Object Contains Other Objects – Deleting Computer Objects

When deleting a computer object from AD, you get this error: Object contains other objects This is because the computer object contains another object (yes, it’s possible!). To see the object it contains and fix this error: Open Active Directory Users and Computers Click View -> Users, Contacts, Groups, and Computers as containers Now find […]
Continue reading…

 

Directory Service Can Perform The Requested Operation Only On A Leaf Object

When trying to delete an object from AD, you get this error: The directory service can perform the requested operation only on a leaf object This is because the object you are deleting contains another object, making the object a (sort of) container. This can even be true of computer and user account objects! To […]
Continue reading…

 

Unable To Delete Computer Using DSRM (Remove Computer Example)

DSRM can be used to delete computer account objects from AD, but there’s a trick to using it. If you find that DSRM doesn’t remove computer accounts, you need to use the –noprompt switch on the end of your DSRM computer command. For some reason, when removing a computer account object, DSRM doesn’t prompt for the […]
Continue reading…

 

Unable To Install RD Connection Broker Role Service On Server 2012

The installation of the RD Connection Broker Role Service can fail with the following error on Windows Server 2012: RD Connection Broker Role Service: Failed Unable To Install RD Connection Broker Role Service On <<Server>> This issue came up in response to a question from Ridhuan Amri who was trying to install RD Connection Broker […]
Continue reading…

 

How To Access The NETLOGON Or SYSVOL Share

Sometimes you need to access the NETLOGON or SYSVOL share to store files required for login scripts or other such things. You can access both the NETLOGON share and SYSVOL share by simply navigating to your domain name. For example, to access the NETLOGON share if your domain name is mydomain, do the following: \\mydomain\NETLOGON […]
Continue reading…

 

Is There An AD Security Group For All Computers?

Today I was asked if there was an AD group that contains all computers. I knew there was an equivalent computer version of the Domain Users group in AD, but I couldn’t remember what it was called. A little poking around AD told me that the security group for all computers was called Domain Computers Domain Computers […]
Continue reading…

 

How To Setup Equitrac Active Directory Synchronization

Equitrac is capable of synchonizing with Active Directory to pickup a list of users. To setup Active Directory synchronization in Equitrac: Start the Equitrac System Manager Click on Configuration Click on Active Directory Synchronization Click Add… to add a domain controller Select the domain controller and click Add… to add a container (OU), the OU […]
Continue reading…