Microsoft will release security update in March 2020 for all supported Windows platforms that will enable LDAP channel binding and LDAP signing on Active Directory servers by default. The DC will reject Simple Authentication and Security Layer (SASL) LDAP binds that do not request signing (integrity verification) or to reject LDAP simple binds that are…
Category: Technical Tips
I finally finished the project which raised the Active Directory domain and forest functional level from Windows 2008 R2 to Windows Server 2016. It’s time to log the steps and issue I met during the long journey. The prerequisite of raise AD functional level to Windows server 2016 is that there is no any DC…
Install-WindowsFeature –Name GPMC Run this PowerShell command will install the GPMC on a Windows Server 2016 member server allowing you to edit Group Policy objects without logging into a Domain Controller.
Recently I install 2 new MacBooks pro for domain users and met some issues. Problem: Network accounts are unavailable After binding the MacBook Pro to the Windows AD, the login interface still showed Network accounts are unavailable and I can’t login with a domain account. Solution: Unbind the computer from the AD, and rebind it. …
When I was trying to delete a decommissioned remote desktop server from Active Directory I received the following message: Object %COMPUTERNAME% is a container and contains other objects. Are you sure you want to delete object %COMPUTERNAME% and the objects it contains? This operation could take a long time if %COMPUTERNAME% contains a large number of objects. To determine…
I had this issue on several servers running 64 bit Windows Server 2008 R2 SP1 standard edition. It happened when I manually run IE11-Windows6.1-x64-en-us.exe to install Internet Explorer 11. I followed the Internet Explorer Troubleshooter page and checked Prerequisite updates for Internet Explorer 11. I have downloaded all required updates and run the files to install. Most…
This is an wired issue I had recently when I was working on a Windows domain decommission project. Let me use company.local, ad.company.local and abc.com as the example. ad.company.local is the child domain of company.local. There are two way trusts between abc.com and company.local domain. abc.com is the old domain. All most all computers are in ad.company.local…
I was working on a PowerShell/PowerCLI script to build a VMware VM from a template, assign IP address, default gateway, DNS, join it into the domain and install some software. I knew Netsh command can be used to configure IP address, default getaway and DNS servers. I did not remember the details how could I…