When a Password Replication Policy is enabled and a user or computer account is in the allowed RODC password replication group, a password is replicated and cached on Read-Only Domain Controller when a branch user login for the first time. The RODC authenticates the branch users and computers for subsequent logins without forwarding requests to the main ... Read more
When passwords of branch users are cached on an RODC, there is no way to directly delete them. However, if you reset their password at the writeable DC (RWDC), they get automatically removed at the RODC. Same applies to computers, reset their account at RWDC to remove them from cache.
This guide is written to show you how to add a new domain in an existing forest in Windows Active Directory. You can add a new domain by using the server manager or PowerShell. In this guide, I'll show you how to use the server manger. Before you add a new domain, your system must meet ... Read more
You can create an unlicensed user in Office 365 for testing purposes. Lets get started. Prerequisites Download and install the following modules. Microsoft Online Service Sign-in Assistant for IT Professionals RTW Windows Azure Active Directory Module for Windows PowerShell (64-bit version) Create an Unlicensed User in Office 365 for Testing Open portal.office.com in your favorite ... Read more
If you want to set a password to never expire for a single user, you have to do it via PowerShell. There is no way from admin center. Prerequisites Download and install the following modules. Microsoft Online Service Sign-in Assistant for IT Professionals RTW Windows Azure Active Directory Module for Windows PowerShell (64-bit version) Step-By-Step ... Read more
This article focuses on Office 365 password policy. Allowed Characters Following are the allowed characters in Office 365 user password: a - z A - Z 0 - 9 @ # $ % ^ & * – _ + = [ ] { } | \ : ‘ , . ? / ` ~ “ ... Read more
In one of earlier articles, we removed active directory domain services using PowerShell. In this guide, I'll focus on removing active directory domain services using server manager. Remove Active Directory Domain Services Using Server Manager Step 1. Open server manager dashboard. Click: Manage -> Remove roles and features. Step 2. Verify the tasks and then click Next. ... Read more
The other day, I was studying about the Linux du command when I stumbled upon its --files0-from option that enables the tool to accept input file/directory names written in a file. The option has an associated condition that names specified in the file should be NUL terminated. Now, it was when I started entering names ... Read more
When you have multiple domains in a forest, migrating Active Directory objects between two domains is a day to day task of system engineers. Reasons can be that companies are sold or merged or employees are transferred. Type of AD Migration There are two types of AD migrations: Inter forest migration - In inter forest migration, AD objects ... Read more
Extra AD domains are not recommended because they are hard to administer. However, you may need an extra domain (child domain for this tutorial) in the following scenarios: The two companies have different hardware resources. Some prefer high quality and reliable hardware and some prefer to save money, it is preferable to have two separate domains ... Read more