A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
1answer
11 views

ADDS: Mandatory Profiles through powershell

Intro I'm a networking student from Belgium and I just got assigned a big project. Basicly i'm responsible for the ADDS. We have to create several OU's and every OU needs at least 20 users or more. ...
0
votes
1answer
18 views

Join domain on Samba DC with a Windows 7 client

i'm an IT apprentice and i'm new on this forum. I've a problem for join my samba domain. I use Samba 4.2.1 on debian 7.8 and i use a virtual machine on virtualbox. So the problem is when i'm trying ...
0
votes
0answers
12 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
0
votes
0answers
4 views

SoftEther VPN not allowing clients to connect using AD credentials

We are trying to get SoftEther VPN to work on a SBS 2003 domain but it is rejecting apparently valid user credentials. (The server application is running on our actual SBS 2003 domain controller and ...
0
votes
2answers
49 views

How to setup DNS correctly for computers inside a domain?

Suppose we have the following situation: there's one network with a router on which the internet access is configured and this includes the DNS IP's. Then we set up Active Directory on a server on ...
1
vote
2answers
36 views

Getting All Users From Active Directory Groups Using Powershell

I have a powershell script that I've written that gets all of the groups from an OU and stores them in a variable $groups. I want to be able to access the users of each group but seem to be having ...
0
votes
0answers
19 views

How can I Deny permissions to logon to Remote Desktop Session Host server in powershell script?

I am need of some assistance please. I am a system admin and I am trying to create a script that will assist with the tedious tasks I have to do with disabling a user that no longer works for the ...
0
votes
1answer
17 views

Exchange Server 2013 EXPR Section missing from autodiscover

We have a client who is having an issue with their autodiscover. They have an Exchange Server 2013 with CU1. After attempting to run an update on the server (Win 2k8R2) I needed to revert the ...
1
vote
0answers
13 views

DNS query from active directory is reaching reaching firewall in the same subnet

DNS query for root dns from active directory is reaching firewall which is in the same subnet. Default route for this active directory is L3 router which has no route to firewall unless traffic is ...
2
votes
4answers
68 views

How to get Microsoft license authentication for all machines on a network?

We have a small network (~150 desktops, ~20 servers) much of which is Linux. MS keeps wanting to audit our MS products every 3 years or so. I really don't have time to go around to 80-90 desktops and ...
0
votes
1answer
25 views

Why must a previous computer name be removed from directory before the workstation can join with new name?

Sorry if the question is convoluted and it's difficult to search in case it's a duplicate question. I don't have keys to the castle, so as a low level tech I was wondering why I was unable to leave ...
0
votes
1answer
39 views

Group Policy | New Password Policy for a few users

We have a few users that are traveling and I would like their passwords to be changed more often than the rest of the folks in the office. How should I go about creating a new policy with their ...
2
votes
2answers
35 views

Importing users to AD with CSV, cannot get some fields to work

Been trying to build a CSV file to import users into Active Directory. I can get everything to populate, except for E-mail, Password, and Enabling the user. Just using this cmdlet in Powershell. ...
0
votes
1answer
35 views

WS 2012 r2 DNS server issue: Access was denied

I have a Windows Server 2012 r2 virtual machine as DC1 and DNS server running on Windows Azure and a Windows Server 2012 r2 local machine as DC2, DHCP and DNS server on-premise. I found my DNS server ...
0
votes
0answers
12 views

How to authenticate RHEL 6.6 to Windows Server 2012 Active Directory and LDAP? [duplicate]

Need help with setting up LDAP on Windows Server 2012 R2, I have AD setup already, but not sure what all I need to do to get LDAP running. Then I can't find any good resources online to authenticate ...
0
votes
2answers
53 views

Active Directory: Track old password changes and expiry dates?

Is there anyway to find out when the last 2 passwords changes were made for an account? I reset a account password but I want to know if it already changed hours or minutes before I reset. OR maybe ...
3
votes
2answers
169 views

How to check who reset the password for a particular user in active directory on a windows server?

