I have a group of admins who didn't need to be Domain Admins. I removed them from the group and delegated permissions as needed. They have Edits settings, delete, modify security permissions to GPOs and can backup a GPO via the GPMC, but they cannot restore the GPO. Does anyone know the rights I need to grant and to what container to allow them to restore GPOs? Thanks.

We have a ML310e Gen 8 that we just re-installed Windows Server 2012 Essentials (not Essentials R2) on and it keeps having an issue with rebooting.

Here's what happens:

You can reboot from the GUI with no issues.

When you reboot from command prompt, it locks up and the processor starts to overheat. You get the red hardware light on the front and you have to power it down manually.

We have updated the BIOS and intelligent provisioning. We did hardware scans and they came back clean. There's a post that says that this version has this same problem when you use a password with special characters in it. We changed the password and we are not using special characters.

Any ideas? This is really weird.

HELP!  I lost my domain after I decomissioned my 2008 r2 server.  I lost all the roles and I can't even access AD.  When I try to use metadata cleanup I get the following:
Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.

C:\Windows\system32>ntdsutil:metadata cleanup
The filename, directory name, or volume label syntax is incorrect.

C:\Windows\system32>ntdsutil
ntdsutil: metadata cleanup
metadata cleanup: connections
server connections: connect to server kkdc02.local
Binding to kkdc02.local ...
DsBindWithSpnExW error 0x5(Access is denied.)
server connections: set creds kk.local administrator kkcp@$
server connections: connect to server kkdc02.local
Binding to kkdc02.local as kk.local\administrator...
DsBindWithSpnExW error 0x5(Access is denied.)
server connections:

When I try to sieze the roles I get:
Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.

C:\Windows\system32>ntdsutil
ntdsutil: roles
fsmo maintenance: connections
server connections: kkdc02
Error parsing Input - Invalid Syntax.
server connections: kkdc02.local
Error parsing Input - Invalid Syntax.
server connections: connect to kkdc02.local
Error parsing Input - Invalid Syntax.
server connections: connect to server kkdc02.local
Binding to kkdc02.local ...
DsBindWithSpnExW error 0x5(Access is denied.)
server connections:

Hi
I wanted  to join Windows 7 PCs to the domain and I get this error.
An active directory Domain Controller (AD DC) for the domain Domain.Local could not be contacted. Ensure that the domain name is typed correctly. If I click the details I Note: This information is intended for a network administrator.  If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\Windows\debug\dcdiag.txt.see the below error:


DNS was successfully queried for the service location (SRV) resource record used to locate a domain controller for domain "Domain.Local":

The query was for the SRV record for _ldap._tcp.dc._msdcs.Domain.Local

The following domain controllers were identified by the query:
adc-001.domain.local
adc-002.domain.local
adc-003.domain.local

However no domain controllers could be contacted.

Common causes of this error include:

- Host (A) or (AAAA) records that map the names of the domain controllers to their IP addresses are missing or contain incorrect addresses.

- Domain controllers registered in DNS are not connected to the network or are not running.

Not sure if my colleagues had made any changes on the DNS. Please see the attached dcdiag.txt.
My PC is connected to the same network and subnet, I am able to ping all the three DCS.
When I ping from the workstations that needs connected to domain, I am not able to ping ADC-001 and ADC-002 , but able to ping …

I've inheriting a Windows Server 2012 R2 Citrix server with XenApp 7.17. We are working with just one server, with local profiles. I've ran into an issue for a few users (on various laptops both (Windows 7 and Window 10) where the published mapped drives for users (which are pulling form GPO) are slow to propagate (more than 3 minutes to load)

Citrix support is deeming this a slow network problem, but it just isn't consistent with everyone.

What I've tried so far:

1. Folder redirection is enabled .
2. Step 1 of this article https://support.citrix.com/article/CTX238200 , but the following steps for for Server 2008 thus step 2 does not appear to apply.
3. Asynchronous file write- https://support.citrix.com/article/CTX201515   this did not work.

