Technological Blog
videos
manage a RODC
Feb 11th
Posted by technoblogical in Active Directory
manage a RODC
This is a video about how to manage a RODC (read only domain controller). A read only domain controller will cache credentials (passwords) so that you don’t have to waste WAN (wide area network) bandwidth for authentication purposes. It is possible to populate the RODC records manually. Also, when you delete the read only domain controller from the Active Directory domain, it is possible to reset all users and computer passwords stored on the RODC. RODC is a feature only available in Microsoft Windows Server 2008 and requires a functional domain level of Server 2003. It a feature mainly designed for a branch office
install a RODC
Feb 10th
Posted by technoblogical in Active Directory
install a RODC
This is a video about how to install a Read Only Domain Controller (RODC). A RODC stores a copy of Active Directory in a branch office. It will cache authentication credentials in an effort to reduce WAN (wide area network) traffic or bandwidth. You may control who may approve or deny who may or may not cache their credentials (passwords) on the RODC. It is a feature available on Microsoft Windows Server 2008 only and requires a server 2003 functional domain. Any machine running Server 2003 must have a command (adprep /rodcPrep) run on them to prepare them for a domain or forest that contains a read only domain controller.
Commands used:
dcpromo
d:\support\adprep\adprep /forestPrep
d:\support\adprep\adprep /rodcPrep
audit account logon events
Jan 25th
Posted by technoblogical in Active Directory
audit account logon events
This is a video about auditing account logon events. It records successful and failed account log on events to a Microsoft Windows server 2008 domain. In an Active Directory environment, these events will be recorded to the domain controllers event viewer and must be viewed there. This feature is available on Server 2008, 2003, and 2000. You may also enact these policies on Windows 2000, XP, Vista, or 7, if they are a member of the domain. If they are not members of a domain, you may record them locally, but remember they must be viewed locally.