Posts

Facing an AD error :- 0x7 - KDC_ERR_S_PRINCIPAL_UNKNOWN

hi, cannot open following link. having problem regarding 0x7 - kdc_err_s_principal_unknown on ad. can me on or provide alternative url if in hand.   http://technet.microsoft.com/en-us/library/cc772897(ws.10).aspx thanks , regards debasis deb hi  on same case error explians related "kerberos unable find server in database" check similar case; https://social.technet.microsoft.com/forums/windowsserver/en-us/90c38ad2-4b4f-48a9-bac7-7e0df80501e3/kerberos-kccerrsprincipalunknown?forum=winserverds kerberos error: 0x7 kdc_err_s_principal_unknown http://blogs.technet.com/b/activedirectoryua/archive/2011/01/14/kerberos-error-0x7-kdc-err-s-principal-unknown.aspx quickly explained: service principal name: registration, duplication http://blogs.technet.com/b/qzaidi/archive/2010/10/12/quickly-explained-service-principal-name-registration-duplication.aspx update setspn - syntax setspn.exe http://blogs.technet.com/b/activedirectoryua/arch...

Hyper-v R2 gives "Configuration Error" on network ports after migrate

i set new 2 node server 2008 r2 cluster running hyper-v.  have 6 network ports on both servers 1 port managing hyper-v machines 1 port heartbeat between nodes 1 port iscsi communication 1 port create virtual network named internal 1 port create virtual network named dmz 1 port create virtual network named internet. i created virtual networks before build cluster. cluster looks running fine but, if make machine , connect virtual network (doesn't make difference one) , migrate other host network connection gives "configuration error" on network adapter(s). because of live/quick migrate doesn't work @ all. when created virtual networks unticked "allow management operating system share network adapter" turned option on again doesn't make difference, turned off option again. the virtual networks on both nodes have same names, , connected same network port (i use 1 quad port , 1 dual port adapter) i hope 1 of can problem, if need more inf...

failed to open the group policy object. you may not have the appropriate rights. network access is denied

we have 1 way forest trust forest , forest b, have created universal group , added members in forest a.  then added domain local group in forest b. we want (certain) users forest able manage group policies on forest b. we've delegated local group rights edit gpo whenever try edit (even though option available) error: "failed open group policy object. may not have appropriate rights. network access denied" any ideas be? the "network access denied" part of error throwing me well.  doesn't give further info on this. might simple we've missed if must keep missing :) ! any appreciated! from items have read statement below has been in place since windows 2003, authentication setting forest trust? (link below) assume in trust forest b trusts forest , group setup in forest a? below verbiage sound true in your setup. a one-way, forest trust between 2 forests allows members of trusted forest utilize resources located in trusting fores...

Turning on active directory infrastructure after serveral times of inactivity

hi all, i preparing infrastructure based on active directory (windows server 2012). infrstructure composed 2 domain controller (one phisical 5 fsmo rule and 1 virtual on vmware), 3 other domain servers , 1 exchange 2013 server. 100 clients joined ad domain. this infrastructure shipped customer , cannot turn on server before four/five months. are there special precautions taken? example, i think of deadlines of domain controllers replica , password. thanks guido hi, based on research, domain controllers member computers in domain, machine passwords change, too. please make sure shipping time won’t exceed tombstone lifetime in domain. can configure tombstone lifetime per requirement. more information you: determine tombstone lifetime forest http://technet.microsoft.com/en-us/library/cc784932(v=ws.10).aspx best regards, amy Windows Server ...

Sync files over internet between several windows 2008 servers

hello, i have 3  w2k8r2 servers in 3 different countries. i sync directory between these servers: files put in directory, replicated same directory in 2 other servers. what solutions recommend? prefer not using third commercial product copy files on private network dropbox or sugarsync. free , simple tools instead, saw sync toy work on internet on different computer not on same network? hello, i have 3  w2k8r2 servers in 3 different countries. i sync directory between these servers: files put in directory, replicated same directory in 2 other servers. what solutions recommend? prefer not using third commercial product copy files on private network dropbox or sugarsync. free , simple tools instead, saw sync toy work on internet on different computer not on same network? you can use dfs(-r). see: http://technet.microsoft.com/en-us/library/9ebde414-b933-40cc-aaeb-e72c3a3632d3 http://technet.microsoft.com/en-us/library/bb727150.aspx http://technet.mic...

Migrating DNS and Setting up DHCP

a little background on question. i tasked setup active directory company after getting hired. they have following setup: dhcp being hosted server running dhcpd there 3 domain controllers, dc01 needs demoted , have hits authentication key re-entered (was setup incorrectly). dc02 , dc03 having hardware migrated brand new server hardware. i planning on doing following. 1. setup dc02's replacement brand new instance, migrate dns dc01, create new domain name subdomain (ex. corp.company.com), setup dhcp (to depreciate dhcpd), setup active directory. once new dc02 ready, shut down old dc02 , demote dc01 in order authenticate. 2. add dc01 part of forrest dc02, have replicate , balance load 3. setup dc03's new machine, depreciate dc03's old machine. replicate , load balance questions: 1. how migrate dns existing dc new instance? a. how plan subdomain being added? 2. can dhcpd migrated dhcp on win server 2012? 3. other details need consider? ...

issue with GPO "WSE Group Policy Password Synchronization"

Image
when started migration of sbs2011  2012r2 essentials service noticed gpo appear assume passwords synced cloud when implemented group policy essentials dashboard crashed , typical gpo's creates weren't there , folder-redirection present blank deleted (i didnt delete gpo "wse group policy password synchronization" ) i re-launched dashboard , ran through process again, worked treat! except gpo " wse group policy password synchronization " appears blank, remember pointing ps file dont know ps file , how recreate it, along confirm does. sadly have no gpo backup go to. any on appreciated  cheers  hi, à however when implemented group policy essentials dashboard crashed based on description, understand dashboard crashed when implemented group policies (some wse group policy). à the typical gpo's creates weren't there , folder-redirection present blank deleted (i didnt delete gpo "wse group policy password synchron...