A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
2 views

Two different IIS applications with different auth methods for the same domain

I have been working on a kind of SSO solution for an intranet application. My approach has been: configure the application within IIS with Windows Security authentication configure IE adding the ...
0
votes
0answers
4 views

Passwordless login: virtual smart card with no pin?

I would like to set up a domain-joined computer for passwordless login with some low-privileged domain account that is specific to that computer. I've seen some blog posts that store the username and ...
-2
votes
2answers
32 views

Windows 2008 dead server to windows 2012 Active directory move

Our windows 2008 AD server has failed, but i am able to read the hard drive via a usb cradle. We have got a new server now running windows 2012. Is there anyway I can move the active directory? Any ...
0
votes
0answers
16 views

Is it possible to add permissions to an Active Directory account using PowerShell?

We're deploying Active Directory, and we're using PowerShell scripts for most of it: creating the forest, creating AD elements (users, groups, sites, subnets), etc. We'd like to make some users able ...
0
votes
1answer
14 views

Allow anonymous users to see contents of the Users folder in AD

I have already enabled anonymous access to AD by setting the dSHeuristics property to 0000002 for CN=Directory Service. While this allows anonymous users to bind to the directory successfully, when I ...
1
vote
1answer
14 views

Joining Linux host to Active Directory fails to update Microsoft DNS

I am joining Linux hosts (CentOS 6) to Active Directory using a special bind account. I've granted delegate permissions to this user and when I join on the default Computers OU, a computer object is ...
1
vote
0answers
37 views

Installing Active Directory after finishing installing and deploying Windows Server 2008

I have a small business with 5 employees and I am starting to use a Windows Server 2008 R2 to give my employees access to the server with TS RDP . The end of live of Server 2003 is coming soon which i ...
0
votes
0answers
10 views

Cross Domain LDAPS

I have a bit of an issues I am running in to. We have two domains: domain1.com domain2.com Our Enterprise and Subordinate CA Resides on domain1, let's call it subca.domain1.com. I am trying to ...
-2
votes
0answers
23 views

Migrate Linux User Account To Active Directory

How can I add a linux user to an active directory account and keeping all the settings / profile from the linux account? In otherwords how can I add a specific linux user to AD so that when I login ...
1
vote
1answer
32 views

Change different domain account without being admin Windows

I have 2 accounts on a domain. I can log into a citrix virtual desktop with the one account fine, but the other won't let me log into anything until I first change my password. I am remote, so I ...
0
votes
1answer
11 views

Adding users to a group in a Forest trusted Domain

I am doing a cross forest migration for DC-A to DC-Z. on DC-A there's a sharepoint 2007 and I would like migrated users on Forest -Z to access Sharepoint on Forest - A. What I have done so far is ...
2
votes
2answers
38 views

Authorization using LDAP OU or Groups

In the below image I have drawn two schema structures for LDAP(Active Directory) I would like to know which one is correct. In my organisation they are using Structure 1 design for PC login and ...
0
votes
0answers
5 views

Jenkins AD Auth with extended User search base

I’m trying to use a fairly large Active Directory instance to authenticate Users with Jenkins. This works quite well with the following settings: ...
0
votes
0answers
11 views

Active Directory Forest Trust

I have this problem in our company. It's about AD forest trust relationship. Our company has three sites, in US, Japan and Philippines. In Philippine site, I created another additional DC and ...
2
votes
0answers
24 views

Universal Group in domain not behaving as expected in multi-forest environment

I have an environment with 2 forests, F1 and F2 with a full, transitive, bi-directional trust between them. F1 has a single domain that holds an SSRS server. F2 has 2 domains, F2parent and F2child, ...
1
vote
1answer
18 views

Sync AD thumbnailPhoto with all company computers

I'm perfoming some tests with AD related with thumbnailPhoto and jpegPhoto AD attributes. I uploaded a photo in my AD user in both attributes using following this blog entry. However, the photo is not ...
0
votes
0answers
32 views

Allow access to only certian AD Group users to IIS site

I have created Active Directory Group to allow access to certain user to IIS site (IIS version 8.5). I have installed "URL Authorization" module as shown in below link: ...
1
vote
2answers
23 views

Do I really need an account in domain\administrators for the Web Application Proxy with ADFS 3.0 on a domain controller?

