Active Directory: Core Concepts, Architecture and Best Practices

A separate account of type Computer is created for a computer when you join it to an Active Directory domain. A computer object in AD has several mandatory attributes: sAMAccountName,…

When creating new user accounts in Active Directory, an administrator sets a unique initial password for each account and tells it to a user (usually at the first logon a…

When managing access permissions to different resources in an Active Directory domain, an administrator may need to create dynamic security user groups. The idea of a dynamic group is that…

Group Policies allow you to set the same corporate desktop background wallpaper and Windows logon (lock) screen image on all computers in the domain.

You can use Windows Group Policy (GPO) to centrally install a specific certificate on all computers in a domain by adding it to each computer’s Trusted Root Certificate store. This…

Group Policy (GPO) WMI Filters allow you to create additional conditions that define the computers to which you want to apply GPO settings. For example, you can use a WMI…

It can be difficult to track exactly who made certain changes when the Active Directory domain infrastructure is managed by multiple administrators (added or removed a user from a security…

In this article, we’ll look at how to configure Kerberos authentication for different browsers in a Windows domain to enable transparent and secure authentication on web servers without the need…

Domain users often complain about long computer startup and logon times caused by slow processing of assigned Group Policies (GPOs). From the user’s point of view, the computer takes a…