AD Replication is critical issue in large environments. Here is command to check AD Replication.
1. net share servername (Check SYSVOL and NETLOGON is replicate to the server, Note: It is important)
2. repadmin /showreps servername
3. dcdiag /test:Replications
After that Go to the Active Directory Sites and Services --> Expand Server --> Right Click NTDS Settings --> All Tasks --> Check Replication Topology
Note: Check Replication Topology because It will show you the server, your server is replicate from.
You can also check your Replication partner within NTDS settings.
Myo
Tuesday, June 5, 2012
Account Locked Out Issue
In Large Domain Environments, Account Locked Out issue is big issue. Because It make user to automatically locked out after 15 or 20 minutes.
When Account Locked out happen?
1. User is change the new password after 30 or 60 days. (Example: Company Policy)
2. Using Mobile Device (example: password not synchronize immediately)
3. One of the Computer is having a virus and attack to another good computer, log-in as Bad Password.
How to fix this Account Locked Out Issue?
Go to this below Microsoft Website and Download Account Locked Out. From my environment, This tools is help me alot.
Account Locked Out Checking Tools From Microsoft
Here is logo of Account Locked Out Tools
If you have any question about this please let me know.
Myo
When Account Locked out happen?
1. User is change the new password after 30 or 60 days. (Example: Company Policy)
2. Using Mobile Device (example: password not synchronize immediately)
3. One of the Computer is having a virus and attack to another good computer, log-in as Bad Password.
How to fix this Account Locked Out Issue?
Go to this below Microsoft Website and Download Account Locked Out. From my environment, This tools is help me alot.
Account Locked Out Checking Tools From Microsoft
Here is logo of Account Locked Out Tools
If you have any question about this please let me know.
Myo
How To Configure Power Saving Policy in Windows XP?
This is way to make Power Saving Policy in Windows XP Environment. If you have any question about this, You can send email.
1. Create 2 GPO Policy. Power Saving Policy for Win XP need 2 Policy. 1 for Computer setting and another one for User Setting. (Example: Test-Power_Saving_Policy (Computer Setting) and Test-Power_Saving_Policy (User Setting)
2. Create .bat file script for User Setting. You can create .bat file script just like this example below
Example:
\\servername\netlogon\powercfg.exe /change "always on" /monitor-timeout-ac 3
\\servername\netlogon\powercfg.exe /change "always on" /monitor-timeout-dc 3
above this script must be apply it to User Setting of Logon.
3. For the Computer Setting Policy, you have to set 2 permission for Registry and 1 permission for File System.
Go to Computer setting --> Open Windows settings --> Expand Security settings--> and then you can see
Registry and File System.
Right Click Registry --> Choose Add Key --> Select this 2 file need to add in Registry.
Machine\Software\Microsoft\Windows\Current Version\Control Folder\PowerCfg
Users\.Default\Control Panel\PowerCfg
When you add this above registry, there a security permission prompted and request you to add User Name and Computer Name. Add User Name and Computer Name, after that set then to full control permission for this User and Computer.
For the File System Setting, You have to Right Click File System --> Add File. Then choose powercfg.cpl
%SystemRoot%\System32\powercfg.cpl
When you add this above registry, there a security permission prompted and request you to add User Name and Computer Name. Add User Name and Computer Name, after that set then to Deny permission for this User and Computer.
Note: I have set deny powercfg.cpl because I don't allow end user to change Power Setting.
So That All. This is how to configure Power Saving setting in Windows XP Environment.
Myo
1. Create 2 GPO Policy. Power Saving Policy for Win XP need 2 Policy. 1 for Computer setting and another one for User Setting. (Example: Test-Power_Saving_Policy (Computer Setting) and Test-Power_Saving_Policy (User Setting)
2. Create .bat file script for User Setting. You can create .bat file script just like this example below
Example:
\\servername\netlogon\powercfg.exe /change "always on" /monitor-timeout-ac 3
\\servername\netlogon\powercfg.exe /change "always on" /monitor-timeout-dc 3
above this script must be apply it to User Setting of Logon.
3. For the Computer Setting Policy, you have to set 2 permission for Registry and 1 permission for File System.
Go to Computer setting --> Open Windows settings --> Expand Security settings--> and then you can see
Registry and File System.
Right Click Registry --> Choose Add Key --> Select this 2 file need to add in Registry.
Machine\Software\Microsoft\Windows\Current Version\Control Folder\PowerCfg
Users\.Default\Control Panel\PowerCfg
When you add this above registry, there a security permission prompted and request you to add User Name and Computer Name. Add User Name and Computer Name, after that set then to full control permission for this User and Computer.
For the File System Setting, You have to Right Click File System --> Add File. Then choose powercfg.cpl
%SystemRoot%\System32\powercfg.cpl
When you add this above registry, there a security permission prompted and request you to add User Name and Computer Name. Add User Name and Computer Name, after that set then to Deny permission for this User and Computer.
Note: I have set deny powercfg.cpl because I don't allow end user to change Power Setting.
So That All. This is how to configure Power Saving setting in Windows XP Environment.
Myo
Subscribe to:
Posts (Atom)