Sheik's Site
Use of DCPROMO is still the proper way to remove a DC server in an Active Directory infrastructure. Certain situations, such as server crash or failure of the DCPROMO option, require manual removal of the DC from the system by cleaning up the server’s metadata. The following detailed steps will help you accomplish this: Step … Read more
Lingering objects in Active Directory can disrupt replication and introduce directory inconsistencies. Microsoft provides a graphical utility called the Lingering Object Liquidator (LoL) that simplifies detection and removal without relying solely on command-line tools. This guide outlines a structured troubleshooting approach and safe use of the LoL GUI tool. Understanding Lingering Objects Lingering objects occur … Read more
Repadmin is a command-line utility used to diagnose and manage Active Directory replication. It allows administrators to view topology, monitor health, force synchronization, and troubleshoot complex directory issues. It is installed with: Run from an elevated command prompt. Displays the master command list and syntax help. Command Categories 1️⃣ Forest & Domain Overview Replication Summary … Read more
If your Windows Server 2019 RDS hosts suddenly experience broken Start Menus, unresponsive modern apps, or AppX registration failures, the root cause may be something that usually goes unnoticed: notification registry bloat. This issue is especially common on heavily used RDS servers where many users log in and out daily. Over time, Windows accumulates thousands … Read more
Maintaining your WSUS (Windows Server Update Services) can sometimes feel overwhelming, especially if the SUSDB is cluttered with old or unnecessary updates, or the Content folder has become bloated due to accidental settings changes. At times like these, starting fresh with a clean database and content repository can be the most efficient solution. Here’s your … Read more
When working with Active Directory Federation Services (ADFS), one common pain point is SSL bindings and how ADFS responds to requests via hostname vs. raw IP. Recently, I encountered the following scenario: This caused both the Load Balancer (LB) and ADFS Proxy (WAP) to mark the server as offline. The Root Cause ADFS relies on … Read more
Step 1 Create a backup of the whole server. Step 2 Visit this website for the latest OpenSSL ZIP: https://kb.firedaemon.com/support/solutions/articles/4000121705 Step 3 Extract or browse for the x64/bin directory from the ZIP file Step 4 Open another File Explorer and go to C:\XAMPP\APACHE\BIN directory Step 5 Rename the following files: openssl.exe, libcrypto-3-x64dll, libssl-3-x64.dll Step 6 Copy … Read more
Whether you’re a system admin, helpdesk technician, or a curious power user, password management is something you’ll deal with often. Here’s a neat little collection of powerful Windows command-line tools you can use to reset, set, and manage passwords—without opening a single window or GUI. 🔁 1. Reset a Password for an Active Directory User … Read more
This step-by-step guide will show you how to configure your Windows Server to disable 3DES and Blowfish ciphers while enabling and prioritizing AES, all through Group Policy (GPO). By implementing this configuration, you can enhance the security of your servers and meet modern cryptographic standards. Step 1: Open Group Policy Management Step 2: Configure SSL … Read more
Widgets in Windows 11 can be distracting or unnecessary in certain environments. You can disable them through Group Policy Objects (GPO) by using the “News and Interests” ADMX and ADML files exported from a Windows 11 device. This guide outlines the steps to copy the necessary files, import them into the Active Directory (AD) server, … Read more
If your server is running an evaluation version of Windows Server Standard or Datacenter edition, you can convert it to an available retail version. Run the following commands in an elevated command prompt or PowerShell session.
We are trying to install the “Bit locker feature” in the Windows Server 2019. In the last step of installation from the Add roles and features, the installation will stop with the error “The ws-management service cannot process the request. the service is configured to not accept any remote shell requests. “ To fix this … Read more
Error when we try to access an Azure VM which was unable to communicate with the RDP Licensing server If the below error occurs, continue with the troubleshooting steps. Since Remote Desktop Protocol (RDP) isn’t available and the server is in Azure, you’ll need to use PowerShell remoting or the Azure Serial Console to access … Read more
To remove a server from all GPOs locally on the server itself without modifying anything in Active Directory, you can use the following methods: 1. Disable Group Policy Processing (Local Group Policy): You can prevent the local machine from processing any Group Policies by modifying the local Group Policy settings: 2. Delete Local Group Policy … Read more
Sometimes, we may encounter this issue even after rolling back the group policy that was previously set to restrict users’ access via group policy. To Fix this issue Trusted installer NT account needs to be added with full control for the net.exe and net1.exe located under C:\windows\system32. Also, the ownership needs to be given to … Read more
In this article, we’ll explore a PowerShell script to retrieve a list of users from a specified Organizational Unit (OU) in Active Directory (AD). This script also includes information about the groups to which each user belongs. Prerequisites PowerShell Script # Define the OU where the users reside$OUpath = ‘OU=Disabled user,DC=example,DC=com’# Define the path for … Read more
Task Scheduler Script to be pushed from SCCM or through GPO. Powershell to restart the client machine that has an uptime of more than 2 days. This script includes: Powershell to restart the client machine that has an uptime of more than 2 days. This script includes: Same for minutes with one notification.
To check the status of the NTP server, run the command: w32tm /query /status To reveal the current NTP pool being used to sync time with execute: w32tm /query /source You can also display a list of NTP time servers along with their configuration status as shown. w32tm /query /peers To display NTP server configuration … Read more
For Single User For bulk Users. CSV File Format Username PrimarySMTP SecondarySMTP NewUPNSuffix jdoe jdoe@prismtp.com jdoe@secsmtp.com newdomain.com asmith asmith@prismtp.com asmith@secsmtp.com newdomain.com