tag:blogger.com,1999:blog-42528158095289173632024-02-19T16:02:15.237-08:00For TechGuysVijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.comBlogger20125tag:blogger.com,1999:blog-4252815809528917363.post-57146377984684496122012-07-29T22:30:00.000-07:002012-07-30T02:59:43.152-07:00Recover deleted object using Recycle Bin GUI in server 2012<div dir="ltr" style="text-align: left;" trbidi="on">
Hello :)<br />
<br />
As in my previous post i have explained how we can recover deleted object using recycle bin feature of server 2008 R2 using Powershel.You can go through that post by clicking <a href="http://techguyvijay.blogspot.no/2011/08/restore-ad-objects-using-recycle-bin.html" target="_blank">here</a>.<br />
<br />
Now here we will see how we can recover the deleted object using recycle bin GUI feature of server 2012.<br />
<br />
By default AD recycle Bin is disabled in the AD environment, you have to enable it.<br />
<br />
Below are few requirements that must be completed to use the feature.<br />
<br />
1. At least one Domain Controller running Windows Server 2012<br />
2. All Domain Controllers must be running Windows Server 2008 R2 or higher.<br />
3. The FFL must be at minimum of windows Server 2008 R2 functional level.<br />
<br />
Here in my scenerio i am having only on DC (i.e server12.com) having windows 2012 installed on it and having FFL and DFL on server 2012.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJZx_KyrcpJYdGS6oHgtCgIuFHm1eNsqBQ8f2xBN99Wpg1Gsh4iS-blxarI-4XvvlxmIJ7r9BoPTkpoC1EQnXN5WInBITce3u0eqcE1MvtZdWV7N4uWwFHID8SUigul4Hocg6HpeqNtBg/s1600/FFL12.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="90" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJZx_KyrcpJYdGS6oHgtCgIuFHm1eNsqBQ8f2xBN99Wpg1Gsh4iS-blxarI-4XvvlxmIJ7r9BoPTkpoC1EQnXN5WInBITce3u0eqcE1MvtZdWV7N4uWwFHID8SUigul4Hocg6HpeqNtBg/s640/FFL12.JPG" width="640" /></a></div>
<br />
After you are having the FFL and DFL 2012 , then you can enable to the Recycle Bin GUI feature.<br />
<br />
To do this you must go through the Active Directory Administrative Center (ADAC).Just got o ADAC and click on the server name on the left side and you will see "Enable Recycle Bin" on the right side.<br />
just click on this and it will prompt you to enable this<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdpnETOOJeIM-MUlrkQXjrXApbvh2l65K-nnBkTXhVt7WADu9_80IeqNQV6Z4CVx91okTeyAFyNVPfaT5MTXNbjnSdOVOIb-E5_2Ggaa-XrC39M-wGLcAVZ3XjLpZLx_KCGQ8F59NU7Fk/s1600/Enable+RecBin.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="186" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdpnETOOJeIM-MUlrkQXjrXApbvh2l65K-nnBkTXhVt7WADu9_80IeqNQV6Z4CVx91okTeyAFyNVPfaT5MTXNbjnSdOVOIb-E5_2Ggaa-XrC39M-wGLcAVZ3XjLpZLx_KCGQ8F59NU7Fk/s400/Enable+RecBin.JPG" width="400" /></a></div>
<br />
<br />
Note:- You can not disable the Recycle bin once you enabled it.<br />
<br />
Once you enable this ,by clicking on the server name , in the middle pane you will see one object container i.e. "Deleted Objects". I have deleted one user i.e. vijay from my AD, so here we will reocver that user.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4ZvhUxETQ8-3qlS3DnOXTi2yomY8_2BBtsiQhFIwky0yoolnQ0o1IRpDMkXa36YPAKv0rqwC_YyVjS4BWHE9_Gl28YSD8DSBHYwQG_1CAys2d89OOS7YTXsRhmQlxIIbag_wgV4-Gkec/s1600/DeletedObject+Container.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="211" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4ZvhUxETQ8-3qlS3DnOXTi2yomY8_2BBtsiQhFIwky0yoolnQ0o1IRpDMkXa36YPAKv0rqwC_YyVjS4BWHE9_Gl28YSD8DSBHYwQG_1CAys2d89OOS7YTXsRhmQlxIIbag_wgV4-Gkec/s400/DeletedObject+Container.JPG" width="400" /></a></div>
<br />
Double click on the deleted objects container and then you will be able to see all the deleted objects.<br />
Right click on the object you want to restore and then click on restore. <br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgltLt11pgKKVDNyR0P_gUV1w9sKhU6UAw-RJMEJupQZeVg7uTROEZXZn9We1LJrQKWK7s9VpIJEBHxUu5O49iBlJvd27sa2SkCPSDdrWfq3R7EXqNlN7Nzdoy2NNqfxEAotx-uYAzlX-g/s1600/restore.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="160" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgltLt11pgKKVDNyR0P_gUV1w9sKhU6UAw-RJMEJupQZeVg7uTROEZXZn9We1LJrQKWK7s9VpIJEBHxUu5O49iBlJvd27sa2SkCPSDdrWfq3R7EXqNlN7Nzdoy2NNqfxEAotx-uYAzlX-g/s400/restore.JPG" width="400" /></a></div>
<br />
After this process your deleted object will be live in the AD again.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLv8dqSBkErtxj0jrYGPvK5oomlpweShN8ljGV7kzmBk3a_LwHqQkm5Ik3n3tdKLG1857RBTWRm-8wilptjFPFXlf79bJ_J7MIclK7MpmojsMAZSq4obilIfYsyilCdKmJmjX8HGwbe8s/s1600/restored.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="177" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLv8dqSBkErtxj0jrYGPvK5oomlpweShN8ljGV7kzmBk3a_LwHqQkm5Ik3n3tdKLG1857RBTWRm-8wilptjFPFXlf79bJ_J7MIclK7MpmojsMAZSq4obilIfYsyilCdKmJmjX8HGwbe8s/s400/restored.JPG" width="400" /></a></div>
<br />
<br />
<br />
Note:- All the group membership remain same after recovering the deleted objects<br />
<br />
<br />
<br />
<br />
G5AX6URBXMM8 <br />
<br />
<br />
<br />
<br /></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-82097376827620387372012-07-27T00:02:00.001-07:002012-07-29T21:40:14.711-07:00Downgrade Forest Functional level or Domain Functional Level in Server 2012<div dir="ltr" style="text-align: left;" trbidi="on">
Hello,<br />
<br />
Today i will share that How we can downgrade the Forest Functional level or Domain Functional level for server 2008 or 2012 .<br />
<br />
It is there that revert to the lower FFL or DFL is not possible but in server 2008 and 2012 it is possible.<br />
(FFL- forest functional level) (DFL- domain functional level)<br />
<br />
Here in my scenario i have server 2012 with forest functional level and domain functional level "windows server 2012", as you can see below the FF.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggorE89kOUAR-O6Us8fxHQFxHxzFsgv1PPtsrJnsLrhQg-1lr2PJbL_TOCK_M8L4KKMxawB4bgrFruUavZUIqb8gVebQIqsfY0hqyMMbGEfewBFhBtHp80t5eHeTf3B_IxpwVx_-uP3IQ/s1600/FF2012.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="336" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggorE89kOUAR-O6Us8fxHQFxHxzFsgv1PPtsrJnsLrhQg-1lr2PJbL_TOCK_M8L4KKMxawB4bgrFruUavZUIqb8gVebQIqsfY0hqyMMbGEfewBFhBtHp80t5eHeTf3B_IxpwVx_-uP3IQ/s640/FF2012.JPG" width="640" /></a></div>
dd<br />
As you can see the FFL of the domain server12.com is "windows server 2012 released candidate"<br />
and if you want to add ADC with server 2008 , it will not allow to do so and to add that you need to downgrade the FFL and DFL to 2008.<br />
<br />
Now i will use the power shell Active directory module to do this activity.You need to run the following power shell command<br />
<br />
<b>Set-ADForestMode server12.com -ForestMode Windows2008Forest </b><br />
<br />
It will ask you if you are sure to perform this task ,press Y as shown below<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQrH_RyFc6uDLanMiRYXlw4PrdKbnBFslw5wpLvgk5baTrWY22pU_QvYVDCZL1snN7cAWEeSLzgJbeEjBlRySNu8cICGdBBsdeDrCKWwkQPcXvtiXnM-ghEGbL2uRRxd1WvSnqmPtG7Io/s1600/FF2008.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="404" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQrH_RyFc6uDLanMiRYXlw4PrdKbnBFslw5wpLvgk5baTrWY22pU_QvYVDCZL1snN7cAWEeSLzgJbeEjBlRySNu8cICGdBBsdeDrCKWwkQPcXvtiXnM-ghEGbL2uRRxd1WvSnqmPtG7Io/s640/FF2008.JPG" width="640" /></a></div>
<br />
<br />
You can see in the above snapshot that the downgrade is done and even when you will see the the FFL level from the domains and trust it will show you the current FFL is windows server 2008.<br />
<br />
Now you need to downgrade the DFL to server 2008.<br />
<br />
Below you can see that the server12.com domain has DFL as windows server 2012 . <br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNNnr1SGghnN7xR7GEdRXIVjSgfaMqEUSqk7yrdy-hC5PL8yp7SPQdo21u-h1lsWM8QkOYKLLfzjJhtfLXKwa4RSemLQd1KlDlzszKJbLdOFGmpbSbIs6R6XBzKHcWypPF2MyBQRx90hI/s1600/DF2012.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="340" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNNnr1SGghnN7xR7GEdRXIVjSgfaMqEUSqk7yrdy-hC5PL8yp7SPQdo21u-h1lsWM8QkOYKLLfzjJhtfLXKwa4RSemLQd1KlDlzszKJbLdOFGmpbSbIs6R6XBzKHcWypPF2MyBQRx90hI/s640/DF2012.JPG" width="640" /></a></div>
<br />
<br />
Now you can follow the same procedure to downgrade the DFL as shown below.You have to run the following command.<br />
<br />
<b>Set-ADDomainMode server12.com -DomainMode windows2008domain</b><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcO4jngx95u4mhh2vSZH87Zs6om5LSTaFxXg3DYtvEK9U4iAm0STxj86X4GfaJZOSq2PQ1kFuHBv1THziD_Xa0AF7_4NDFL4gBdkRtc13Oj0KVMYODEz12oZOyaEK8GPWt_Nt5KzU14iI/s1600/DF2008.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="378" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcO4jngx95u4mhh2vSZH87Zs6om5LSTaFxXg3DYtvEK9U4iAm0STxj86X4GfaJZOSq2PQ1kFuHBv1THziD_Xa0AF7_4NDFL4gBdkRtc13Oj0KVMYODEz12oZOyaEK8GPWt_Nt5KzU14iI/s640/DF2008.JPG" width="640" /></a></div>
<br />
<br />
<br />
<br />
Now you will see both of your FFL and DFL are now on Windows server 2008.<br />
<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<br />
<br />
<br /></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-60906898021015239092012-07-09T02:01:00.000-07:002012-07-09T02:11:07.224-07:00Windows Server 2012 Dynamic Access Control<div dir="ltr" style="text-align: left;" trbidi="on">
Hello Guys,<br />
<br />
Back again after a long time.<br />
<br />
As you all must be aware about that Microsoft is working on 2012 and launched a version of server 2012<br />
<br />
Today I will share one of the nice feature of server 2012 i.e. Dynamic Access Control<br />
<br />
<strong><u>What is Dynamic Access Control</u></strong><br />
<br />
It is a new security feature that uses a file-system authorization mechanism that gives you the ability to define centrally managed file-access policies at the domain level which apply to every file server in the domain.<br />
It doesn’t replace the existing NTFS permissions though. .<br />
This security feature is claim based security feature.Claims are Active Directory attributes defined to be used with Central Access Policies. The claims can be set for both users and devices. Microsoft added a new container to the Active Directory Administrative Center to implement this new feature.<br />
<br />
To configure centralized file-access policies through Dynamic Access Control, we need to configure the following parts.<br />
<br />
1. Claim Type<br />
2. Resource properties for files<br />
3. Resource property lists ( add resource property to global)<br />
4. Create new central access rule <br />
5. Create central access policy<br />
<br />
Below is the screen shot of all the above mentioned steps.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqg5IExd8_EGEsof0BKFv0AAsL1uBzwTaJbTk0Ke1k976r-044odglYKrStJPqaTeGHEVbNhofhHtpJ9qrlU-Yov_t-DaQSele_Y8w6JAXUaghZscAJqtv-MX-r7xQ9puLWp6YAZvuN0Q/s1600/1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqg5IExd8_EGEsof0BKFv0AAsL1uBzwTaJbTk0Ke1k976r-044odglYKrStJPqaTeGHEVbNhofhHtpJ9qrlU-Yov_t-DaQSele_Y8w6JAXUaghZscAJqtv-MX-r7xQ9puLWp6YAZvuN0Q/s1600/1.JPG" /></a></div>
<br />
<br />
<strong><u>What is the need</u></strong><br />
<br />
<br />
<div class="MsoNoSpacing">
1. Create simpler authorization models for file based resource </div>
<div class="MsoNoSpacing">
2. Stop creating 1000s of groups to control access</div>
<div class="MsoNoSpacing">
3. Classify files</div>
<div class="MsoNoSpacing">
4. Control access to file based on AD attributes</div>
<div class="MsoNoSpacing">
5. Deploy the access model</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
Let's deploy this DAP to have a better understanding of it. </div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
I have promoted a server to a domain controller (not mentioned how to promote a server to a domain controller here) and the server name is server12.com</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3LDUur_v8PUkF75S4vnq_w4XPBjQf_oZmp_Zaz2kqnpehEauje0ldx89kaa0ezRL0oSROzrjEggCB-sRpZAKwzagRKu60QbhfDX0ZmUBnn3nNnGxOLH-qhAYu_gfd9oJ-fYE0MZUpjos/s1600/2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="188" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3LDUur_v8PUkF75S4vnq_w4XPBjQf_oZmp_Zaz2kqnpehEauje0ldx89kaa0ezRL0oSROzrjEggCB-sRpZAKwzagRKu60QbhfDX0ZmUBnn3nNnGxOLH-qhAYu_gfd9oJ-fYE0MZUpjos/s400/2.JPG" width="400" /></a> </div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<u><b>Configure Claim type for Users</b></u>: In this step, you will add existing Active Directory attributes to the list of attributes which can be used when evaluating dynamic access control. The user’s department value will be part of the calculation that determines if they have access to specific files. </div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
After login to the DC , you can just open the Active Directory Administrative Center to start configuring the Dynamic Access Policy (DAP).</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
Click on Claim type and then click on create new and here I am selecting Department and Country </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqYq7ZMoVhy8ZEC1WedN8GD9O8_9Cz7iMuykOl4xj6mUbku35fI63i3fC5rO2ueySom8NxivPP_iW3e5K0oNb4CM0qCOZYEM4oICof_IbcWnI8SIRlyxvZg-KmcO8iV3FErR3Nu4440J8/s1600/Countru+Claim.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqYq7ZMoVhy8ZEC1WedN8GD9O8_9Cz7iMuykOl4xj6mUbku35fI63i3fC5rO2ueySom8NxivPP_iW3e5K0oNb4CM0qCOZYEM4oICof_IbcWnI8SIRlyxvZg-KmcO8iV3FErR3Nu4440J8/s1600/Countru+Claim.JPG" /></a></div>
<div class="MsoNoSpacing">
and the classes here I selected is for User (You can create new one as well)</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEfjD2fTokjmRAc2phXZZMPg8i-L_GTQPjkUJJQ9nOxAbOfY6u__1c6Adi_TEnr-lj2_beU_t89kzzEmuLgNOVYgWdj_H_l0bns0tYrWC4fEkiB0DtLZAMDVK-VlZ0DmJTQpzuaXg5kkw/s1600/Department.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEfjD2fTokjmRAc2phXZZMPg8i-L_GTQPjkUJJQ9nOxAbOfY6u__1c6Adi_TEnr-lj2_beU_t89kzzEmuLgNOVYgWdj_H_l0bns0tYrWC4fEkiB0DtLZAMDVK-VlZ0DmJTQpzuaXg5kkw/s1600/Department.JPG" /></a></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<u><b>Configure Resource properties for files</b></u> :In this step, you will configure the properties which will be downloaded by file servers and used to classify files. Further dynamic access control rules will compare user attribute values with resource properties. You can enable existing properties or create new ones.</div>
<div class="MsoNoSpacing">
Click on resource property and here you can select the existing resource properties or also you can create the new ones, I have selected Country and Department. </div>
<div class="MsoNoSpacing">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhssHbZJBizOSrUXcmkoNRj6US1ufc-yNdUJnlx5ScoogtYTo7BC0r7JANqA_Lvo3Dh-_Kk_z2aeBza91UzoeUi-jPQ8TQho2EDewT8UJYLEpApeEFJltYG_dlP742BlxlYGSA_mp8_Fdo/s1600/Department-Resource.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhssHbZJBizOSrUXcmkoNRj6US1ufc-yNdUJnlx5ScoogtYTo7BC0r7JANqA_Lvo3Dh-_Kk_z2aeBza91UzoeUi-jPQ8TQho2EDewT8UJYLEpApeEFJltYG_dlP742BlxlYGSA_mp8_Fdo/s1600/Department-Resource.JPG" /></a></div>
<br />
Added two values in Department (Finance and ITSupport) <br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzwKcbpwR6sUVSowUHnybycoyYkzT-iekWuo0Rkf2uB9M8RM4nb08-ECLlTWekwaEMldlKBqJkfr_6sE4HjS2HVwogs13PEfXeBLJuQUuuXnG6ZKlgEkyD6GUqhEWSsxGpvflUh1XVA5E/s1600/Country-Resource.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzwKcbpwR6sUVSowUHnybycoyYkzT-iekWuo0Rkf2uB9M8RM4nb08-ECLlTWekwaEMldlKBqJkfr_6sE4HjS2HVwogs13PEfXeBLJuQUuuXnG6ZKlgEkyD6GUqhEWSsxGpvflUh1XVA5E/s1600/Country-Resource.JPG" /></a></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br />
Added two values in Country (Norway and USA)</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
A<u><b>dd resource properties to global list</b></u> :Each resource property must be added to at least one resource property list before it is downloaded by file servers. The global resource property list is downloaded by all file servers.</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLZXWF5IkNW-EOarekR3MNDDib-KEa-6VJuYIqwZ8KaWIgHhFibP2sfIVxQT4H1iIwyspQXMrQ-OONa0mVcoEwO6U0DJZ8laBLHa9UWeQl4JUwOHBhcKJMnNX2WWPTvu4j5s-1MsjAaFo/s1600/RSlist.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLZXWF5IkNW-EOarekR3MNDDib-KEa-6VJuYIqwZ8KaWIgHhFibP2sfIVxQT4H1iIwyspQXMrQ-OONa0mVcoEwO6U0DJZ8laBLHa9UWeQl4JUwOHBhcKJMnNX2WWPTvu4j5s-1MsjAaFo/s1600/RSlist.JPG" /></a></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
Add both Country and Department here.</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<u><b>Create a new Central access rule </b></u>:- In this step, you will create a new central access rule. This is similar to an access control list (ACL) in that it describes which conditions must be met in order for file access to be granted. </div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
First of all mention the name of the rule and then </div>
<div class="MsoNoSpacing">
In the Target resource option under Central access rule , you can add different conditions as mentioned below. (like department exists or country exists)</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTa2wojVleBy8u_uLLlkKC6DTejEhVae8-LNCea2TvNZUMOf_9cm21WIVNuk48fuHImI4dsLW__O5sGaN22laCuwyu3GIousHkJw9e_ZR0GQDt7cW5gcjnVcqdstZQIExUI0PT68pK22A/s1600/CAR.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="323" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTa2wojVleBy8u_uLLlkKC6DTejEhVae8-LNCea2TvNZUMOf_9cm21WIVNuk48fuHImI4dsLW__O5sGaN22laCuwyu3GIousHkJw9e_ZR0GQDt7cW5gcjnVcqdstZQIExUI0PT68pK22A/s640/CAR.JPG" width="640" /></a></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
In Permissions, select "Use the following permissions as current permissions".</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
NOTE: This setting enforces dynamic access control. The default setting will only create audit log entry. </div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
Then you need to select Edit button then click Add ,click Select a principal, and then type Authenticated. click OK, In Permissions, check the Full Control check box.</div>
<div class="MsoNoSpacing">
Click on Add condition</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
Here I have selected :</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
User department Equals to Resource deprtment</div>
<div class="MsoNoSpacing">
User Country Equals to Resource Country</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<u><b>Create a Central Access Policy:-</b></u>In this step, you will create a central access policy. A central access policy is a group of rules that are enforced as a unit. A file or folder can have only one central access policy applied to it. </div>
<div class="MsoNoSpacing">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH6H4NEWXvvSd_Vm_qxtXM4PpJJ3JQ_B5pZ1869HMnuFn2wIIBQaaIGPQYu1r3k0qh8J5tD0uGoKwGfENdiJG-ExYRaJ97DiZF83LzdWGLItSrcSd6_Qt-AzFmVVVqlPbUEsp3KZT-UZk/s1600/CAP.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH6H4NEWXvvSd_Vm_qxtXM4PpJJ3JQ_B5pZ1869HMnuFn2wIIBQaaIGPQYu1r3k0qh8J5tD0uGoKwGfENdiJG-ExYRaJ97DiZF83LzdWGLItSrcSd6_Qt-AzFmVVVqlPbUEsp3KZT-UZk/s1600/CAP.JPG" /></a></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
Just click on CAP and then click on new and then on Add to add the Central access rule.</div>
<div class="MsoNoSpacing">
add the user-resource match rule here</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
Publish the central access policy with GPO:-In this step, You need to create a new group policy to publish the central access policy.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7Kx4JSRm3mh6ppzFA3eHaXhZKHNBora6qg1aOvxTwD8PRZ6hzDPooJK8QhtVhrcGsQsPu9Byl0LRwNnQQPL-Ph4dlmbfhRe5mcdlLOe-pv9tmyNwRkbcGcmizwOOWp0IfTwMnRu1yF4A/s1600/DA.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7Kx4JSRm3mh6ppzFA3eHaXhZKHNBora6qg1aOvxTwD8PRZ6hzDPooJK8QhtVhrcGsQsPu9Byl0LRwNnQQPL-Ph4dlmbfhRe5mcdlLOe-pv9tmyNwRkbcGcmizwOOWp0IfTwMnRu1yF4A/s1600/DA.JPG" /></a></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
Go to GPMC and then select your domain and then create new GPO and named it as "Dynamic Access" </div>
<div class="MsoNoSpacing">
In Security Filtering, click Authenticated Users, click Remove, and then click OK. and then click on add and add the file server where you want to implement this Policy.</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
Right-click Dynamic Access Policy, and then click Edit. Navigate to Computer </div>
<div class="MsoNoSpacing">
