In this article, I will show you How to create a Child and tree Domain using the steps below. A child domain is a subdomain of the parent domain. In the active directory hierarchical structure, the function of the child domain is the segmentation of the active directory into smaller parts or segments. For Example,…
A domain controller (DC) provides critical services like authentication and authorization for an Active Directory domain. More accurately, a DC runs on Windows Server operating system and that has Active Directory Domain Services (AD DS) installed on it. All these we will see very shortly. In this guide, we will learn how to how to…
Read More “How to add a new Domain Controller to an Existing Domain” »
A Domain Controller (DC) responds to authentication requests. It has an hierarchical structure called domains. In this article, I will be discussing how to Setup a Domain Controller as Recommended by Microsoft in HyperV. Please see Pleasant User Group Permission and User Access, Domain Name System Protocol: Client Registration Issue, Domain Name System: How to…
Read More “Setup a Domain Controller as Recommended by Microsoft” »
Microsoft Active Directory always comes with a default domain password that defines the password requirements like length, age, characters, and many more. This password policy is configured and linked to the root of the domain and affects every user on the domain. This guide is going to show you how you can change that default value…
In this article, you will learn how to demote and remove a Domain Controller on Windows Servers. According to techdirectarchive a domain controller (DC) is a server computer that responds to authentication requests. It participates in the replication and contains a complete copy of all directory information for its domain. If you want to know…
Read More “How to demote and remove a Domain Controller on Windows Servers” »
AD DS partition Windows Server serves as a platform for building and deploying infrastructure within the corporate environment. This infrastructure deployment usually consists of applications, networks, user accounts, and web services. In this article, we shall learn Create and Delete AD DS Partition with NTDSUTIL.EXE. Ntdsutil.exe is a command-line tool that provides management facilities for…
Read More “Create and Delete AD DS Partition with NTDSUTIL.EXE” »
Remote Desktop Protocol (RDP) is a special network protocol that allows a user to establish a connection between two computers. For every connection made to a remote PC, the RDP client in Windows (mstsc.exe) saves the computer name or an IP Address and also the username used to log on. See the following guide on…
In this guide, we will discuss “PetitPotam attack on AD Certificate Services: mitigate NTLM”. Recently, Lionel Gilles, a French-based Offensive Computer Security researcher based in Paris, France published a PoC tool on NTLM Relay Attacks known as PetitPotam that exploits the MS-EFSRPC (Encrypting File Services Remote Protocol). Here is an example of such documents: NT LAN Manager:…
This article discusses how credentials are formed in Windows and how they are being consumed by the Operating System. Before proceeding, let us discuss some key terms. If a user or service wants to access a computing resource, they must provide information that proves their identity. This identity is typically in the form of their…
Read More “Windows Cached Credentials: How does cached domain logon work?” »
In this article, we shall discuss the fix to “The sign-in method you are trying to use is not allowed: For more information, contact your network administrator”. This error is a little bit self-explanatory. Please see How to create a contact in Active Directory, and How to Lock the Find My Device Option in Windows…
Read More “Sign-In Method Not Allowed: Contact Network Administrator” »
When this error message pops up, users are unable to sign-in to their devices in the domain. “We can’t sign you with this credential because your domain isn’t available. Make sure your device is connected to your organization’s network and try again. If you previously signed in on this device with another credential, you can…
Read More “How to fix “Unable to Sign In: Domain Not Available”” »
A DNS query (also known as a DNS request) is a demand for information sent from a user’s computer (DNS client) to a DNS server. When prompted with the following error as shown below. In this guide, I will show you how to fix “the following error occurred when DNS was queried for the service…
Read More “Fix the following error occurred when DNS was queried for the service location” »
In this article, you will learn how to fix “The following errors occurred attempting to join the domain: The specified domain either does not exist or could not be contacted”. An Active Directory domain is a collection of objects within a Microsoft Active Directory network. Please see how to schedule and run Windows Update via Windows Admin Center,…
