Managing and maintaining Active Directory (AD) in today’s enterprise environments is crucial to day-to-day operations. Active Directory Users and Computers (ADUC) is a central component of this management process with Active Directory Domain Services on-premises. Let’s look at Active Directory Users and Computers, AD Domain Services, and the various tools and features available for managing …

The post Active Directory Users and Computers: Ultimate Management an Security Guide appeared first on Fresh Virtuals.

Active Directory Replication is one of those processes in most environments that admins may not really pay much attention to. Unfortunately, it is something that, when it breaks, the symptoms may not be apparent immediately. It may take days or weeks for anyone to notice something is not quite right with Active Directory. Let’s take …

The post Check Server Replication Status in Active Directory appeared first on Fresh Virtuals.

In case you didn’t already know, Microsoft is addressing critical vulnerabilities in the way Active Directory authentication works, specifically related to the KDC and Kerberos tickets. It will fundamentally change the way domain controllers can interact with one another and will introduce breaking changes in your Active Directory environment if not planned out correctly. Let’s …

The post Domain Controller PacRequestorEnforcement Registry Key – Enable Audit and Enforcement appeared first on Fresh Virtuals.

Microsoft Edge Chromium is gaining steam as a viable browser that is ready for the enterprise environment. Microsoft is officially saying that Edge Chromium is the way forward with IE settings and defaults being migrated over to Edge Chromium. Recently, in working with a terminal server for a legacy application that required certain browser settings, …

The post Manage New Microsoft Edge Chromium with Group Policy appeared first on Fresh Virtuals.

Update – It appears that Microsoft will not be changing the defaults with the rollouts in March https://blogs.vmware.com/vsphere/2020/01/microsoft-ldap-vsphere-channel-binding-signing-adv190023.html Have you heard about the change coming to the way connections will be made by default to Active Directory? Microsoft is has started to sound the alarm on a change coming down the pipes that will be …

The post Active Directory LDAP Channel Binding Patch Coming in March appeared first on Fresh Virtuals.

In enterprise environments today, Microsoft’s Active Directory (AD or ADDS) is by far the most widely used authentication engine that provides identity management as well as access to resources and objects.  According to Microsoft’ own statistics, over 90% of businesses around the world and 95% of the Fortune 1000 use Active Directory.  With that being …

The post Nakivo 6.1 Backup and Restore Active Directory appeared first on Fresh Virtuals.

Have you ever had one of those situations where you could not get a workstation or server to join the domain?  I had this happen recently and wanted to detail a few of the steps I used to troubleshoot and resolve the issue.  Let’s take a look in general at troubleshooting domain join issues. Troubleshooting …

The post Troubleshooting Domain Join Issues appeared first on Fresh Virtuals.

Recently in working with a multi domain environment, I ran into an issue involving SQL connectivity from a handful of client computers to a certain SQL server.  The errors involved SSPI context errors.  In fact the exact error when trying to create a simple ODBC connection to the server: If users from the CHILD domain attempted …

The post SQL Server Cannot generate SSPI context Multiple Domains appeared first on Fresh Virtuals.

One of the time wasters of a system administrator can be chasing down account lockouts and why they happen.  Many administrators have felt the pain of parsing through logs, etc to try and figure out what is going on with account lockouts if they are unusually high for a particular account.  There are many solutions …

The post Monitor Account Lockouts Active Directory appeared first on Fresh Virtuals.

For those of you in a multi domain environment due to the structure of your company or from migrations from legacy directory services into AD, there often is the need to synchronize various directory objects with other directory objects, especially if you have a resource domain and an account domain.  Recently in working with an …

The post How to Sync Passwords between Child and Parent Domain with FIM 2010 R2 appeared first on Fresh Virtuals.