Posts

Showing posts from February, 2018

AD 2008 Active Directory Recycle Bin

Image
Active Directory Recycle Bin Active Directory Recycle Bin is a new feature in windows 2008 R2 it is not an option that you can turn on or of. Yes it is a hidden feature and you can only turn it on. What do you need well only a windows 2008 R2 DC By default, Active Directory Recycle Bin in Windows Server 2008 R2 is disabled. To enable it, you must first raise the forest functional level of your AD DS or AD LDS environment to Windows Server 2008 R2, which in turn requires all forest domain controllers or all servers that host instances of AD LDS configuration sets to be running Windows Server 2008 R2. After you set the forest functional level of your environment to Windows Server 2008 R2, you can use the instructions in this guide to enable Active Directory Recycle Bin. The restore can only be done with powershell there is no supported tool from microsoft but there are nice gui tools. http://powergui.org/shares/powergui/sbin/docs/Advanced_Reporting_PowerPack/Advanced_Reporti

NETLOGON vs SYSVOL

Logon scripts are found under the domain controller's NETLOGON admin share for Windows NT, whereas they are found under the SYSVOL share for Windows 2000. This can cause some confusion for Windows NT admins not familiar with the name change. On Windows NT DCs, the %SystemRoot%\System32\Repl\Import\Scripts folder is shared as NETLOGON.  Dcpromo  modifies the registry value that defines the path to the NETLOGON share as part of the upgrade to %SystemRoot%\Sysvol\Sysvol\domain_name\Scripts . The default folder structure for W2K is : %SystemRoot%\Sysvol\Sysvol\domain_name\Policies %SystemRoot%\Sysvol\Sysvol\domain_name\Scripts Any changes to the %systemroot%\SYSVOL folder on any DC are replicated to the other DCs in the domain. Replication is RPC based. You can use NETLOGON and SYSVOL to distinguish between DC and member server. If both the NETLOGON and SYSVOL shares exist on a W2K server, it is a DC. When dcpromo demotes a DC to a member server, the NETLOGON share

DNS _ WINS DIFFERENCE

WINS DNS WINS maps NetBIOS names to IP Addresses DNS maps Hostnames to IP Addresses To find the netBIOS names your PC has registered type "nbtstat -n" at a command prompt and press enter To identify your computers Hostname type "hostname" at a command prompt and press enter  NetBIOS name is a 16 byte address Hostnames can be up to 255 charachters in length WINS was always used by organisations for name resolution on their local network NetBIOS names are located through a series of steps that begins  with checking the local cach  LMHosts file HOST FILE WINS is platform dependent DNS is platform independent WINS supports dynamic IP addresses DNS supports static IP addresses WINS supports incremental reproduction of the data for any modifications DNS copies the entire database. WINS does not support TCP/IP

Disabling APIPA in Server

Disabling APIPA Whenever DHCP is used, APIPA is enabled by default. If you don't want a computer to use APIPA, you can either assign a static TCP/IP address or disable APIPA. For example, if your network uses routers or your network is connected to the internet without a nat or proxy server, you might not want to use APIPA. You can disable APIPA in the registry. On windows 2000 or later, you can disable APIPA by creating the IPAutoConfigurationEnabled as a DWORD value-entry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\AdapterGUID,  where AdapterGUID is the globally unique identifier (GUID) for the computer's network adapter. Set the value to 0×0. If you create the IPAutoConfigurationEnabled as a DWORD value-entry, you can enable APIPA at any time by changing the value to 0×1. For more information about disabling APIPA, see microsoft knowledge base article 220874.

2008 Active Directory features

2008 Active Directory features Whats new in windows 2008 Active Directory As an Active Directory administrator very curies about the windows 2008 features compare to the earlier version like windows 2003, Windows 2008 comes with the whole bunch of features, and am going to discuss specific about the features of Active Directory server roles in Windows 2008 For  Active Directory 2012 features First I will list the features of windows 2008 Active directory and will discuss in detail of each in my upcoming article Auditing Now you can know the previous and present values for the changed attributes of the active directory object using the new auditing feature in windows 2008, as per the windows 2003 auditing you will only know the present values of the changed attribute This is very useful features in windows 2008 since you can revert back the changes using the previous value of the attribute Fine-Grained Passwords By default in windows 2003 all the user account in th

Active Directory Domain Services Database Mounting Tool (Snapshot Viewer or Snapshot Browser)

Active Directory Domain Services Database Mounting Tool (Snapshot Viewer or Snapshot Browser) Applies To: Windows Server 2008 This guide shows how you can use an improved version of Ntdsutil and a new Active Directory® database mounting tool in Windows Server® 2008 to create and view snapshots of data that is stored in Active Directory Domain Services (AD DS) or Active Directory Lightweight Directory Services (AD LDS), without restarting the domain controller or AD LDS server. A snapshot is a shadow copy—created by the Volume Shadow Copy Service (VSS)—of the volumes that contain the Active Directory database and log files. Note During product development, this feature has also been known by other names, including Snapshot Viewer, Snapshot Browser, and Active Directory data mining tool.  The Active Directory database mounting tool (Dsamain.exe) can improve recovery processes for your organization by providing a means to compare data as it exists in snapshots that are taken