Configuration/Policies/Windows Settings/Security Settings/File System, and then click Central Access Policy. On the Action menu, click Manage Central Access Policies and click on CAP (the policy you created) and then close the GPMC.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimLb4MqZsoZFxtgij-4dwSF14MPiySZyr1ywFVlazKsk8TrVGOGLF0ZGy77VgktbYjlnx_RFdsCPQjW30twGSTMAsPezvB5SjrG1fRaF_lGr67dHe7o5b2L70YFs-O0ZqvX4vHk7fJ-cc/s1600/addCap.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="387" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimLb4MqZsoZFxtgij-4dwSF14MPiySZyr1ywFVlazKsk8TrVGOGLF0ZGy77VgktbYjlnx_RFdsCPQjW30twGSTMAsPezvB5SjrG1fRaF_lGr67dHe7o5b2L70YFs-O0ZqvX4vHk7fJ-cc/s640/addCap.JPG" width="640" /></a></div>
<div class="MsoNoSpacing">
<br />
<div class="MsoNoSpacing">
<u><b>Enable Kerberos Armoring for domain controllers</b></u> :-In this step, you will enable Kerberos Armoring for domain controllers, which ensures that Kerberos tickets contain the required claims information which can then be evaluated by file servers.</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
To do this click on Default Domain policy and then click on edit and then Navigate to</div>
<div class="MsoNoSpacing">
Computer Configuration/Policies/Administrative Templates/System/KDC. </div>
<div class="MsoNoSpacing">
Click "KDC Support for claims, compound authentication, and Kerberos armoring" and enable it.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGO4GLzVVOl6vextZv8rLHDnk49aWOLLrAl4vB1bEK5nk33lPYAM8iqxHKSaRuo6Oxqr8GpO8L0luBddXq-UQIcQBuBnPlTk-hEmfAubNazg4TyA9M0guOaAwck_tsRMV5pnd39MupHoo/s1600/KDC.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="307" sca="true" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGO4GLzVVOl6vextZv8rLHDnk49aWOLLrAl4vB1bEK5nk33lPYAM8iqxHKSaRuo6Oxqr8GpO8L0luBddXq-UQIcQBuBnPlTk-hEmfAubNazg4TyA9M0guOaAwck_tsRMV5pnd39MupHoo/s640/KDC.JPG" width="640" /></a></div>
</div>
</div>
<div class="MsoNoSpacing">
</div>
<div class="MsoNoSpacing">
</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
Note:- To update the policy you can run gpupdate /force</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<u><b>Configure classification data to the file share:</b></u>In this step, you will classify the files in the file share by adding and configuring the resource properties.</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
Here i have created share folder name as "Shares".Right clik on it and then select properties, then classification, </div>
<div class="MsoNoSpacing">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBKWJNqHYwAQnQDZGnb9tgXwwxfsimOO4kNji9OmVLFtSvwyZjhWDpP4lmEMRYTHESbvQFtRWLa5wcl3bynEZTVZTW55UXplQmzgpz1F0BFg7NmZOllj13m7qhl6PT3bpsQwQBkg3Jb3o/s1600/sharepermission-classs.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" sca="true" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBKWJNqHYwAQnQDZGnb9tgXwwxfsimOO4kNji9OmVLFtSvwyZjhWDpP4lmEMRYTHESbvQFtRWLa5wcl3bynEZTVZTW55UXplQmzgpz1F0BFg7NmZOllj13m7qhl6PT3bpsQwQBkg3Jb3o/s400/sharepermission-classs.JPG" width="270" /></a></div>
<br />
<br />
<div class="MsoNoSpacing">
Then you can select the appropriate Country and department entries that must be matched with the user's</div>
<div class="MsoNoSpacing">
attributes in the AD and after getting the successful match, it will allow user to access this folder.</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
After that go to securtiy permissions>>Advanced tab and then go to Central Policy and select the policy you want to implement on the folder as shown below</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3QCOKeYOpZP1LpDz5mGbLd26kUTqLV7ZMFKF74kssNEBtfG9SeSfWf3btvltrYSBeKMkC3PwCRA1CAXPC5ZHL29Ia2xHBISyR9L___TDPukglHpBP_DH1xOA0mEIMAo1eoIyjgmh7OsY/s1600/CAP_policy.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="427" sca="true" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3QCOKeYOpZP1LpDz5mGbLd26kUTqLV7ZMFKF74kssNEBtfG9SeSfWf3btvltrYSBeKMkC3PwCRA1CAXPC5ZHL29Ia2xHBISyR9L___TDPukglHpBP_DH1xOA0mEIMAo1eoIyjgmh7OsY/s640/CAP_policy.JPG" width="640" /></a></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
After that you can apply and close all the boxes by pressing OK.</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
Now your DAP is implemented successfully on that folder and now all the users who will match the condition mention will have access to this folder , rest will not have access to this folder.</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
If you want to test the effective permission on a user you can just right click the folder and go to securtiy permissions>>Advanced tab and then goto Effective permissions tab as shown below and then search for the user for which you want to check the permissions.</div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqymSD-bVjxz3sOvO7PGUFjgHP5agTBwy5xsC1VllWHChRqYLx1F3bF_hNEGiiXwiRB1RqxPK1k7LpY8giHPRDHaUYkdQnnOtO9H8tjZbYpCwmIld4O9t_CmpjFZMyOAKQDAhp7t963lw/s1600/Access_permission.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="429" sca="true" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqymSD-bVjxz3sOvO7PGUFjgHP5agTBwy5xsC1VllWHChRqYLx1F3bF_hNEGiiXwiRB1RqxPK1k7LpY8giHPRDHaUYkdQnnOtO9H8tjZbYpCwmIld4O9t_CmpjFZMyOAKQDAhp7t963lw/s640/Access_permission.JPG" width="640" /></a></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
Here you can see Rahul is the user that has matched with the defined condition and can access the folder and you can see the permissions with green.</div>
<div class="MsoNoSpacing" style="border-bottom: medium none; border-left: medium none; border-right: medium none; border-top: medium none;">
<br /></div>
<div class="MsoNoSpacing" style="border-bottom: medium none; border-left: medium none; border-right: medium none; border-top: medium none;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<br />
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<div class="MsoNoSpacing">
<br /></div>
<br />
<br /></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-606227363314067052012-03-03T07:31:00.000-08:002012-03-03T07:31:11.769-08:00Lost And Found Folder in Active Directory<div dir="ltr" style="text-align: left;" trbidi="on"><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"> <span style="font-size: large;"> </span></span></div><div style="font-family: Verdana,sans-serif;"><br />
</div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><span style="font-size: large;"> <b><u>Lost And Found Folder in Active Directory</u></b></span></span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Hello Guys,</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Today I would share info about Lost and Found folder in AD.</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Many administrators don’t have even idea about what is Lost and Found folder.This is just a container in AD that is hidden by default (you can say)It will only be available when you set the setting to Advanced. Open up your console of Active Directory Users and Computers, and make sure that Advanced is selected in the View menu.Then you will be able to see the Lost and Found Folder.</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_CWOF-JW76bnztXMQss3rJwWbvn-g6VSCCaFwrNQC8vDcn-cLqe19g7u-m3uVqFTXOk_gAcavQ_-TBaXRv8sJjnWFlUZJs7qwR-9sf7w6nP_FY1okExABg2sy6i9kCBUzYvefeyJhNyA/s1600/Adv.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="284" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_CWOF-JW76bnztXMQss3rJwWbvn-g6VSCCaFwrNQC8vDcn-cLqe19g7u-m3uVqFTXOk_gAcavQ_-TBaXRv8sJjnWFlUZJs7qwR-9sf7w6nP_FY1okExABg2sy6i9kCBUzYvefeyJhNyA/s640/Adv.JPG" width="640" /></a></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><u><b>Orphan Objects</b></u> :Lost and Found folder basically contain ORPHAN objects.</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Now what is Orphaned objects : The objects that don't have any parent are called as orphand objects.</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Objects usually become orphans through AD replication . Every AD domain controller contains a complete read/write copy of the domain database. That means that it is possible for two administrators to make conflicting changes to AD at the same time. </span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Suppose one administrator changes user XX's password, while another changes the user XX's name. AD replicates each attribute individually, so there’s no conflict, even though two administrators made changes to the same user.Because here there are two attribute and AD will replicate both individually.</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">But in some scenarios these conflicts will not be easy to handle by AD as well.</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">For example, suppose that one administrator moved a user into the Admin organizational unit (OU), at the same time another administrator deleted the Admin OU on another domain controller. When replication occurs,You will not get the user account in Admin OU it will be in Lost and Found.</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">When the Administror deletes the OU “Admin” in the Additional Domain Controller and simultaneously on the other side Administrator is moving the one object called “Vijay” to OU “Admin”</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div class="separator" style="clear: both; font-family: Verdana,sans-serif; text-align: center;"><span style="font-size: small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQZFCA1tHlVeWexVifyJd8Pr1U4w-_pQtIDrfiKxbTgDESNKDggnQRn27rupO1PoH7EwnFXweQcMdJ0283303knbwEkXyisRn9Kg3DFu4tw8AZ7aibK9YCLB_OsM5u7iqUMPy8XPwU-q8/s1600/ADC.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="272" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQZFCA1tHlVeWexVifyJd8Pr1U4w-_pQtIDrfiKxbTgDESNKDggnQRn27rupO1PoH7EwnFXweQcMdJ0283303knbwEkXyisRn9Kg3DFu4tw8AZ7aibK9YCLB_OsM5u7iqUMPy8XPwU-q8/s640/ADC.JPG" width="640" /></a></span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div class="separator" style="clear: both; font-family: Verdana,sans-serif; text-align: center;"><span style="font-size: small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj11mkJH1zLAL_JjclIDMsoElh3vj23V_K6NyauuhiwHHQK2PF-4QSCDDMqwOrXiBrPUGn9RM9F7uijrfiutTKrxIS06lMLiFimao0HdPZOmtvOvQFCx4Zvgox8squEjWwOuvi0e0wW2SQ/s1600/DC.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj11mkJH1zLAL_JjclIDMsoElh3vj23V_K6NyauuhiwHHQK2PF-4QSCDDMqwOrXiBrPUGn9RM9F7uijrfiutTKrxIS06lMLiFimao0HdPZOmtvOvQFCx4Zvgox8squEjWwOuvi0e0wW2SQ/s640/DC.JPG" width="640" /></a></span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">The deleted object will take time replicate. So on the other location (DC) the Administrator does not know the the OU “Admin” is deleted . he will move the user “Vijay” to OU “Admin”</span></div><div style="font-family: Verdana,sans-serif;"><br />
</div><div class="separator" style="clear: both; font-family: Verdana,sans-serif; text-align: center;"><span style="font-size: small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4ScUOLHZNMUWz78rpwMmgL_N6vEZ0nLVsHHkoSpij1xFeDAw8I8QgCHaAO8nsHo6mRIQuN38FHXooKtCIl3klmwSk97JCFpP866FKkJXFjGs1s4b-x6KIJaQ_Lpes2gdpjtlW9DohbUU/s1600/lostandfound.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="354" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4ScUOLHZNMUWz78rpwMmgL_N6vEZ0nLVsHHkoSpij1xFeDAw8I8QgCHaAO8nsHo6mRIQuN38FHXooKtCIl3klmwSk97JCFpP866FKkJXFjGs1s4b-x6KIJaQ_Lpes2gdpjtlW9DohbUU/s640/lostandfound.JPG" width="640" /></a></span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><br />
</div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Once the replication is done in both the DC’’s then the OU “Admin" will be deleted from the DC also.<br />
Then the moved object “Vijay” will be stored in “LOST AND FOUND FOLDER”</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Also When we use Microsoft’s MoveTree utility to move objects between domains, the utility first moves objects into the Lost and Found folder, they are then copied to the destination domain and removed from Lost and Found. If MoveTree fails to work correctly, you might find objects still lingering in Lost and Found. </span></div><div style="font-family: Verdana,sans-serif;"><br />
</div><div style="font-family: Verdana,sans-serif;"><br />
</div><div style="font-family: Verdana,sans-serif;"><br />
</div><div style="font-family: Verdana,sans-serif;"><br />
</div></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com2tag:blogger.com,1999:blog-4252815809528917363.post-52975035113713333662012-02-15T23:53:00.000-08:002012-02-15T23:53:03.044-08:00How RPC Works<div dir="ltr" style="text-align: left;" trbidi="on"><div style="font-family: Verdana,sans-serif;"></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><br />
<span style="font-size: small;"><b>How RPC Works</b></span></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><br />
Hello Guys, Today will share some idea about how RPC works.</div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"></div><span style="font-family: Verdana,sans-serif; font-size: small;"> </span><br />
<div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><span style="font-size: small;">An RPC service configures itself in the registry with a universally unique identifier (UUID). UUIDs are well-known identifiers, unique for each service and common across all platforms. When an RPC service starts, it obtains a free high port and registers that port with the UUID. Some services use random high ports and others try to use the same high ports all the time (if they are available). </span></div><div class="separator" style="clear: both; text-align: center;"></div><br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKxp-WWT8s6z4g0_VdHCNBDaY0d1rqrKsBJJGXlsXdqy9g-xQCgwHi9tDtfjubkcGu-H9pNBEMvbKhR8Od2nKAvhWetOCP_W_Bq0wgf2mP0q24LNeylVgu9r3ooW80NtPu47LstFGk0r0/s1600/rpc1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKxp-WWT8s6z4g0_VdHCNBDaY0d1rqrKsBJJGXlsXdqy9g-xQCgwHi9tDtfjubkcGu-H9pNBEMvbKhR8Od2nKAvhWetOCP_W_Bq0wgf2mP0q24LNeylVgu9r3ooW80NtPu47LstFGk0r0/s1600/rpc1.JPG" /></a></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;">Below is the the diagram that shows How RPC works.<br />
<br />
<br />
</div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3H9yF2IfwH7TIQQNcRi6n8bJBubuYgtooVW63mk4EGkUv9lWNDeQqaJeVbFMUd_wxeFiUrDiwCX4N0E1g4w1rSPXTxuolRvHu-qu8RV7eZd290xBD-2QpnawxAOFcaAgGdy34MF4mnHw/s1600/RPC3.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3H9yF2IfwH7TIQQNcRi6n8bJBubuYgtooVW63mk4EGkUv9lWNDeQqaJeVbFMUd_wxeFiUrDiwCX4N0E1g4w1rSPXTxuolRvHu-qu8RV7eZd290xBD-2QpnawxAOFcaAgGdy34MF4mnHw/s1600/RPC3.JPG" /></a></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><br />
</div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><br />
<br />
<br />
<span style="font-size: small;">When a client wants to communicate with a particular RPC service, it cannot determine in advance which port the service is running on. It establishes a connection to the server's portmapper service (on 135) and requests the service it wants by using the service's UUID. The portmapper returns the corresponding port number to the client and closes the connection. Finally, the client makes a new connection to the server by using the port number it received from the portmapper.Because it is impossible to know in advance which port an RPC service will use, the firewall must permit all high ports through.</span></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"> </div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"> When a program tries to connect to a RPC, it requests a free port from the system. The system randomly generates the port no and give it to program requesting the port no. The default dynamic range is 1024-65535. System can give out the ports available from this range randomly.</span></div><ul style="font-family: Verdana,sans-serif;"><li><span style="font-size: small;"><b>KEY Name:</b> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP\Parameters</span></li>
<li><span style="font-size: small;"><b>Entry Name:</b> TCPWindowSize</span></li>
<li><span style="font-size: small;"><b>Type: </b>DWORD</span></li>
<li><span style="font-size: small;"><b>Value:</b> 65535 </span></li>
</ul><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgq7vphouNaDlxUw1Outv9pXwbMmhWCuHcl6SIce18LwFIqbXNYZW7M5aXUTS1Uq7PU6W6GmzCHAId0mHu5GKQttrzl0VL7IKls_U5pCAxOIKTBLvVC_oHU606XNpx5WFjA0X8zv5cR8Vo/s1600/RPc2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgq7vphouNaDlxUw1Outv9pXwbMmhWCuHcl6SIce18LwFIqbXNYZW7M5aXUTS1Uq7PU6W6GmzCHAId0mHu5GKQttrzl0VL7IKls_U5pCAxOIKTBLvVC_oHU606XNpx5WFjA0X8zv5cR8Vo/s1600/RPc2.JPG" /></a></div><div style="font-family: Verdana,sans-serif;"><br />
</div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Microsoft has increased the dynamic client port range for outgoing connections in Windows Vista and in Windows Server 2008. The new default start port is 49152, and the default end port is 65535. This is a change from the configuration of earlier versions of Windows that used a default port range of 1025 through 5000</span></div><div style="font-family: Verdana,sans-serif;"><br />
</div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Below are some Kb for more details about RPC Configuration in different scenarios.</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; margin: 0cm 0cm 0pt 72pt;"><span style="font-size: small;">How to configure RPC dynamic port allocation to work with firewalls</span></div><span style="font-family: Verdana,sans-serif; font-size: small;"> </span><br />
<div class="MsoNormal" style="font-family: Verdana,sans-serif; margin: 0cm 0cm 0pt 72pt;"><span style="font-size: small;"><a href="http://support.microsoft.com/kb/154596/"><span style="color: blue;">http://support.microsoft.com/kb/154596/</span></a></span></div><span style="font-family: Verdana,sans-serif; font-size: small;"> </span><br />
<div class="MsoNormal" style="font-family: Verdana,sans-serif; margin: 0cm 0cm 0pt 36pt;"><span style="font-size: small;"> If you want to specify static ports for known services on DC like </span></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; margin: 0cm 0cm 0pt 36pt;"><span style="font-size: small;"> Netlogon, NTDS, FRS etc. then follow the articles below.</span></div><span style="font-family: Verdana,sans-serif; font-size: small;"> </span><br />
<div class="MsoNormal" style="font-family: Verdana,sans-serif; margin: 0cm 0cm 0pt 72pt;"><span style="font-size: small;">Restricting Active Directory replication traffic to a specific port</span></div><span style="font-family: Verdana,sans-serif; font-size: small;"> </span><br />
<div class="MsoNormal" style="font-family: Verdana,sans-serif; margin: 0cm 0cm 0pt 72pt;"><span style="font-size: small;"><a href="http://support.microsoft.com/?id=224196"><span style="color: blue;">http://support.microsoft.com/?id=224196</span></a></span></div><span style="font-family: Verdana,sans-serif; font-size: small;"> </span><br />
<div class="MsoNormal" style="font-family: Verdana,sans-serif; margin: 0cm 0cm 0pt 72pt;"><span style="font-size: small;">How to restrict FRS replication traffic to a specific static port</span></div><span style="font-family: Verdana,sans-serif; font-size: small;"> </span><br />
<div class="MsoNormal" style="font-family: Verdana,sans-serif; margin: 0cm 0cm 0pt 72pt;"><span style="font-size: small;"><a href="http://support.microsoft.com/?id=319553">http://support.microsoft.com/?id=319553</a></span></div><div style="font-family: Verdana,sans-serif;"><br />
</div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><br />
</div><span style="font-family: Verdana,sans-serif; font-size: small;"> </span></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-37183672544827998282012-02-02T23:43:00.000-08:002012-02-02T23:48:21.403-08:00Windows Server 2008 R2 Offline Domain Join<div dir="ltr" style="text-align: left;" trbidi="on"><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"> Windows Server 2008 R2 Offline Domain Join</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Hello Again,</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Today will share a nice feature of windows server 2008 R2 i.e. offline domain join.With the help of this new feature you can join any system in the domain without contacting the domain controller that mean if the client is not in contact with the DC , still it can be added into the Active directory.</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Offline domain join is a new process that computers that run Windows 7 or Windows Server 2008 R2 can use to join a domain without contacting a domain controller. This makes it possible to join computers to a domain in locations where there is no connectivity to a corporate network</span></div><div style="font-family: Verdana,sans-serif;"><br />
</div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><span style="font-size: small;"><b>Requirements</b></span><br />
