Sometimes you may get for your ADFS Event 168. This is linked to a little gem in the AD FS Management console: you havbe the ability to define for each relying party a metadata URL you can monitor for changes including the URL and the certificates. In the example below […]
While joining machine to a domain, multiple errors can occur. In particular Domain Join Error 0x6ba is often present but with different causes. Let’s recap the needed things to properly join the domain: The machine must be able to solve the domain name The machine must be able to retrieve […]
When you see Error 1753: no more endpoints in AD Replication, the common mistake is to think about firewall or TCP/IP connectivity issues. The message “Error 1753: There are no more endpoints available from the endpoint mapper” does not mean that you cannot connect at all. It is quite the […]
In case of troubleshooting or temporary issue, you may want to be sure that a given member server always authenticate against one specific domain controller. For this, you may want to combine two tools: The “time-to-live” (TTL) value for the validity of the discovered domain controller The ability to specifically […]
Microsoft courses about their PKI implementation (Or AD Certificate Services as we should now call it) just scratches the surface by telling you the differences between root CA, subordinate CA and the stand-alone / entreprise difference that comes with the CA being member of a domain. Some good links to […]