The mapped drives are published like this:

Application path: %ProgramFiles%\Internet Explorer\ixplore.exe
Command Line arguments: \\NAMEOFDOMAIN\DOMAINSHARENAME

Any ideas?

Hi

I have exchange 2013 and my predecessors has installed a SAN certificate on this server SSL® + UCC
Now I wanted to add another domain and i requested the SSL provider to add a new domain to the SAN certificate and I have been told by the SSL providers that the new domain has been added to the SAN and new certificates were issued on the portal.
On the SSL company website portal- Under my account I can see each of the following text on a separated windows.
I can see CSR text ,  SSL text, INTERMEDIATE text

So first do I need to copy the INTERMEDIATE txt on a notepad and rename as .crt and import into Intermediate Certification Authorities in the certificate mmc console of the Exchange server.
Secondly I copy only the SSL text to notepad and rename as .crt and Log in to Exchange Admin Center and import.
Thirdly Do I need to leave the CSR as it is ?

Please suggest if I am wrong or if I missed any steps?
Also do I need to remove the previous SAN certificate on the Exchange 2013, before I install an updated one.

Any help much appreciated. Thanks in advance

This Windows 2012 Server Security Update is recommended on EE for removed to stop the error code ORA-01019

For anyone who is following me. I was able to get the server to work with the Oracle Driver for a Crystal Reports project I have. What failed was an Enterprise Report Delivery Solution called Ripplestone. So I got online with the developer who built Ripplestone and all the reports broke. The system resides on IIS. and he came on and started to strip away some things from the system like older versions and put another one on.  This one win32_12201_client

Then he went through the process of granting permissions of folders through the Network Service.

Back to the problem now. I got the error known as ORA-01019 and this experts says at the bottom of the solution:
Expert Comment

by:Qlemo
Batchelor, Developer and EE Topic Advisor
Comment posted 2017-04-14
Comment Utility
The solution is to reverse that update?

My question is what kind of damage could I potentially do to the server if I remove this update.

If it looks resonably safe to remove? How do I remove it safely? Steps would help with me. thank you.

Morning,

early or later we are moving to Windows Azure with an hybrid cloud, some exchange servers in house and some in the cloud, connecting ad some in the cloud and some in house.
i dont have any expirience with setting up this in cloud but i can believe there must be some readyness preparing  checks.

can any point me to a list or script to run on my active directory that says iam ready for it or not?
or some good workflow to start with .

so once managment is ready we IT are ready as well?
Thanks
Harm

Windows server 2012r2 APP server running in VM. It has intel xeon e5-2650 v4 @ 2.20GHZ processor.
Most of the time it shows 100% maximum frequency. Why its showing like that? Any thing needs to be taken care? Please see attached screen shot.

Although all of my domain controllers are 2012r2, I inherited a domain with a server 2003 functional level.  Upgrading the domain functional level seems fairly easy and safe, but I am concerned about group policies and adm files.  Will the group policies I have in place now still function after a domain functional level upgrade?  After a forest level functional upgrade?  Is there a set of "next steps" for group policy files/settings after raising domain and forest functional levels?

As always, thank you for your help!

I've updated the central store in Windows 2012 domain with admx files for Chrome. Edited policy, but pcs never get the policy since they don't have the admx file locally.
Question : How do the pcs get these admx files ? The settings in the template cant apply I assume since they don't have the file.

Hello,

When we do a RDP to a Windows 2012 WORKGROUP server, we are getting this message even we login as a local administrator:

"An authentication error has occurred.  The function requested is not supported"

I look up the web and follow to disable the "Encryption Oracle Remediation" under Local Computer Policiy>computer configuration>administrative>system>credential delegation.  

However, I do not see "Encryption Oracle Remediation" on this WORKGROUP server.

Please advise how to fix.

Many thanks.

I have computers on a separate subnet.  They are on windows 2012 Domain.  The DC is on a different subnet.  I have a Active Directory integrated zone on subnet 1 and the computers still cant contact the DC.  Example computers on the .1 network cant logon to the DC on .2.  A Active directory Integrated DNS zone is created on the DC in the .1 network.