Active Directory, domain services, DNS and Group Policy guides from the Realm Labs Windows domain environment.
Synology SMB access denied even though Active Directory groups, GPOs and folder ACLs look correct? This real homelab case reveals the Advanced Share Permissions setting that fixed it.
A practical Samba AD homelab case study covering Windows Group Policy, Remote Desktop, firewall rules, local administrator permissions, secedit, SIDs and gpresult.
Changing a Windows account picture on one computer is simple. Changing it reliably for multiple domain users, across multiple domain-joined computers, while retaining central control is a slightly different problem. I wanted a system where profile pictures could be administered…
I wanted domain users on my order.realm network to have their own Windows account pictures automatically applied when they log on to a domain computer. Which version should you use? This guide covers the foundational PowerShell and Group Policy deployment,…
When I first started experimenting with Active Directory in Realm Labs, the obvious platform was Windows Server. That’s what Active Directory is built around, after all. I already had Windows Server running virtually under Proxmox, which gave me somewhere to…
Remote Desktop is one of those Windows features that usually either works immediately or sends you down a permissions rabbit hole. This particular problem came up in Realm Labs when I had a Windows machine joined to the order.realm domain…
One of the things I like about running Active Directory at home is that it gives me somewhere to experiment with the same sort of problems that appear in much larger environments. Mapped drives are a perfect example. They start…