A quick note to document an issue a couple of my colleagues saw yesterday. While trying to join a RedHat machine to one of our domains, they got the following error: Insufficient quota exists to complete the operation I got involved and we checked the usual suspects like if the domain is working properly, time, account [...]
While rejoining one of my machines to the domain, I saw the following error: The following error occurred attempting to join the domain Logon Failure: The target account name is incorrect which I am sure you can guess, was completely wrong as I've being using the domain and the account in question for years. Clearly, something [...]
While working with server builds and configurations, one is frequently faced with a scenario where the system (as a client), needs to connect to a server at the other end and the process doesn't work. If one's lucky then an intelligent message is returned by the interface, hinting about the problem but more often than not, the [...]
We're using ADMT (Active Directory Migration Tool 3.2) these days as part of a restructuring exercise from a multi-domain forest to many single-domain forests. That requires migration of users, groups but also computers from one forest to another (verified two-way external trusts are in place). One issue we saw while migrating computers was that migration [...]
Our organisation is going through a major restructuring phase these days and we’re converting from an “Empty Root with many Child Domains” to “Single Domain Forests” model. Why did we go with the former model is a long story and definitely beyond the scope of this particular post so I’ll leave it for another day. [...]
Just wanted to add a note about DCPROMO (the program that "promotes" a server to become an Active Directory Domain Controller) and the need to have Remote Registry service enabled for it to succeed. Generally, you wouldn't expect DCPROMO to be dependent on such a service but the reality is that there is a dependency and [...]
There have been a few instances in the last few years when people have gasped at my revelation that we run our Active Directory on a static BIND DNS infrastructure. Nobody expects anyone to run Active Directory on BIND DNS - let alone a static one. However, it is indeed possible to run such an [...]