How can I safely demote an old Windows Server 2012 R2 domain controller?
I have an old Windows Server 2012 R2 domain controller named old-dc that I want to demote and shut down. Two newer Windows Server 2016 domain controllers, new-dc1…
Global Catalog
Why does Get-ADPrincipalGroupMembership trigger a SeLoadDriverPrivilege audit failure?
When I run Get-ADPrincipalGroupMembership from a workstation, it fails with "An unspecified error has occurred." At the same time, the Windows Security log records an audit failure involving…