<div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div></div><div class="subSection"><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">You can run Djoin.exe only on computers that run Windows 7 or Windows Server 2008 R2. The computer on which you run Djoin.exe to provision computer account data into AD DS must be running Windows 7 or Windows Server 2008 R2. The computer that you want to join to the domain must also be running Windows 7 or Windows Server 2008 R2. </span></div><div style="font-family: Verdana,sans-serif;"><br />
</div><span style="font-family: Verdana,sans-serif; font-size: small;"> </span><br />
<div style="font-family: Verdana,sans-serif;"></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">By default, Djoin.exe commands target the domain controller that runs Windows 2k8 R2.However we can also use optional /downlevel parameter if we have to target the DC that is running older version than 2008 R2.</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><span style="font-size: small;"><b>Two steps</b></span></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><br />
</div><span style="font-family: Verdana,sans-serif; font-size: small;"> </span><br />
<div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><span style="font-size: small;">There are basically two steps necessary to offline domain join a computer. First, you have to create the computer account in Active Directory. This process is called “provisioning.” The easiest way to do that is on an R2 domain controller. Djoin will create a base 64-encoded metadata as text file. This file then has to be used to offline domain join the Windows 7 machine.</span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><span style="font-size: small;"><b>Provisioning</b></span></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><br />
</div><span style="font-family: Verdana,sans-serif; font-size: small;"> </span><br />
<div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><span style="font-size: small;">The command to provision the computer account on an R2 domain controller looks like this:</span></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><br />
</div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><span style="font-size: small;">C:\Users\Administrator\Desktop>djoin /provision /domain dc1.com /machine client1 /savefile domain_join.txt</span></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6dHefBlaEqW6EwhWSwPawJudyL8In6AXOd_zQgMStZdYuST41ltLzw9AeGVn1Zya4z3CuBKBxwlDeoBI_D-xOpWjTzOZdTvfEmWPyW5jwlDs-wfa0dx2SyPKSX4ANxivHxJgxT0rmf14/s1600/Added.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="172" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6dHefBlaEqW6EwhWSwPawJudyL8In6AXOd_zQgMStZdYuST41ltLzw9AeGVn1Zya4z3CuBKBxwlDeoBI_D-xOpWjTzOZdTvfEmWPyW5jwlDs-wfa0dx2SyPKSX4ANxivHxJgxT0rmf14/s640/Added.JPG" width="640" /></a></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><br />
</div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><span style="font-size: small;"> </span></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><span style="font-size: small;">This command will add a computer account named client1 in the AD database that can be seen on AD console.</span></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal" style="font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;">NOTE:-<span style="font-family: Verdana,sans-serif;">If you don’t have a Windows Server 2008 R2 domain controller, you can run djoin.exe with the /downlevel parameter on a Windows 7 machine that is already a domain member.</span></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-size: small;"><span style="font-family: "Times New Roman","serif"; line-height: 115%;"> </span></span> </div><div class="MsoNormal" style="line-height: normal;"><span style="font-size: small;"><b><span style="font-family: "Times New Roman","serif";">Offline domain join</span></b></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><span style="font-size: small;"> </span><br />
<div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><span style="font-size: small;">Then you have to copy that txt to the computer that has to be joined to the domain and launch this command:</span></div><div class="MsoNormal" style="color: black; font-family: Times,"Times New Roman",serif; line-height: normal;"><br />
</div><div class="MsoNormal" style="color: black; font-family: Verdana,sans-serif; line-height: normal;"><span style="font-size: small;"><span style="border-color: rgb(60, 60, 59);">C:\Users\Administrator\Desktop>djoin /requestODJ /loadfile domain_join.txt /windowspath %SystemRoot% /localos</span></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQKMvcyeDwYZ1LrApqjPtpXWBpUeFacNdxl_kNEjc4xLzvFP1-FMnm_qvKD1rc6QwwH8QTwlOFd9Yh78rDSGJqfMYh71YD1xRLxP9MTryKWUYKmnYoJSu1E0CL8k_QFFv1zJeDuQozGqY/s1600/domainjoin_client.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="118" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQKMvcyeDwYZ1LrApqjPtpXWBpUeFacNdxl_kNEjc4xLzvFP1-FMnm_qvKD1rc6QwwH8QTwlOFd9Yh78rDSGJqfMYh71YD1xRLxP9MTryKWUYKmnYoJSu1E0CL8k_QFFv1zJeDuQozGqY/s640/domainjoin_client.JPG" width="640" /></a></div><div class="MsoNormal" style="line-height: normal;"><span style="font-size: small;"><span style="border-color: rgb(60, 60, 59); color: #3c3c3b; font-family: Times,"Times New Roman",serif;"> </span><span style="font-family: "Times New Roman","serif";"></span></span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-size: small;"><span style="font-family: "Times New Roman","serif";"><br />
</span></span></div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><span style="font-size: small;"><i>Note:</i></span>Issuing the above command on a domain controller will result in a broken Active Directory Domain Controller with the only option left is demote/promote. </div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><br />
</div><div class="MsoNormal" style="font-family: Verdana,sans-serif; line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-size: small;"><span style="font-family: "Times New Roman","serif";"><span style="font-family: Verdana,sans-serif;">After issuing the above command you need to reboot the system and the system will be in the domain now.</span></span></span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-size: small;"><span style="font-family: "Times New Roman","serif";"><br />
</span></span><br />
<div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">You can get more parameters by using djoin help</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;">C:\Users\Administrator\Desktop>djoin //<br />
Usage: djoin.exe [/OPTIONS]<br />
<br />
/PROVISION - Provision a computer account in the domain<br />
/DOMAIN <Name> - <Name> of the domain to join<br />
/MACHINE <Name> - <Name> of the computer joining the domain<br />
/MACHINEOU <OU> - Optional <OU> where the account is created<br />
/DCNAME <DC> - Optional <DC> to target for account creation<br />
/REUSE - Reuse any existing account (password will be reset)<br />
/SAVEFILE <FilePath> - Save provisioning data to a file at <FilePath><br />
/NOSEARCH - Skip account conflict detection, requires DCNAME (faster)<br />
/DOWNLEVEL - Support using a Windows Server 2008 DC or earlier<br />
/PRINTBLOB - Return base64 encoded metadata blob for an answer file<br />
/DEFPWD - Use default machine account password (not recommended)<br />
<br />
/REQUESTODJ - Request offline domain join at next boot<br />
/LOADFILE <FilePath> - <FilePath> specified previously via /SAVEFILE<br />
/WINDOWSPATH <Path> - <Path> to the Windows directory in an offline image<br />
/LOCALOS - Allows /WINDOWSPATH to specify the locally running OS.<br />
This command must be run as a local Administrator.<br />
This option requires a reboot for changes to be applied.<br />
<br />
<br />
<br />
<br />
<br />
<br />
</span></div></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"> </span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><span style="font-size: small;"> </span></div></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com3tag:blogger.com,1999:blog-4252815809528917363.post-63394921082366665852012-01-30T23:31:00.000-08:002012-01-30T23:32:41.113-08:00Some Hidden facts and Questions<div dir="ltr" style="text-align: left;" trbidi="on"><u><b>NTDS.dit file location:-</b></u><br />
<br />
Most of us we know that Ntds.dit file is located on %SystemRoot%\NTDS\Ntds.dit ,But we can also find the Ntds.dit file on %SystemRoot%\System32\Ntds.dit location.Whenever we promote a server to DC the file from %SystemRoot%\System32\Ntds.dit is used and we don't need<br />
any installation media to run dcpromo.</div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-21125265828867668312012-01-04T22:30:00.000-08:002012-01-04T22:31:26.028-08:00How to recover deleted object from Active directory using LDP.exe<div dir="ltr" style="text-align: left;" trbidi="on"><span style="font-size: large;">Recover deleted object from Active directory using LDP.exe</span><br />
<br />
Hi Guys,<br />
<br />
Today I am here going to share the knowledge on how to recover deleted objects from Active directory using LDP.exe tool.<br />
<br />
In my scenario I have my domain as a cluster.com and having the user vijay Sharma.<br />
<br />
Now you need to download the tools LDP.exe. You can download the same from <a href="http://rghost.net/35746559">here</a>.<br />
<br />
Now I have deleted the object vijay from the Active directory.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrbBvciDAWMUxWV5SfdecoWmKOTOO88Ky-uRRfejhT9hgZ0uc5ffHpI6UzZKjSke4aR2j8Bqs1qqpEH9TPKyo7xNWMIASj47PbEFNhD934tf-gnPDsHHyuM9JsLWe3Tu2WzC3-GbvVwAM/s1600/1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="205" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrbBvciDAWMUxWV5SfdecoWmKOTOO88Ky-uRRfejhT9hgZ0uc5ffHpI6UzZKjSke4aR2j8Bqs1qqpEH9TPKyo7xNWMIASj47PbEFNhD934tf-gnPDsHHyuM9JsLWe3Tu2WzC3-GbvVwAM/s400/1.JPG" width="400" /></a></div><br />
<br />
To recover the object vijay , need to open the LDP.exe tool and perform the following<br />
<br />
<br />
Step 1: click on connection tab and goto connect tab and enter the name of your Domain.<br />
Step 2: Bind the connection by going to connect tab and click on bind and provide the administrator credentials.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpqOjIHymMGPRGaj2zehHuIGYKwPNab8kkYvcNsvpGs3Ccm7oxJQpDgjoFMBBKB5JuPj1YWFMPLCq3_dQ69W3YUIhD5wX1mn7HdjjnK6Nj07Eh7HmJ7LPx9mUa_3PKYWIkU_jOdtza8j0/s1600/2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="152" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpqOjIHymMGPRGaj2zehHuIGYKwPNab8kkYvcNsvpGs3Ccm7oxJQpDgjoFMBBKB5JuPj1YWFMPLCq3_dQ69W3YUIhD5wX1mn7HdjjnK6Nj07Eh7HmJ7LPx9mUa_3PKYWIkU_jOdtza8j0/s400/2.JPG" width="400" /></a></div><br />
Step 4: Now goto options tab and click on control option.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpzkMQkmJquOz577UzIUe6396QzVpyq3sGm2B9qViE3cMY9DGgWI5n2BFyPLXHOA6ozgDfuMFLifpSjH7yS-sGuVhyphenhyphenTi6a0rCPtRMbjmzNZZmrvMYPzJjqePjXOSTlBahvTKGfk_tK5b4/s1600/3.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="183" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpzkMQkmJquOz577UzIUe6396QzVpyq3sGm2B9qViE3cMY9DGgWI5n2BFyPLXHOA6ozgDfuMFLifpSjH7yS-sGuVhyphenhyphenTi6a0rCPtRMbjmzNZZmrvMYPzJjqePjXOSTlBahvTKGfk_tK5b4/s400/3.JPG" width="400" /></a></div><br />
Step 5: Now in the box under load predefined select "Return deleted objects" and click on OK.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRg3OzIxo7D40iCcfrxhAivZqe3RlTvB8DXy95Y5LGMaly6NLd4nUzJb9jDyo3bdxbVwlicID0mohiUsKEyRwFzr5Q_v4qII7Yne7umKz5lc2BDwDLzLS1OQYFbKX0f43apKIk5KNzWZ4/s1600/4.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRg3OzIxo7D40iCcfrxhAivZqe3RlTvB8DXy95Y5LGMaly6NLd4nUzJb9jDyo3bdxbVwlicID0mohiUsKEyRwFzr5Q_v4qII7Yne7umKz5lc2BDwDLzLS1OQYFbKX0f43apKIk5KNzWZ4/s400/4.JPG" width="400" /></a></div><br />
Step 6: Click on view and select tree option and in this write the DC=cluster,DC=com.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbPrhb1iE3e3UfTbpzd9ZyU6xNLpWOK7IrE7XXblSKTGjPfhWKNkTxWx9a3_qMOARRZ51bo88GVc9McLQfTDe0CheF73vAMTmKYGk-bNXPCrTNEI1WdcCzMAVGuQR-d8RwQyQiMNJw20I/s1600/5.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="126" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbPrhb1iE3e3UfTbpzd9ZyU6xNLpWOK7IrE7XXblSKTGjPfhWKNkTxWx9a3_qMOARRZ51bo88GVc9McLQfTDe0CheF73vAMTmKYGk-bNXPCrTNEI1WdcCzMAVGuQR-d8RwQyQiMNJw20I/s400/5.JPG" width="400" /></a></div><br />
Step 7:Select the tree from the left side and expand the tree and expand the tree deleted object. (CN=Deleted Objects,DC=Cluster,DC=com)<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNpw9ujMGvwbHry7cel_o8CxNuePICdqOGqHMIITmI34mFHJmc0ytQCxzqaCts1GD_Oi9xXfHA_jf8zeUm4dhv3k8bR8WKzimOZoWiWU6PPyIckutrmnsDW5cwQaxwWvczCD4R5nHnqBU/s1600/6.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="293" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNpw9ujMGvwbHry7cel_o8CxNuePICdqOGqHMIITmI34mFHJmc0ytQCxzqaCts1GD_Oi9xXfHA_jf8zeUm4dhv3k8bR8WKzimOZoWiWU6PPyIckutrmnsDW5cwQaxwWvczCD4R5nHnqBU/s400/6.JPG" width="400" /></a></div><br />
Step 8: Select the deleted user which you wanna recover (Vijay Sharma)<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA2Df4daEjzMIgzQuGfdcExu1uPcYOSBkvDQps1zWN8mkPEf9o3MZoW55bWtdjw3YtjfRpIfADTOYAoA_w8yirf7PFw93EVWmxpOt_EAkziGA6sDeEt4oK2PrX6_pSb3I-o-iwajGMiqY/s1600/7.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA2Df4daEjzMIgzQuGfdcExu1uPcYOSBkvDQps1zWN8mkPEf9o3MZoW55bWtdjw3YtjfRpIfADTOYAoA_w8yirf7PFw93EVWmxpOt_EAkziGA6sDeEt4oK2PrX6_pSb3I-o-iwajGMiqY/s400/7.JPG" width="400" /></a></div><br />
Step 9: Right click on the selected user and click on modify. <br />
Step10:In the modify box write "isdeleted" in attribute box and select the "delete" operation and click on "Enter" option. <br />
NOTE: Do not click on "Run" option in this step.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4CwhlDpI91_M6TJgeBz32qtwYfcNz2_B-xooYBijZQBcU1004f1hM4rFk6IGjmfNzxYlbTt8yO1ummKbwSPbUrEINMq-yc_UtgIC1DgThFICoVHGb_upJ4kihJChWoGz9ULiNHa5n3fQ/s1600/8.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4CwhlDpI91_M6TJgeBz32qtwYfcNz2_B-xooYBijZQBcU1004f1hM4rFk6IGjmfNzxYlbTt8yO1ummKbwSPbUrEINMq-yc_UtgIC1DgThFICoVHGb_upJ4kihJChWoGz9ULiNHa5n3fQ/s400/8.JPG" width="373" /></a></div><br />
Step11:Now write "distinguishedName" in the attribute box and select the "replace" operation and click on "Enter". Select synchronous and extended check box and click on Run.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlmVGSxZff6nKESR2iEwL2q9ISXpguZq0pDAnT8qSKD_6glOHd8ewTZVsELXgviVZzTeRo75YgX36OyYLRxEr7XEK_IlNH57IUop1a748HB_pujkEYux0DjIUtK5riDjnKjHlPRtBOutw/s1600/9.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlmVGSxZff6nKESR2iEwL2q9ISXpguZq0pDAnT8qSKD_6glOHd8ewTZVsELXgviVZzTeRo75YgX36OyYLRxEr7XEK_IlNH57IUop1a748HB_pujkEYux0DjIUtK5riDjnKjHlPRtBOutw/s400/9.JPG" width="367" /></a></div><br />
Step12: Now the user is recovered in the same container but it will be in disable mode.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAKhaFuKwLzx2IvDpU3ZybOD1XmjJ5WPm0ascu2HTD6EVULPS0Q49oSXfRS2J5XjeJP8J0HTJFPDKRK6FeyVFcRMr5s1sVx1AcOiy9eaTOaHm5ihSyCepFRYGEixLvhvbW0bcFiu3RfbI/s1600/10.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="205" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAKhaFuKwLzx2IvDpU3ZybOD1XmjJ5WPm0ascu2HTD6EVULPS0Q49oSXfRS2J5XjeJP8J0HTJFPDKRK6FeyVFcRMr5s1sVx1AcOiy9eaTOaHm5ihSyCepFRYGEixLvhvbW0bcFiu3RfbI/s400/10.JPG" width="400" /></a></div><br />
Step13: Enable the user account.<br />
<br />
NOTE: The main limitation of using LDP.exe is that you can not restore the attributes of the objects<br />
Like in my case the user was member of many groups but after recovering it loose the group<br />
membership.<br />
<br />
</div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com3tag:blogger.com,1999:blog-4252815809528917363.post-61601823041864022902011-12-18T23:54:00.000-08:002011-12-19T01:20:51.335-08:00How to Analyze Windows Memory Dump<div dir="ltr" style="text-align: left;" trbidi="on"><w:sdt docpart="E38BC23C344B471A989AD4A8F46D08BD" id="89512082" storeitemid="X_6E43E716-8BD4-4321-8B4D-F586BDEC82DE" text="t" title="Post Title" xpath="/ns0:BlogPostInfo/ns0:PostTitle"> </w:sdt><br />
<div class="Publishwithline" style="font-family: Verdana,sans-serif;"><span style="font-size: small;">How to Analyze the Memory Dump</span></div><span style="font-family: "Verdana",sans-serif;"><span style="font-size: small;"> </span></span><span style="font-family: "Verdana",sans-serif;"><span style="font-size: small;"> </span></span><br />
<div style="border: medium none; font-family: Verdana,sans-serif; padding: 0in 0in 2pt;"><span style="font-size: small;"> </span><br />
<div class="underline"></div><span style="font-size: small;"> </span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"> </span></div><div class="PadderBetweenControlandBody" style="font-family: Verdana,sans-serif;"><br />
<span style="font-size: small;">Welcome back guys :)</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"> </span></div><div class="MsoNormal" style="font-family: Verdana,sans-serif;"><br />
<span style="font-size: small;">Today here I am going to explain about how to analyze the memory dump.</span></div><div style="font-family: Verdana,sans-serif;"></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"> </span></div><div class="MsoNormal" style="font-family: Verdana,sans-serif;"><span style="font-size: small;">As in my previous post I have describe to you: How to create memory dump and where you can find that dump file.</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"> </span></div><div style="font-family: Verdana,sans-serif;"></div><div class="MsoNormal" style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Let’s say you have configured a memory dump on a server and server got unexpected down with BSOD.</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"> </span></div><div style="font-family: Verdana,sans-serif;"><br />
</div><div class="MsoNormal" style="font-family: Verdana,sans-serif;"><span style="font-size: small;">Now you need to go to the default location i.e. </span><b><u><span style="color: blue;"><span style="font-size: small;">%SystemRoot%\Memory.dmp </span></span></u></b><span style="font-size: small;">for the memory dump file.</span></div><div style="font-family: Verdana,sans-serif;"><span style="font-size: small;"> </span></div><div class="MsoNormal"><span style="font-family: "Verdana",sans-serif;"><span style="font-size: small;"><span style="font-family: Verdana,sans-serif;">You can find the memory.dmp as below</span>.</span></span></div><div><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEJAR9DCUKwFaKfpxLtBkIHFOjrmBzGgIDfrDhMOXq0HS186qQ_Pegm7k_z9wN1ECoRNdoarlVVbEwgwY3AZTMbrF7P5upWcGVNXJz0zb8PIGtzcXy7nGcJpoxf4bGqGpQwV2qoe4-pGs/s1600/1.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="132" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEJAR9DCUKwFaKfpxLtBkIHFOjrmBzGgIDfrDhMOXq0HS186qQ_Pegm7k_z9wN1ECoRNdoarlVVbEwgwY3AZTMbrF7P5upWcGVNXJz0zb8PIGtzcXy7nGcJpoxf4bGqGpQwV2qoe4-pGs/s400/1.JPG" width="400" /></a></div><div><br />
</div><div><br />
</div><div class="MsoNormal"></div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><br />
</div><div class="MsoNormal" style="font-family: Verdana,sans-serif;"><br />
This memory.dmp file is the dump file for complete dump. Now you need to analyze it ;)</div><div class="MsoNormal" style="font-family: Verdana,sans-serif;"></div><div class="MsoNormal" style="font-family: Verdana,sans-serif;">There are bundle of software in the market for the same, some are free of cost and some are licensed.<br />
Microsoft has tool that we can use to analyze the memory dump on Microsoft platforms called as windows debugger (dbg_x86_6.11.1.404). You can download it from <a href="http://msdl.microsoft.com/download/symbols/debuggers/dbg_x86_6.11.1.404.msi">here</a>.</div><div class="MsoNormal" style="font-family: Verdana,sans-serif;"><br />
</div><div class="MsoNormal" style="font-family: Verdana,sans-serif;">After downloading the debugger you need to do little bit configuration before analyzing the dump.</div><div><br />
</div><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiITulvaDFfNtO5x4uBiPH9YSWKZJOyQ-eiZloUsvBgSx-M45KycmBAerOIwwOO2n6VJ2Gx0eIxxWXOj08jg0C9cXg3YHlYHgpBDNG05Og-3P3Gnhkf_5xDs8mMVpz4Dm-lpZQN72P2FgA/s1600/2.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiITulvaDFfNtO5x4uBiPH9YSWKZJOyQ-eiZloUsvBgSx-M45KycmBAerOIwwOO2n6VJ2Gx0eIxxWXOj08jg0C9cXg3YHlYHgpBDNG05Og-3P3Gnhkf_5xDs8mMVpz4Dm-lpZQN72P2FgA/s1600/2.JPG" /></a><br />
<div><br />
</div><div><br />
</div><br />
<div class="MsoNormal"><br />
</div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><br />
