A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
1answer
7 views

ADWS on Server 2003 Base

Got a hard one to deal with here. I am trying to install web services on Server 2003 SP2 (x86/ base NOT R2!) but when I install it I am getting errors with the resulting Log: 0.031: ...
0
votes
2answers
23 views

Active Directory 2003 32-Bit to 2012

We're moving from a Windows 2003 32-Bit AD setup to a 2012 R2 environment. My question is whether or not I need to do the upgrade in a step-wise fashion: first to 2008 and then to 2012. I've read ...
0
votes
2answers
33 views

How domain authentication works if both local administrator and Domain Administrator have the same credential

I have gone through the detailed architecture of Windows Interactive logon procedure both for local and domain login. But one thing I am not sure how actually it works when: My system is part of a ...
0
votes
0answers
33 views

Windows AD Having Problems Removing Dead Domains

I need some ideas on how to proceed so I'm asking those who likely know more about AD than I do. The windows person quit, so I've been tasked with figuring out how to do this. The prior admin ...
2
votes
1answer
170 views

Easy way to resurrect numerous AD clients powered off for 2 years?

I have a pair of active directory domains with a one-way trust where I am attempting to revive some servers (~12, so automated steps would be handy but I can manually do everything if necessary) that ...
0
votes
0answers
18 views

Dynamic Distribution Lists per-group

It's my first time digging into MS Exchange 2013 and I need to do something like this: Each group I create needs a distribution list. Here are the groups and their assigned users: Group1 User1 ...
1
vote
2answers
39 views

Should my exchange server also be a domain controller?

Please be kind in your response I'm no expert. I just want to know if it's a bad idea or good idea for my Server 2012 server that has Exchange 2013 to also be a domain controller. We currently have 3 ...
0
votes
1answer
36 views

Windows 2000 Server: cannot access domain from PDC

I am still running a windows 2000 domain and recently clients could no longer logon due to Cannot Contact Domain type errors. After verifying ip connectivity to the domain controller, I was able to ...
2
votes
0answers
29 views

Tracing Untraceable AD Account Lockouts

A user (we'll call them 'username') keeps getting locked out and I don't know why. Another bad password is logged every 20 minutes on the dot. The PDC Emulator DC is running Server 2008 R2 Std. ...
0
votes
0answers
28 views

DCPROMO Error: DNS name does not exist."(error code 0x0000232B RCODE NAME ERROR

Our schools has two domain controllers running Server 2008. One DC experienced issues forcing us to demote the system. We are now trying to run DCPROMO and experience the below error. The domain ...
2
votes
2answers
25 views

Active Directory - Make sure users who are never on premises receive AD policies on a regular basis

I have a few users in the field 100% of the time. I would like to have them authenticate to AD so that policies like Password changes and even maybe group policies are applied regularly. I want to ...
2
votes
2answers
221 views

What problems result from servers not time-sync'd?

What problems might arise within a domain when the member servers are not properly time-sync'd? I'm aware that log entries are incorrect making troubleshooting more difficult in time-sensitive ...
0
votes
0answers
23 views

How to integrate Active Directory with OpenBSD using ypldap and login_ldap?

How do I make OpenBSD authenticate to Windows server 2008 R2 Active Directory structure? I currently have installed Identity Management for Unix (IDMU). Also I have installed login_ldap in OpenBSD. ...
0
votes
1answer
39 views

Creating AD user accounts for workstations in different sites

I am intending to set up user and administrative accounts for all workstations in my company (a small one). The company has 3 offices located in different locations, connecting to different Internet ...
1
vote
1answer
24 views

htpasswd: unable to update file

I am trying to add a new user to authenticate to Apache2 (httpd) through Active Directory. The user already exists and belongs to a domain. I am essentially following the instructions in this Apache ...
0
votes
1answer
20 views

Active Directory Trusts

I have a small issue that I am running into for three of my SQL users. My current AD Structure is like so: Europe Domain (lets go with europe.com) US Domain (lets go with us.com) US Testing ...
0
votes
1answer
29 views

Apache - Multiple AuthLDAPURL

I currently have my vhosts setup to authenticate via LDAPS via Apache reverse proxy . I am wondering if it's possible to add a backup/fallback LDAP server if my primary one goes down. I tried working ...
0
votes
0answers
4 views

What is the best practice to grant permissions to ressources in a unidirectional trust?