I have the details about a user account when it was last modified (a password reset was done). But I would be interested to know who reset the password for this user. Is there any way I can find this ...
-1
votes
0answers
37 views

Nesting Active Directory Groups not listing correctly in effective permissions

I'll try to build a picture of the environment I am running into: 1) old domain which is still active since a lot of workstations and accounts for this domain are still in use (and migration is not ...
0
votes
0answers
32 views

create a record in Active Directory DNS for Openstack instance [closed]

I am working with Ansible to create an Openstack instance and assign a floating IP. I would also like to add a record for this IP to AD DNS following the creation of the instance. I have checked and ...
3
votes
1answer
42 views

Centralizing Remote AD DCs?

Background: I'm one of two IT people managing five libraries (all part of the same library system), and each library has been set up with their own AD DC. I'd like to centralize this. I'm assuming I ...
0
votes
1answer
17 views

Group Managed Service Account (gMSA): get authorized hosts / install-adserviceaccount unknown error

After having successfully created a Group Managed Service Account (gMSA) using the command below: add-adserviceaccount -name gmsaAccount -PrincipalsAllowedToDelegateToAccount gmsaGroup -DNSHostName ...
6
votes
1answer
45 views

Any danger in copying latest ADMX (& lang files) into AD Central Store?

Is there any danger in copying the newest set of ADMX templates into my AD Central store (overwriting the old ones)? I've already upgraded my schema and copied one ADMX file in to add the new Windows ...
0
votes
0answers
9 views

What is the authentication flow when Exchange 2013 proxies to Exchange 2010?

Issue Outlook users, who are on LAN, and have an email address that is different from the UPN get prompted for authentication. Topology 1,000 clients connect to a central DAG & CAS array on ...
0
votes
1answer
54 views

ADFS without domain

Is it possible to run a ADFS 2.0 without connecting the server to a domain? We are using Shibboleth as claims provider, so we actually don't need active directory here. We manage to setup the ADFS ...
0
votes
0answers
11 views

WES09 Client not registering with dns suffix

I have HP thin clients, some running Windows Embedded Standard 2009, and some running WES 7. They are all getting DHCP addresses from our Server 2012 R2 DHCP server, with AD integrated DNS. With both ...
0
votes
0answers
28 views

Unable to view trusted domains in ADUC

My domain is Server 2003 (domainA) and the remote domain is Server 2008R2 (domain functional level) (domainB). At some point in the recent past, I lost the ability to view domainB (ADUC -> open a ...
1
vote
0answers
49 views

DNS Server gone and now I get Zone Not Loaded by DNS Server

We have several domains in our infrastructure, separated by differing subnets (obviously). From our primary domain (call it domain A), we have a DNS forward lookup zone to domain B (which consists of ...
0
votes
0answers
34 views

Trying to add group to the security tab of an extended right

. The only problem is that the rights are not propagating to the extended attribute, even in the advanced tab :(. If I go in to adsi and check the security tab of the extended right it shows ...
0
votes
0answers
17 views

AD Migration and SharePoint configuration

i have a SharePoint 2010 and o365 (AD Synchronized) account. And some guys are working on the migration process from 2010 to o365. At the same time, I'm migrating users to the new domain but all ...
4
votes
1answer
104 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
1
vote
0answers
36 views

AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain

The method I use to authenticate a user's credentials on active directory is (Simplified): New DirectorySearcher(New DirectoryEntry(path, user, pass, AuthenticationTypes.Secure)).FindOne() On fail, ...
0
votes
3answers
88 views

Mess of a system : Where to start? [closed]

I just started a role as the sole "IT guy" in a company of over a hundred people. This is a company that has had a troubled history with IT, managing to go through 6 people in as many years. During ...
0
votes
0answers
22 views

Active Directory Schema Upgrade not enough to add new policy items

I recently upgraded my AD Schema to 69 in the hopes that I would get the Policies / Admin Templated / Windows Components / Windows Update / "Always automatically restart at the scheduled time" for my ...
1
vote
1answer
38 views

