Tag Archives: Domain Controller

Cleanup Domain Controller Objects after Demote

If you manage a Windows domain, you will likely need to demote an old domain controller (DC) when it should be retired (old hardware, old operating system, etc). After successfully demoting the old DC, there will still be some records … Continue reading

Posted in System Administration | Tagged , | Leave a comment

Active Directory Time Synchronization

Proper time synchronization in a Windows Active Directory Domain is critical for proper operation of the core Kerberos authentication protocol. It is also essential for accurate event log entries. Within a domain, all domain controllers will automatically function as time … Continue reading

Posted in System Administration | Tagged , , , | Leave a comment

Repadmin

A great command built-in to Server 2008 Domain Controllers (DC’s). Try the following to force replication with other DC’s. Just a note from some recent AD work. Sometimes you don’t want to wait for replication to happen.

Posted in System Administration | Tagged , , , | Leave a comment

DomainDnsZones and ForestDnsZones Infrastructure Masters

There are five well-known master roles in AD that can be “seized” with “ntdsutil”, but this post is about a couple master roles that seem to be left out when trying to recover from losing a domain controller without properly … Continue reading

Posted in System Administration | Tagged , | Leave a comment

Active Directory Upgrades for Domain Controllers and Exchange

Upgrading Active Directory with a new Windows Server version, or Exchange to a new release requires special Schema updates and other changes to your domain services (such as LDAP). These changes require special command-line utilities run by users belonging to … Continue reading

Posted in Uncategorized | Tagged , , | Leave a comment