Error: A Certificate request fails with: "The certification authority denied the request. The revocation function was unable to check the revocation because the revocation server was offline." OR: Certificate services just fails to start...

Here are the details you will see in the netlogon debug log on the client and the DC for a SUCCESSFUL secure channel reset: Note: Running " netdom reset <client> /domain:<domain> /server:<DCname> /usero:<domain>\administrator...

This method utilizes a tool called dsmod.exe, built in to Windows Server 2003, to modify the user's password, set the User must change password at next logon flag, and the Password Never Expires flag to null (if Pwd Never Expires is set, running just...

The maximum number of RIDs available in a 32-bit-OS-hosted domain (NT4/2000/2003) is 1073741824 The RID space is 30-bits, therefore 2^30 = 1073741824 You can lower the maximum number of RIDs via registry values, referenced in the article below:...

Ldifde and Csvde are great for finding an obect by it's DN, and then adding/modifying/removing attributes on said object. But, what if you want to do the same task, except using a different attribute to find the object in question? By using ADModify and...

Here's the problem: I have a folder which contains hundreds of subfolders, and I wanted to make each subfolder into it's own ZIP file of the same name. Winrar doesn't have the built-in functionality to accomplish this goal, or none that I could find ...

This is by no means a complete guide to the viewing and deletion of objects in the "CN=Deleted Objects,DC=domain,DC=com" container, but I have answered a few questions and provided some guidance here. I will update it if I have time. In answering these...