I am trying to move my ADFS / WAP to the cloud to give better resilience after experiencing a recent failure. In part to save on VM costs, I am using just 2 VMs, with ADFS installed on a domain ...
-5
votes
0answers
20 views

what are the questions we should ask customer to know about their existing Active Directory to Integrate with New Identity management solution [on hold]

We are planning to deploy a new Identity Management solution for customer. As part of requtirement gathering process, what are the questions we should ask customer to know about their existing Active ...
0
votes
0answers
29 views

SSO Linux and AD Trusted Domain

Having successfully built a one-way trust between 2 AD domains, we can't lookup/id the user in the trusted domain. Here's our use case. AD1: dom1.com (Win2k8 R2) - One-way outgoing trust to AD2 ...
0
votes
1answer
45 views

Is it possible to connect with domain, when active directory is not installed?

We have a small server with Win Server 2008 in our office. It is in use for a long time now. I'm new here, and there is no IT guy, but only some IT company that does business for us when we need them. ...
0
votes
1answer
22 views

recover deleted item using LDP

First this is not critical. It is a test environment. I have server 2012r2 as DC with both domain & functional level at 2012r2. I have AD recycle bin enabled. I delete a user. I can see that ...
0
votes
1answer
14 views

The configuration information describing this enterprise is not available - Error I receive

I have Windows Server 2012 R2 installed and when I navigate to 'AD DS' and try to go to 'Active Directory Domains and Trust' the error I receive is "The configuration information describing this ...
1
vote
0answers
17 views

What is the better solution for active directory on mixed Linux and Windows

In my existing infrastructure, we have two domains of Active Directory. First domain is private.com and second is public.com. Public.com has been configured to one-way trust to private.com. All user ...
2
votes
2answers
25 views

What permissions are required for a domain user to login to a domain machine?

I have been under the impression that Domain Users should be able to login to a domain joined machine with their domain credentials out of the box and no special permissions needed. I'm running this ...
0
votes
1answer
27 views

Local group policy not applying (gpresult says its empty, but it's not)

We are running a strange AD constellation here, where the same logon script is defined within the local group policy on each server (don't ask me for the reason, it wasn't my idea). Then an (AD-) ...
0
votes
0answers
32 views

Find if linux machine is domain joined

We're joining our Linux machines to our Active Directory using adcli join. Now we start doing this as part of our saltstack setup, but we cannot figure out how to determine if the machine is already ...
2
votes
1answer
31 views

Bulk License Office 365 Users by OU with PowerShell

I'm trying to do something that I don't think should be too complicated of a fix. My end goal: I have certain users in one AD OU that need to use a certain license in Office 365, and different users ...
0
votes
0answers
16 views

Local User Account Disappeared After Domain Upgrade

I upgraded to server 2012 r2 from 2008 r2 I have all computers in AD The workstations with local logons are losing the local user that i have set up on them... (the admin logon is not disappearing) ...
0
votes
0answers
14 views

Access denied trying to login to Ubuntu 14.04 (Authentication with Active Directory)

I'm trying to set up my Ubuntu 14.04 print server to authenticate users with my Active Directory server, I've followed all of the steps using the following tutorial: ...
0
votes
0answers
36 views

Why can't we directly change a group from global scope to domain local or vice versa?

If we need to change the scope of a group from global to domain local or vice versa we first need to change it to Universal. What is the reason for this?
0
votes
0answers
10 views

Microsoft AD DS group membership verification when authorizing user

Can somebody point out to documentation or explain how verification works in AD DS when it is necessary to authorize user to perform some actions. As far as I remember user's SID or token should ...
-1
votes
0answers
12 views

Prohibit computers to join a domain if they are not exist in the Active Directory

Whenever we join a computer to a domain, the computer object is automatically created inside Active Directory. We would like the option to be able to join a computer to a domain only if the computer ...
0
votes
0answers
12 views

How to export LDAP RootDSE attributes to LDIF file?