</div><div class="MsoNormal" style="font-family: Verdana,sans-serif;">Now you need to configure the symbol path for it. Before doing it just do the following</div><ol style="font-family: Verdana,sans-serif; text-align: left;"><li class="MsoListParagraphCxSpFirst" style="mso-list: l0 level1 lfo1; text-indent: -.25in;"><span style="-moz-font-feature-settings: normal; -moz-font-language-override: normal; font-size-adjust: none; font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span> Create a folder named “symbols” without quotes in the root drive.</li>
<li class="MsoListParagraphCxSpMiddle" style="mso-list: l0 level1 lfo1; text-indent: -.25in;"><span style="-moz-font-feature-settings: normal; -moz-font-language-override: normal; font-size-adjust: none; font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span> Open the Windbg and then go to FileàSymbol file path.</li>
<li class="MsoListParagraphCxSpLast" style="mso-list: l0 level1 lfo1; text-indent: -.25in;"><span style="-moz-font-feature-settings: normal; -moz-font-language-override: normal; font-size-adjust: none; font-size: 7pt; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span> Set the path to “SRV*c:\symbols*<a href="http://msdl.microsoft.com/download/symbols" target="_blank">http://msdl.microsoft.com/download/symbols</a> “without quotes.</li>
</ol><div class="MsoNormal" style="font-family: Verdana,sans-serif;"><b style="mso-bidi-font-weight: normal;"><u>Symbol Path:-</u></b> Symbol files provide a footprint of the functions that are contained in executable files and dynamic-link libraries (DLLs).Additionally, symbol files can present a roadmap of the function calls that lead to the point of failure.</div><div class="MsoNormal" style="font-family: Verdana,sans-serif;">Now the configuration is done, now you need to open the dump file in the debugger.</div><div><br />
<div style="font-family: Verdana,sans-serif;">Now you need to open dump file , To do this goto File-->Open Crash Dump</div><br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ0vbUPBMBpsZFJdFCDaUiKoIWjkfx6TbwKEmNbMPIKwVeLABAv2FFRpJIo9v4NObA7LwvOnehMJaQnWhCz7Zw_z4IgvJHzQeAdDA6jueJQTB2pp_aqRgsEv7HRc_JXX9N7zr6un4iU7k/s1600/3.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ0vbUPBMBpsZFJdFCDaUiKoIWjkfx6TbwKEmNbMPIKwVeLABAv2FFRpJIo9v4NObA7LwvOnehMJaQnWhCz7Zw_z4IgvJHzQeAdDA6jueJQTB2pp_aqRgsEv7HRc_JXX9N7zr6un4iU7k/s400/3.JPG" width="400" /></a></div><br />
<br />
</div><div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<span style="font-family: Verdana,sans-serif;">After you open the Memory.dmp, it will make some calculation and load the symbols as below.</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6jBDoZJVA5J42wd18DM_CL3IQpgzRs5UAWqqGsOgbqPq_Zf45pa-6fIoWxEPFYThmWaVRukzfCSITAYpFubGWuul9NfZJmzSx1oDJZSkQ9BPkCfjNWCDunueE3ZF-LPDGEUAmQenLfUY/s1600/4.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6jBDoZJVA5J42wd18DM_CL3IQpgzRs5UAWqqGsOgbqPq_Zf45pa-6fIoWxEPFYThmWaVRukzfCSITAYpFubGWuul9NfZJmzSx1oDJZSkQ9BPkCfjNWCDunueE3ZF-LPDGEUAmQenLfUY/s400/4.JPG" width="315" /></a></div><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRVlIS1g5ETPn3fh_sGAJ5V5Stem1Hp1Ao8yvP32Mw2bcrmjLjYWOwEBbuT7zIaahW3-IdtPqqHsATIkGV3DX_PeBNTAljB3lOPLOJCnkvFNYBfMrEukncgv8miasMJXjag3i7UkcWDqE/s1600/4.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><br />
</a><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<div style="font-family: Verdana,sans-serif;"><br />
</div><div style="font-family: Verdana,sans-serif;">Now you need to write the command "!analyze -v " to get the details</div><div style="font-family: Verdana,sans-serif;"><br />
</div><div style="font-family: Verdana,sans-serif;">After this command you will get the details about the reason behind the Crash :)</div><br />
<div style="font-family: Verdana,sans-serif;">The reason for the crash was fltmgr.sys file.</div><div style="font-family: Verdana,sans-serif;"><br />
</div><div style="font-family: Verdana,sans-serif;">As you all are System Admins so you must have good google search skills,Now just google it and get the reason for the same.</div><div style="font-family: Verdana,sans-serif;">I have found the reason and the there is some Hotfix from Microsoft for this error.</div><div style="font-family: Verdana,sans-serif;"><br />
</div><div style="font-family: Verdana,sans-serif;">http://support.microsoft.com/kb/955087</div><div style="font-family: Verdana,sans-serif;"><br />
</div><span style="font-family: Verdana,sans-serif;"><span style="font-size: large;"><span style="color: blue;">This is How we can Analyze the dump.Please comment if you need any other help from my side</span></span>.</span></div></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-85763753745536056252011-12-10T07:03:00.000-08:002012-08-01T04:48:17.720-07:00Windows Memory Dump<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
Hello Techies,<br />
<br />
It is very often we see the blue screen on the Microsoft based OS.Basically we called this blue screen as <br />
Blue Screen Of Death (BSOD).<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEji7b0x3bvMAh9e8tgNVFHTlHAQy6ewtTAwZoTepMC3LbxpYb9tYXNz09jPnM73mtThFzfV7fnSZYuU79N4vovRatzvRwHCzks7EFCmMhO1zayRmyW0tqe7h6uolO-1-HfHhRQwf-U9e-M/s1600/bsod1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" eda="true" height="216" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEji7b0x3bvMAh9e8tgNVFHTlHAQy6ewtTAwZoTepMC3LbxpYb9tYXNz09jPnM73mtThFzfV7fnSZYuU79N4vovRatzvRwHCzks7EFCmMhO1zayRmyW0tqe7h6uolO-1-HfHhRQwf-U9e-M/s320/bsod1.JPG" width="320" /></a></div>
<br />
<br />
<br />
<br />
I have asked the question "what is BSOD" from many guys during the interviews but usually they replied<br />
that it happened due to RAM or HDD failure, they simply reply that in this case they will replace either RAM or HDD to fix this issue on the server. <br />
<br />
So today i will give a idea about this BSOD and how to analyze this issue on windows platform.<br />
<br />
->What is BSOD ?<br />
->The <b>Blue Screen of Death</b> , displayed by the Microsoft Windows family of operating systems upon encountering a critical error,of a non-recoverable nature, that causes the system to crash.Stop errors are hardware or driver related, causing the computer to stop responding in order to prevent damage to the hardware or data.<br />
<br />
->Type of memory dump ?<br />
->There are three type of dumps created<br />
<br />
1. Complete Memory Dump<br />
2. Kernal Memory Dump<br />
3. Small Memory Dump<br />
<br />
1. <b><u>Complete Memory Dump</u></b>:-A Complete Memory Dump is the largest kernel-mode dump file. This file contains all the physical and virtual memory for the machine at the time of the fault.If you select the complete memory dump option, you must have a paging file on the boot volume The Complete Memory Dump file is written to <u style="color: blue;"><b>%SystemRoot%\Memory.dmp</b></u> by default.The Complete memory dump option is not available on computers that are running a 32-bit operating system and that having 2 gigabytes (GB) or more of RAM (by default).<br />
<br />
2. <u><b>Kernal Memory Dump</b></u>:<span style="font-size: small;"><span style="color: black; font-family: "Arial","sans-serif"; line-height: 115%;"> </span></span> A Kernel Memory Dump contains all the memory in use by the kernel at the time of the crash.The dump file will be around one-third the size of the physical memory on the system. This dump will not include unallocated memory or any memory allocated to applications. It only includes memory allocated to Windows kernel.The Kernel Memory Dump file is written to <u><b><span style="color: blue;">%SystemRoot%\Memory.dmp</span></b></u> by (default)<br />
<br />
3. <u><b>Small Memory Dump</b></u>:- A Small Memory Dump is much smaller than the other two crash dump files. It is exactly 64 KB in size <span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-language: AR-SA; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: EN-US;">(128KB on 64-bit systems) </span>.This kind of dump file can be useful when space is greatly limited. However, it contains very less information for the reason of the crash.<br />
<br />
<span style="font-size: large;"> <u><b>How to enable memory dump on a windows server</b></u></span><br />
<br />
Here i am going to configure the memory dump on Win-7/server 2008<br />
<br />
1. Right click on my computer and click on properties then click on 2. Advance system setting option on left side ,then click on 3. Advance tab, Now click on 4. setting under Startup and recovery.Below are the screenshot<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicXDZYsg_BcGyIiGEyPK6Kwh9THNFMPTEY_T9aHujEGLoYhblB8WTkYMZDJTsymhfRY-J98jFXkdfyLKMvQ2BBEZe9BCr3eb8HQionYddqZpu2VRkqxMHJrc03H6aMchsmf_pbZlHPuU0/s1600/BSOD.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" eda="true" height="159" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicXDZYsg_BcGyIiGEyPK6Kwh9THNFMPTEY_T9aHujEGLoYhblB8WTkYMZDJTsymhfRY-J98jFXkdfyLKMvQ2BBEZe9BCr3eb8HQionYddqZpu2VRkqxMHJrc03H6aMchsmf_pbZlHPuU0/s320/BSOD.JPG" width="320" /></a></div>
<br />
<br />
<br />
<span style="color: black; font-family: "Arial","sans-serif"; font-size: 9pt; line-height: 115%;"></span><br />
Same you can configure from the registery as well from the location as mentioned below<br />
<br />
<i><b><span style="color: blue;">HKLM\System\CurrentControlSet\Control\CrashControl</span></b></i><br />
All the things that you can configure via GUI can be configured via registery as well.<br />
<br />
<ul style="text-align: left;">
<li>Write an event to the System Log checkbox = LogEvent </li>
<li>Automatically Restart checkbox = AutoReboot </li>
<li>Write Debugging Information drop-down = CrashDumpEnabled </li>
<li>Dump File text box = DumpFile </li>
<li>Overwrite any existing file checkbox = Overwrite </li>
</ul>
<img alt="" src="data:image/png;base64,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" /> <br />
<br />
<u><span style="font-size: large;">How to Crash the server manually using keyboard </span></u><br />
<br />
Now you have configured the memory dump on the server and now you can check as well if it is creating the memory dump file on the server or not.Also when you need to create memory dump file manually after a crash ,do the following to configure the same.<br />
<br />
<u><b>Using PS/2 keyboard</b></u> :-<br />
<br />
<br />
1. Start Registry Editor. <br />
2. Locate the following registry subkey: <br />
<br />
<b><i style="color: blue;">HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters </i></b><br />
<br />
3. On the Edit menu, click Add Value, and then add the following registry entry: <br />
<br />
<i><b><span style="color: blue;">Name: CrashOnCtrlScroll</span><br style="color: blue;" /><span style="color: blue;">Data Type: REG_DWORD</span><br style="color: blue;" /><span style="color: blue;">Value: 1 </span></b></i><br />
<br />
4. Exit Registry Editor, and then restart the computer.<br />
<br />
<br />
<span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;"><b><u> Using USB keyboad</u></b>:</span><br />
<br />
1. Start Registry Editor. <br />
2. Locate the following registry subkey: <br />
<br />
<i style="color: blue;"><b>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kbdhid\Parameters </b></i><br />
<br />
3. Make sure that the following registry entry is enabled: <br />
<br />
<i style="color: blue;"><b>Name: CrashOnCtrlScroll<br />Data Type: REG_DWORD<br />Value: 1 </b></i><br />
<br />
4. Exit Registry Editor.<span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;"> </span><br />
<br />
If You can generate a system memory dump by holding down the right CTRL key and pressing the SCROLL LOCK key twice. (Ctrl+Scroll lock twice)<br />
<br />
<i style="color: red;">Note: Pressing left CTRL key does not generate the system memory dump.</i><br />
<span style="color: black; font-family: "Arial","sans-serif"; font-size: 9pt; line-height: 115%;"></span><br />
<br />
<span style="color: black; font-family: "Arial","sans-serif"; font-size: 9pt; line-height: 115%;"></span><br />
<span style="font-size: large;"><i style="color: blue;"><b>Will come with new Blog shortly on How to Analyze the memory dump</b></i></span>....... ;)<br />
<br />
<span style="color: black; font-family: "Arial","sans-serif"; font-size: 9pt; line-height: 115%;"></span><br />
<br />
<span style="color: black; font-family: "Arial","sans-serif"; font-size: 9pt; line-height: 115%;"></span><br />
<br />
<span style="color: black; font-family: "Arial","sans-serif"; font-size: 9pt; line-height: 115%;"></span><br />
<br />
<span style="color: black; font-family: "Arial","sans-serif"; font-size: 9pt; line-height: 115%;"></span><br />
<br />
<span style="color: black; font-family: "Arial","sans-serif"; font-size: 9pt; line-height: 115%;"></span></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-84900328950045378142011-12-04T23:18:00.000-08:002011-12-10T07:09:34.044-08:00offline Hardware diagnostic test on HP servers<div dir="ltr" style="text-align: left;" trbidi="on"><div class="post-header"><h1 class="post-title"><span style="font-size: large;">Performing Offline Diagnostic test using HP SmartStart CD</span></h1></div><div align="left" class="fb-like-box"><h4></h4></div>Guys, Very useful article.Just wanna share with you. <br />
<br />
The HP Insight Diagnostics utility is a Hardware <span class="IL_AD" id="IL_AD3">diagnostic tool</span> available with HP SmartStart CDs. You can launch this tool by booting to HP SmartStart CD. HP Insight <span class="IL_AD" id="IL_AD4">Diagnostics tool</span> is helpful when you do the hardware troubleshooting on a <span class="IL_AD" id="IL_AD1">server</span>.<br />
<br />
HP Insight Diagnostics (Using SmartStart CD) is also used to check if all the hardware devices installed on your Server is recognized by the server OR functioning properly.<br />
<h4><span style="color: #2266bb;">Offline Hardware test using SmartStart CD:</span></h4>1. Boot the server using Smart Start CD (It might take some time, be patient!) <img alt="SmartStart CD boot" border="0" height="387" src="http://www.tricksguide.com/wp-content/uploads/2011/03/SmartStart-CD-boot.jpg" style="background-image: none; border-width: 0px; display: block; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="SmartStart CD boot" width="550" /> 2. Now <span class="IL_AD" id="IL_AD12">you will</span> be at <b>Language and Keyboard Selection</b> page.<br />
3. Select language as <b><span class="IL_AD" id="IL_AD11">English</span> (US), </b>keyboard layout as <b>US English</b> and click <b>Next.</b> <img alt="SmartStart CD Language Selection" border="0" height="393" src="http://www.tricksguide.com/wp-content/uploads/2011/03/SmartStart-CD-Language-Selection.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="SmartStart CD Language Selection" width="550" />4. Accept HP EULA by clicking <b>Agree</b> button (You have no choice here lol <img alt=":D" class="wp-smiley" src="http://www.tricksguide.com/wp-includes/images/smilies/icon_biggrin.gif" /> )<img alt="SmartStart CD EULA" border="0" height="378" src="http://www.tricksguide.com/wp-content/uploads/2011/03/SmartStart-CD-EULA.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="SmartStart CD EULA" width="550" />5. Now you are the <span class="IL_AD" id="IL_AD6">Home page</span> of SmartStart CD (Check below provided screenshot)<br />
6. Click on <b>Maintenance</b> button. <img alt="SmartStart CD Home" border="0" height="379" src="http://www.tricksguide.com/wp-content/uploads/2011/03/SmartStart-CD-Home.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="SmartStart CD Home" width="550" />7. Now you are at the <b>Maintenance Options</b> window (Check below provided screenshot)<br />
8. Select <b>HP Insight Diagnostics.</b> <img alt="SmartStart CD Maintanance window" border="0" height="378" src="http://www.tricksguide.com/wp-content/uploads/2011/03/SmartStart-CD-Maintanance-window.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="SmartStart CD Maintanance window" width="550" />9. HP Insight Diagnostics window will load and generate hardware report in a moment. <img alt="SmartStart CD Insight Diagnosis" border="0" height="387" src="http://www.tricksguide.com/wp-content/uploads/2011/03/SmartStart-CD-Insight-Diagnosis.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="SmartStart CD Insight Diagnosis" width="550" />10. Now you will be at the <b>System <span class="IL_AD" id="IL_AD2">Survey</span></b> main page.<br />
<img alt="SmartStart CD Survey window updated" border="0" height="387" src="http://www.tricksguide.com/wp-content/uploads/2011/04/SmartStart-CD-Survey-window-updated.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="SmartStart CD Survey window updated" width="550" /><br />
11. Click on the <b>Test</b> tab. You will be at the below provided screen.<br />
12. Click on <b>Complete Test</b> tab.<br />
<img alt="SmartStart CD Hardware Offline test" border="0" height="385" src="http://www.tricksguide.com/wp-content/uploads/2011/04/SmartStart-CD-Hardware-Offline-test.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="SmartStart CD Hardware Offline test" width="550" />13. Select <b>Test mode</b> as <b>Unattended</b><br />
14. Ensure that the <span class="IL_AD" id="IL_AD10">option</span> <b>Stop on first error</b> is unchecked.<br />
15. Set the <b>Number of loops</b> to 15 (Set 7 as minimum)<br />
Note:-The above step is the main step ( 1 loop takes approx 1.5hrs-2hrs depend on your hardware) <br />
<img alt="SmartStart CD Hardware Offline Complete test tab" border="0" height="386" src="http://www.tricksguide.com/wp-content/uploads/2011/04/SmartStart-CD-Hardware-Offline-Complete-test-tab.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="SmartStart CD Hardware Offline Complete test tab" width="550" /><br />
16. Select <b>All Devices</b> in the list of devices<br />
17. Click on <b>Begin Testing</b> button<br />
<img alt="HP SmartStart CD Offline Start the test" border="0" height="387" src="http://www.tricksguide.com/wp-content/uploads/2011/04/HP-SmartStart-CD-Offline-Start-the-test.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="HP SmartStart CD Offline Start the test" width="550" /><br />
18. Now the test will run on all hardware. This process might take hours to complete.<br />
To save the logs you must require external drive. <br />
<img alt="HP SmartStart CD Offline test completed" border="0" height="387" src="http://www.tricksguide.com/wp-content/uploads/2011/04/HP-SmartStart-CD-Offline-test-completed.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="HP SmartStart CD Offline test completed" width="550" /><br />
19. Click on the <b>Logs</b> tab<br />
20. Click on the <b>Diagnosis Log</b> sub-tab.<br />
21. Click <b>Save</b> to <span class="IL_AD" id="IL_AD9">save the</span> report.<br />
<img alt="HP SmartStart CD Diagnosis logs" border="0" height="385" src="http://www.tricksguide.com/wp-content/uploads/2011/04/HP-SmartStart-CD-Diagnosis-logs.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="HP SmartStart CD Diagnosis logs" width="550" /><br />
22. Click on the <b>Test Log</b> sub-tab.<br />
23. Click <b>Save</b> to save the report.<br />
<img alt="Hp SmartStart CD Test log" border="0" height="386" src="http://www.tricksguide.com/wp-content/uploads/2011/04/Hp-SmartStart-CD-Test-log.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="Hp SmartStart CD Test log" width="550" /><br />
24. Click on the <b><span class="IL_AD" id="IL_AD5">Error Log</span></b> sub-tab.<br />
25. Click <b>Save</b> to save the report.<br />
<img alt="Hp SmartStart CD Error logs" border="0" height="387" src="http://www.tricksguide.com/wp-content/uploads/2011/04/Hp-SmartStart-CD-Error-logs.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="Hp SmartStart CD Error logs" width="550" /><br />
26. Also save the <b>Integrated Management Log.</b><br />
27. To save the report, click on <b>Save</b> button at the bottom of page.<br />
<img alt="SmartStart CD IML logs" border="0" height="388" src="http://www.tricksguide.com/wp-content/uploads/2011/03/SmartStart-CD-IML-logs.jpg" style="background-image: none; border-width: 0px; display: block; float: none; margin: 10px auto; padding-left: 0px; padding-right: 0px; padding-top: 0px;" title="SmartStart CD IML logs" width="550" />28. <span style="color: maroon;"><b>Success!!</b></span> You have generated all the Offline diagnostics logs!<br />
29. Click on Exit Diagnostics button.<br />
30. Reboot/Restart you Server.</div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-79178218397211105652011-11-26T04:33:00.000-08:002011-11-26T04:33:45.160-08:00Ports Required for Active Directory<div dir="ltr" style="text-align: left;" trbidi="on"><br />
