active directory test site Archives - Anuj Varma, Hands-On Technology Architect, Clean Air Activist https://www.anujvarma.com/tag/active-directory-test-site/ Production Grade Technical Solutions | Data Encryption and Public Cloud Expert Mon, 30 Sep 2019 17:03:06 +0000 en-US hourly 1 https://wordpress.org/?v=7.0.2 https://www.anujvarma.com/wp-content/uploads/anujtech.png active directory test site Archives - Anuj Varma, Hands-On Technology Architect, Clean Air Activist https://www.anujvarma.com/tag/active-directory-test-site/ 32 32 Testing whether a client is part of an AD https://www.anujvarma.com/testing-whether-a-client-is-part-of-an-ad/ https://www.anujvarma.com/testing-whether-a-client-is-part-of-an-ad/#respond Mon, 30 Sep 2019 14:32:43 +0000 https://www.anujvarma.com/?p=6251 Say your AD Site is ‘AVARMA’ – and you are trying to figure out if the following IP address is assigned to that site Doing this on the local client […]

The post Testing whether a client is part of an AD appeared first on Anuj Varma, Hands-On Technology Architect, Clean Air Activist.

]]> Say your AD Site is ‘AVARMA’ – and you are trying to figure out if the following IP address is assigned to that site

Doing this on the local client

“gpresult /r” or “NLTEST /dsgetsite“

Doing this on any AD computer

Test whether it is part of the domain  –

  1. nltest /DSADDRESSTOSITE:   (Hit Enter)
  2. nltest /DSADDRESSTOSITE:10.10.1.104

Retrieve the site-subnet mapping for ‘10.10.1.104’ from ‘\\DC01.DOMAIN.COM’.

10.10.10.100 AVARMA 10.10.10.0/24

This will tell you whether it is assigned to the AD site AVARMA – and the appropriate subnet mapping

Audit Trail on Domain Controller – DNS Events Audit

Event viewer>Applications and Services logs>Microsoft>windows>DNS-Server>Audit

If you do not see a DNS-server component, enable DNS record auditing manually.

Right-click DNS Server, point to View, and then click “Show Analytic and Debug Logs“. Right-click Analytical and then click on Properties. Confirm the “Enable logging” check box is selected.

Restoring an entire Deleted Site

https://blogs.technet.microsoft.com/askds/2010/08/12/using-ad-recycle-bin-to-restore-deleted-dns-zones-and-their-contents-in-windows-server-2008-r2/

Restoring a Deleted AD Zone

Get-ADObject -Filter {displayName -eq “mylocal.site”} -IncludeDeletedObjects | Restore-ADObject

Restore a Deleted AD Object

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd379509(v=ws.10)?redirectedfrom=MSDN

The post Testing whether a client is part of an AD appeared first on Anuj Varma, Hands-On Technology Architect, Clean Air Activist.

]]> https://www.anujvarma.com/testing-whether-a-client-is-part-of-an-ad/feed/ 0