Finally the help of IT is here

Blog of computer solutions.

Modify password policies in a domain

Posted by Xaus Xavier Nadal 8th on February 2009

Greetings again.

I know many of you are sick of password security in Windows 2003 server since you were very well used when no you had to put 7 characters minimum, include uppercase characters, digits, non-alphanumeric characters, but it is a very good practice highly recommended and have complex passwords to have a slightly more secure system.

I'll show you where you have to "touch" to modify these values.

Home -> Administrative Tools -> Domain Security Policy -> Security Settings -> Account Policy -> Password Policy.

1 password policies

With these values ​​it is sufficient to provide a good level of security for user passwords, but sometimes it can backfire password change for example every month and a half since users are not going to remember the password you put and less if we do meet them with more than 7 characters and must contain numbers, letters and characters.

Recommendation: lower the number of passwords remembered 5 for example. This value is too high and if a malicious user had gotten the password of a user according to these directives can get to know the password in a short time.

Megacracks soon.

tags: , , , ,
Posted by Domain Controller, Domain Controller, how to | 16 Comments »

Solve problems with JRNL_WRAP_ERROR (FRS Event ID 13568 or 13561)

Posted by Xaus Xavier Nadal 16th on November 2008

Good morning, the other day I found a domain controller that will not come Netlogon replication:

Looking at the event viewer I could see the following error: The File Replication Service has detected That the replica set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR.

users Active Directory replicated, DNS is replicated, all replicated except the NETLOGON folder so any new user who will point to that domain controller to find your logon script and script was created from another domain controller did not work and I was failing replication.

As solve this problem ?:

All you have to do is modify or create the following registry key on the domain controller affected: (As only going to be a parameter of a chain of record I will not make a backup of the registry, but that you should do it the systemstate or at least the NETLOGON folder of the domain controller that works for Yes if they are removed for any reason all the scripts may be able to copy back into a Domain Controller to replicate to the other quickly).

Megacrack read »

tags: , , , , , , , , , , , , , , , ,
Posted by Active Directory, Domain Controller, Domain Controller | 13 Comments »

How to make a dcpromo a Windows 2003 R2 x64 in a Windows domain 2003 x86.

Posted by Xaus Xavier Nadal 7th on August 2008

Good morning, today I encountered a problem updating the domain that have Windows 2003 x86 to a Windows system 2003 R2 x64The problem is that to carry out this operation is required to put the cd 2 installation of windows server 2003 R2 x64 to run the adprep from the CD on the domain controller with architecture-based 32 bit of that system do I have . The problem is that in the cd2 the R2 x64 forgot to put the version of adprep for 32 bits, so that this process can not be performed unless ye the cd R2 version x86 too, but there is a way to solve it that I show below:

Megacrack read »

tags: , , , , , ,
Posted by Active Directory, Domain Controller, Domain Controller, how to | 16 Comments »

How to create an additional domain controller in Windows Server 2003

Posted by Xaus Xavier Nadal on June 5th 2008

As I promised I'll show you how it has to do to create an additional domain controller for an existing domain.

In the first instance we need to have an existing domain, in the previous post I showed you how to create the first domain controller for a domain called megacrack.es now is the time to install an additional driver for power in case the first fall have a manual high availability to validate users to solve the problem with the main server.

The first thing to do is reinstall Windows 2003 Server and put a fixed ip, in our case we will put the ip 192.168.1.101 with mascara 255.255.255.0 and door 192.168.1.1 link and dns and can configure 192.168.1.100 which is the primary domain controller we have installed in the previous post. The server name will be seconddomain.

Megacrack read »

tags: , , , , , , , , , , , ,
Posted by Active Directory, DNS, Domain Controller, how to | 58 Comments »

Create a domain in Windows 2003 Server and reverse DNS zone.

Posted by Xaus Xavier Nadal on June 5th 2008

What we will do is create the first domain of a future megacrack called domain forest, we will also create a reverse lookup zone in the DNS with the Domain Controller install. I hope you find it helpful.

image

This will be the final screen when uproot our session with the domain controller or a client we add the domain created.

Megacrack read »

tags: , , , , , , , , , , , , , , ,
Posted by Active Directory, DNS, Domain Controller, how to, Windows | 42 Comments »

GTranslate Your license is inactive or expired, please subscribe again!