Hi,<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjknpcivwtR0dfEnmTuhxcozGedcLB8QEG8kqohyiV7Fj6dY6XVgEMNuQ2zvb5swSOTOioRWFLm-X6NOJj7ePY29FfR-H6pNuJxNKwem_uJSWSnQgeVkjWs1kdQo4QDxfP04BqpICxRErE/s1600/ADports.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a></div>Active Directory communication takes place using several ports. These ports are required by both client computers and Domain Controllers. As an example, when a client computer tries to find a domain controller it always sends a DNS Query over Port 53 to find the name of the domain controller in the domain.<br />
<br />
The following is the list of services and their ports used for Active Directory communication:<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjknpcivwtR0dfEnmTuhxcozGedcLB8QEG8kqohyiV7Fj6dY6XVgEMNuQ2zvb5swSOTOioRWFLm-X6NOJj7ePY29FfR-H6pNuJxNKwem_uJSWSnQgeVkjWs1kdQo4QDxfP04BqpICxRErE/s1600/ADports.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="202" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjknpcivwtR0dfEnmTuhxcozGedcLB8QEG8kqohyiV7Fj6dY6XVgEMNuQ2zvb5swSOTOioRWFLm-X6NOJj7ePY29FfR-H6pNuJxNKwem_uJSWSnQgeVkjWs1kdQo4QDxfP04BqpICxRErE/s640/ADports.JPG" width="640" /></a></div><br />
<br />
<br />
<br />
<br />
Opening above ports in Firewall between client computers and domain controllers, or between domain controllers, will enable Active Directory to function properly.</div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-62580676182304242792011-11-04T04:01:00.000-07:002011-12-11T02:22:27.113-08:00Windows Failover Clustering<div dir="ltr" style="text-align: left;" trbidi="on"><div class="Publishwithline" style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Clustering</span></div><div style="border-color: -moz-use-text-color -moz-use-text-color rgb(79, 129, 189); border-style: none none solid; border-width: medium medium 1pt; font-family: "Trebuchet MS",sans-serif; padding: 0in 0in 2pt;"><div class="underline"><span style="font-size: small;"><br />
</span></div></div><div class="PadderBetweenControlandBody" style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal" style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Hello Guys,</span></div><div class="MsoNormal" style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Today I am going to share little knowledge about Windows clustering.</span></div><div class="MsoNormal" style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal" style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">What is server cluster?</span></div><div class="MsoNormal" style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">A Server cluster is a collection of independent servers that together provide a single, highly available platform for hosting applications.</span></div><div class="MsoNormal" style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal" style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">The technique that we used in Microsoft Windows to configure cluster is called Microsoft windows clustering.</span></div><div class="MsoNormal" style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal" style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Cluster Requirements? (Here I am discussing two node cluster requirements)</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgz5JRbqmcbNFYaQ61uHmFIq_-S96cZnmt_W9Ggu2sAeGpWSzpnv2wkrHNs6xI9xvPJn2YovPoX_tUWbavLwW8mIu3BQlDkMEakTSlM7tW2m8Jujw_3gcGXjDAthqBwYDM_0MK2Aa8lEc/s1600/Cluster.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgz5JRbqmcbNFYaQ61uHmFIq_-S96cZnmt_W9Ggu2sAeGpWSzpnv2wkrHNs6xI9xvPJn2YovPoX_tUWbavLwW8mIu3BQlDkMEakTSlM7tW2m8Jujw_3gcGXjDAthqBwYDM_0MK2Aa8lEc/s320/Cluster.jpg" width="320" /></a></div><br />
<span style="font-size: small;"><br />
</span><br />
<span style="font-size: small;">Note:- You can use starwind for the storage.</span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br />
</span></div><ul style="font-family: "Trebuchet MS",sans-serif; text-align: justify;"><li><span style="font-size: small;">Two machine with same Hardware.</span></li>
<li><span style="font-size: small;">OS on both the machines having same version and same updates.</span></li>
<li><span style="font-size: small;">Two-two LAN card on both the machines.</span></li>
<li><span style="font-size: small;">2 Private IP addresses for cluster Heartbeat</span></li>
<li><span style="font-size: small;">3 Public IP address, Two IPs for machine’s public interface and one IP for Cluster name.</span></li>
<li><span style="font-size: small;">You must have shared storage that must be connected to all the nodes of the cluster.</span></li>
<li><span style="font-size: small;">You must have Cluster application installed on both the machines. J</span></li>
<li><span style="font-size: small;">The server in Cluster must use DNS server for name resolutions.</span></li>
<li><span style="font-size: small;">All the servers in the cluster must be in the same Active Directory domain.</span></li>
<li><span style="font-size: small;">You must be logged on to the domain with an account that has administrator rights and permissions on all servers in that cluster</span> <div class="MsoNormal"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal"><span style="font-size: small;">Here I will create two nodes file cluster.</span></div><div class="MsoNormal"><span style="font-size: small;"><br />
</span></div><div class="MsoListParagraphCxSpFirst" style="text-indent: -0.25in;"><span style="font-size: small;">1.<span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span>Install the OS on both the nodes with same hardware and OS version, meeting the above mentioned requirements.</span></div><div class="MsoListParagraphCxSpMiddle" style="text-indent: -0.25in;"><span style="font-size: small;">2.<span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span>Add both the nodes to a domain and make them members of that domain.</span></div><div class="MsoListParagraphCxSpMiddle" style="text-indent: -0.25in;"><span style="font-size: small;">3.<span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span>Login to node with the user having rights or administrator that has rights and permissions on all the nodes in that cluster.</span></div><div class="MsoListParagraphCxSpMiddle" style="text-indent: -0.25in;"><span style="font-size: small;">4.<span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span>Make sure storage is visible in both the nodes.</span></div><div class="MsoListParagraphCxSpMiddle" style="text-indent: -0.25in;"><span style="font-size: small;">5.<span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span>Now we need to configure the cluster nodes.</span></div><div class="MsoListParagraphCxSpLast" style="text-indent: -0.25in;"><span style="font-size: small;">6.<span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span>Open the cluadmin.msc and then create new cluster.</span></div><div class="MsoListParagraphCxSpLast" style="text-indent: -0.25in;"><span style="font-size: small;"><br />
</span></div><div class="MsoListParagraphCxSpLast" style="text-indent: -0.25in;"><span style="font-size: small;"><br />
</span></div><div class="MsoListParagraphCxSpLast" style="text-indent: -0.25in;"><span style="font-size: small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgs-ngVgNFmFgvsKvn7JOG3UoiKvP-8hom2Ze4Erxbs9vJVi0CcupRf7XqBDSui2N_rbHgj6rAs4_Ur-GeYLxn412U-8Rc6j9hkiCEwSAvNCeTeFlrugRm0DjqRyGn_1jtOeDpfVLNuWHU/s1600/1.JPG" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="246" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgs-ngVgNFmFgvsKvn7JOG3UoiKvP-8hom2Ze4Erxbs9vJVi0CcupRf7XqBDSui2N_rbHgj6rAs4_Ur-GeYLxn412U-8Rc6j9hkiCEwSAvNCeTeFlrugRm0DjqRyGn_1jtOeDpfVLNuWHU/s320/1.JPG" width="320" /></a></span></div></li>
</ul><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br />
</span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">7.</span><span style="font-size: small;"><span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span>Select the domain and enter the name of the cluster (BlogTest) </span></div><div class="MsoNormal" style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">8. </span><span style="font-size: small;">Now it will analyze the configuration that will check all the pre-requisites for the cluster</span><br />
<span style="font-size: small;"><br />
</span><br />
<span style="font-size: small;"><br />
</span><br />
<span style="font-size: small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihN33qn-r4Ryzg_F0QZQwlgw2ityYpzBAUp24E7ytYol-YjgjvAeUk6VicMZP_GSPG6P3Tza0V2xAgBb38Y8qbU1llRdb1X4edT59PLm37-IO0Mo0KnHcAYzm9FW0zhsKh3Di0EoYT9lI/s1600/2.JPG" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="247" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihN33qn-r4Ryzg_F0QZQwlgw2ityYpzBAUp24E7ytYol-YjgjvAeUk6VicMZP_GSPG6P3Tza0V2xAgBb38Y8qbU1llRdb1X4edT59PLm37-IO0Mo0KnHcAYzm9FW0zhsKh3Di0EoYT9lI/s320/2.JPG" width="320" /> </a></span><br />
<span style="font-size: small;"><br />
</span><br />
<span style="font-size: small;">9. </span><span style="font-size: small;">Now you need to enter the IP address that the clients will used to connect to cluster.</span><br />
<span style="font-size: small;"><br />
</span><br />
<span style="font-size: small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCQpaQ7W4ZS1WE9D9qaGZTRs2pS0Qd3CqYsrPDscgbovaI0TmuVU1fhN4IXX5qHplIfunt7JE6l6uNhZj_lfPtsn4woMmGPmiQtpndkigwcc7Sqh0m4Cye5-DhFoOXobbVc5yU__UM0c4/s1600/3.JPG" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCQpaQ7W4ZS1WE9D9qaGZTRs2pS0Qd3CqYsrPDscgbovaI0TmuVU1fhN4IXX5qHplIfunt7JE6l6uNhZj_lfPtsn4woMmGPmiQtpndkigwcc7Sqh0m4Cye5-DhFoOXobbVc5yU__UM0c4/s320/3.JPG" width="320" /></a></span><span style="font-size: small;"> </span><br />
<span style="font-size: small;"><br />
</span><br />
<span style="font-size: small;">10. </span><span style="font-size: small;">Now you need to enter the credentials for the domain account under which the cluster service will </span><br />
<span style="font-size: small;"> run on the nodes,</span><span style="font-size: small;"> </span><br />
<span style="font-size: small;"><br />
</span><br />
<span style="font-size: small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjRlpkh9ZyVdLQ5Yb-CzWeQrAh5PSIJP1Qw8gkWsxhlMvajTXGRsnsee0xBZlpatrMIBA9Vpl_b7olZ22tU5k2p7I2JVNwjf-PUsW8pixwhX6zl57V6dgbsC_Fh7Z5NMK-tF5mGHV4zf8/s1600/4.JPG" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjRlpkh9ZyVdLQ5Yb-CzWeQrAh5PSIJP1Qw8gkWsxhlMvajTXGRsnsee0xBZlpatrMIBA9Vpl_b7olZ22tU5k2p7I2JVNwjf-PUsW8pixwhX6zl57V6dgbsC_Fh7Z5NMK-tF5mGHV4zf8/s320/4.JPG" width="320" /></a></span><span style="font-size: small;"> </span><br />
<span style="font-size: small;"><br />
</span><br />
<br />
<div class="MsoListParagraph" style="text-indent: -0.25in;"><span style="font-size: small;">1.<span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> 11. </span>After going ahead with the some steps ,you will finally Finish this wizard</span></div><div class="MsoListParagraph" style="text-indent: -0.25in;"><span style="font-size: small;"> 12. Now your cluster is ready and now you need to add the second node in the cluster. </span></div><div class="MsoListParagraph" style="text-indent: -0.25in;"><span style="font-size: small;">1 to do this follow the below screenshot</span></div><div class="MsoListParagraph" style="text-indent: -0.25in;"><br />
</div><div class="MsoListParagraph" style="text-indent: -0.25in;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhDOCQVONuVWGKhPORt482D-SrpoAJbgAK6V2cNBQypMyysbGPdvkANLX1Aq0fWQF8OEPgsSzp9MFVUySgoWmvERwVURIZIBUamyf9Gt-OpDr7RsuLOV3vmFPdtwH2Nm9idYNp6fhZDLY/s1600/5.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhDOCQVONuVWGKhPORt482D-SrpoAJbgAK6V2cNBQypMyysbGPdvkANLX1Aq0fWQF8OEPgsSzp9MFVUySgoWmvERwVURIZIBUamyf9Gt-OpDr7RsuLOV3vmFPdtwH2Nm9idYNp6fhZDLY/s320/5.JPG" width="320" /></a></div><div class="MsoListParagraph" style="text-indent: -0.25in;"><span style="font-size: small;"> </span></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<span style="font-size: small;">13. You will get the following wizard.</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmcLDh_AxeHiWCVHxPrgXzaeGlHeAGGOwILBGeoEeZN1MCeD1S-uEsiPtYVkiZ_4IytGh3nzaTe9YaG2Cd6Ovf6Y7M0dSjdXwjA9Fkhql1E5VxSEDlOJkz69JNowVEr20chv76kul9Au0/s1600/Add2node.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmcLDh_AxeHiWCVHxPrgXzaeGlHeAGGOwILBGeoEeZN1MCeD1S-uEsiPtYVkiZ_4IytGh3nzaTe9YaG2Cd6Ovf6Y7M0dSjdXwjA9Fkhql1E5VxSEDlOJkz69JNowVEr20chv76kul9Au0/s320/Add2node.JPG" width="320" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<span style="font-size: small;">14. After that you need to enter the authorized account and the node joining will </span><br />
<span style="font-size: small;"> get start.</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivapHaJceHCzVn9aAegdKQMNe0zVR97mSDB_mBfIY4ZrN5DqjN8NmKuGyxPlar0dB6xS-5EntZ-lASc4CtdvNEG5hIWa-zWfCHSfTEBWMtf0wOpeEgT8WfaXzA5oi3gQXbxGN8Hms8Hmg/s1600/adding_after_authenticating.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="224" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivapHaJceHCzVn9aAegdKQMNe0zVR97mSDB_mBfIY4ZrN5DqjN8NmKuGyxPlar0dB6xS-5EntZ-lASc4CtdvNEG5hIWa-zWfCHSfTEBWMtf0wOpeEgT8WfaXzA5oi3gQXbxGN8Hms8Hmg/s320/adding_after_authenticating.JPG" width="320" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<span style="font-size: small;"> </span><br />
<span style="font-size: small;"> </span><br />
<br />
<span style="font-size: small;">15. After you finish with this step you will see both the nodes in the console, Now you</span><br />
<span style="font-size: small;"> need to configure the cluster for file share.To configure this , please follow the below</span><br />
<span style="font-size: small;"><br />
</span><br />
<span style="font-size: small;"><br />
</span><br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfS7uLhfe4BFgrPMQnwGA2JiBCJV1fCWkZ7znd6wLRVVtKU50PjTKRgRRgy8zJV-3_1LJK8-RZwSZjrJ0cMZsUmJzIGLODOZe9BTNtC4A_w923wZ5sCtceFHkL_4ZiA61koSp2NFSxFM4/s1600/Fileshare-1.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="184" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfS7uLhfe4BFgrPMQnwGA2JiBCJV1fCWkZ7znd6wLRVVtKU50PjTKRgRRgy8zJV-3_1LJK8-RZwSZjrJ0cMZsUmJzIGLODOZe9BTNtC4A_w923wZ5sCtceFHkL_4ZiA61koSp2NFSxFM4/s320/Fileshare-1.JPG" width="320" /></a></div><span style="font-size: small;"><br />
</span><br />
<span style="font-size: small;"><br />
</span><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<span style="font-size: small;">16. After going through the wizard and selecting the cluster group , you will get the list of</span><br />
<span style="font-size: small;"> application that you can configure,Select the File Share.</span><br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWbSV7eFrPC2jnkR9xS4dBXWjqyZ3IH2v4JKKSFdOTPrmOvyJ2PYohStm06aayS02sbH1WwsDWyXyl1GM5bn6ytM10US1uajzoXMmVmJv9Yr5ZDQ7sFF3Nsu080LS9L9YQmw_l4x9E_Rs/s1600/Fileshare-1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><br />
</a></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg60mX6Kfa3o8xHvoWzPmsZ6Gaj1ZGcU7LIlQTnOSTQXQlnd2W31rgxH1mWyZp5YItLtXPUsc0gtWAbFnjnJsUsLsTgAgxUddyUD_C6UrQqeRqF9M4FW9NCqMqiXzVVHJYZi7xS5ZwbnpM/s1600/File-share_selection.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="206" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg60mX6Kfa3o8xHvoWzPmsZ6Gaj1ZGcU7LIlQTnOSTQXQlnd2W31rgxH1mWyZp5YItLtXPUsc0gtWAbFnjnJsUsLsTgAgxUddyUD_C6UrQqeRqF9M4FW9NCqMqiXzVVHJYZi7xS5ZwbnpM/s320/File-share_selection.JPG" width="320" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<span style="font-size: small;">17.After you select File Share, You will come to the next configuration page that is given </span><br />
<span style="font-size: small;"> below and here you need to provide the share name, permissions etc.</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEic5O3OpVBrr4Of3ml9e5h1rlkhvZ8FU4g_gR6KZTSOo9kPmySUPp8cwXZzEq0HyNN0tyUCOUuQtIfQ0nwmJBTKT5aX3bz6ITa9FBM-xYl7S38PuI6khBZwLlizYu5Nybsw6MtOTzJBZBw/s1600/File-share_setting.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="247" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEic5O3OpVBrr4Of3ml9e5h1rlkhvZ8FU4g_gR6KZTSOo9kPmySUPp8cwXZzEq0HyNN0tyUCOUuQtIfQ0nwmJBTKT5aX3bz6ITa9FBM-xYl7S38PuI6khBZwLlizYu5Nybsw6MtOTzJBZBw/s320/File-share_setting.JPG" width="320" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<span style="font-size: small;">18. After providing all the details , you can click next and then Finish.</span><br />
<span style="font-size: small;"> 19. After this your two node cluster is ready, you can try to make fail over :)</span><br />
<span style="font-size: small;"><br />
</span><br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_SsuBuHKjRS2L0nDuv6ZhUjQTqQ5lAmmy188fAkPSTfw0uhvKbDhx_8lHU-EDaoku9K4xNyGuQgzuNLVZFnRt0o4WBKLadolHbIkcCcMIir2Jqe4Mj4T-7vcvKmkRqUiMW_zIfYX-BeU/s1600/Failover.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="152" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_SsuBuHKjRS2L0nDuv6ZhUjQTqQ5lAmmy188fAkPSTfw0uhvKbDhx_8lHU-EDaoku9K4xNyGuQgzuNLVZFnRt0o4WBKLadolHbIkcCcMIir2Jqe4Mj4T-7vcvKmkRqUiMW_zIfYX-BeU/s320/Failover.JPG" width="320" /></a></div><span style="font-size: small;"><br />
</span><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<span style="font-size: small;">20. Be Happy :) if failover works otherwise google Zindabaad </span> </div></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-11976532641629780662011-09-08T01:18:00.000-07:002011-12-11T02:19:44.622-08:00<div dir="ltr" style="text-align: left;" trbidi="on"><m:smallfrac m:val="off"> <m:dispdef> <m:lmargin m:val="0"> <m:rmargin m:val="0"> <m:defjc m:val="centerGroup"> <m:wrapindent m:val="1440"> <m:intlim m:val="subSup"> <m:narylim m:val="undOvr"> </m:narylim></m:intlim> </m:wrapindent><span style="font-family: "Calibri","sans-serif"; font-size: 1pt;"></span> </m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac><br />
<div class="Publishwithline">DNS Zone Delegation</div><div style="border-color: -moz-use-text-color -moz-use-text-color rgb(79, 129, 189); border-style: none none solid; border-width: medium medium 1pt; padding: 0in 0in 2pt;"><div class="underline"><br />
</div></div><div class="MsoNormal"> </div><div class="MsoNormal"><b><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">Zone Delegation in DNS</span></b></div><div class="MsoNormal"><br />
</div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><a href="http://www.blogger.com/post-edit.g?blogID=4252815809528917363&postID=1197653264162978066" name="726"></a><a href="http://www.blogger.com/post-edit.g?blogID=4252815809528917363&postID=1197653264162978066" name="page213"></a> <m:smallfrac m:val="off"> <m:dispdef> <m:lmargin m:val="0"> <m:rmargin m:val="0"> <m:defjc m:val="centerGroup"> <m:wrapindent m:val="1440"> <m:intlim m:val="subSup"> <m:narylim m:val="undOvr"> </m:narylim></m:intlim> </m:wrapindent> </m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac></div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><m:smallfrac m:val="off"> <m:dispdef> <m:lmargin m:val="0"> <m:rmargin m:val="0"> <m:defjc m:val="centerGroup"> <m:wrapindent m:val="1440"> <m:intlim m:val="subSup"> <m:narylim m:val="undOvr"> </m:narylim></m:intlim> </m:wrapindent> </m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac></div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">DNS provides the option of dividing up the namespace into one or more zones, which can then be stored, distributed, and replicated to other DNS servers. To delegate a zone is to create a new zone for a subdomain within a DNS namespace and give up authority of that new zone. For example, a company owning the domain <u><span style="color: blue;">google.com</span></u> can delegate subdomains such as <u><span style="color: blue;">mail.google.com</span></u> and <u><span style="color: blue;">uk.google.com</span></u> to its various regional offices.</span></div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><br />
