step by Step Read more…
Recently at work, I have been involved on a project that has used GPO to lock down End User Devices and also deploy shortcuts to the users desktops. As we wanted the shortcuts to display for all users we decided to publish the shortcuts to the public desktop. All was Read more…
Recently at work, I was adding a new Domain Controller to an existing forest and I just could not get past “Creating the NTDS Settings” I have done this many times in the past and never had this issue. After trying a few times and a lot of waiting, I Read more…
Sometimes, as a sysadmin you may need to move the Active Directory database and / or log files from one location to another. This may be due to your Domain Controller running out of space. The location you choose to move the files to may be a different folder or Read more…
What is new in Active Directory on Server 2016? We have a few new features to play with in Windows Server 2016 regarding Active Directory. Some of them being time-based group membership, privileged access management, and Microsoft Passport to name a few. I am not going to go into too Read more…