Tag Archives: Active Directory

How to disable all accounts from an Organization Unit structure

In some cases, the administrator must disable all accounts from a specific Organization Unit. We can approach this task from either Active Directory Users and Computers or using PowerShell. Solution…

Configuring Tombstone Lifetime (TSL) period

By default a tombstone lifetime is 180  days (it used to be 60 days on Windows Server 2003 R2), however we can change for any number that we like or…

Auditing logon events with FortiGate

How to enable Auditing on Active Directory. One of my customers was implementing web filtering using Active Directory with Fortigate firewall appliances. The solution requires a couple of Event IDs…

Using IDFix Dirsync Error Remediation Tool

Using IDFix to list accounts that require some changes before implementing the synchronization between on-premises and Office365. Solution The tool is available at Microsoft Download center, you can use the…

How to identify the replication technology in use by Active Directory

Since Windows Server 2003 the SYSVOL replication which includes Group Policies, Scripts, and so forth has been done through FRS (File Replication Services), however starting on Windows Server 2008 the…

How to configure an OU as default for new objects in Active Directory

In this Tutorial we will configure an Organization Unit as new default location for new users. By default, all new objects created by Exchange for example are created under Users…

How to add the Active Directory Domain Services role

In this Tutorial we are going over the process to add the Active Directory Domain Services role on a Windows Server 2012 R2. This procedure will be the same for…

How to define an OU as default location for new Computer objects

By default all computer objects are created under the Computers container and in this Tutorial we are going change (redirect) this default location to a new organization unit (OU). In…