</div><div class="MsoNormal"><b><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">When to Delegate Zones</span></b></div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">DNS delegations are automatically used to separate parent and child AD DS domains in a single forest. For example, if your organization originally includes a single AD DS domain <u><span style="color: blue;">google.com</span></u> and then creates a child AD DS domain named <u><span style="color: blue;">mail.google.com</span></u> the DNS namespace of the new child AD DS domain will automatically be configured as a new DNS zone and delegated subdomain of the parent zone. The authoritative DNS data for all computers in the child domain will be stored on DNS servers in that new AD DS domain.</span></div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">When delegating zones within your namespace, be aware that for each new zone you create, you will need delegation records in other zones that point to the authoritative DNS servers for the new zone. This is necessary both to transfer authority and to provide correct referral to other DNS servers and clients of the new servers being made authoritative for the new zone.</span></div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><b><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">How Delegations Work</span></b></div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">For a delegation to be implemented, the parent zone must contain an NS record and an associated A record ( glue record) pointing to each authoritative server of the delegated domain. </span></div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">I have created a Namespace with google.com as parent and child with the name mail.google.com.</span></div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><m:smallfrac m:val="off"> <m:dispdef> <m:lmargin m:val="0"> <m:rmargin m:val="0"> <m:defjc m:val="centerGroup"> <m:wrapindent m:val="1440"> <m:intlim m:val="subSup"> <m:narylim m:val="undOvr"> </m:narylim></m:intlim> </m:wrapindent> </m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac></div><div class="MsoNormal"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">In the figure, a local DNS server named </span><a href="http://ns.contoso.com/" target="_top"><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12pt;">DNS1.google.com</span></a><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> is authoritative for the domain </span><a href="http://contoso.com/" target="_top"><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12pt;">google.com</span></a><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> and has a configured delegation for the subdomain </span><a href="http://asia.contoso.com/" target="_top"><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12pt;">mail.google.com</span></a><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">. If a client queries this local DNS server for the FQDN say "</span><a href="http://hk4.asia.contoso.com/" target="_top"><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12pt;">web.mail.google.com</span></a><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">", the server consults the locally stored NS and A records that are configured for the delegation to determine that the authoritative name server for the </span><a href="http://asia.contoso.com/" target="_top"><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12pt;">mail.google.com</span></a><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> domain is </span><a href="http://ns1.asia.contoso.com/" target="_top"><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12pt;">DNS1.mail.google.com</span></a><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">, and that this server's IP address is 172.x.x.x. The local DNS server then queries </span><a href="http://ns1.asia.contoso.com/" target="_top"><span style="color: blue; font-family: "Times New Roman","serif"; font-size: 12pt;">DNS1.mail.google.com</span></a><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> for the name <a href="http://www.blogger.com/post-edit.g?blogID=4252815809528917363&postID=1197653264162978066" name="729"></a><a href="http://www.blogger.com/post-edit.g?blogID=4252815809528917363&postID=1197653264162978066" name="page214"></a><a href="http://hk4.asia.contoso.com/" target="_top"><span style="color: blue;">web.mail.google.com</span></a>. After the remote DNS server receives the query, it consults its locally stored database and responds to the querying DNS server with the IP address of the host <a href="http://hk4.asia.contoso.com/" target="_top"><span style="color: blue;">web.mail.google.com</span></a>, which is 172.y.y.y. The local DNS server then responds to the original querying client with the information requested.</span></div><div class="MsoNormal"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDxr__Qnd-et-os9u1cKGU-V68JoPMEIObN8JH3Oacn0vIUKm-KB7og5mIt-5qZlEgAGoelEvms_m3j3mKoo07U70sD75fOGepsuuLtjW4GgcDZDmDeBhyphenhyphenXtpngXaFDShaN8knWrSQkYw/s1600/4.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="395" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDxr__Qnd-et-os9u1cKGU-V68JoPMEIObN8JH3Oacn0vIUKm-KB7og5mIt-5qZlEgAGoelEvms_m3j3mKoo07U70sD75fOGepsuuLtjW4GgcDZDmDeBhyphenhyphenXtpngXaFDShaN8knWrSQkYw/s640/4.JPG" width="640" /></a></div><div class="MsoNormal"><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><br />
<b><u><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">NOTE:-</span></u></b><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> If you will open the DNS console then there will be only one RR i.e. NS record that will point to authoritative server for that zone.</span></div><div class="MsoNormal"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">Now the question is why I mentioned that there will two RR i.e. NS and A RR. The second RR for A is also there but it is hidden and you can check in the parent zone file that you have created on the server. Below screenshot will give you clearer picture on this.</span><br />
<br />
</div><div class="MsoNormal"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8fVJg66Ix5nVi3NNstt_aTOWKyAffBZv8acxh-PChPhh5tsbzg6Qu0j2vIsHBW0OcRwu6GZoWW-kKy_oax0vZKQtTBv-0tvnX0k-YmWk4ayEH9iodMaCNxhyuAJibYGVqhyyPUuo38W8/s1600/1.JPG" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="444" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8fVJg66Ix5nVi3NNstt_aTOWKyAffBZv8acxh-PChPhh5tsbzg6Qu0j2vIsHBW0OcRwu6GZoWW-kKy_oax0vZKQtTBv-0tvnX0k-YmWk4ayEH9iodMaCNxhyuAJibYGVqhyyPUuo38W8/s640/1.JPG" width="640" /></a><br />
<span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">These resource records include the following:</span></div><div class="MsoNormal"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">A name server (NS) resource record:-. This resource record dns2.mail.google.com. is an authoritative server for the delegated subdomain.</span></div><div class="MsoNormal"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">A host (A or AAAA) resource record:- It is also known as a glue record is necessary to resolve the name of the server that is specified in the NS resource record to its IP address.</span></div><div class="MsoNormal"><b><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">Creating a Zone Delegation</span></b></div><div class="MsoNormal"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">To create a zone delegation, the domain to be delegated must already be created on a server that is authoritative for the DNS subdomain. Then, you can configure the New Delegation Wizard on the server hosting the parent zone by right-clicking the parent zone folder in the DNS console and selecting New Delegation.</span></div><div class="MsoListParagraphCxSpFirst" style="margin-bottom: 0.0001pt;"><a href="http://www.blogger.com/post-edit.g?blogID=4252815809528917363&postID=1197653264162978066" name="732"></a><a href="http://www.blogger.com/post-edit.g?blogID=4252815809528917363&postID=1197653264162978066" name="ch03fig32"></a><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoListParagraphCxSpLast" style="margin-bottom: 0.0001pt;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcYZ0K-qTNl0rWwM-BEC7NQeE4Jr3Qg-BJx6XC_-K8XQyOwGeWk5qkITD1L-seWn7MtfHyokeSXQyLdWCjox-WXTa1hXh3Z990EKdF0ji5g7-v7UL_ii2AERQ4pqlHN0x8fUenhUVZu6Q/s1600/3.JPG" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcYZ0K-qTNl0rWwM-BEC7NQeE4Jr3Qg-BJx6XC_-K8XQyOwGeWk5qkITD1L-seWn7MtfHyokeSXQyLdWCjox-WXTa1hXh3Z990EKdF0ji5g7-v7UL_ii2AERQ4pqlHN0x8fUenhUVZu6Q/s400/3.JPG" width="337" /></a><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> </span></div><div class="MsoNormal" style="margin-bottom: 0.0001pt;"><a href="http://www.blogger.com/post-edit.g?blogID=4252815809528917363&postID=1197653264162978066" name="733"></a><a href="http://www.blogger.com/post-edit.g?blogID=4252815809528917363&postID=1197653264162978066" name="page215"></a><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">To complete the Delegation Wizard, you will need to specify the name of the delegated subdomain and the name of name server that will be authoritative for the new zone. After you run the wizard, a new folder will appear in the DNS console tree representing the newly delegated subdomain.</span></div><div class="MsoNormal"><br />
</div></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-73382117511871689342011-08-05T04:57:00.000-07:002011-12-11T02:17:06.060-08:00Restore AD Object from the AD snapshot in Server 2008<div dir="ltr" style="text-align: left;" trbidi="on"> <u><b> Restore AD Object from the AD snapshot in Server 2008</b></u><br />
<br />
Frnz,<br />
<br />
Today i will share "how to recover the deleted objects from AD snapshot in Server 2008<br />
and Server 2008 R2.<br />
<br />
This is also very nice feature.In the previous version of windows if you have accidently<br />
deleted an object from AD then you need to perform couple of task to recover that,<br />
and that also require you to reboot the DC. <br />
<br />
But with the newer version of windows 2008 and 2008 R2 there are couple of features<br />
included in these, and AD snapshot and Recycle Bin are the one of the feature.<br />
<br />
In this blog I will share how to recover deleted object with AD snapshot.<br />
<br />
So you have a AD environment and you have users in that.Assume you have scenerio<br />
like below.Here you have two users <b>vijay and t1</b>.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgw_8A6ck0uNCLbJCXB2JxRnp9AVWoIj4gXdFnaEhUJHWZNeBRmyGnZ3IeQhfd4Gx8_ZQtdUXSbF3JOrFdX3gRk7glZu-xcXf6Hx1Z7q_HYb92oweu9NnZKc201LWhMIqheEW_YJH2kmww/s1600/1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="146" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgw_8A6ck0uNCLbJCXB2JxRnp9AVWoIj4gXdFnaEhUJHWZNeBRmyGnZ3IeQhfd4Gx8_ZQtdUXSbF3JOrFdX3gRk7glZu-xcXf6Hx1Z7q_HYb92oweu9NnZKc201LWhMIqheEW_YJH2kmww/s320/1.JPG" width="320" /></a></div><br />
Now you need create a AD snapshot. To do that follow the following steps.<br />
<br />
Step1: Go to command prompt and type<br />
<br />
C:\<span style="color: red;">ntdsutil</span><br />
<br />
Step2: Now type snapshot<br />
<br />
<b> ntdsutil: <span style="color: red;">snapshot</span></b><br />
<br />
Step3: Now you need activate AD instance,to do this type <br />
<br />
<b>snapshot: <span style="color: red;">activate instance ntds</span></b><br />
<br />
Step4: Now instance is activated ,you need to create the snapshot<br />
<br />
<b><span style="color: red;">snapshot: create</span><br />
</b> Creating snapshot...<br />
Snapshot set {59738915-f3f2-4919-8769-f7379911c4f6} generated successfully.<br />
<br />
Step5: <b>Now the instance is created but you need to mount it.to do this</b><br />
<b><br />
</b><br />
<b> </b><span style="color: red;"> <b>snapshot: mount {59738915-f3f2-4919-8769-f7379911c4f6}</b></span><br />
Snapshot {33d4ede5-c094-41b9-8e42-421df7b1d667} mounted as<br />
C:\$SNAP_201108040529 _VOLUMEC$\<b><br />
snapshot:</b><br />
<br />
<b> </b> It will mount the created snapshot to C:\$SNAP_201108040529 _VOLUMEC$\<br />
<br />
Step6: Now you need to connect the newly created instance with some different<br />
port number. To do this type<br />
<b><br />
</b><br />
<b> <span style="color: red; font-size: x-small;">dsamain -dbpath <span style="color: blue;">C:\$SNAP_201108040529_VOLUMEC$</span>\windows\NTDS\NTDS.Dit -ldapport <span style="color: purple;">15389</span></span></b><br />
<b><br />
</b><br />
<b> </b>here blue portion is where the instance mounted and purple portion represent<br />
the port on which this instance will connect.<br />
<br />
Step7: Now you have two AD instance<br />
<br />
1. One on port 389 (not having users t1 and vijay)<br />
2. Second is on port 15389 (having both the users t1 and vijay)<br />
<br />
Open the first one using dsa.msc with the default port 389 <br />
Open the second one using dsa.msc and then connect to domain controller and<br />
mentioned the FQDN with the posrt 15389.<br />
Now you will have two mmc opened as shown below.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFbNUrHjgoCFed0vSTp7IDMFE5vZD5r9g__ioANrUTlT5bg8MtZSGZAbVlygrO8YImrmMpaI1dmRYbPvv-qobpXtLxRz0SYcfJxdxxkWnBqvhjhIP5qKKYDbxDBa5DQrZa0E5AM7VMDt4/s1600/2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFbNUrHjgoCFed0vSTp7IDMFE5vZD5r9g__ioANrUTlT5bg8MtZSGZAbVlygrO8YImrmMpaI1dmRYbPvv-qobpXtLxRz0SYcfJxdxxkWnBqvhjhIP5qKKYDbxDBa5DQrZa0E5AM7VMDt4/s320/2.JPG" width="320" /></a></div><br />
<br />
Step8:- Now you can recover the object either using ldp.exe tool or some other tool<br />
I have got a very small and easy command tool to recover the objects i.e <b style="color: red;">oirecmgr.exe </b><br />
<br />
You can download this tool from <a href="http://www.4shared.com/file/MtWFd9eg/oirecmgr.html">here</a><br />
<br />
Step9:- After downloading this tool just extract in some folder say c:\ drive<br />
<br />
Step10:-Run the following command to recover the object but to run this command you<br />
need to get the GUID of the deleted user.<br />
<br />
<br />
C:\oirecmgr.exe -o<span style="color: red;"> fe6a3c0f-5e15-4022-b076-eacac4e1a23e</span> -sh <span style="color: blue;">test.local:15389</span> -ol -real<br />
<br />
<b> </b> >>Here red portion is GUID of the object and blue portion is the snapshot<br />
connected to port 15389<b></b><br />
<b><br />
</b><br />
To get the GUID of the user you can use ADSI Edit .Open Adsi Edit and then<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQfvINZfpIqUWQ9yww0IRs6c5WhS43btrI7qVuOkrVU5OhMemkuoJeI1T69Jc1OXBhBL-0nHMKMb12B3zwA5QGlG8UoLq1mNO4n3gEMzMG8RbCHTM0BE2NJPo1BjFTeX3Hhjm-XSttCn4/s1600/Adsi.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="310" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQfvINZfpIqUWQ9yww0IRs6c5WhS43btrI7qVuOkrVU5OhMemkuoJeI1T69Jc1OXBhBL-0nHMKMb12B3zwA5QGlG8UoLq1mNO4n3gEMzMG8RbCHTM0BE2NJPo1BjFTeX3Hhjm-XSttCn4/s320/Adsi.JPG" width="320" /></a></div>Right click on Adsi Edit and connect to , A box will open then go to Advanced<br />
Now add the port 15389 and then click on OK<b></b><br />
<b><br />
</b><br />
Now go to the OU and open the properties of deleted user say vijay.<br />
<b><br />
</b><br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgre_eTZxUB11C6NrsKntLWFK24_ukT7WPnUf0FE9fnH3Q1jK9CcPkGNphOrZNAIC6VyOM_d27J-ciOd5XXE_WT9Tb3nylVz96ga_JkBp7IA7Sbk0j2m8ZxPRF1thboVF4DliOCbYxmzOY/s1600/GUID.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgre_eTZxUB11C6NrsKntLWFK24_ukT7WPnUf0FE9fnH3Q1jK9CcPkGNphOrZNAIC6VyOM_d27J-ciOd5XXE_WT9Tb3nylVz96ga_JkBp7IA7Sbk0j2m8ZxPRF1thboVF4DliOCbYxmzOY/s320/GUID.JPG" width="253" /></a></div><b><br />
</b><br />
<b><br />
</b><br />
After running the above command the deleted object will be recovered.<b><br />
</b><br />
<br />
</div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-7891912332844093612011-08-03T00:38:00.000-07:002011-12-11T02:17:52.343-08:00Restore AD objects using Recycle Bin Feature of Server 2008 R2<div dir="ltr" style="text-align: left;" trbidi="on"><m:smallfrac m:val="off"> <m:dispdef> <m:lmargin m:val="0"> <m:rmargin m:val="0"> <m:defjc m:val="centerGroup"> <m:wrapindent m:val="1440"> <m:intlim m:val="subSup"> <m:narylim m:val="undOvr"> </m:narylim></m:intlim> </m:wrapindent> </m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac><br />
<div class="MsoNormal" style="line-height: normal;"><b><u><span style="color: red; font-family: "Times New Roman","serif"; font-size: 12pt;">How to restore the Object using Recycle Bin Feature of Windows Server 2008 R2</span></u></b></div><div class="MsoNormal" style="line-height: normal;"><b><u><span style="color: red; font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span></u></b></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">To Import the Active directory commands in the powershell we need to run the </span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">following command in powershell</span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-size: small;"><span style="color: #c00000; font-family: "Times New Roman","serif";">PS> Import-Module activedirectory</span></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">Once all the Active directory cmdlets are imported after that you need to get the</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> functional level of the forest up to the level of <b>Windows Server 2008 R2. </b> </span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">As the Active directory Recycle Bin features only come under this functional level.</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> You can do this from<b> </b>Active Directory Domains and Trusts that is very easy way </span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">to do this. As you can see below that the current functional level is Windows Server</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> 2003 and we need to raise it to Windows Server 2008 R2.</span></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXB3ELTgTx7sD79AHLG78q1Jqn2koQDjJ7L2tXTSDfsoL05NzJEqIQSoMb4JOPgGsHO9VShr_jzfl1NRoae2SgA2dGhx5crFFIuofEH1wQjqQGJ-Nw6rxThthP4tVeIj9bDdYkB8qjOeQ/s1600/1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="216" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXB3ELTgTx7sD79AHLG78q1Jqn2koQDjJ7L2tXTSDfsoL05NzJEqIQSoMb4JOPgGsHO9VShr_jzfl1NRoae2SgA2dGhx5crFFIuofEH1wQjqQGJ-Nw6rxThthP4tVeIj9bDdYkB8qjOeQ/s320/1.JPG" width="320" /></a></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">We can also raise the functional level from the powershell. The <b>Get-ADForest</b> </span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">cmdlet will return information about your forest and the <b>Set-ADForestMode </b> </span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">cmdlet will enable you to raise the current functional level.You will be prompted</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> to confirm that you wish to go ahead.</span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-size: small;"><span style="color: #c00000; font-family: "Times New Roman","serif";">PS> Get-ADForest | Set-ADForestMode –ForestMode Windows2008R2Forest</span></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgn1bxgA-oLnGj7d_BvYAsbGly2LKU9D0zKtFAnQgSSgknH6ACiaYbBRETq58qgJbBl0SgCZDXov9qP-U1sKmLxQIEfzG9lkYR-KCgTR46Ri3J7FODUjvZU3Yr7p7AjAAd7VAEMlajLmv0/s1600/2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="133" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgn1bxgA-oLnGj7d_BvYAsbGly2LKU9D0zKtFAnQgSSgknH6ACiaYbBRETq58qgJbBl0SgCZDXov9qP-U1sKmLxQIEfzG9lkYR-KCgTR46Ri3J7FODUjvZU3Yr7p7AjAAd7VAEMlajLmv0/s320/2.JPG" width="320" /></a></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">Now our functional level is set to Server 2008 and now we can enable the Recycle Bin.</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">Now that our forest is at the correct functional level we can enable the Recycle Bin,</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> To enable this feature you can run the following command. It will also ask you about </span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">the confirmation. </span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-size: x-small;"><span style="color: #c00000; font-family: "Times New Roman","serif";"><span style="font-size: small;">PS> Enable-ADOptionalFeature 'Recycle Bin Feature' -Scope ForestOrConfigurationSet </span></span></span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-size: x-small;"><span style="color: #c00000; font-family: "Times New Roman","serif";"><span style="font-size: small;">-target 'test.local</span>'</span></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNgoUu3_LBCQnwzCBor11E1BgSOadJkcXWICCWkuLuGR9JUyqxywklGmAvLXChgjE2uDIBebi_KgEcEvwSAAo5XD9ZWrfn3STNIkzbGKpbYQBWG1dF_mu-i23RZWXmZZwXKRe7AJMVa9s/s1600/3.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="112" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNgoUu3_LBCQnwzCBor11E1BgSOadJkcXWICCWkuLuGR9JUyqxywklGmAvLXChgjE2uDIBebi_KgEcEvwSAAo5XD9ZWrfn3STNIkzbGKpbYQBWG1dF_mu-i23RZWXmZZwXKRe7AJMVa9s/s320/3.JPG" width="320" /></a></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">Now that we have the Recycle Bin enabled and now we can check by deleting some</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> object from our AD structure.</span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfvRlsUpyNltnc0MQXgCQcOTGhhJsu4aKPq6zAujp53hOEOEQTj4u-OLXQcULs33Tt4HUJykcBMd3NqgvPtBamiGnqxT7O4SOSK9RmT_ZVELKfAKLKdHd-YmxL9AFXiQn4MmqyWuabQe8/s1600/4.