In this blogpost, we will learn how to fix ADDS already contain a computer account. This issue can occur after a swing migration, such as the one outlined in “Build a New DC vs Swing Migration: Upgrade Server OS Correctly“. Replacing a Domain Controller (DC) hardware is one of those tasks that looks simple but…
Read More “How to fix ADDS already contain a computer account” »
This article discusses “Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD”. On March 10, 2026, Microsoft disclosed a new security vulnerability affecting Active Directory Domain Services (AD DS). Please, see How to run Apps as an administrator on Windows, and how to Enable Exploit Protection feature on Windows using the Windows Security App, Microsoft Endpoint Configuration…
Read More “Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD” »
In this guide, we shall discuss how to create a two-way Active Directory Trust. A two-way trust will be created between these domains. This means that the two domains will be able to share their resources with each other. Please, see [AZURE] MSSQL Creating a new Azure SQL Database (PaaS), [AZURE] Restore MSSQL Server on…
Read More “How to create a two-way Active Directory Trust” »
In this guide, I will discuss how to Harden Active Directory Using CIS Benchmark and MSCT 1.0. IT infrastructure security has become an essential priority for any organization. In this context, the Active Directory (AD) domain represents the core of identity management, permissions, and network resources. Please, see “An account with the same name exists…
Read More “Harden Active Directory Using CIS Benchmark and MSCT 1.0” »
Microsoft Active Directory Domain Services (AD DS) are a directory service that help organize network resources within Active Directory environment. It supports user/group management, group policies, multiple directory servers (i.e., domain controllers), Kerberos authentication, etc. In this article, we shall learn how to Create New Users and Join Synology NAS to Active Directory. Please see…
Read More “Create New Users and Join Synology NAS to Active Directory” »
In this article, we will learn how to change Active Directory Domain name from dot local to dot com (.local to .com.). Since global DNS does not recognise .local domains, and they lack global uniqueness. Also, they are not suitable for services that require access beyond the local network. While this is generally not problematic…
Read More “Change Active Directory Domain name from dot local to dot com” »
Organizational units (OUs) in an Active Directory Domain Services (AD DS) managed domain to let you logically group objects such as user accounts, service accounts, or computer accounts. In this article, I will show you how to Delete or Rename and Create a Protected Organisation Unit in AD. Please see these related guides: How to add…
Read More “Delete or Rename and Create a Protected Organisation Unit in AD” »
In this article, you learn how to add an account with the same name exists in Active Directory: Re-using the account was blocked by a security policy. When attempting to add a pre-created PC to a domain or reuse an existing computer account. Please see Active Directory Ports: Service and network port requirements for Windows,…
Windows Hello for Business (WHFB) is a modern two-factor authentication that replaces password authentication on devices. It uses key-based or certificate-based authentication and at least two unique factors “something the user knows (PIN) or something the user is (biometrics), combined with something they have (physical access to their device)”. WHFB offers secure, convenient single sign-on…
Read More “WHFB Hybrid Cloud Kerberos Trust Model is now available” »
In this article, I will show you how to Perform the Time of day restriction: How to Configure logon hours for users in Active Directory. Please see how to Resolve Account restrictions are preventing this user from signing in: User Account Password has expired. There are times you may want to restrict users’ access to…
Read More “Configure logon hours for users in Active Directory” »
The account expiration date is used for access control purposes. Let us assume an organization temporarily create an AD account for someone that needed access to one of your servers or a workstation, there is every possibility that you can forget to disable the account when the person completes his task. This can open the way…
Read More “How to set an account expiration date in Active Directory” »
In this write-up, I will take you through the step-by-step guide on how to install and configure Active Directory Domain Services on Windows Server 2022. Before we delve into the hands-on session of this write-up, let’s take a look at some of the amazing new features that Windows Server 2022 brings. A quick peep into…
Read More “Install and configure Active Directory Domain Services on Windows Server” »
In this article, we shall discuss the steps resolving “Service Principal Name: How to add or reset and delete SPNs”. A service principal name (SPN) is a unique identifier of a service instance. SPNs are used by Kerberos authentication to associate a service instance with a service logon account. For example, to enable the MBAM server to…
Read More “Service Principal Name: How to add or reset and delete SPNs” »
