In Windows 2012 you don’t need to use PowerShell to enable the recycle Bin, but please note that you can not disable it when first enabled. PowerShell is of course still possible to use In Server Manager, select the Tools menu, and click Active Directory Administrative Center. In Active Directory
This is one of the small things that sometimes drag my attention. A customer once asked me if it was possible to create a subnet in Active Directory that would catch all clients, and then still have some individual subnets defined for exceptions. I must confess that I didn’t know
Update 18-11-2015 Looks like the ADMX files for the 1511 update has almost the same problem as the last time: If you previously has copied ADMX files for Windows 8.1 you might see this error: Namespace ‘Microsoft.Policies.WindowsStore’ is already defined as the target namespace for another file in the store.
When demoting a DC I ran into this error: The operation failed because: Active Directory Domain Services could not configure the computer account <hostname>$ to the remote Active Directory Domain Controller account <fully qualified name of helper DC>. “Access is denied” I found a possible explanation dealing with missing security
Just like Exchange we are able to check our Lync schema version with adsiedit.msc. Connect to the Schema context: Expand the nodes and drill down to the name ms-RTC-SIP-SchemaVersion. Right click on ms-RTC-SIP-SchemaVersion and select Properties. Now find the attribute rangeUpper The possible rangeUpper values are
After you have updated the schema with the Exchange 2010 changes (RTM or service packs), you can check the current version with adsiedit.msc. First connect to the Schema: Expand the nodes and drill down to the name CN=ms-Exch-Schema-Version-Pt. Right click on CN=ms-Exch-Schema-Version-Pt and select Properties. Now find the attribute rangeUpper
When working with Advanced Group policy management and using a service account, you need to give the service account rights to all existing GPO’s if you want to have them controlled by AGPM. To do this easily you can download Group Policy management Console Sample Scripts. Once downloaded and
I am starting to see this error on many newly created Windows 2008 R2 SP1 domain controllers: The WinRM service failed to create the following SPNs the event id is 10154 The solution is to find the domain controller in Active Directory Users and Computers. Select Advanced Features and right
You might notice that the timestamps on your Active Directory integrated zones don’t replicate around to all your DNS servers. The reason for this is probably that scavenging is not enabled at the zone.Active Directory will first replicate this information when scavenging is enabled, because the information is really not
Here is a small issue new to me, when you set up trust between forests and define it as a transitive one, users can log on as expected from sub-domains if you use the UPN or domainuser syntax. This is quite as expected, but on older Windows versions, users are
Modern Workplace consultant and a Microsoft MVP in Windows and Devices.
Infrastructure architect with focus on Modern Workplace and Microsoft 365 security.
Cloud & security specialist with focus on Microsoft backend products and cloud technologies.
Cloud & Security Specialist, with a passion for all things Cybersecurity
Cloud and infrastructure security specialist with background in networking.
Infrastructure architect with focus on design, implementation, migration and consolidation.
Infrastructure consultant with focus on cloud solutions in Office365 and Azure.
Modern workplace and infrastructure architect with a focus on Microsoft 365 and security.
