Windows Server ‘Can’t Delete an OU’
KB ID 0000105 Problem Error “You do not have sufficient privileges to delete {OU Name}, or this object is protected from accidental deletion” Cause In Windows domains you have the option to prevent an OU from accidental deletion so that even a Domain/Enterprise admin cannot delete it. That’s fine until you need to delete one. Solution To delete a protected OU 1. On the the Server (with administrative privileges). 2. Start...
Locate your FSMO Role Servers
KB ID 0000221 Problem You would like to know which servers are holding which roles. To move your FSMO Servers CLICK HERE Solution FSMO Servers There are five FSMO (Flexible Single Master Operations) Roles that need to Exist in a Windows AD Forest. PDC Emulator (One per domain) RID Master (One per domain) Schema Master (One per forest) Domain Naming Master (One per forest) Infrastructure Master (One per domain) But I’ve Googled...
WDS – Unattended file – Joining a Domain Automatically
KB ID 0000494 Problem During a large rollout the more things you can automate the better, before you continue though be aware of one thing… You can only automatically join a client to a domain if it has an auto generated random machine name!* *Note: This is not 100% true, if you pre-stage the computer objects into Active Directory with the GUID of the machine (you can see this on the screen at pXe boot time, or get it from the...
Install SCCM 2007 on Windows Server 2008 R2 – Step by Step
KB ID 0000297 Problem I had to work out how to do this for a client, and as is my modus operandi, I’ll try and save you some of the pain I endured, Products Used System Center Configuration Manager 2007 SP2 Windows Server 2008 R2 SQL 2008 R2 (At time of writing neither officially supported or not supported on SCCM) Note: I was originally going to use SQL 2005 – hence the reason the SQL servers name is SCCM-SQL2005, however...
PowerShell – Update All Domain Users Email Address From UPN
KB ID 0001072 Problem Update: Here is an easier Solution Earlier in the year, I had a problem with Certificate Services, every time it tried to issue a ‘user’ certificate it gave me an error because the user did not have an email address specified on their user object in AD. At the time I thought “I wish I know enough PowerShell, to just put an email address in all the users e-mail attribute”. So while...