windowswideopen.com

If you need a one stop shop for Microsoft KB articles for Active Directory troubleshooting check out the links below 

Account Lockout Problems

189541 - Using the Checked Netlogon.dll to Track Account Lockouts

306133 - Account Unlocks and Manual Password Expirations Are Not Replicated Urgently

817701 - Service Packs and Hotfixes That Are Available to Resolve Account Lockout Issues

822703 - How to Determine Whether Users Changed Their Passwords Before an Account Lockout

824209 - How to Use the EventcombMT Utility to Search Event Logs for Account Lockouts

Audit Account Logon Events in Windows 2000

Download details Account Lockout and Management Tools

Establishing an Account Lockout Policy

Microsoft Windows 2000 Server and Windows Server 2003 Password Lockout

Windows Server 2003 - Account Passwords and Policies

Active Directory Installation Troubleshooting

Domain Controller Verification

298143 - How to Verify an Active Directory Installation

816106 - How to Verify an Active Directory Installation in Windows Server 2003

Deploy the First Forest Root Domain Controller Active Directory

Deploy the Second Domain Controller in the Same Site Active Directory

! 255504 - Using Ntdsutil.exe to transfer or seize FSMO roles to a domain controller

! 298143 - How to Verify an Active Directory Installation

! 332199 - Using the DCPROMO -FORCEREMOVAL Command to Force the Demotion of Active Directory Domain Controllers

140476 - How to Install a BDC in a Routed TCP-IP Environment

152078 - Determining the Product Option of a Windows NT Setup

216498 - HOW TO Remove Data in Active Directory After an Unsuccessful Domain Controller Demotion

216899 - Best practice methods for Windows 2000 domain controller setup

230306 - HOW TO Remove Orphaned Domains from Active Directory

232122 - Performing Offline Defragmentation of the Active Directory Database

239803 - How to Change the Recovery Console Administrator Password on a Domain Controller

241515 - How to Verify the Creation of SRV Records for a Domain Controller

247715 - Circular Logging for Active Directory

248132 - HOW TO Recover a Deleted Domain Controller Computer Account in Windows 2000

251307 - HOW TO Remove Orphaned Domains from Active Directory Without Demoting the Domain Controllers

251335 - Domain Users Cannot Join Workstation or Server to a Domain

255248 - How To Create a Child Domain in Active Directory and Delegate the DNS Namespace to the Child Domain

257288 - How to Recover from a Deleted Domain Controller Machine Account in Windows 2000

259435 - DNS Site Records Are Not Properly Removed After Dcpromo

284937 - Windows 2000-Based Clients Connect Only to the Domain Controller That Was Upgraded First in a Mixed-Mode Domain

288358 - How to install the Active Directory client extension

298143 - How to Verify an Active Directory Installation

298713 - How to Prevent Overloading on the First Domain Controller During Domain Upgrade

305144 - How to use the UserAccountControl flags to manipulate user account properties

306602 - How to Optimize the Location of a Domain Controller or Global Catalog That Resides Outside of a Client’s Site

314649 - Windows Server 2003 adprep -forestprep Command Causes Mangled Attributes in Windows 2000 Forests That Contain Exchange

320187 - HOW TO Manage Computer Accounts in Active Directory in Windows 2000

320230 - Permissions Are Affected After You Demote a Domain Controller

322692 - How to raise domain and forest functional levels in Windows Server 2003

332199 - Using the DCPROMO -FORCEREMOVAL Command to Force the Demotion of Active Directory Domain Controllers

817701 - Service Packs and Hotfixes That Are Available to Resolve Account Lockout Issues

823659 - Client, service, and program incompatibilities that may occur when you modify security settings and user rights assignments

830880 - Cannot Join Windows Server 2003 Active Directory Domain When You Run Setup Unattended

842116 - Supplemental steps for using the Exchange Server Domain Rename Fixup tool together with the Windows Server 2003 domain rename tools

Active Directory Client Extensions for Windows 95-98 and Windows NT 4.0

Administering Domain Controllers Active Directory

Best Practice Guide for Securing Windows Server Active Directory Installations

Converting Windows 2000 Server to a Domain Controller

Directory Services Client Update for Windows 98

Domain Controller Promotion The Process and How to Troubleshoot It

Domain Rename Procedure.doc

Download details Windows Server 2003 Active Directory Branch Office Guide

Symptoms of a disjoint namespace and how to fix

Troubleshooting Active Directory Installation Wizard Problems

Active Directory Replication

Remote Procedure Call

899148 - Some firewalls may reject network traffic that originates from Windows Server 2003 Service Pack 1-based computers

