Active Directory Archive

How to Backup Active Directory on Windows Server 2016?

In this article, we will take a look on how to backup an Active Directory domain controller running on Windows Server 2016. This backup will allow you to restore both individual AD objects and the entire AD domain in case of problems. Although Active Directory services are designed with

AD Account Keeps Locking Out

Sometimes there are situations when AD user account keeps locking out, this happens when you try to log on to a domain computer and getting an error on the login screen: The referenced account is currently locked out and may not be logged on to. This notification means that

Join Domain and Login over a VPN Connection

This is a short tutorial on how to join a computer to a domain over a VPN connection. This was very useful for us this weekend. We had to reformat a computer, and needed to setup their profile again under their login. Join Domain over VPN Note, you will

How to Install and Import PowerShell Active Directory Module?

Today we’ll show you how to install and use the Windows PowerShell Active Directory Module. You can use the cmdlets of this module to get different information about domain users, computers, and groups, others objects and perform some Active Directory management tasks. This PowerShell module in the server OS

Active Directory Groups Types

The Active Directory groups is a collection of Active Directory objects. The group can include users, computers, other groups and other AD objects. The administrator manages the group as a single object. In Windows there are 7 types of groups: two domain groups types with three scope in each

ADSI Edit: How to View and Change Active Directory Object Properties?

The ADSI Edit tool (Active Directory Service Interface Editor) is a special mmc snap-in that allows you to connect to various Active Directory database partitions (NTDS.dit) or to the LDAP server. The ADSI Edit tool allows you to create, modify, and delete objects in Active Directory, perform searches, and

How to Delete AD User Using PowerShell?

You can remove user objects from an Active Directory domain by using the Remove-ADUser PowerShell cmdlet. This cmdlet is a part of the ActiveDirectory Module for Windows PowerShell, which must be pre-installed and imported into the PoSh session with the command: Import-Module activedirectory The syntax of the Remove-ADUser cmdlet

How to Install Active Directory Certificate Services?

Active Directory Certificate Services (AD CS) is a very convenient and useful cerise in a domain network. AD CS allows you to issue and manage SSL and other certificates within your domain. You can use your own free certificates for Exchange servers, IIS, RDSH farms, etc. In this article,

FSMO Role: Schema Master

Schema Master is another FSMO domain controller role which is responsible for making changes to the Active Directory schema. The schema stores descriptions of all Active Directory classes and attributes. The schema partition is exists on all DCs, its named “schema naming context” and located in LDAP://cn=schema,cn=configuration,dc=<domain>. Domain administrators

How to Change Account Lockout Policy in AD?

The account lockout policy in the Active Directory domain allows you to automatically lock user account if an attempt has been made to brute-force a user password. An AD domain admin can configure account locking policies using Group Policy (GPO). By default, you can create only one password and