How to export LDAP RootDSE attributes to LDIF file? I was able to use Active Directory Explorer to see RootDSE attributes but I can not export them: ...
1
vote
0answers
26 views

enter-pssession : Connecting to remote server failed with the following error message : The user name or password is incorrect

I am unable to connect to domain controller via below script. This script is working for another domain controller so it mean script is correct. While I am connecting i am getting an error: ...
1
vote
1answer
48 views
+50

EAP-TLS for Wireless with Active Directory

My question is more from a conceptual point of view, rather than implementation (even though I'm asking about proprietary protocols and products). Assuming I have users and credentials set up in my ...
6
votes
2answers
73 views

Cached credentials in ActiveDirectory and setting up machines

If one has a bunch of Windows machines which will be used remotely and off-domain (at first), is there a way to presynch the usernames and passwords from Active Directory so the users may login via ...
1
vote
1answer
28 views

Powershell remoting with active directory

I am able to connect to domain controller via below scrip remotely, but after that i want to run disable-ADAccount ,Get-ADUser command but I am getting error Get-ADUser : The server has rejected the ...
0
votes
1answer
15 views

infrastructureUpdate type OU called Infrastructure in Active Directory

A new OU called infrastructure with the type infrastructureUpdate has appeared in my Active Directory. It has just appeared. I have been going through the setup recently and the last major thing I ...
0
votes
0answers
20 views

Public Share with Samba4 AD DC does not work

I tried to set up a public share on my Samba4 AD DC but Windows always asks for username and password before mounting. I can't figure out what is going wrong. The only thing is, that testparm does not ...
1
vote
1answer
42 views

Why can't we link GPO to an AD container?

Containers are used to segment and organize a network and were designed with specific uses and restrictions in mind. Is this the only reason why we can't link GPO to a Container and only to OU? Are ...
2
votes
1answer
32 views

Best practice DNS in multi-forest environment

I have a multiforest environment, both forests exist in the same network. I want DNS between them to operate as smoothly as possible. Forward lookups are easy and can be handled with conditional ...
3
votes
2answers
47 views

Deploying printers to specific users via Group Policy

I have noticed two different ways of deploying printers to specific user with Group Policy in Windows Server 2012. The first method is by creating separate GPOs for each group, and the second method ...
1
vote
2answers
117 views

Active Directory Rebuild - User Login

I have around 100+ users in a windows 2008 active directory. There is only one active directory controller / server in the network. If the server hard drive crashed, and if I rebuild the active ...
-1
votes
1answer
44 views

Account Lockout Tools Server 2008/2012 [closed]

We have users on both Laptops and Windows OS phones and are seeing lots of lockouts. In another company I used these lockout tools from Microsoft: ...
-2
votes
1answer
35 views

Trouble Active Directory windows 2012

We are using a windows server 2012 and we have a problem. Our stations use windows 7 and windows 8. When we add a person in an access group in our Active directory, the user must restart their ...
0
votes
0answers
31 views

kdm and ssh detecting different fully qualified domain name when using kerberos authentication

I'm attempting to setup Kerberos login support (Windows AD domain providing the kerberos) for Kubuntu 12.04 Linux workstations at the company I'm at. It's almost completely working but I can't get ...
0
votes
2answers
37 views

Using Exchange 2013 with Samba as DC

I realize that Exchange relies heavily on AD, and I was wondering if it is possible install Exchange 2013 into an environment that is running Samba 4 as the DC?
1
vote
1answer
24 views

Active Directory 2008 multiple local user accounts

I have installed a new Active Directory 2008 Domain controller into my environment. We are currently running the 2008 AD server as a secondary. The primary AD server is a 2003 Domain Controller. We ...
1
vote
1answer
33 views

How to avoid frequent KVNO increases, when using Apache HTTPD with mod_auth_kerb talking to AD?

I've setup Apache HTTPD 2.4 with mod_auth_kerb, created a service account on Active Directory, added a SPN for my http hostname, created a keytab file on the linux machine, and had SSO start working ...