IT Knowledge Base

netdom query FSMO

—

PDC
dsquery server -hasfsmo pdc

RID Master
dsquery server -hasfsmo rid

Infrastructure Master
dsquery server -hasfsmo infr

Schema Master
dsquery server -hasfsmo schema

Domain Naming Master
dsquery server -hasfsmo name

I don’t know if it is a default setting of windows 7 but on our domain you can’t access all computers registry because a service is set to manual and not started. Of course you need to be Domain Admin to be able to run this steps.

First of all you need to start the RemoteRegistry service on the computer:
sc \\COMPUTERNAME start RemoteRegistry

After that you can access it like usually in regedit:
File->Connect to Network etc.

To be on the save side you can disable it again:
sc \\COMPUTERNAME stop RemoteRegistry

In Windows XP you could simply login as administrator and rename the profile folder. As soon as logged back in as this user everything was recreated. In Windows 7 and Vista it doesn’t work like this anymore. If you just delete or rename the profile folder and you try to log back in it is going to create you a temporary profile. To avoid that you need to open the registry.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

Search there for the profile you renamed or deleted and delete the folder. Reboot the computer and it should work again.

1. Create a local user like Template
2. Login as this user and make all your adjustments
3. Best Restart your Computer
4. Login as Domain Administrator
5. Set your Explorer up so you can see all Hidden Files and Folder and System Files
6. Rename C:\Users\Default User in C:\Users\Default User Old
7. Rename your new Profile C:\Users\Template into C:\Users\Default User
8. Go to the Computer Settings [Windows Key+Break]
9. Go to the Users Profile and choose your Default User
10. Then click on Copy To and don’t forget to set the permissions to everybody 
11. IMPORTANT: Copy the file into %logonserver%\netlogon\Default User.v2 
      Don’t forget to put .v2 or you would just generate a profile for XP.

I didn’t know before that actually every authenticated user can add up to 10 computers to the domain  by default. This is a security issue and should be prevented.

Follow the steps to do so:
1. Open ADSI Editor
2. Click with the right mouse button on ADSI Editor and make a default connection
3. Click with the right mouse button on the domain / properties
4. Change the value for ms-DS-MachineAccountQuota to 0

If you are searching for a good domain name www.bustaname.com is quite useful. It is by the way the tool I which helped me to find this domain name here;-)