<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Andy McDonald &#187; Active Directory</title>
	<atom:link href="http://www.andymcdonald.co.uk/category/active-directory/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.andymcdonald.co.uk</link>
	<description>IT Contractor and Junior Football Coach</description>
	<lastBuildDate>Fri, 10 Jun 2011 09:08:54 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>1396 logon failure: The target account name is incorrect.</title>
		<link>http://www.andymcdonald.co.uk/2010/07/29/1396-logon-failure-the-target-account-name-is-incorrect/</link>
		<comments>http://www.andymcdonald.co.uk/2010/07/29/1396-logon-failure-the-target-account-name-is-incorrect/#comments</comments>
		<pubDate>Thu, 29 Jul 2010 09:59:55 +0000</pubDate>
		<dc:creator>Andy</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[Active Directory 2003]]></category>
		<category><![CDATA[repadmin]]></category>
		<category><![CDATA[replsum]]></category>

		<guid isPermaLink="false">http://www.andymcdonald.co.uk/?p=300</guid>
		<description><![CDATA[From time to time when using the repadmin utility &#8220;repadmin /replsum&#8221; you may come across the following error
1396 logon failure: The target account name is incorrect.
To fix this issue I have followed this precedure.
Stop the KDC service and set the service to manual
Restart your server
Start the KDC Service and set the service back to automatic
Open [...]]]></description>
			<content:encoded><![CDATA[<p>From time to time when using the repadmin utility &#8220;repadmin /replsum&#8221; you may come across the following error<br />
<strong><em>1396 logon failure: The target account name is incorrect.</em></strong></p>
<p>To fix this issue I have followed this precedure.</p>
<p>Stop the KDC service and set the service to manual<br />
Restart your server<br />
Start the KDC Service and set the service back to automatic</p>
<p>Open a command prompt and run the following commands ( You should use  a Domain Admins Account)</p>
<p>netdom resetpwd /server:<servername> (replication partner) /userd:<domain>\<useraccount> /<br />
passwordd:”enter password”</p>
<p>Once this has run you should see the following message.</p>
<p>The machine account password for the local machine has been successfully reset.</p>
<p>The command completed successfully.</p>
<p>Reboot your Server.</p>
<p>Finally use repadmin to check the issue has been resolved.</p>
<p>Repadmin /replsum to make sure the secure channel has been fixed</p>
<p>I hope this has helped, and thanks to Sean.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.andymcdonald.co.uk/2010/07/29/1396-logon-failure-the-target-account-name-is-incorrect/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>DCDIAG FSMOCHECK error 1355</title>
		<link>http://www.andymcdonald.co.uk/2010/04/19/dcdiag-fsmocheck-error-1355/</link>
		<comments>http://www.andymcdonald.co.uk/2010/04/19/dcdiag-fsmocheck-error-1355/#comments</comments>
		<pubDate>Mon, 19 Apr 2010 12:23:18 +0000</pubDate>
		<dc:creator>Andy</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[Active Directory 2003]]></category>

		<guid isPermaLink="false">http://www.andymcdonald.co.uk/?p=248</guid>
		<description><![CDATA[Problem.
When running a DCDIAG report on Windows 2003 Domain Controller which is in a child domain the following error is seen.
Starting Test : FsmoCheck
Warning : DcGetDcName(PDC_REQUIRED) call failed, error 1355
A Primary Domain Controller could not be located.
The Server holding the PDC role is down.
Resolution
The error is because DCDIAG is trying to connect to the PDC [...]]]></description>
			<content:encoded><![CDATA[<h2>Problem.</h2>
<p>When running a DCDIAG report on Windows 2003 Domain Controller which is in a child domain the following error is seen.</p>
<address>Starting Test : FsmoCheck</address>
<address>Warning : DcGetDcName(PDC_REQUIRED) call failed, error 1355</address>
<address>A Primary Domain Controller could not be located.</address>
<address>The Server holding the PDC role is down.</address>
<h2>Resolution</h2>
<p>The error is because DCDIAG is trying to connect to the PDC Emulator in the Parent Domain on port 389UDP. Ensure that any firewall between the root domain controllers and the child domain controllers allows traffic on this port</p>
]]></content:encoded>
			<wfw:commentRss>http://www.andymcdonald.co.uk/2010/04/19/dcdiag-fsmocheck-error-1355/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Time sync fails on DC when set to NT5DS</title>
		<link>http://www.andymcdonald.co.uk/2010/03/12/time-sync-fails-on-dc-when-set-to-nt5ds/</link>
		<comments>http://www.andymcdonald.co.uk/2010/03/12/time-sync-fails-on-dc-when-set-to-nt5ds/#comments</comments>
		<pubDate>Fri, 12 Mar 2010 10:53:54 +0000</pubDate>
		<dc:creator>Andy</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[Active Directory 2003]]></category>
		<category><![CDATA[Time]]></category>

