Tuesday, April 26, 2011

Server 2008: Backup Active Directory

  1. Open NTBACKUP by either going to Run, then NTBACKUP and pressing Enter or by going to  Start / Accessories / System Tools. Or my personal method, Click Start/ Run/ Type NTBACKUP.
  2. If you are prompted by the Backup or Restore Wizard, I suggest you un-check the "Always Start in Wizard Mode" checkbox, and click on the Advanced Mode link.
  3. Inside NTBACKUP's main window, click on the Backup tab.
  4. Click to select the System State checkbox. Note you cannot manually select components of the System State backup. It's all or nothing.
  5. Enter a backup path for the BKF file. If you're using a tape device, make sure NTBACKUP is aware and properly configured to use it.
  6. Press Start Backup.
  7. The Backup Job Information pops out, allowing you to configure a scheduled backup job and other settings. For the System State backup, do not change any of the other settings except the schedule, if so desired. When done, press Start Backup.
  8. After a few moments of configuration tasks, NTBACKUP will begin the backup job.
  9. When the backup is complete, review the output and close NTBACKUP.

Monday, April 11, 2011

Active Directory: Creating a Cross Forest Transitive Trust

To create a forest trust

  1. Open Active Directory Domains and Trusts.
  2. In the console tree, right-click the domain node for the forest root domain, and then click Properties.
  3. On the Trust tab, click New Trust, and then click Next.
  4. On the Trust Name page, type the DNS name (or NetBIOS name) of another forest, and then click Next.
  5. On the Trust Type page, click Forest trust, and then click Next.
  6. On the Direction of Trust page, do one of the following:
    • To create a two-way, forest trust, click Two-way.
      Users in this forest and users in the specified forest can access resources in either forest.
    • To create a one-way, incoming forest trust, click One-way:incoming.
      Users in the specified forest will not be able to access any resources in this forest.
    • To create a one-way, outgoing forest trust, click One-way:outgoing.
      Users in this forest will not be able to access any resources in the specified forest.
  7. Continue to follow the wizard.

 

* Reference: http://technet.microsoft.com/en-us/library/cc780479(WS.10).aspx

Useful Troubleshooting Commands

When cross-forest trusts fail, the secure channel should be verified to determine that a foreign DC can be identified and contacted. This post provides information on troubleshooting techniques in this scenario, and is really only the first step in troubleshooting - establishing that there are no DC locator issues determining what should be a valid DC across the trust.
The following commands are useful for troubleshooting secure channel issues, specifically name resolution, DC locator and connectivity:

· nltest /domain_trusts /v

· nltest /sc_query:%trusted_domain%

· nltest /sc_reset:%trusted_domain%[\%DCname%]

· nslookup -debug -type=srv _ldap._tcp.dc._msdcs.%domainFQDN%

Sunday, April 10, 2011

End Users using Windows 7 Professional, Keeps losing their Network Drives

 

*Note: Before proceeding, make sure you have updated drivers for your adapter.

  1. Open a command-line, Start\Run, and type cmd. Press enter
  2. In the console enter the following commands to change the MTU:

    Type into command window "netsh interface ipv4 show interfaces" without the quotes. Take note of the id number of the wireless interface.

    Then to change to mtu 1500 use the following command.

    "netsh interface ipv4 set subinterface id mtu=1500 store=persistent"