In this guide, we shall discuss how to create a two-way Active Directory Trust. A two-way trust will be created between these domains. This means that the two domains will be able to share their resources with each other. Please, see [AZURE] MSSQL Creating a new Azure SQL Database (PaaS), [AZURE] Restore MSSQL Server on…
Read More “How to create a two-way Active Directory Trust” »
In this guide, I will discuss how to Harden Active Directory Using CIS Benchmark and MSCT 1.0. IT infrastructure security has become an essential priority for any organization. In this context, the Active Directory (AD) domain represents the core of identity management, permissions, and network resources. Please, see “An account with the same name exists…
Read More “Harden Active Directory Using CIS Benchmark and MSCT 1.0” »
Microsoft BitLocker Administration and Monitoring (MBAM) provides a simplified administrative interface that you can use to manage BitLocker Drive Encryption. Therefore, customers find this solution very useful for managing client PCs with BitLocker that are domain-joined on-premises. In this article, we shall discuss how to Get MBAM BitLocker Recovery Keys from Microsoft SQL Server. Please…
Read More “Get MBAM BitLocker Recovery Keys from Microsoft SQL Server” »
It is recommended to monitor the replication traffic between your domain controllers in your environment to gain valuable insights. Monitoring when replication starts and ends, identifying which AD object attributes are replicated, and detecting replication failures along with their causes are crucial to AD operations. In this article, we shall discuss how to troubleshoot Active…
Read More “How to troubleshoot Active Directory Replication issues” »
In this guide, i will show you How to determine Tombstone Lifetime in Active Directory. A Tombstone Lifetime will help determine how long a deleted object can be stored within an active directory. This deleted object is not fully removed from the Active Directory but is marked as a Tombstone Lifetime object. We cannot access…
Read More “How to determine Tombstone Lifetime in Active Directory” »
In this detailed guide, we will look at how to implement DNS split-brain policies in an Active Directory environment. Creating a split-brain DNS setup is crucial for managing different DNS responses based on whether the request is internal or external. This can help streamline network traffic, improve security, and ensure that internal and external users…
Read More “Implement Split-Brain DNS Policies in Active Directory” »
In Active Directory (AD), distribution groups and security groups serve distinct purposes. Distribution groups are primarily used for email distribution lists, while security groups are used to assign permissions to resources within your network. Converting a distribution group to a security group can be necessary for managing access control more effectively. Please see How to…
Read More “How to convert distribution group to security group” »
Active Directory (AD) groups are essential for managing permissions and access within an organization’s IT environment. The group scope defines how permissions and memberships are applied and propagated across domains and forests. There are three types of group scopes: Universal, Global, and Domain Local. Each has its own characteristics and use cases. This guide will…
In this article, we will learn how to Raise or Downgrade AD Domain and Forest Functional Level. Upon installation of Active Directory Domain Services (AD DS), basic Active Directory features are automatically enabled, along with domain-wide and forest-wide features. To enable “all domain-wide features” the domain controllers must run the latest Windows Server version. Please…
Read More “Raise or Downgrade AD Domain and Forest Functional Level” »
In this article, we shall discuss “AD Recovery: Fix device ran into an issue with error 0xc00002e2”. Recently, my lab environments have been repeatedly restarting due to a faulty switch. After extensive research to solve this issue before performing VM recovery, I discovered that the problem was caused by the Hyper-V host experiencing unplanned restarts….
Read More “AD Recovery: Fix device ran into an issue with error 0xc00002e2” »
Managing workstations without domain administrator rights is not only possible but also enhances security by minimizing high-level access to Active Directory (AD). In this guide, we’ll walk through creating a dedicated AD group for workstation management and assigning it the necessary privileges using Group Policy. Please read Delete or Rename and Create a Protected Organisation…
Read More “Grant Non-Domain Admin Privileges to Manage Workstation” »
Microsoft Active Directory Domain Services (AD DS) are a directory service that help organize network resources within Active Directory environment. It supports user/group management, group policies, multiple directory servers (i.e., domain controllers), Kerberos authentication, etc. In this article, we shall learn how to Create New Users and Join Synology NAS to Active Directory. Please see…
Read More “Create New Users and Join Synology NAS to Active Directory” »
In this article, we will learn how to change Active Directory Domain name from dot local to dot com (.local to .com.). Since global DNS does not recognise .local domains, and they lack global uniqueness. Also, they are not suitable for services that require access beyond the local network. While this is generally not problematic…
Read More “Change Active Directory Domain name from dot local to dot com” »