		<guid isPermaLink="false">http://www.andymcdonald.co.uk/?p=243</guid>
		<description><![CDATA[Problem:
Windows 2003 Domain Controller will not SYNC time correctly when set to NT5DS
Symptoms
If the following registry entries are set to NTP and the PDC Emulator hostname or IP Address respectively then Time synchronizes
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\NtpServer
If the following registry entry is set to NT5DS then there are errors in the event logs
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type
It does not matter what this registry [...]]]></description>
			<content:encoded><![CDATA[<p>Problem:<br />
Windows 2003 Domain Controller will not SYNC time correctly when set to NT5DS</p>
<p>Symptoms<br />
If the following registry entries are set to NTP and the PDC Emulator hostname or IP Address respectively then Time synchronizes<br />
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type<br />
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\NtpServer</p>
<p>If the following registry entry is set to NT5DS then there are errors in the event logs<br />
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type</p>
<p>It does not matter what this registry entry is set to because NT5DS means the server should sync time with the PDC Emulator<br />
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type</p>
<p>Errors in the event logs are along the lines of<br />
Warning<br />
The time provider NtpClient was unable to find a domain controller to use as a time source. NtpClient will try again in 15 minutes.</p>
<p>Error<br />
The time provider NtpClient is configured to acquire time from one or more time sources; however; none of the sources are currently accessible.  No attempt to contact a source will be made for 15 minutes. NtpClient has no source of accurate time.</p>
<p>Resolution<br />
This is usually caused When you move the FSMO Role : PDC Emulator to a new Domain Controller you will see this error on the previous PDC Emulator.</p>
<ul>
<li>Log on to the previous PDC Emulator with admin privileges</li>
<li>Open a Command Prompt</li>
<li>Type : w32tm /config /syncfromflags:domhier /reliable:no /update</li>
<li>Type : net stop time</li>
<li>Type : net start time</li>
</ul>
<p>This will set the time service to look to the domain hierarchy rather than itself for a reliable time providerA</p>
]]></content:encoded>
			<wfw:commentRss>http://www.andymcdonald.co.uk/2010/03/12/time-sync-fails-on-dc-when-set-to-nt5ds/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Testing Active Directory Sites</title>
		<link>http://www.andymcdonald.co.uk/2009/03/23/testing-active-directory-sites/</link>
		<comments>http://www.andymcdonald.co.uk/2009/03/23/testing-active-directory-sites/#comments</comments>
		<pubDate>Mon, 23 Mar 2009 14:26:07 +0000</pubDate>
		<dc:creator>Andy</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[Active Directory 2008]]></category>
		<category><![CDATA[Sites]]></category>

		<guid isPermaLink="false">http://www.andymcdonald.co.uk/?p=96</guid>
		<description><![CDATA[OK, so you have implemented Active Directory Sites and Services, the next question is usually &#8220;How do I test it is working?&#8221;
I do this by running a script which will determine which site the computer you are on can be located in.
In this example I have created my sites and configured them with the respective [...]]]></description>
			<content:encoded><![CDATA[<p>OK, so you have implemented Active Directory Sites and Services, the next question is usually &#8220;How do I test it is working?&#8221;</p>
<p>I do this by running a script which will determine which site the computer you are on can be located in.</p>
<p>In this example I have created my sites and configured them with the respective subnets, then added a new machine to the domain I then log on to the new server and open a command prompt and create a new vbs file (mysite.vbs) and add the following lines of text</p>
<p><span style="color: #15326b;">Set objADSysInfo = CreateObject(&#8221;ADSystemInfo&#8221;)<br />
WScript.Echo &#8220;Your current site name = &#8221; &amp; objADSysInfo.SiteName</span></p>
<p>I then run the vbs file using cscript</p>
<p>cscript mysite.vbs</p>
<p>here is the output from the command prompt :-</p>
<p>C:\Documents and Settings\Administrator&gt;cscript mysite.vbs<br />
Microsoft (R) Windows Script Host Version 5.6<br />
Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.</p>
<p>Your current site name = Site-1</p>
<p>C:\Documents and Settings\Administrator&gt;</p>
]]></content:encoded>
			<wfw:commentRss>http://www.andymcdonald.co.uk/2009/03/23/testing-active-directory-sites/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

