Using “DCPROMO /ADV” to Promote Remote Domain Controllers
Nov17

Using “DCPROMO /ADV” to Promote Remote Domain Controllers

KB ID 0000106 Problem For everyone that’s ever sat in a server room/cupboard and had to wait for a server to replicate active directory from a remote site, you will appreciate just how helpful the /ADV switch is when creating a domain controller. What does it do? Well Basically it lets you build a domain controller from a backed up copy of active directory, so after a reboot the new domain controller only has to replicate the...

Read More
Adprep /forestprep fails 2003 > 2008 Domain Upgrade
Nov17

Adprep /forestprep fails 2003 > 2008 Domain Upgrade

KB ID 0000026  Problem While attempting to upgrage a domain to Windows 2008 (schema version 44) you get an error like this.. [Status/Consequence] Error message: Error(110) while running “”C:WINDOWSsystem32LDIFde.exe” -o Obj ectGuid -d “CN=nTFRSSubscriber-Display,CN=404,CN=DisplaySpecifiers,CN=Configurat ion,DC=DOMAIN,DC=local” -u -f “C:DOCUME~1ADMINI~1LOCALS~1TempTMP9791.tmp” -j...

Read More
Windows Server ‘Can’t Delete an OU’
Nov17

Windows Server ‘Can’t Delete an OU’

KB ID 0000105  Problem Error “You do not have sufficient privileges to delete {OU Name}, or this object is protected from accidental deletion” Cause In Windows domains you have the option to prevent an OU from accidental deletion so that even a Domain/Enterprise admin cannot delete it. That’s fine until you need to delete one. Solution To delete a protected OU 1. On the the Server (with administrative privileges). 2. Start...

Read More
Windows Server – Stop Server Manager from Launching
Nov17

Windows Server – Stop Server Manager from Launching

KB ID 0000042 Dtd 04/08/15 Problem Server Manager on Windows Server 2008 and Server 2012, launches every time you log on, (with administrative access). After a while this can get very annoying, if you log into a lot of servers for example. So I tend to stop it auto-launching (it’s still on the taskbar if you need it!) Solution Disable Server Manager Opening on Startup 1. With Server Manager Open > Manage > Server Manager...

Read More
Set up Remote Access PPTP VPN’s in Windows Server
Nov17

Set up Remote Access PPTP VPN’s in Windows Server

KB ID 0000103 Problem You want to provide access to your corporate network for your remote users. Solution Installing the Server Role 1. Start > Server Manager (or Start > run > CompMgmtLauncher.exe (Enter) > Add Roles > Select Network Policy and Access Services > Next > Next 2. Select Remote Access Service > Next > Install > The Service will take awhile to install (Coffee time!). 3. When Done > Close....

Read More
Remote Server Administration Tools (On Server 2008)
Nov17

Remote Server Administration Tools (On Server 2008)

KB ID 0000169  Problem After 20 minutes of Googling I was scratching my head. I wanted “Active Directory Users and Computers” on a 2008 server, that wasn’t a domain controller. I thought as Vista had the same codebase, then Vista RSAT would work, (but it wont.) Solution After a bit of stumbling around, I found it, its already on the server as a “Feature” its just not turned on. Click Start > Server...

Read More
Locate your FSMO Role Servers
Nov17

Locate your FSMO Role Servers

KB ID 0000221 Problem You would like to know which servers are holding which roles. To move your FSMO Servers CLICK HERE Solution FSMO Servers There are five FSMO (Flexible Single Master Operations) Roles that need to Exist in a Windows AD Forest. PDC Emulator (One per domain) RID Master (One per domain) Schema Master (One per forest) Domain Naming Master (One per forest) Infrastructure Master (One per domain) But I’ve Googled...

Read More
Deploying a Windows Server 2008 Domain Controller in a Windows 2003 Domain
Nov17

Deploying a Windows Server 2008 Domain Controller in a Windows 2003 Domain

KB ID 0000239 Problem Before you can add a Windows Server 2008 Domain Controller to a Windows Server 2003 Domain you need to carry out some preparation, this can be done during working hours, as the process only has a slight performance hit no one will notice there is work going on. Solution Before you start, have a good look round your existing domain controllers, get the latest service packs and updates installed. Have a good look...

Read More
Ldife error: “The server side error is “Schema update is not allowed on this DC”
Nov17

Ldife error: “The server side error is “Schema update is not allowed on this DC”

KB ID 0000258  Problem Seen when running an ldife command like this Error: Add error on line 1: Unwilling To Perform The server side error is “Schema update is not allowed on this DC. Either the registry key is not set or the DC is not the schema FSMO Role Owner.” 0 entries modified successfully. An error has occurred in the program   Solution 1. I’m assuming you ARE on the schema master? check 2. Basically your...

Read More
Transferring Your FSMO Roles
Nov17

Transferring Your FSMO Roles

FSMO Roles KB ID 0000240 Problem Note: This article is still valid, but this procedure can now be done simply with PowerShell. Windows Server – Locating, Transferring, and Seizing FSMO Roles If you are replacing a domain controller, or simply taking one offline for a while, you might want to transfer its FSMO roles to another Domain Controller. There are 5 FSMO roles which are, · Schema master – Forest-wide and one per forest. ·...

Read More