For example, if you install the Active Directory Domain Services server role, all of the tools needed to support that role are installed on the server i. Some tools, such as kerbtray , have suitable replacements in the Windows Server and Windows Server R2 releases.
Kerbtray is no longer part of the tool set, but klist can be used to complete many of the tasks formerly performed by it. For example, if you need to reset a domain controller's machine account password and need to remove the Kerberos ticket cache on the machine, you can use the following klist command at an elevated command prompt see KB :.
We customize your eBook by discreetly watermarking it with your name, making it uniquely yours. You get authoritative technical guidance from those who know the technology best-leading industry experts and members of the Microsoft Desktop Virtualization Team. Coverage includes scenarios for Remote Desktop Services formerly known as Terminal Services , virtualizing roles, setting up Remote Desktop Virtualization Host RDVS , managing application compatibility, customizing and locking down the user experience, using Windows PowerShell for configuration and management, administering security features, deploying a farm, publishing resources, managing sessions, and other life cycle issues.
For customers who purchase an ebook version of this title, instructions for downloading the CD files can be found in the ebook.
Step 1. Log-in to the server as an administrator using your RDP server name, username, and password. Step 2. Step 3. Click Inbound Rules. Step 4.
Step 5. You must run the tool locally, from the Windows-based computer whose password you want to change. Additionally, you must have administrative permissions locally and on the computer account's object in Active Directory to run Netdom. Install the Windows Server Support Tools on the domain controller whose password you want to reset.
To install these tools, right-click the Suptools. If you want to reset the password for a Windows domain controller, you must stop the Kerberos Key Distribution Center service and set its startup type to Manual.
After you restart and verify that the password has been successfully reset, you can restart the Kerberos Key Distribution Center KDC service and set its startup type back to Automatic. This forces the domain controller that has the incorrect computer account password to contact another domain controller for a Kerberos ticket. You may have to disable the Kerberos Key Distribution Center service on all domain controllers except one. If you can, do not disable the domain controller that has the global catalog, unless it is experiencing problems.
Remove the Kerberos ticket cache on the domain controller where you receive the errors. To obtain the tools, visit the following Microsoft Web site:. This is the server where the KDC is running. This must be in domain User format.
0コメント