Category: Active Directory

  Computer Configuration     Policies     Windows Settings     Security Settings     Account Policies/Password Policy     Policy Setting Winning GPO Enforce password history 24 passwords remembered Default Domain Policy Maximum password age 42 days Default Domain Policy Minimum password age 1 days Default Domain Policy Minimum password length 7 characters Default Domain Policy Password must meet complexity requirements Enabled Default Domain Policy Store passwords using reversible encryption Disabled Default Domain Policy     Password must meet complexity requirements This security setting determines whether passwords must meet complexity requirements. If this policy is enabled, passwords must […]

Only to share and save this good info so as to not lose if actual content on the site is removed.   Prelude There is absolutely NO NEED TO TOUCH THE TIME SERVICE REGISTRY ENTRIES I just wanted to make a statement regarding the time service registry entries. There really is NO need to modify the time service registry entries. The time service works by default, out of the box. The only thing that’s recommended to do, is synchronize the PDC Emulator in the forest root domain to a reliable outside source. That’s it. I’m stating this because based on […]

Note: This information is intended for a network administrator.  If you are not your network’s administrator, notify the administrator that you received this information, which has been recorded in the file C:Windowsdebugdcdiag.txt. The following error occurred when DNS was queried for the service location (SRV) resource record used to locate an Active Directory Domain Controller (AD DC) for domain "mydomain.lan": The error was: "DNS name does not exist." (error code 0x0000232B RCODE_NAME_ERROR) The query was for the SRV record for _ldap._tcp.dc._msdcs.mydomain.lan Common causes of this error include the following: – The DNS SRV records required to locate a AD DC […]