Active Directory Tombstone & Garbage Collection Issues

198793 - The Active Directory Database Garbage Collection Process

216993 - Useful shelf life of a system-state backup of Active Directory

! 218614 - Replication Collisions in Windows 2000

! 305967 - How to Clear Bad Information in Active Directory-Integrated DNS

! Active Directory Replication over Firewalls

! EPS DS Replication

104204 - Troubleshooting Directory Replicator Problems

154596 - How To Configure RPC Dynamic Port Allocation to Work with Firewall

156684 - How to Use NLTEST to Force a New Secure Channel

179442 - How to Configure a Firewall for Domains and Trusts

181171 - Secure Channel Manipulation with TCP-IP

199174 - Directory Replication Basics for Windows 2000

222962 - Microsoft Certificate Authority Is Required to Perform Inter-Site SMTP Based Active Directory Replication

224196 - Restricting Active Directory Replication Traffic to a Specific Port

224544 - Determining the Server GUID of a Domain Controller

224815 - The Role of the Inter-Site Topology Generator in Active Directory Replication

229896 - Using Repadmin.exe to Troubleshoot Active Directory Replication

232072 - Initiating Replication Between Active Directory Direct Replication Partners

232538 - Unsuccessful Replication Without Partner Listed

232690 - Urgent Replication Triggers in Windows 2000

242780 - How to Disable the Knowledge Consistency Checker From Automatically Creating Replication Topology

244368 - How to Optimize Active Directory Replication in a Large Network

245610 - How to disable the Knowledge Consistency Checker inter-site topology generation for all sites

249256 - HOW TO Troubleshoot Intra-Site Replication Failures

262561 - Replication Not Working Properly Between Domain Controllers After Deleting One from Sites and Services

271997 - Description of Bridgehead Servers in Windows 2000

281485 - Name Collision in Active Directory Causes Replication Errors

307593 - How to Troubleshoot Event ID 1311 Messages on a Windows 2000 Domain

314282 - Lingering objects may remain after you bring an out-of-date global catalog server back online

317097 - Lingering objects prevent Active Directory replication from occurring

321046 - HOW TO Use DNSLint to Troubleshoot Active Directory Replication Issues

322672 - How To Reset the Directory Services Restore Mode Administrator Account Password in Windows Server 2003

325930 - How to troubleshoot connectivity issues that are caused by RPC client protocol registry entries

329860 - Replication Access Was Denied Error Messages Occur After You Promote a Server to Domain Controller

823063 - Support WebCast Designing and Configuring Site Topology

830746 - Active Directory changes do not replicate in Windows Server 2003

839880 - How to troubleshoot RPC Endpoint Mapper errors in Windows Server 2003

870695 - Outdated Active Directory objects generate event ID 1988 in Windows Server 2003

884116 - How to create and apply a custom application directory partition on an Active Directory integrated DNS zone in Windows Server 2

Active Directory Replication from Distributed System Book

Active Directory Replication over Firewalls - Microsoft Service Providers

Active Directory Replication over Firewalls

AD Replication Troubleshooting.doc

Administering Active Directory Operations Active Directory

Administering Intersite Replication Active Directory

How to cure Exceeded Tombstone life

JSI Tip 6344. Overview of basic File Replication Service concepts and terminology in Windows 2000.

Replication Issues from Resource Kit

Step-by-Step Guide to Setting up ISM-SMTP Replication

Troubleshooting Active Directory Operations Active Directory

Troubleshooting Active Directory Replication Problems Active Directory 2

Troubleshooting Active Directory Replication Problems Active Directory

Troubleshooting Active Directory Replication Problems

Troubleshooting replication

Understanding Sites and Replication

Windows 2000 Server Active Directory Replication Network Traffic

Windows 2000 Startup and Logon Traffic Analysis

Active Directory Audit Issues

! Audit Account Logon Events in Windows 2000

! Auditing and Monitoring

! Interpreting the Windows NT Security Log - Use the Security Log to track user’s activities

