How AD DS replication work?

https://samilamppu.com/2017/04/23/how-ad-ds-replication-work/

https://www.systemadminguide.in/2013/11/active-directory-replication-explained.html

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc772726(v=ws.10)?redirectedfrom=MSDN

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc755994(v=ws.10)?redirectedfrom=MSDN

Replication considerations for Domain Controllers running on VMware vSphere

USN Rollback

https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/introduction-to-active-directory-domain-services-ad-ds-virtualization-level-100

Enable the AD auditing

auditpol /get /category:"DS Access"
auditpol /set /subcategory:"Directory Service Changes"

Create a NTDS.dit snapshot using ntdsutil

Note :

Above screenshot to list the all snapshots use list all command

dsa.msc console change the server name with custom ldap port

ldifde -t 10000 -d "CN=Ravi Kumar,OU=Erode,DC=DXC,DC=local" -l physicaldeliveryofficename,name -f output1.ldf

-t port
-d distinguished name
-l LDAP attribute
-f output

Import the attribute using LDIFDE command

Note :

Before replace the user physicalDeliveryOfficeName is Chennai

ldifde -i -f output.ldf

dn: CN=Ravi Kumar,OU=Erode,DC=DXC,DC=local
changetype: modify
replace: physicalDeliveryOfficeName

physicalDeliveryOfficeName: Canada

–

Note :

In this notepad end – is must otherwise you will getting an error

Get-ADUser ravi -Properties * | select physicalDeliveryOfficeName

Ldifde command Refer :

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc731033(v=ws.11)

What is use for lastKnownParent attribute

get-aduser SK101 -Properties * | select name,SamAccountName,DistinguishedName,UserPrincipalName,lastKnownParent,msDS-LastKnownRDN

I am deleting the Suresh Kumar account above path details

After deleting the account

Now I restore to different OU (Chennai)

Now the object has been restored

Now you can see the below screenshot lastKnownParent was changed.

How to Find from which Server a GPO Created

GPMC and created by different Admins and you want to find from where and which server  the GPO created use the below command.

repadmin /showmeta "CN={07E55C13-A962-489A-8743-9E3B98725E46},CN=Policies,CN=System,DC=DXC,DC=local"

AD integrated DNS details

priority

A number between 0 and 65535 that indicates the priority. A lower number gives the target a higher priority.

weight

A number between 0 and 65535 used when there are two identical priorities. The number indicates the amount of times this host is answered from the total of questions.

Example: If two host have the same priority and one host has a weight of 5 and the other of 3, it means that 5 out of 8 questions will be answered with the target that has the weight of 5.

DNS should be:

Domain

 _msdcs

 _sites

_tcp

_udp

nltest /sc_query:dxc.local

password Reset tool

Trinity Rescue Kit | CPR for your computer

https://ophcrack.sourceforge.io/

Active Directory Migration Checklist – TechNet Articles

https://technet2.github.io/Wiki/articles/43908.active-directory-migration-checklist.html

https://social.technet.microsoft.com/wiki/contents/articles/40225.active-directory-domain-deployment-checklist.aspx

https://social.technet.microsoft.com/wiki/contents/articles/38512.active-directory-domain-discovery-checklist.aspx

who/where/when for activities done against the OU’s in your AD?

https://ithompson.wordpress.com/tag/organizational-unit-move/

https://www.lepide.com/how-to/audit-organizational-units-changes-in-active-directory.html