Active Directory
Resources for Active Directory: Domain Controllers, DNS AD, GPO, Kerberos, replication, accounts and certificates
Active Directory Assistant
Diagnosis DNS AD, replication, GPO, account lock, relationship d, approval, Kerberos and domain certificates
Command / scriptList local administrators on a Windows workstation
Displays local and domain accounts that are members of the position's Administrators group
ResourceAnalysis of email headers
Paste the headers of an email to analyze SPF, DKIM, DMARC, Received, Return-Path, Message-ID, relays and IP addresses
ResourceSQL / Databases Center
SQL Server, MySQL and PostgreSQL diagnostics for connections, authentication, blocking, performance, backups, logs and storage.
ResourceSSL Center / Certificates / PKI
SSL/TLS analysis and diagnosis: expiration, SAN, certification chain, PEM, CSR, AD CS and troubleshooting commands
ResourceComputer Command Generator
Quickly generate Robocopy, Network, DNS, Active Directory, Windows services, scheduled tasks and FortiGate commands
Command / scriptGenerate a report of the applied Group Policies
Creates an HTML report detailing the GPOs applied to the user and computer
ResourceFree IT tools
Use free browser-based IT tools for networking, DNS, Windows, email, security, diagnostics, PDF workflows and day-to-day administration.
Knowledge hubHome
Free tools, procedures, diagnostics, scripts, dictionary and practical resources for IT technicians, system administrators and SMEs
IT dictionaryReplication Metadata
Replication metadata records versions, originating servers, and timestamps of Active Directory attribute changes.
IT dictionaryActive Directory Web Services (ADWS)
the Windows Server service that exposes Active Directory operations to management tools through web services
IT dictionaryActive Directory Lightweight Directory Services (AD LDS)
a Microsoft LDAP directory service independent from an AD DS domain and intended for applications
IT dictionaryActive Directory (AD)
Microsoft Active Directory centrally manages domain identities, computers, groups and access to organizational resources.
IT dictionaryActive Directory Certificate Services (AD CS)
the Windows Server role that provides a public key infrastructure and certificate authority integrated with Active Directory
IT dictionaryActive Directory Domain Services (AD DS)
Microsoft's directory service that stores identities, computers, groups, and policies for a Windows domain
ResourceHow to check Active Directory replication
Failure to perform Active Directory can cause inconsistent GPOs, different accounts depending on DCs or errors d, authentication
ResourceHow to check an LDAPS certificate on Active Directory
Check the certificate presented by a domain controller, its trust chain, name, and expiration before troubleshooting LDAPS.
ResourceHow to diagnose a gMSA account
This BOAI guide provides a structured method for diagnosing a gmsa without multiplying unnecessary changes
ResourceHow to diagnose MySQL error 1213 deadlocks
This BOAI guide provides a structured method for diagnosing mysql 1213-2
ResourceHow to test RADIUS authentication
This BOAI guide provides a structured method for testing an authentication XXVI without multiplying unnecessary changes
ResourceHow to repair an Active Directory secure channel
This BOAI guide provides a structured method for repairing an activeway of security(16) without multiplying unnecessary changes
ResourceEvent ID 1864 — Active Directory replication too old or absent
A domain controller reports that he has not recently received replication from some partners
ResourceNTDS KCC event 1311: AD replication topology
NTDS KCC event 1311 indicates an incomplete Active Directory replication topology; check sites, site links and replication errors.
ResourceEvent ID 2042 — Too old replication
A domain controller has been out of replication for too long and AD blocks replication to avoid persistent objects
TroubleshootingActive Directory replication failed
One or more domain controllers no longer respond correctly
ResourceEvent ID 2087 — DNS resolution failure of an AD partner
A domain controller does not properly resolve a replication partner
ProcedureDiagnose degraded Active Directory replication
Structured procedure before intrusive action on domain controllers
ProcedureProperly decommission a domain controller
Procedure for removing a domain controller without leaving DNS, DHCP, PKI or applications dependencies
ProcedureAdd a new Active Directory site
Controlled procedure to add a new active site
ProcedureCreate a gMSA for a Windows service
Controlled procedure to create a gmsa for a Windows service
ProcedureRenew a RADIUS / 802.1X certificate
Procedure for renewing a server certificate used by the 802.1X authentication
ProcedureSecure administrator access
Set up nominal accounts, MFA, separation of usage and procedures, emergency
ResourceActive Directory — Essential Controls
Commands and checks for domain controllers, DNS, replication, Group Policy, time synchronization and the Active Directory secure channel.
ResourceMicrosoft 365 — memo administration
Microsoft 365 reference for Entra sign-ins, Graph, Exchange Online, message tracing, Teams, Intune and device checks.
ResourceDNS — memo form
DNS record types, resolver checks, delegation, caching and commands for diagnosing name resolution.
ResourceBackup & VSS — Cheat sheet
Backup verification, VSS writers and providers, recovery objectives, backup chains and restore testing.
ResourceHTTP — essential codes and headers
HTTP methods, response codes, caching, redirects, TLS and headers used when diagnosing websites and APIs.
ResourceNetwork ports — memo form
Common TCP and UDP ports, their services and practical checks for network administration.
Knowledge hubWindows Server
Windows Server diagnostic and administration: services, RDP, storage, VSS, Event ID, Power Shell, certificates and updates
Knowledge hubMicrosoft 365
Microsoft 365 administration and troubleshooting: Entra ID, Exchange Online, Intune, One (2005), SharePoint, MFA and courier
Knowledge hubCybersecurity
Defensive resources for phishing, ransomware, compromised accounts, MFA, hardening,19th, incidents and protection of backups
Knowledge hubAzure / Entra / Intune
Administration and troubleshooting Azure, Entra ID and Intune: MFA, Conditional Access, devices, synchronization, compliance, Autopilot, RBAC and Azure network