Active Directory on Windows Server 2008 R2
Group policy object is a power full feature of Microsoft operating systems using which you can control almost every aspect and environment of a users and computers. You can perform checks and rules on users using different policies of group policy objects. Since GPO have long list of policies and also Microsoft divides these policies …
Using the Restricted Groups you can set different policies to the Groups of active directory computers. For example you can provide the admin rights to specific active directory’s security group or users on all the systems in your network using restricted groups from group policy object. In this article I will show you how you …
Sometimes you don’t want to implement group policy on all of added users in an organizational unit, you want some users from same OU will not effect from a GPO with which we are imposing restrict on other users. For example we have an organization unit of 10 users and we want to restrict the …
Using a starter Group Policy Object you can create a default/starter GROUP POLICY OBJECT (GPO) with predefine setting that are necessary for your organization and whenever you will create a new Group Policy Object using this start Group Policy Object you will find already define policies and then you can edit that GROUP POLICY OBJECT …
You can control almost everything of active directory users using group policy object, you can manage different items like user desktop experience including theme/wallpaper, installation printers, security configurations like password complexity, redirect folders, you can control the installation of software with GPO. Every windows OS has a build-in group policy object which is known as …
You can perform the backup and recovery on windows server 2008 using server backup feature which you can install from windows features. Here I will show you that how you can schedule a backup and then how to recover from this backup using windows server 2008 backup and recovery feature. But you should keep in …
I will show you how to recover the certificate using recovery agents. But make sure you have enabled certificate archiving otherwise you are not able to recover the certificates. You can learn more about Key Archiving in Certificate services. You can convert a certificate into an importable form using recovery agent and then you can import …
In this article I shall show you how to auto enroll the computer certificates for active directory computers, this method is almost similar to auto enrollment of user certificate but you need a different group policy for computer certificates. Also i am using the same three systems as I was using in previous articles that …
In Auto enrollment certificates are distributed automatically by certificate authority and user even not being aware that certificate enrollment is taking place. Normally certificates issued to computers and services are done by auto enrollment. Here I will show you how you can auto enroll the user certificate using certificate authority in active directory. You need …
CA is used for issuing the certificates base on certificate templates. Certificate template defines what is in a certificate, what type of encryption is used, what is key length, what type of technology (MD5, SHA etc) is used. When you are using certificate services then it is important to configure the key recovery agent so …
I am using a simple environment for installing active directory Certificate authority role on windows server 2008 R2, this server has not other role installed on it and member of active directory w7cloud.com, also have the OS windows server 2008 enterprise edition. You start the installation of AD certificate services by opening the server manager …
What is certificate? Normally we use certificate for security but remember that this will not provide a guarantee, because these are many other factor in security chain. Certificate usage why we need certificates? 1. One of thing that you need certificates is for signatures, for example you are writing code for your software you can …
These are three types of zones in active directory 2008, which are forward lookup zones, reverse lookup zone and conditional forwarders. Forward Lookup Zones: The most common zone of DNS is forward lookup zone. In windows server 2008 you can divide your zone into three regions that are primary, secondary and stub. Primary Zone: …
DNS stand for domain name services, and basic function of DNS is to resolve the IP address into computer name and vice versa. Suppose you have an organization where you have different servers and clients, in such environment it is difficult to remember the IPs of these systems. By using the DNS server we can …
Taking Active Directory manual backup using NTDSutil and DSDButil is straightforward. First we will see how to take backup of Active directory using NTDSutil. Backup of Active Directory using NTDSutil: We will find out how to take backup of active directory database and logs, before taking backup using NTDSutil first you need to stop the …