梦想照进现实 – Page 3 – Just a place for me…….

How to seize the Operations Master Role

操作主机是ActiveDirectory中的特殊对象，具备操作主机角色的域控制器担任着活动目录核心功能，如果操作主机不可用，整个活动目录都会出现异常，甚至崩溃。操作主机角色的唯一性决定了不是任意一台域控制器都能管理整个域，当一台承担着操作主机角色的域控制器需要停机维护，就需要将主机角色转移到另一台正常运行的域控制器上；但是当承担操作主机角色的域控制器突然崩溃，无法正常运行，就需要使用强制手段占用操作主机，它被称为强制转移。

Migrating The Active Directory Certificate Service From Windows Server 2008 R2 to 2019 with different FQDN name

Step 1: Backup Windows Server 2008 R2 certificate authority database and its configuration Log in to Windows 2008 R2 Server

Step-By-Step: Migrating The Active Directory Certificate Service From Windows Server 2008 R2 to 2019

Step 1: Backup Windows Server 2008 R2 certificate authority database and its configuration Log in to Windows 2008 R2 Server

Certificate Services – Migrate from SHA1 to SHA2 (SHA256)

Here we can see my CA server is using SHA1 Note: If your server says the provider is Microsoft Strong Cryptographic

Windows Server 2012 R2 Force Uninstall Domain Controller

本次实验要演示的是强制卸载域控制器并且在其他域控制器上删除不需要的服务器对象，这种情况在现实的生产使用环境中经常使用，每个企业每年都会有增减域控制器的时候，而且在减少了域控制器之后，原本的域还会继续使用，这样就需要在其他域控制器删除不需要的服务器对象。首先实验的大环境是在XXX.com这个域中，有两台域控制器Server01和Server02，我们要删除域控制器Server01，并清除Server02上面不需要的服务器对象，事先的准备工作已经做好了。接下来我们删除Server01上的域控制器，打开服务器管理器—管理—删除角色和功能。

Join Computer to Domain with Desired Computer Name and OU

Step #1: This is the simplest method to add a computer to a domain. In this example you will be

How to disable SSL v2 and SSL v3 on the client via Group Policy

To disable SSL v2 and SSL v3 its best to create a Computer based Group Policy settings that applies at

Move disabled user accounts with a PowerShell

Active Directory Cleanup Best Practices

Best practice #1: remove disabled accounts A crucial part of Active Directory cleanup is monitoring for disabled user and computer

Understanding Default Receive Connectors in Exchange 2016

Understanding Default Receive Connectors in Exchange 2016 Exchange 2016 consists of two server roles, Mailbox server role and Edge Transport server role. Mailbox server role