Tag: Active Directory Domain Services

How to configure a service account for Kerberos delegation

17/03/202106/09/2023

How to configure a service account for Kerberos delegation

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Kerberos delegation is to enable an application to access resources hosted on a different server t. For some related content on Active Directory, see the following guides. The sign-in method you are trying to use is not…

Windows Server

How to Create Service Accounts, Organisation Units and Active Directory Security Groups

13/03/202128/09/2023

Christian No Comments

How to Create Service Accounts, Organisation Units and Active Directory Security Groups

A service account is a user account created explicitly to provide a security context for services running on Windows Server operating systems. The security context determines the service’s ability to access local and network resources. Furthermore, the Windows operating systems rely on services to run various features. Therefore, you can configure these services through the applications, the Services snap-in, or…

Windows Server

Restore AD Objects: How to restore deleted user accounts in Active Directory with Microsoft LDP and PowerShell

21/11/202009/09/2023

Christian No Comments

Restore AD Objects: How to restore deleted user accounts in Active Directory with Microsoft LDP and PowerShell

Active Directory (AD) is a widely used directory system, the ability to restore unwanted changes in your AD infrastructure is crucial. When AD objects are deleted, they are placed in the Deleted Objects container (AD recycle bin). There are several methods to restore deleted user accounts, computer accounts, and security groups. These objects are known…

Windows Server

Fix insufficient access rights to perform this operation when trying to enable Active Directory Recycle Bin

20/11/202011/10/2024

Christian No Comments

Fix insufficient access rights to perform this operation when trying to enable Active Directory Recycle Bin

In this article, we shall discuss how to fix insufficient access rights to perform this operation when trying to enable Active Directory Recycle Bin. The method involves enabling the AD Recycle Bin to be able to restore deleted user objects with the ADAC. You may also want to visit the following interesting articles. What are the…

Windows Server

Enable Active Directory Recycle Bin: How to delete and restore objects using Active Directory Administrative Center

20/11/202005/02/2025

Christian No Comments

Enable Active Directory Recycle Bin: How to delete and restore objects using Active Directory Administrative Center

In this post, you will learn “Enable Active Directory Recycle Bin: How to delete and restore objects using Active Directory Administrative Center”. Active Directory (AD) is Microsoft’s proprietary directory service and it stores information about objects on the network and makes this information easy for administrators and users to find and use. See this guide on how…

Windows Server

Nslookup unknown: Fix cannot find non-existent domain

28/07/202026/01/2024

Christian 2 Comments

Nslookup unknown: Fix cannot find non-existent domain

When faced with this issue, you should take a close look at your DNS Server. The reason for this error is there is not a reverse Lookup Zone configured on the server or the reverse zone is crashed or does not have the right information. In this article, I will show you how to fix…

Windows Server

Active Directory Forest – Trees and Domain and Sites

11/04/202015/02/2025

Christian 4 Comments

In this article, we will discuss “Active Directory Forest – Trees and Domain and Sites”. Active Directory (AD) is a directory service developed by Microsoft for the Windows domain environment. AD forest is the top container in an Active Directory setup that contains domains, users, computers, and group policies. Please see how to install Veeam…

Windows Server

Concept of Active Directory Computer Account

09/04/202001/10/2024

Christian No Comments

In this article, we will discuss the “Concept of Active Directory Computer Account”. Please visit the following article to learn more about the various methods available for integrating Azure Active Directory with on-Premise Active Directory, how to install Windows Server 2019 and Windows Server 2016, or on a Hyper-V Server. See the following link for the post-installation of Windows Server 2019. Did you…

Windows Server

Active Directory Flexible Single-Master Operations Roles [FSMO]

13/02/202023/10/2024

Christian No Comments

Active Directory Flexible Single-Master Operations Roles [FSMO]

The five operations master roles are also referred to as FSMO roles. When installed on a single machine, this ensures all changes occur in a single location. This in turns makes the Active Directory database consistent. In this article, we shall discuss “Active Directory Flexible Single-Master Operations Roles [FSMO]”. Please see Pleasant User Group Permission…

Windows Server

Guide on federating ADFS with Azure Active Directory

02/02/202025/10/2023

Christian No Comments

Guide on federating ADFS with Azure Active Directory

Active Directory Federation Services (ADFS) is a Single Sign-On solution developed by Microsoft and provides users with authenticated access to applications that are not capable of using Integrated Windows Authentication (IWA) through Active Directory (AD). Take a look at this article to see various options that are possible for Integrating Azure Active Directory with on-Premise…

AWS/Azure/OpenShift

Differences between AD LDS and AD DS

18/12/201909/10/2024

Christian No Comments

In this article, we shall discuss the differences between AD LDS and AD DS. Active Directory Lightweight Directory Services (AD LDS) is designed more to run software. Rather than to run domains so it is not a replacement for Active Directory Domain Services (AD DS). Please see Please see the following Active Directory Lightweight Directory…

Windows

Assign users with rights to reset password in Active Directory

14/08/201909/10/2024

Christian No Comments

Assign users with rights to reset password in Active Directory

This brief guide shows you how to assign users with right to reset password in Active Directory (AD) to reset Password. Please see “What to note before assigning Multiple IPs’ to an Instance“, and how to perform Microsoft Account Password Reset via Web and Windows. Delegation in Active Directory (AD) is the process of granting…

Windows Server