Moving Azure Virtual Machine which is Domain Controller to another region

I want to move an existing Virtualized Domain Controller from North Central Azure Region to East Region. I am aware about how to move VHDs and basically migrate it to another region. Though my ...
3
votes
1answer
57 views

Add security rights to an extended rights guid

Any help would be greatly appreciated! Please ask if you don't understand something. I am trying to explain it as best as I can. The value I am trying to edit is ...
-1
votes
2answers
44 views

Best practices for secondary DNS in case of a single Active Directory

I have a setup with only one Active Directory (not redundant). What should be configured on the client pc's to ensure the best DNS resolution ? Currently somebody configured the IP address of the AD ...
1
vote
1answer
20 views

SSO while still allowing offline use?

I am thinking of implementing Single Sign-On for a whole company. PROBLEM: Some employees of that company need to be able to work offline, without having to switch user/environment. Is there any ...
2
votes
1answer
45 views

Merging SIDs between Forests?

Currently, I have two forests, domain A and domain B with an external, two-way, non-transitive trust. Users in Domain A also have an account in Domain B (not all users in Domain B have an account in ...
4
votes
4answers
192 views

Which ports are required in order to authenticate against a ldap server in another domain which is behind a firewall?

I have a Linux domain running with sssd, let's call this domain NJ. I'd like machines on the NJ domain to be able to authenticate against an Active Directory ldap server which resides on a different ...
0
votes
0answers
12 views

Domain Guest Group with Azman delegation in Windows Server 2012

I am new to Microsoft Windows Server and Active Directory. I have created a user called viewer Then I configured deny the Network Access Permission no callback deny user permission to log on to ...
0
votes
1answer
19 views

Roaming Outlook Settings without using roaming profiles

Is there a way to roam my Outlook 2013 settings from workstation to workstation without using Active Directory roaming profiles? As you can see from my question I am no Exchange expert...
0
votes
0answers
35 views

Jenkins with subversion plugin using AD athentication

I'm configuring a Jenkins instance installed as a windows service. In order to download the source code, I would like to use the subversion plugin, but I'm getting an authentication error when I add ...
0
votes
1answer
35 views

Client not found in kerberos database while getting initial

I am installing Squid3 on Ubuntu 14.10 and I want to integrate it ADDS on windows server 2012 using kerberos 5. My infrastructure are as follows: Default Gateway: 192.168.1.1 DNS & Domain ...
0
votes
2answers
39 views

Linux-SSSD: always getting incorrect password when su'ing to domain users, but why?

I've built a new Linux environment at my work place. I've configured sssd and bound it to one of the Active Directory domains of the company. I can tell that the sssd is partially working, let me ...
0
votes
1answer
49 views

Active Directory Naming

I have a test active directory domain named ad.example.com and have joined some Windows clients stations to the AD domain. I'm able to log on the client station as AD\username. However, when I try to ...
-3
votes
1answer
33 views

Windows File Shares inside an Organisation [closed]

I came across to a security weakness that potentially can put information at risk in my organisation. Whenever I access other's computer in the network through the command: \\192.168.20.4\c$ I ...
1
vote
0answers
18 views

CentOS 7 doesn't recognize new Active Directory accounts/settings

I joined a CentOS 7 system to a Windows domain by syncing the time with the DC and running realm join --user=admin@mydomain.local mydomain.local. This allowed me to authenticate my login to the CentOS ...
4
votes
2answers
109 views

When do you need a new AD forest, and when do you need a new tree?

I'm new to AD and Windows Server, and this sounds like it should be pretty obvious, but I can't seem to figure out the distinction between a tree and a forest. According to the book I'm reading: ...
5
votes
3answers
139 views

Check Primary Authentication Protocol for Active Directory (NTLM or Kerberos?) [duplicate]

How can I check, from a client machine (in Global Group)(also is local admin), whether the domain controller is authenticating my login request to the domain using NTLM or Kerberos? I know that ...
0
votes
1answer
27 views

New work server accessing active directory

My Department recently bought a small server running windows server 2008. But given its a business managed server IT refuses to provid e me with any support. At the moment I can only create loc al ...