Archiv rubriky: Active Directory

How increase limit of kerberos ticket size

Source: Kerberos Event ID: 6 Type: Warning Description: The Kerberos SSPI package generated an output token of size 2F49 bytes, which was too large to fit in the 2F48 buffer buffer provided by process id 0.  If the condition persists, … Celý příspěvek

Rubriky: Active Directory | Komentáře nejsou povolené u textu s názvem How increase limit of kerberos ticket size

LDAP – Custom Queries

query disable computers objects (&(objectCategory=computer)(Name=*)(userAccountControl:1.2.840.113556.1.4.803:=2))

Rubriky: Active Directory | Komentáře nejsou povolené u textu s názvem LDAP – Custom Queries

Transcript – how restore AD Object from recycle bin – S2K8 R2

********************** Windows PowerShell Transcript Start Start time: 20120313094724 Username  : VDI\amasv Machine                : DCHV (Microsoft Windows NT 6.1.7600.0) ********************** Transcript started, output file is C:\Users\amasv\Documents\PowerShell_transcri pt.20120313094724.txt PS C:\Windows\system32> Get-ADObject -SearchBase „cn=Deleted Objects,DC=vdi,DC=fujitsu,DC=lab“ -Filter {lastKnownParent -eq „OU=accounts,DC=vdi,DC=fujitsu,DC=lab“} -IncludeDeletedObjects     … Celý příspěvek

Rubriky: Active Directory | Komentáře nejsou povolené u textu s názvem Transcript – how restore AD Object from recycle bin – S2K8 R2

dsmod – useful commands

Get members of group dsget user „CN=UserName,OU=xxxxx,,DC=domain,DC=domain“ -memberof -expand dsget group „CN=GroupName,DC=domain,DC=domain“ -members Get inactive computers dsquery computer -inactive 8 -limit 500 „OU=xxxxx,,DC=domain,DC=domain“ inactive = weeks default limit is 100 objects

Rubriky: Active Directory | Komentáře nejsou povolené u textu s názvem dsmod – useful commands

Commands to allow using AD Trust -SID History

source domain – source.com target domain – target.com On target domain DC netdom trust source.com /d:target.com /enablesidhistory:yes netdom trust target.com /d:source.com /enablesidhistory:yes netdom trust source.com /d:target.com /quarantine:no    

Rubriky: Active Directory | Komentáře nejsou povolené u textu s názvem Commands to allow using AD Trust -SID History