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="147" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfvRlsUpyNltnc0MQXgCQcOTGhhJsu4aKPq6zAujp53hOEOEQTj4u-OLXQcULs33Tt4HUJykcBMd3NqgvPtBamiGnqxT7O4SOSK9RmT_ZVELKfAKLKdHd-YmxL9AFXiQn4MmqyWuabQe8/s320/4.JPG" width="320" /></a></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">There is a new feature included in Windows 2008 Server that is ‘Protect object from</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> accidental deletion’. So it may happen that you going to delete OU but got a <b> </b></span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><b>Access is denied</b> response and the administrator will actually have to remove the</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> tick from that checkbox before the OU can be deleted.Below is the error that you </span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">will get if the ‘Protect object from accidental deletion’ is checked.</span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivfHo40ONsv5fpdRtDfwoN0QDJrY7DyO7yI3mpXxqWinfEviHSkoYTJdipKHRCIRzGiK9WNEwVOoNm0wapCERt8lSLPGJ76n_KpDKzJlFSS2aqhP2QRaXVCnKcAEDfiqwj8_RV-kyvp70/s1600/5.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="150" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivfHo40ONsv5fpdRtDfwoN0QDJrY7DyO7yI3mpXxqWinfEviHSkoYTJdipKHRCIRzGiK9WNEwVOoNm0wapCERt8lSLPGJ76n_KpDKzJlFSS2aqhP2QRaXVCnKcAEDfiqwj8_RV-kyvp70/s320/5.JPG" width="320" /></a></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">To do this you need to select the Advance Features, you can get this by following way.</span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwBnMgj0zYFnLPl3j11LWEqsV2Jqi08jQxlW4zteIIsPQe8y4jf4vA-18cR5LUOiO6Nus6D_1nyoycIyF1TXkRwnRbxFApKhDGcno4qk4oBn9XbZoRs24rjicRdEZ6LQ2jtbpRNGZ8OFs/s1600/6.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="141" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwBnMgj0zYFnLPl3j11LWEqsV2Jqi08jQxlW4zteIIsPQe8y4jf4vA-18cR5LUOiO6Nus6D_1nyoycIyF1TXkRwnRbxFApKhDGcno4qk4oBn9XbZoRs24rjicRdEZ6LQ2jtbpRNGZ8OFs/s320/6.JPG" width="320" /></a></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">Then you can go to the properties the OU and go to the Object tab and uncheck the</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> <b>”Protect object from accidental deletion”</b></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVe2UcOzuGFyH0wGne3qkzQswdHSfhU8oh9FjGL01nbmyP__BGrWNVv57SEyeQ_cHnQU2qthA42AHNsL452SM7DScIYfbugI4r_osmO-lmrhgSD-gH8Rva9CVoMrtrQSNxpueijuNmpds/s1600/7.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="194" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVe2UcOzuGFyH0wGne3qkzQswdHSfhU8oh9FjGL01nbmyP__BGrWNVv57SEyeQ_cHnQU2qthA42AHNsL452SM7DScIYfbugI4r_osmO-lmrhgSD-gH8Rva9CVoMrtrQSNxpueijuNmpds/s320/7.JPG" width="320" /></a></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">So now we have removed the checkbox and now we can remove the OU from the AD.</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">We have removed the Team OU and now you can see below that there is no </span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">Team OU in the structure.</span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6ON3y6OR5of_0huJ4_aIdDZOiowbU7ByFmU0oNwCZUbGLL0hjYqxpLzYLNdySXf62h8iPhyphenhyphenf0O1dUQeCpiKQ_A1F0DP-KHnImikwVcSD95ijL-3QCG7qYvPZU65ZDI79Uu4kT_8QHQ_g/s1600/8.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="133" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6ON3y6OR5of_0huJ4_aIdDZOiowbU7ByFmU0oNwCZUbGLL0hjYqxpLzYLNdySXf62h8iPhyphenhyphenf0O1dUQeCpiKQ_A1F0DP-KHnImikwVcSD95ijL-3QCG7qYvPZU65ZDI79Uu4kT_8QHQ_g/s320/8.JPG" width="320" /></a></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">To see all the deleted objects, we can run the below Powershell command</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-size: small;"><span style="color: #c00000; font-family: "Times New Roman","serif";">PS> Get-ADObject –SearchBase “CN=Deleted Objects,DC=test,DC=local” </span></span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-size: small;"><span style="color: #c00000; font-family: "Times New Roman","serif";">–ldapFilter “(objectClass=*)” -includeDeletedObjects | Format-List Name,ObjectClass,ObjectGuid</span></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMobJay-jCwHpY1MFG_9owwVpIIAmDKri1BmkkoFYYQutCVQAMElyonYTGh_VZ_lBDx54SyywKwH_Lu65UkAYo6nHNXChPPnzkDHyMOwIOdNYZNB9O2DBj92JpPkjXU1JqY1dDMup-JYs/s1600/9.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="95" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMobJay-jCwHpY1MFG_9owwVpIIAmDKri1BmkkoFYYQutCVQAMElyonYTGh_VZ_lBDx54SyywKwH_Lu65UkAYo6nHNXChPPnzkDHyMOwIOdNYZNB9O2DBj92JpPkjXU1JqY1dDMup-JYs/s320/9.JPG" width="320" /></a></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">We can see from the resultant output that we have both the <b>Users</b> OU in there </span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">and the two user accounts. So now we will restore the objects</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> </span></div><div class="MsoNormal" style="line-height: normal;"><span style="background: none repeat scroll 0% 0% yellow; color: red; font-family: "Times New Roman","serif"; font-size: 12pt;">Note:- To restore the Users ,you first need to restore the Parent OU otherwise is will give you error.</span></div><div class="MsoNormal" style="line-height: normal;"><span style="background: none repeat scroll 0% 0% yellow; color: red; font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><span style="color: red; font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-size: small;"><span style="color: #c00000; font-family: "Times New Roman","serif";">PS> Restore-ADObject -identity 280befcd-6937-4030-a33c-1ba0a9d40c24 </span></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">The above command will restore the OU Team but that will be empty as we need to </span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">restore the User objects as well.</span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2qilSVsuu2dyV8feyzevJRm11nj4fAAurHAV8e3QZBKdB7rTnD-nT3hT0jKK4wKovd9KPFnLpdM55-vVK5hfubuDCIIwuanEQaXumuscie0AaiTq2bqS-lOp84BVl3OOZ2LyFYRmiRlM/s1600/10.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="144" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2qilSVsuu2dyV8feyzevJRm11nj4fAAurHAV8e3QZBKdB7rTnD-nT3hT0jKK4wKovd9KPFnLpdM55-vVK5hfubuDCIIwuanEQaXumuscie0AaiTq2bqS-lOp84BVl3OOZ2LyFYRmiRlM/s320/10.JPG" width="320" /></a></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">Now we need to restore the objects in Team OU. We can do this by the above </span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">method we used to restore the OU.But the problem is that if we will have 1000 users</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> in that OU that will be so tough to use this command to restore every single object</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> related to that OU Team.So to fix this we will make a search for all the deleted users </span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">that are related to that OU Team and then will restore them.</span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">To do that we can run the following command.</span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="color: #990000; line-height: normal;"><span style="font-size: small;"><span style="font-family: "Times New Roman","serif";">PS> Get-ADObject -ldapFilter "(lastKnownParent=OU=Team,DC=test,DC=local)" </span></span></div><div class="MsoNormal" style="color: #990000; line-height: normal;"><span style="font-size: small;"><span style="font-family: "Times New Roman","serif";">-includeDeletedObjects | Restore-ADObject</span></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">After this command will finish you will see that all the users that will be related to this </span></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">Team OU will be restored.Check the below screen shot.</span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhBX54Cq-iF3t0gADPQtdE9A9a5u2szZnX_muAuzAdQ6_oHVUTM91XHHq_pS4woK0vIdMj4MF90u-UkWy3EtLPhI5YVe0rfP4yJnk89XSkXMNHEUGExA2VaPGjtEJSdSFSc6e_3hVqSao/s1600/11.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="124" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhBX54Cq-iF3t0gADPQtdE9A9a5u2szZnX_muAuzAdQ6_oHVUTM91XHHq_pS4woK0vIdMj4MF90u-UkWy3EtLPhI5YVe0rfP4yJnk89XSkXMNHEUGExA2VaPGjtEJSdSFSc6e_3hVqSao/s320/11.JPG" width="320" /></a></div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"></span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">The user accounts are back in the <b>Users</b> OU.</span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div><div class="MsoNormal" style="line-height: normal;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">This is very Nice and easy feature of Windows Server 2008 R2 to restore the deleted Objects.</span></div><div class="MsoNormal" style="line-height: normal;"><br />
</div></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0Chandigarh, India30.731345 76.77538500000002830.666502 76.696795000000023 30.796188 76.853975000000034tag:blogger.com,1999:blog-4252815809528917363.post-70442061387543716332011-08-01T09:13:00.000-07:002011-08-01T09:50:33.362-07:00Extend virtual machine partition and create single vmdk file from multiple files<div dir="ltr" style="text-align: left;" trbidi="on"><div style="color: #666666;">Hello Frnz,</div><div style="color: #666666;"><br />
</div><div style="color: #666666;">As most of you are using VmWare for your day-today testing.</div><div style="color: #666666;">Sometimes you may have face the following issues and may be get angry.</div><div style="color: #666666;"><br />
</div><div class="separator" style="clear: both; color: #666666; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiB9H-aNodPvN7vYqWnfxJ0tzTHRE8aoo7KoDf9sT7YmhVsBSUM_bETHKj2XyzQbtiibuCkRwK08YQQzs7pO3_7Svpmw5-Q1zF4Raokij9QUMOLYzwRl35xkeAKI93St5dnH-L8ke661kE/s1600/Vm.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="284" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiB9H-aNodPvN7vYqWnfxJ0tzTHRE8aoo7KoDf9sT7YmhVsBSUM_bETHKj2XyzQbtiibuCkRwK08YQQzs7pO3_7Svpmw5-Q1zF4Raokij9QUMOLYzwRl35xkeAKI93St5dnH-L8ke661kE/s320/Vm.JPG" width="320" /></a></div><div style="color: #666666;">1. You have vmdk files spitted into 2GB files<br />
(suppose your HDD is of 40GB then you will 20 Vmdk files)</div><div style="color: #666666;">2. You have created 10GB Vmdk file and afterward you require more HDD space.</div><div style="color: #666666;"><br />
</div><div style="color: #666666;">Today in this blog I will just share with you few techniques to fix the above issues. </div><div style="color: #666666;"><br />
</div><div style="color: #666666;"><m:smallfrac m:val="off"> <m:dispdef> <m:lmargin m:val="0"> <m:rmargin m:val="0"> <m:defjc m:val="centerGroup"> <m:wrapindent m:val="1440"> <m:intlim m:val="subSup"> <m:narylim m:val="undOvr"> </m:narylim></m:intlim> </m:wrapindent><b><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"> <u>How </u></span><u><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">To create one vmdk file from multiple files</span></u></b></m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac></div><div style="color: #666666;"><br />
</div><div style="color: #666666;">Please follow the following steps to create one Vmdk file from multiple files.</div><div style="color: #666666;"><br />
</div><div style="color: #666666;"><m:smallfrac m:val="off"> <m:dispdef> <m:lmargin m:val="0"> <m:rmargin m:val="0"> <m:defjc m:val="centerGroup"> <m:wrapindent m:val="1440"> <m:intlim m:val="subSup"> <m:narylim m:val="undOvr"> </m:narylim></m:intlim> </m:wrapindent> </m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac></div><div class="MsoNormal" style="color: #666666;">Step1. Copy the vmware-vdiskmanager from vmware server/workstation edition to </div><div class="MsoNormal" style="color: #666666;"> %systemroot%\system32.you can get this by </div><div class="MsoNormal" style="color: #666666;"> </div><div class="MsoNormal" style="color: #666666;"> Going into C:\Program Files\VMware\VMware Server></div><div class="MsoNormal" style="color: #666666;"> or </div><div class="MsoNormal" style="color: #666666;"> Going into C:\Program Files\VMware\VMware Workstation> </div><div class="MsoNormal" style="color: #666666;"> or </div><div class="MsoNormal" style="color: #666666;"> You can also search for vmware-vdiskmanager from the Vmware installation folder</div><div class="MsoNormal" style="color: #666666;"><br />
</div><div class="MsoNormal" style="color: #666666;"><m:smallfrac m:val="off"> <m:dispdef> <m:lmargin m:val="0"> <m:rmargin m:val="0"> <m:defjc m:val="centerGroup"> <m:wrapindent m:val="1440"> <m:intlim m:val="subSup"> <m:narylim m:val="undOvr"> </m:narylim></m:intlim> </m:wrapindent> </m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac></div><div class="MsoNormal" style="color: #666666;">Step2: After copying the exe file just run the following command.</div><div class="MsoNormal" style="color: #666666;"><br />
<div style="color: blue;"><b><span style="font-size: x-small;">C:\>vmware-vdiskmanager -r G:\VmS\2003_server\Windows_Server_2003-000001.vmdk –t 2 H:\mysinglefile.vmdk</span></b></div></div><div class="MsoNormal" style="color: #666666;"><br />
</div><div class="MsoNormal" style="color: #666666;"><br />
</div><div class="MsoNormal" style="color: #666666; text-indent: 0.5in;">{G:\ is the source drive folder where you have all the splitted 2Gb vmdk files.</div><div class="MsoNormal" style="color: #666666; text-indent: 0.5in;">H:\mysinglefile.vmdk is the location where it will create a single vmdk file.}</div><div class="MsoNormal" style="color: #666666; text-indent: 0.5in;"></div><m:smallfrac m:val="off"> <m:dispdef> <m:lmargin m:val="0"> <m:rmargin m:val="0"> <m:defjc m:val="centerGroup"> <m:wrapindent m:val="1440"> <m:intlim m:val="subSup"> <m:narylim m:val="undOvr"> </m:narylim></m:intlim> </m:wrapindent> </m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac><br />
<div class="MsoNormal" style="color: #666666;"><br />
<div style="text-align: justify;">Step 3: After that run the Vm machine, if it gave some error message then try to </div> browse that single Vm disk.If still the error comes then just create a new<br />
VM machine and after creating the new machine just replace the HDD of<br />
the newly created machine with the HDD (single vmdk file that you have </div><div class="MsoNormal" style="color: #666666; text-align: justify;"> created).It will work.</div><div class="MsoNormal" style="color: #666666; text-align: justify;"><br />
</div><div class="MsoNormal" style="color: #666666; text-align: justify;"><br />
</div><div class="MsoNormal" style="color: #666666; text-align: justify;"><br />
</div><div class="MsoNormal" style="color: #666666; text-align: justify;"><br />
</div><div class="MsoNormal" style="color: #666666; text-align: justify;"> <b><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><u>How </u></span><u><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">To increase space of single vmdk file</span></u></b></div><div class="MsoNormal" style="color: #666666; text-align: justify;"><b><u><span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span></u></b></div><div class="MsoNormal" style="color: #666666; text-align: justify;"><span style="font-family: "Times New Roman","serif"; font-size: 12pt;">There are two ways to do this </span><br />
<span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><br />
</span><br />
<span style="font-family: "Times New Roman","serif"; font-size: 12pt;">1. Command based</span><br />
<span style="font-family: "Times New Roman","serif"; font-size: 12pt;">2 GUI based</span><br />
<br />
<span style="font-family: "Times New Roman","serif"; font-size: 12pt;"><u><b>Command Based</b></u>: </span><br />
<br />
<span style="font-family: "Times New Roman","serif"; font-size: 12pt;">Step1:- </span>Turn off the virtual machine;</div><div class="MsoNormal" style="color: #666666; text-align: justify;">Steps2:-Commit/remove all the snapshots if any. </div><div class="MsoNormal" style="color: #666666; text-align: justify;">Step3:-Open a <b>Command Prompt</b> and go to: <b> </b></div><div class="MsoNormal" style="color: #666666; text-align: justify;"><br />
</div><div class="MsoNormal" style="color: #666666; text-align: justify;"><b>C:\Program Files\VMWare\VMWare Server</b> or <b>C:\Program Files\VMware\VMware Workstation</b></div><div class="MsoNormal" style="color: #666666; text-align: justify;"><br />
</div><div class="MsoNormal" style="color: #666666; text-align: justify;"><m:smallfrac m:val="off"> <m:dispdef> <m:lmargin m:val="0"> <m:rmargin m:val="0"> <m:defjc m:val="centerGroup"> <m:wrapindent m:val="1440"> <m:intlim m:val="subSup"> <m:narylim m:val="undOvr"> </m:narylim></m:intlim> </m:wrapindent> </m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac></div><div style="color: #666666; margin-left: 0.5in; text-align: left; text-indent: -0.25in;"><b><span style="font-weight: normal;">or if you have already copied this file to system32 folder then simply run the below command.</span></b> </div><div style="color: #666666; margin-left: 0.5in; text-align: left; text-indent: -0.25in;"></div><div style="color: #666666; margin-left: 0.5in; text-align: left; text-indent: -0.25in;"><br />
</div><div style="color: #666666; text-align: justify;"><div style="text-align: justify;">Step4:-Run this command to expand the virtual disk: </div><div style="text-align: justify;"><br />
</div></div><div style="color: blue; margin-left: 0.5in; text-align: left; text-indent: -0.25in;"><span style="font-size: x-small;"><b>vmware- vdiskmanager -x 12GB "My harddisk.vmdk"</b></span></div><div style="color: #666666; margin-left: 0.5in; text-align: left; text-indent: -0.25in;"><br />
</div><div style="color: #666666;"></div><div style="color: #666666; text-align: left;">Step5:-<span style="font: 7pt "Times New Roman";"></span>This only expands the disk and not the partition, you'll need to resize the partition<br />
table as well. This can be done by 3rd party tools like 'Partition Magic, but also<br />
with Diskpart.exe, a tool of Windows.</div><div style="color: #666666; text-align: left;"> </div><div style="color: #666666; text-align: left;">Step6:- Type the following commands to extend the partition.</div><div style="color: #666666; text-align: left;"> Power on the Virtual machine</div><div style="color: #666666; margin-left: 0.5in; text-indent: -0.25in;"> <span style="font: 7pt "Times New Roman";"> </span> <m:smallfrac m:val="off"> <m:dispdef> <m:lmargin m:val="0"> <m:rmargin m:val="0"> <m:defjc m:val="centerGroup"> <m:wrapindent m:val="1440"> <m:intlim m:val="subSup"> <m:narylim m:val="undOvr"> </m:narylim></m:intlim> </m:wrapindent> </m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac></div><div style="color: #666666; margin-left: 0.5in; text-indent: -0.25in;">1.<span style="font: 7pt "Times New Roman";"> </span>Open a <b>Command Prompt</b> and type: <br />
<b>diskpart</b></div><div style="color: #666666; margin-left: 0.5in; text-indent: -0.25in;">2.<span style="font: 7pt "Times New Roman";"> </span>Type: <br />
<b>list volume</b> <br />
Remember the volume number of your volume</div><div style="color: #666666; margin-left: 0.5in; text-indent: -0.25in;">3.<span style="font: 7pt "Times New Roman";"> </span>Type: <br />
<b>select volume <volume number></b> </div><div style="color: #666666; margin-left: 0.5in; text-align: justify; text-indent: -0.25in;">4.<span style="font: 7pt "Times New Roman";"> </span>Type:<br />
<b>extend </b><br />
<b> </b><br />
<div style="text-align: justify;"><b><u>GUI Based</u></b></div><div style="text-align: justify;"><br />
</div><div style="text-align: justify;">To extend the disk using GUI interface</div><div style="text-align: justify;"><br />
</div><div style="text-align: justify;">Step1:- Power off the machine</div><div style="text-align: justify;">Step2:-Goto the "Edit virtual machine setting" option on the main page.</div><div style="text-align: justify;">Step3:- Click on the Hard Disk</div><div style="text-align: justify;">Step4:- On the right hand side click on Utilities as shown below</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjD4oiZY5-Hv-NRAS7P3EFLYtNI8Ag0WARoYZjhCrN19HQSyvBDJuufioyU24V0tY1QnX5noW1YPObi6Mw4YO8IjI7NZlduT6vKftlJGbzm7gMS8dv4jr6hO8eoKpi7otwpNdTFIb0_9ok/s1600/1..jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="265" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjD4oiZY5-Hv-NRAS7P3EFLYtNI8Ag0WARoYZjhCrN19HQSyvBDJuufioyU24V0tY1QnX5noW1YPObi6Mw4YO8IjI7NZlduT6vKftlJGbzm7gMS8dv4jr6hO8eoKpi7otwpNdTFIb0_9ok/s320/1..jpg" width="320" /></a></div><div style="text-align: justify;"></div></div><div style="color: #666666; margin-left: 0.5in; text-align: justify; text-indent: -0.25in;"><div style="text-align: justify;"><br />
