In this article, we will learn how to change Active Directory Domain name from dot local to dot com (.local to .com.). Since global DNS does not recognise .local domains, and they lack global uniqueness. Also, they are not suitable for services that require access beyond the local network. While this is generally not problematic…
Read More “Change Active Directory Domain name from dot local to dot com” »
Organizational units (OUs) in an Active Directory Domain Services (AD DS) managed domain to let you logically group objects such as user accounts, service accounts, or computer accounts. In this article, I will show you how to Delete or Rename and Create a Protected Organisation Unit in AD. Please see these related guides: How to add…
Read More “Delete or Rename and Create a Protected Organisation Unit in AD” »
In this article, I will show you how to Perform the Time of day restriction: How to Configure logon hours for users in Active Directory. Please see how to Resolve Account restrictions are preventing this user from signing in: User Account Password has expired. There are times you may want to restrict users’ access to…
Read More “Configure logon hours for users in Active Directory” »
The account expiration date is used for access control purposes. Let us assume an organization temporarily create an AD account for someone that needed access to one of your servers or a workstation, there is every possibility that you can forget to disable the account when the person completes his task. This can open the way…
Read More “How to set an account expiration date in Active Directory” »
Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Kerberos delegation is to enable an application to access resources hosted on a different server t. For some related content on Active Directory, see the following guides. The sign-in method you are trying to use is not…
Read More “How to configure a service account for Kerberos delegation” »
A service account is a user account created explicitly to provide a security context for services running on Windows Server operating systems. The security context determines the service’s ability to access local and network resources. You may also want to visit the following interesting articles. What are the merits and demerits of Local System Account and Service Logon Account, how…
In this article, we shall discuss how to fix insufficient access rights to perform this operation when trying to enable Active Directory Recycle Bin. The method involves enabling the AD Recycle Bin to be able to restore deleted user objects with the ADAC. You may also want to visit the following interesting articles. What are the…
In this post, you will learn “Enable Active Directory Recycle Bin: How to delete and restore objects using Active Directory Administrative Center”. Active Directory (AD) is Microsoft’s proprietary directory service and it stores information about objects on the network and makes this information easy for administrators and users to find and use. See this guide on how…