109626 - Enabling debug logging for the Net Logon service

122422 - Example of Remote Logon with Windows NT Server

163905 - Auditing User Right Assignment Changes

173939 - How to Identify the User Who Changed the Administrator Password

174073 - Auditing User Authentication

174074 - Security Event Descriptions

183097 - Event log may not grow to configured size

272460 - Information About Event 617 in the Security Event Log

274176 - Security Event for Associating Service Account Logon Events

300549 - How To Enable and Apply Security Auditing in Windows 2000

300958 - How To Monitor for Unauthorized User Access in Windows 2000

301640 - How To Set, View, Change, or Remove Auditing for a File or Folder in Windows 2000

310399 - How To Audit User Access of Files, Folders, and Printers in Windows XP

314955 - HOW TO Audit Active Directory Objects in Windows 2000

314980 - How to configure Active Directory diagnostic event logging in Windows Server

315416 - HOW TO Use Group Policy to Audit Registry Keys in Windows 2000

323076 - How to set event log security locally or by using Group Policy in Windows Server 2003

324739 - HOW TO Use Group Policy to Audit Registry Keys in Windows Server 2003

814595 - HOW TO Audit Active Directory Objects in Windows Server 2003

822703 - How to Determine Whether Users Changed Their Passwords Before an Account Lockout

Appendix E Security Event Messages

Audit Account Logon Events in Windows 2000

Audit details

Auditing - Concepts

Auditing - How To…

Auditing Best practices

Auditing Policy

Auditing Security Events How To…

Auditing security events

File, Folder Security Permissions in Windows 2000

How To…

Tim Rains’ WebLog

Windows Server 2003 Security Events

Micrsoft Active Directory Best Practices

! Best Practice Guide for Securing Active Directory Installations and Day-to-Day Operations

! Best practices pointers to recommendations and tips

!321318 - Top support issues for the Exchange directory service

216899 - Best Practice Methods for Windows 2000 Domain Controller Setup

223316 - Best practices for the Encrypting File System

259576 - Group Policy Application Rules for Domain Controllers

324175 - Best Practices for Sysvol Maintenance

825036 - Best practices for DNS client settings in Windows 2000 Server and in Windows Server 2003

Active Directory Best practices

Active Directory for Managing Windows Networks

Auditing Best practices

Best Practice Active Directory Deployment for Managing Windows Networks

Best Practice Guide for Securing Active Directory Installations and Day-to-Day Operations Part II

Best Practice Guide for Securing Windows Server Active Directory Installations

Best Practices for Delegating Active Directory Administration

Best Practices for Implementing a Windows Server 2003 Public Key Infrastructure

Best Practices for Public Folders

Best practices for security

Data Protection and Recovery in Windows XP

Designing and Deploying Directory and Security Services Active Directory

Distributed File System (DFS) - Best Practices and Troubleshooting Guide

Download details Best Practice Active Directory Design for Exchange 2000

Download details Best Practices Active Directory Forest Recovery

Download details Best Practices for Delegating Active Directory Administration

Download details Job Aids for Windows Server 2003 Deployment Kit

Download details Windows Server 2003 Active Directory Branch Office Guide

Group Policies

Group Policy Recommendations for Roaming User Profiles

Managing a Windows Server 2003 PKI

Microsoft Best Practices for Enterprise Security

Microsoft Windows Server 2003 Active Directory

Securing Active Directory Administrative Groups and Accounts

Troubleshooting Active Directory

Windows 2000 Server Best Practice Active Directory Design for Managing Windows 200 Networks

Certificates

Step-by-Step Guide to Administering Certificate Services

Common Active Directory Issues

260371 - Troubleshooting Common Active Directory Setup Issues in Windows 2000

Troubleshooting SYSVOL and NETLGON

257338 - Troubleshooting Missing SYSVOL and NETLOGON Shares on Windows 2000 Domain Controllers

315457 - How to Rebuild SYSVOL and Its Content in a Domain

316790 - The Sysvol and Netlogon Shares Are Missing After You Restore a Domain Controller from Backup

Default Settings for Certificate Authority

CA

239706 - Default Permission Settings for an Enterprise Certificate Authority

Services

Default settings for services Management Services

Recommended Services to Install on Windows 2000 Server

Active Directory Users and Groups

Default groups

Group types

User Rights Assignment

Windows 2000 Server Default User Accounts and Groups

Windows 2000 Server Using Default Group Accounts

Filed under: Active Directory