</div><div style="text-align: justify;">Step5:- Click on expand and mention how much total space you require.Click OK<br />
It will start extending the disk<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8c9n88mgazAzY79HXqGYbNwW4Eiptm86UEnQafS1TgPD9W5Pm4SF8xgThYF8nJM5m4OSX9h4rbD2RUkcjuRgJWeyxHr3r4aB7jzSHO_Fn8Eh35zN_hAqIHl-s0O1ZTCMpLM-3chsKgak/s1600/Capture.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8c9n88mgazAzY79HXqGYbNwW4Eiptm86UEnQafS1TgPD9W5Pm4SF8xgThYF8nJM5m4OSX9h4rbD2RUkcjuRgJWeyxHr3r4aB7jzSHO_Fn8Eh35zN_hAqIHl-s0O1ZTCMpLM-3chsKgak/s320/Capture.JPG" width="320" /></a></div><br />
</div><div style="text-align: justify;">Step6:- Use the diskpart.exe utility to extend the partition.</div><div style="text-align: justify;"></div><div style="text-align: justify;"></div><div style="text-align: justify;"></div><div style="text-align: justify;"></div><div style="text-align: justify;"></div><div style="text-align: justify;"></div><div style="text-align: justify;"><br />
</div></div></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-73934489299705278882011-07-28T09:59:00.000-07:002011-12-11T02:20:31.488-08:00Windows Groups and Scopes<div dir="ltr" style="text-align: left;" trbidi="on"><div style="color: #444444; font-family: Times,"Times New Roman",serif;"><span style="font-size: small;"><m:smallfrac m:val="off"> <m:dispdef> <m:lmargin m:val="0"> <m:rmargin m:val="0"> <m:defjc m:val="centerGroup"> <m:wrapindent m:val="1440"> <m:intlim m:val="subSup"> <m:narylim m:val="undOvr"> </m:narylim></m:intlim> </m:wrapindent> </m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac></span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;">Hi Frnz</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;">Today I will share with you some knowledge of Windows Groups and Scopes.I have seen many people usually don't have enough idea about Groups and Scopes.</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;">So let’s have details on this.</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"><br />
</span></div><div style="color: #444444; font-family: Times,"Times New Roman",serif;"><span style="font-size: small;"><u><b>Group:-</b></u>A group is a container that contains user and computer objects within the group. The user and computer objects are stored in the group known as group members.. Assigning the security permission for a group on a resource ensures that all members of the group receive the permission.<br />
<br />
<u><b>Types of Groups:</b></u></span> <span style="font-size: small;"><br />
</span> </div><ol style="color: #444444; font-family: Times,"Times New Roman",serif;"><li><span style="font-size: small;">Distribution group</span></li>
<li><span style="font-size: small;">Security group</span></li>
</ol><div style="color: #444444; font-family: Times,"Times New Roman",serif;"><span style="font-size: small;">Distribution groups can be used only with e-mail applications (such as Exchange) to send e-mail to a collection of users. Distribution groups are not security-enabled, which means that they cannot be listed in Access control list.</span> </div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;">Security groups are used to provide access to resources on a network. Security groups are also used to assign user rights in Active Directory and to assign permissions on shared resources on the network. Security groups are listed in ACLs</span><span style="font-size: small;"> </span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"> </span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"><u><b>Group Scopes:-</b></u></span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"><b>Security Group</b></span><span style="font-size: small;"> or <b>Distribution Group</b> are differentiate by a scope that identifies the extent to which the group is applied in the domain tree or forest. </span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;">There are three group scopes: </span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"> 1. Domain Local</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"> 2. Global Group</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"> 3. Universal Group</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"><br />
</span></div><div class="separator" style="clear: both; color: #444444; font-family: Times,"Times New Roman",serif; text-align: center;"><span style="font-size: small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzod94bE4hyphenhyphenII3uJR-mKH7Zt3f5Y8mtzrX7CxbARPlI9Y9b_-6v8gCKQZVLkTPsUmHiDzhhgFfK9cFqfARPKASVehkAj63ZFUT7Vg0yrl-06vE732ZX7ZfJvtRCsQV1Ibs8n32ZR4KteE/s1600/groups.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzod94bE4hyphenhyphenII3uJR-mKH7Zt3f5Y8mtzrX7CxbARPlI9Y9b_-6v8gCKQZVLkTPsUmHiDzhhgFfK9cFqfARPKASVehkAj63ZFUT7Vg0yrl-06vE732ZX7ZfJvtRCsQV1Ibs8n32ZR4KteE/s320/groups.jpg" width="320" /></a></span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;">1. <b><u>Domain Local</u></b>:-Members of Domain Local Groups can include other groups and accounts from any domain and can be assigned permissions only within a domain. </span></div><div class="MsoListParagraphCxSpFirst" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal; margin-left: 1in; text-indent: -0.25in;"><span style="font-size: small;"><br />
</span></div><div class="MsoListParagraphCxSpFirst" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal; margin-left: 1in; text-indent: -0.25in;"><span style="font-size: small;">·<span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span><span style="font-size: small;">Users can be from any domain.</span></div><div class="MsoListParagraphCxSpLast" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal; margin-left: 1in; text-indent: -0.25in;"><span style="font-size: small;">·<span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span><span style="font-size: small;">Can have permissions only in the domain in which it is created. </span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal; margin-bottom: 0.0001pt;"><span style="font-size: small;">2. <b><u>Global Group</u></b>:-Members of Global Groups can include other groups and accounts only from the domain in which the group is defined and can be assigned permissions in any domain in the forest.</span></div><div class="MsoListParagraphCxSpFirst" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal; margin-left: 1in; text-indent: -0.25in;"><span style="font-size: small;"><br />
</span></div><div class="MsoListParagraphCxSpFirst" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal; margin-left: 1in; text-indent: -0.25in;"><span style="font-size: small;">·<span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span><span style="font-size: small;">Users can be from the domain in which we create global group</span></div><div class="MsoListParagraphCxSpLast" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal; margin-left: 1in; text-indent: -0.25in;"><span style="font-size: small;">·<span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span><span style="font-size: small;">Can have permission on any domain </span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"><br />
</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"> 3. <b><u>Universal Group</u></b>:-Members of Universal Group can include other groups and accounts from any domain in the domain tree or forest and can be assigned permissions in any domain in the domain tree or forest.</span></div><div class="MsoListParagraphCxSpFirst" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal; margin-left: 1in; text-indent: -0.25in;"><span style="font-size: small;"><br />
</span></div><div class="MsoListParagraphCxSpFirst" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal; margin-left: 1in; text-indent: -0.25in;"><span style="font-size: small;">·<span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span><span style="font-size: small;">Users can be from any domain </span></div><div class="MsoListParagraphCxSpLast" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal; margin-left: 1in; text-indent: -0.25in;"><span style="font-size: small;">·<span style="font-size-adjust: none; font-stretch: normal; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;"> </span></span><span style="font-size: small;">Can have permission in any domain</span></div><div class="MsoNormal" style="color: #444444; font-family: Times,"Times New Roman",serif; line-height: normal;"><span style="font-size: small;"><br />
</span></div><h2 align="center" style="color: #444444; font-family: Times,"Times New Roman",serif; text-align: center;"><span style="font-size: large;">Usage of group with Domain Local Scope</span></h2><div style="color: #444444; font-family: Times,"Times New Roman",serif;"><span style="font-size: small;">Groups with domain local scope help you define and manage access to resources within a single domain.</span></div><div style="color: #444444; font-family: Times,"Times New Roman",serif;"><span style="font-size: small;"><br />
</span></div><div style="color: #444444; font-family: Times,"Times New Roman",serif;"><span style="font-size: small;"><b><u>Let’s take an example:-</u></b><br />
<br />
You need to give ten users access to a particular folder A, you could add all ten user accounts in the folder permissions list. If, however, you later want to give the five users access to other folder B, you would again have to specify all five accounts in the permissions list for the new printer.</span> <span style="font-size: small;"><br />
<br />
If you have good idea about the groups, you can simplify this administrative task by creating a group with domain local scope and assigning it permission to access the folder A. Put the ten user accounts in a group with global scope and add this group to the group having domain local scope. When you want to give the ten users access to a folder B, assign the group with domain local scope permission to access the folder B. All members of the group with global scope automatically will access to the folder B</span> <span style="font-size: small;"><br />
<br />
<b style="color: red;">Now you all may have question in your mind</b> </span><span style="font-size: small;"> that why we used Global Group in the above scenario.<br />
The Answer for that is “</span><span class="pbody" style="font-size: small;">it is a best practice and recommended to use the A-G-Dl-P model when assigning permissions. </span><span style="font-size: small;"><br />
</span> <span style="font-size: small;"> <span style="color: red;"> </span><b><span style="color: red;">A->G->Dl->P A=Users G=Global Groups Dl=domain local P= permissions</span>.</b> </span><span class="pbody" style="font-size: small;"><br />
</span><span style="font-size: small;"><br />
</span> <span class="pbody" style="font-size: small;">What this model means is that you put "user Accounts" in to "Global groups" and then put the global groups into "Domain local" groups and then assign permissions to that Domain local group it is recommended you assign permission on Domain local group, this will be helpful in future. However you can assign permission directly to any Group but the recommended model is A-G-Dl-P</span><span style="font-size: small;"><br />
</span> </div><h2 align="center" style="color: #444444; font-family: Times,"Times New Roman",serif; text-align: center;"><span style="font-size: large;">Usage of group with Global Scope</span></h2><div style="color: #444444; font-family: Times,"Times New Roman",serif;"><span style="font-size: small;">Groups with global scope usually used to manage user and computer accounts that require daily maintenance. Because groups with global scope are not replicated outside of their own domain .Accounts in a group having global scope can be changed frequently without generating replication traffic to the global catalog.The changes that are made on this will remain within the domain where it exists. By doing this you will restrict more traffic to the global catalog server.<br />
<br />
<b><u>Let’s take an example:-</u></b></span> <span style="font-size: small;"><br />
<br />
In a network with two domains, A.com (India) and B.com (USA), if there is a group with global scope called GLFinance in the A.com (India) domain, there will also be a group called GLFinance in B.com (USA).</span> <span style="font-size: small;"><br />
It is strongly recommended that you use global groups or universal groups instead of domain local groups when specifying permissions on domain directory objects replicated to the global catalog. </span> </div><h2 align="center" style="color: #444444; font-family: Times,"Times New Roman",serif; text-align: center;"><span style="font-size: large;">Usage of group with Universal Scope</span></h2><div style="color: #444444; font-family: Times,"Times New Roman",serif;"><span style="font-size: small;">Groups with Universal scope usually used to consolidate groups that are on different domains. To do this, add the accounts to groups with global scope and nest these groups within groups having universal scope. Using this strategy, any membership changes in the groups having global scope do not affect the groups with universal scope.<br />
<br />
<b><u>Let’s take an example:-</u></b></span> <span style="font-size: small;"><br />
<br />
In a network with two domains, A.com (India) and B.com (USA), and a group having global scope called GLFinance in each domain, create a group with universal scope called UFinance to have as its members the two GLFinance groups, A.com (India) and B.com (USA). The UFinance group can then be used anywhere in the enterprise. Any changes in the membership of the individual GLFinance groups will not cause replication of the UFinance group.</span> <span style="font-size: small;"><br />
</span> </div><div style="color: #444444; font-family: Times,"Times New Roman",serif;"></div></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0tag:blogger.com,1999:blog-4252815809528917363.post-58625103630631700952011-07-26T08:31:00.000-07:002011-12-11T02:21:34.855-08:00How to change SID in Windows Server 2008 R2<div dir="ltr" style="text-align: left;" trbidi="on"><m:smallfrac m:val="off"> <m:dispdef> <m:lmargin m:val="0"> <m:rmargin m:val="0"> <m:defjc m:val="centerGroup"> <m:wrapindent m:val="1440"> <m:intlim m:val="subSup"> <m:narylim m:val="undOvr"><span style="background-color: lime;"></span> </m:narylim></m:intlim> </m:wrapindent> </m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac><br />
<div style="margin-left: 1in; text-indent: 0.5in;">How to change SID on Windows Server 2008 R2<br />
</div>Most of the tech guys usually work on VMware and some other Virtual platforms and usually install the same OS to create multiple copies. You can do this copy by two methods.<br />
<div style="margin-left: 0.5in; text-indent: -0.25in;">1.<span style="font: 7pt "Times New Roman";"> </span>By cloning the virtual machine</div><div style="margin-left: 0.5in; text-indent: -0.25in;">2.<span style="font: 7pt "Times New Roman";"> </span>By Changing the SID of the OS so that it will not conflict.</div><br />
In previous version of Windows like 2003 we usually use NewSID.exe that is recommended by Microsoft to changing the SID. But if you will use this NewSID.exe with windows server 2008 it will work but if you will use this for Windows Server 2008 R2 then your OS will be crashed and will be rebooted in recovery mode every time you restart.<br />
<br />
In this blog i will describe you <b>how to change SID on Windows Server 2008 R2.</b><br />
The method is to use <b>sysprep. <span style="background-color: #0b5394;"><span style="background-color: #d9d2e9;"></span></span></b><br />
<br />
First, click on <b>Start->Run</b>, type <b>sysprep</b> and press <b>OK</b>.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvarVJzvf_c3pfXeyLiwH5U0kuCluQAlRRwCE7maOwU2cHFNL0M2t1QxIyK8TTe8KGfQeN7o4bl_S7LTu0esN6M7YseU4iNXCVo7bZbfQ3h_zkxMOLRv9SUgTTiuAff1UDbBVT0mgEv-0/s1600/1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="224" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvarVJzvf_c3pfXeyLiwH5U0kuCluQAlRRwCE7maOwU2cHFNL0M2t1QxIyK8TTe8KGfQeN7o4bl_S7LTu0esN6M7YseU4iNXCVo7bZbfQ3h_zkxMOLRv9SUgTTiuAff1UDbBVT0mgEv-0/s320/1.JPG" width="320" /></a></div><br />
This will open <b>sysprep</b> folder which is located in <b>c:\Windows\System32</b>. Open sysprep application.<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2HhDNwb32pd_rxuuLDm65TRHemDDHGyatQrMyYI7-7JNm4xJe00y8U5fHqWybDIY2I5QiiAzo9QKaw8UALxLMoIq5MEKGvv814iKhd6zK9i2EDzQlR0_ArdwytDKAY0JueQS2P1B9Lw8/s1600/2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="221" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2HhDNwb32pd_rxuuLDm65TRHemDDHGyatQrMyYI7-7JNm4xJe00y8U5fHqWybDIY2I5QiiAzo9QKaw8UALxLMoIq5MEKGvv814iKhd6zK9i2EDzQlR0_ArdwytDKAY0JueQS2P1B9Lw8/s320/2.JPG" width="320" /></a></div><br />
This will open <b>System Preparation Tool 3.14 window</b>. As a System Cleanup Action select <b>Enter System Out-of-Box Experience (OOBE)</b>. <br />
<br />
<b>Important: select Generalize if you want to change SID</b>, it’s not selected by default. <br />
<br />
As Shutdown Options select <b>Reboot</b>.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjc7k8uPFvfEi5aAFeF_NOZVK0hcCBKr92zWTlwOQENsbYx6nF59wnRx6jHKf6PUI7SqC7yZF-ylmJwpC_NBlgIIMS-RshL-w8xSjESUtRYrNhgK4Y0k7b6mdR7vYUchPTHrqU7qaR8Ehc/s1600/3.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="222" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjc7k8uPFvfEi5aAFeF_NOZVK0hcCBKr92zWTlwOQENsbYx6nF59wnRx6jHKf6PUI7SqC7yZF-ylmJwpC_NBlgIIMS-RshL-w8xSjESUtRYrNhgK4Y0k7b6mdR7vYUchPTHrqU7qaR8Ehc/s320/3.JPG" width="320" /></a></div><br />
<br />
<br />
It will take some time for <b>sysprep</b> to finish.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZy5UMLkOlMmrYUfDZgK6nfYMIQvDeGzeCbtp1tF6uFm_orN9RZVXGs9rLO7NFMlX-v03acal2hRA1c9Q8PYuvISuD2umf0bZG5EwNeu_OAIElxlmNNVHlCUaDu8YU0n_7Z1pfyk7YS4Y/s1600/4.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="221" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZy5UMLkOlMmrYUfDZgK6nfYMIQvDeGzeCbtp1tF6uFm_orN9RZVXGs9rLO7NFMlX-v03acal2hRA1c9Q8PYuvISuD2umf0bZG5EwNeu_OAIElxlmNNVHlCUaDu8YU0n_7Z1pfyk7YS4Y/s320/4.JPG" width="320" /></a></div><br />
<br />
<br />
After rebooting you will have to enter some data, like <b>Country or region, Time and currency and Keyboard input</b>.<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguSIdmEpZ2Ed2FlmN3i-9MgQuhwT6Dc_Dao-ij4kM6ZdM2C2ku03h9P5oeyV1acBe9uh75CM3UszqyTr6bjlosJcUMIYSzDHHLfz2AmO550i1cCiBDlZMqSbd3oJ-ZeApx440NokhdWkg/s1600/5.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="236" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguSIdmEpZ2Ed2FlmN3i-9MgQuhwT6Dc_Dao-ij4kM6ZdM2C2ku03h9P5oeyV1acBe9uh75CM3UszqyTr6bjlosJcUMIYSzDHHLfz2AmO550i1cCiBDlZMqSbd3oJ-ZeApx440NokhdWkg/s320/5.JPG" width="320" /></a></div><br />
Also, you will have to accept <b>EULA</b>. After booting, in Server Manager you’ll see that everything is changed, if you had some settings that you had configured earlier that will be changed as you have some new OS. <br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdxJslXXVbRaQw4tLaniK4rkSuAjif5FM4yvDtjcHAvwO-PQmJEpfPT24pMCeCXKuVo1AvhQylZ4KubOKi2IBtOCb5EBGMVQhh1kobFM6z1D2AT84NOZ8o3mhi2UazfanopaQjNv0dKWo/s1600/6.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdxJslXXVbRaQw4tLaniK4rkSuAjif5FM4yvDtjcHAvwO-PQmJEpfPT24pMCeCXKuVo1AvhQylZ4KubOKi2IBtOCb5EBGMVQhh1kobFM6z1D2AT84NOZ8o3mhi2UazfanopaQjNv0dKWo/s320/6.JPG" width="320" /></a></div><br />
You can check the SID if you want to check<br />
Also you can use the <b>PsGetSid</b> that is very small utility to check the SID</div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com1tag:blogger.com,1999:blog-4252815809528917363.post-49943498450534968492011-07-25T23:46:00.000-07:002011-08-03T03:24:24.936-07:00DNS Query<div dir="ltr" style="text-align: left;" trbidi="on"><div style="font-family: Times,"Times New Roman",serif;"><b style="color: #444444;">DNS server recognize two types of name resolution </b></div><ol style="font-family: Times,"Times New Roman",serif;"><li><b style="color: #444444;"> Recursive query</b></li>
<li><b style="color: #444444;"> Iterative query</b></li>
</ol><div style="font-family: Times,"Times New Roman",serif;"><br />
</div><div style="font-family: Times,"Times New Roman",serif;"><b style="color: #444444;">we can define both queries in such a simple way like in iterative query a DNS server says "tell you what i know" and in recursive query DNS server says "i will research the answer and then let you know" </b></div><div style="font-family: Times,"Times New Roman",serif;"><b style="color: #444444;"> </b></div><div style="font-family: Times,"Times New Roman",serif;"><b style="color: #444444;"> </b></div></div>Vijayhttp://www.blogger.com/profile/09868187819449578336noreply@blogger.com0