Skip to content

Commit 48d1288

Browse files
committed
Patch fixes
1 parent 54fc013 commit 48d1288

7 files changed

Lines changed: 54 additions & 50 deletions

learn-pr/wwl-azure/troubleshoot-active-directory/7-knowledge-check.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -43,14 +43,14 @@ quiz:
4343
- content: "Infrastructure master."
4444
isCorrect: false
4545
explanation: "Incorrect. This role handles group references between domains."
46-
- content: "An administrator has established synchronization between their AD DS and Azure AD environments. Users whose accounts are synced appear able to sign in, but none seem to be able to access cloud resources. What's the likely problem?"
46+
- content: "An administrator has established synchronization between their AD DS and Microsoft Entra ID environments. Users whose accounts are synced appear able to sign in, but none seem to be able to access cloud resources. What's the likely problem?"
4747
choices:
4848
- content: "The users don't have licenses assigned for cloud apps. The administrator must select the option to sync licenses across."
4949
isCorrect: false
50-
explanation: "Incorrect. Azure AD Connect doesn't sync licenses."
50+
explanation: "Incorrect. Microsoft Entra Connect Sync doesn't sync licenses."
5151
- content: "The users don't have licenses assigned for cloud apps. These users cannot be synced."
5252
isCorrect: false
53-
explanation: "Incorrect. Users can be synced, but Azure AD Connect doesn't sync licenses."
54-
- content: "The users don't have licenses assigned for cloud apps. Azure AD Connect doesn't sync licenses, and the administrator must manage these licenses manually."
53+
explanation: "Incorrect. Users can be synced, but Microsoft Entra Connect Sync doesn't sync licenses."
54+
- content: "The users don't have licenses assigned for cloud apps. Microsoft Entra Connect Sync doesn't sync licenses, and the administrator must manage these licenses manually."
5555
isCorrect: true
5656
explanation: "Correct. Each user must have a license assigned for cloud apps they want to access."

learn-pr/wwl-azure/troubleshoot-active-directory/includes/1-introduction.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
The Active Directory Domain Services (AD DS) server role provides the authentication and authorization service for your on-premises infrastructure. AD DS service failure or degraded performance can have an immediate and severe impact on your network services. Consequently, it’s important that you know how to troubleshoot this critical service. For example, suppose you open the Active Directory Administrative Center and find that some recently created users are missing. Or maybe changes that a colleague has made to Group Policy are not replicating across your infrastructure. It’s also important to consider that it’s common now for organizations to integrate their on-premises environment to cloud SaaS apps, such as Microsoft 365. If your users are connecting to Microsoft 365 apps, such as Microsoft Teams, then you’ll need to configure integration and synchronization between AD DS and Azure AD. Proper configuration enables seamless single sign-on (SSO). However, this integration must be carefully considered, and features such as self-service password reset (SSPR) with writeback should be in-place.
1+
The Active Directory Domain Services (AD DS) server role provides the authentication and authorization service for your on-premises infrastructure. AD DS service failure or degraded performance can have an immediate and severe impact on your network services. Consequently, it’s important that you know how to troubleshoot this critical service. For example, suppose you open the Active Directory Administrative Center and find that some recently created users are missing. Or maybe changes that a colleague has made to Group Policy are not replicating across your infrastructure. It’s also important to consider that it’s common now for organizations to integrate their on-premises environment to cloud SaaS apps, such as Microsoft 365. If your users are connecting to Microsoft 365 apps, such as Microsoft Teams, then you’ll need to configure integration and synchronization between AD DS and Microsoft Entra ID. Proper configuration enables seamless single sign-on (SSO). However, this integration must be carefully considered, and features such as self-service password reset (SSPR) with writeback should be in-place.
22

33
In this module, you’ll learn how to restore deleted objects from AD DS. You’ll also learn how to recover the AD DS database when necessary. This module also provides guidance on how to troubleshoot hybrid authentication issues.
44

learn-pr/wwl-azure/troubleshoot-active-directory/includes/2-recover-objects-from-active-directory-recycle-bin.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,11 +15,11 @@ If you have not enabled Active Directory Recycle Bin, you can reanimate a delete
1515
> The AD DS database is self-maintaining. Every 12 hours, by default, each domain controller runs garbage collection. This accomplishes two tasks. First, it removes deleted objects that have outlived their tombstone lifetime. Second, the garbage collection process performs online defragmentation.
1616
1717

18-
To reanimate a deleted object, you can use the Ldp tool. Ldp.exe is a command-line tool that you use to perform Lightweight Directory Access Protocol (LDAP) searches against AD DS. You also can use it to perform maintenance on AD DS or Active Directory Lightweight Directory Services (AD LDS).
18+
To reanimate a deleted object, you can use the Ldp tool. Ldp.exe is a GUI-based LDAP tool that you use to perform Lightweight Directory Access Protocol (LDAP) searches against AD DS. You also can use it to perform maintenance on AD DS or Active Directory Lightweight Directory Services (AD LDS).
1919

2020
## Implement Active Directory Recycle Bin
2121

22-
Active Directory Recycle Bin simplifies the process for restoring deleted objects through authoritative restore and tombstone reanimation. With Active Directory Recycle Bin, you can restore deleted objects with full functionality without having to:
22+
Active Directory Recycle Bin simplifies the process for restoring deleted objects compared to authoritative restore and tombstone reanimation. With Active Directory Recycle Bin, you can restore deleted objects with full functionality without having to:
2323

2424
- Restore Active Directory data from backups
2525

learn-pr/wwl-azure/troubleshoot-active-directory/includes/3-recover-active-directory-domain-services-database.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ NtdsUtil.exe is a command-line executable file that you can use to perform datab
4646
4747
## What is restartable AD DS?
4848

49-
In most scenarios that require Active Directory management, you should restart the domain controller in DSRM. Windows Server enables administrators to stop and start AD DS just like any other service—without restarting a domain controller—to perform some management tasks quickly. This feature is called restartable AD DS. Restartable AD DS reduces the required time to perform certain operations. For example, you can stop AD DS so that you can apply updates to a domain controller.
49+
In some scenarios that require Active Directory management, you need to restart the domain controller in DSRM. Windows Server enables administrators to stop and start AD DS just like any other service—without restarting a domain controller—to perform some management tasks quickly. This feature is called restartable AD DS. Restartable AD DS reduces the required time to perform certain operations. For example, you can stop AD DS so that you can apply updates to a domain controller.
5050

5151
You can use the following methods to restart AD DS:
5252

learn-pr/wwl-azure/troubleshoot-active-directory/includes/4-recover-sysvol.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,10 +28,10 @@ There are a number of ways to perform an authoritative restore of SYSVOL. After
2828

2929
- Edit the `msDFSR-Options` attribute
3030

31-
- Perform a system state restore using `wbadmin authsysvol`
31+
- Perform a system state restore using `wbadmin -authsysvol`
3232

3333
> [!TIP]
34-
> If you have the option to restore a system state backup (that is, you are restoring AD DS to the same hardware and operating system instance) then using `wbadmin authsysvol` is simpler.
34+
> If you have the option to restore a system state backup (that is, you are restoring AD DS to the same hardware and operating system instance) then using `wbadmin -authsysvol` is simpler.
3535
3636
But if you need to perform a bare metal restore, then you need to edit the `msDFSR-Options` attribute.
3737

0 commit comments

Comments
 (0)