I needed to delegate permissions to helpdesk (besides making them domain admins) to create and modify users, and modify group membership. This is slightly different from some of the built in permission groups, since we didn’t want helpdesk to delete users. 185 more words
Tags » Active Directory
While implementing a two-tier PKI I ran into the issue that certutil.exe -crl, and PowerShell cmdlets such as Get-CACrlDistributionPoint would fail on the Subordinate Domain CA with a generic error which made finding a solution very difficult: 503 more words
SBS 2011 User Created in Active Directory and not present in the Dashboard
On the Destination Server, open a Command Prompt window as an administrator. 94 more words
Event ID 2896 can be generated in AD replication.
in article http://technet.microsoft.com/en-us/library/replication-error-8453-replication-access-was-denied(v=ws.10).aspx has an excellent workaround solution to troubleshoot the main cause of AD replication access was denied. 100 more words