Windows: ‘Trust Relationship Failed’
Trust Relationship KB ID 0000504 Problem Seen on Windows clients in a domain environment. The trust relationship between this workstation and the primary domain failed What’s Happened? Put simply, just like you have a password for your user account, the computer you log onto also has a password (you just never see it), it gets reset (by default) every thirty days, and all this runs in the background. For a lot of different...
How to track failed logon attempts in Active Directory
Track failed logon KB ID 0001209 Problem If a large number of failed logon attempts occur within a certain period of time, it could be an indication of a security threat, which is why it is important that organisations have a proactive means of auditing and monitoring whenever this happens. There are a number of ways you can perform this audit, one of which is using the native tools. Here, we will take you through the steps so that...
Cannot Join Domain?
Cannot Join Domain KB ID 0000534 Problem The primary cause (99.99% of the time) a client cannot connect to, or join a domain is DNS related. The specified domain either does not exist or could not be contacted Solution : Cannot Join Domain 1. To Troubleshoot you need to know the IP address of your DNS server, In many cases it’s on the first domain controller but that’s not always the case so find out (go to a WORKING...
Windows LAPS
Windows LAPS KB ID 0001822 Problem We used to have Microsoft LAPS, now we have Windows LAPS! LAPS is a solution that lets’ you store admin passwords ‘elsewhere’ be that in your local Active Directory or Azure Active Directory*. Unlike previously, where you had to deploy/install client software, it’s now built into Windows from the following versions. Windows 11 22H2 – April 11 2023 Update Windows 11 21H2...
Windows Server – Install and Configure NDES
KB ID 0000947 Problem NDES, is the name for what we used to call MSCEP, which was an ‘add-on’ for the Server 2003 family of servers. In Server 2008 it was renamed to NDES. It is a role service that runs on a Certificate Services Server, and is used to create a registration authority (RA) that can issue certificates from your PKI infrastructure to network devices, i.e. Routers, Firewalls and Switches. Solution Installing...