ITEXVN

  DC userAccountControl 0x81000 Cả bài viết dài, chỉ cần quan tâm đúng 1 dòng highlight dưới cùng là tháo gỡ nút thắt cả hệ thống Got a question from a friend about a weird problem when trying to promote a 2012R2 Domain Controller. The error is in the prereq test before promoting: Verification of outbound replicaton failed. Error reading the NTDS settings on replication source domain controller 2k3dc.secid.local. Domain Controller data not found for the specified Active Directory domain controller. And I also got the info that the 2k3DC only was a member of the Domain Users group. That’s not easy to change in the ADUC tool, Member Of Tab in the computer object. Something weird was going on. From DCDIAG.EXE I got the following info: Starting test: MachineAccount The account 2K3DC is not a DC account.  It cannot replicate. Warning:  Attribute userAccountControl of 2K3DC is: 0x81000 = ( UF_WORKSTATION_TRUST_ACCOUNT | UF_TRUSTED_FOR_DELEGATION ) Typical se...

Trước tiên download module Azure PowerShell  Azure Active Directory Module for Windows PowerShell Kết nối với Azure:  connect-msolservice -credential $msolcred [ câu lệnh này để cache tài khoản quản trị Azure ] Sau khi kết nối xong, chạy lệnh sau để xóa bỏ những object conflict Remove-MsolUser –UserPrincipalName John.Smith@Contoso.com Vậy là xong ! English version: Grab the  Microsoft Online Services Sign-In Assistant for IT Professionals RTW Grab the  Azure Active Directory Module for Windows PowerShell Open the power shell and run this to store your credentials $msolcred = get-credential Then run this to connect to Azure connect-msolservice -credential $msolcred Now that you’re all linked up, run this to remove that nasty orphaned object Remove-MsolUser –UserPrincipalName John.Smith@Contoso.com All set!