I do not understand, at all, how I am able to grant permissions in a unidirectional trust, between two forests. In that trust there are two forests. You see that forest01.local is the trusting domain ...
0
votes
0answers
10 views

Not received replication information orphaned domain controller win 2008 R2

All 3 our domain controllers in 3 different sites keep generating the same active directory error. This directory server has not recently received replication information from a number of ...
2
votes
2answers
27 views

AD Powershell Module to retrieve from AWS Directory Service

I know using AD module for powershell we can retrieve domain computers details and export it as csv. But I have my domain in AWS directory service and I have a computer under this domain. I tried ...
1
vote
1answer
20 views

DFS Using Domain Alias

Client has SuperVeryExtraLong.com AD domain so a DFS namespace becomes \\SuperVeryExtraLong.com\foo with a minimum of 29 characters. This is a problem with the 255 character path limit. Is there a ...
7
votes
2answers
67 views

How to recover data from an Exchange 2013 database after a complete Active Directory loss?

Scenario: a single Exchange 2013 server in a Windows Server 2003 AD domain; one DC malfunctioned months ago and was dismissed (without proper demotion, no less); the other DC died yesterday and there ...
1
vote
1answer
25 views

how to find the “Remote Desktop Connection Broker” server in a Windows Server envrionment?

I am about to setup the licensing for the Remote Desktop server and point it to the licensing server. Problem is, I am not sure if this environment even has a connection broker server installed or do ...
-3
votes
1answer
39 views

How Active Directory identifies a computer? [closed]

I have no administrative rights to AD in my company. I have also a virtual machine (based on Virtual Box). I want to plug it into the AD with the same identity as my PC has. How AD domain controller ...
0
votes
1answer
59 views

How to find out all users and their details using a single line command on windows server 2012 active directory? [closed]

I would like to know if there is a single line command in dsquery or LDIFDE or any other command to fetch the details of all the users in all the domains in my Active directory.
-3
votes
0answers
16 views

Active directory files and folders [closed]

I went an interview for administrator, they have asked what happens after dcpromo, and what are files will create, what is the active directory physical storage structure & fSmo physical storage ...
0
votes
0answers
17 views

CentOS 7 Automated SSL Generation from Active Directory

I have an Active Directory Server setup for Certificate Services. I am able to manually generate certs as needed. However, I need to find a way to automate the sending of the cert request to AD and ...
8
votes
3answers
140 views

PowerShell: Get-ADUser Properties with åäö

I'm trying to extract select sets of users with Get-ADUser. The users belong to companies whose names include non-ASCII characters, e.g. "Gåäördet". Unfortunately, we do have to use the company ...
0
votes
0answers
13 views

How to get root CA certificate in windowsserver 2012

I am trying to connect to W2k12 server AD from my local unix box using net::ldaps. There seems to be CA certificate issue, as openssl s_client -connect AD.server.ip:636 is failing: [root@rh64-0 ~]# ...
0
votes
0answers
18 views

Why I need to login two times to apply changes to AD group membership or GPO filtering?

If I add a user to a group in AD, to reflect that change on a computer (see it on gpresult in security groups), I need to sign in and off the user session two times. Also the same happens when I add ...
0
votes
0answers
16 views

How to set cups quotas per users on centos from active directory domain?

How can I import cups users from active directory domain which is installed on windows server 2008 R2 and set quotas per users on cups printing server which is installed on centos 6.6 ?
0
votes
2answers
44 views

User's AD account deleted then recreated, now cannot access TFS

I have a user who a couple months ago had access to our Team Foundation Server (TFS) 2013 instance (he was able to access queries, work items, backlogs etc via the web interface). Recently, we needed ...
0
votes
0answers
20 views

Cannot search for user and groups in a trusted forest. Server asks for password of trusted domain

I am currently familiarizing myself with trusts.On each of two Server 2012 R2 I installed a domain controller in a new forest. dc1.forest01.local, 192.168.10.10/16 dc2.forest02.local, ...
1
vote
2answers
42 views

Windows 8.1 locks account after 3 invalid attempts even if GP is not defined

I mistyped my password three times today, and my account became locked on my windows 8.1 pro workstation. I checked Resultant Set of Policies (rsop.msc) and all three relevant settings are "Not ...
0
votes
2answers
49 views

Windows refuses to add an additional DC

I am trying to add a second DC to my network. It seems to go well: I install AD DS on a second server, I enter my credentials and the domain, and the domain is shown. I choose it, but when I click ...
2
votes
1answer
50 views

Install Active Directory PowerShell module on Windows Server 2012

I need to install the AD PowerShell module on Windows Server 2012 but I can't afford for the server to restart during business hours. My question is can the AD module be installed from Add/Remove ...
1
vote
1answer
25 views

Disable anonymous bind to an Active Directory on Windows Server 2012R2

I have set up Active Directory on a Windows 2012R2 machine. I have been trying to disable Anonymous Binding to the AD but have not yet figured out how to do that. As a result, I am able to do bind to ...
1
vote
2answers
61 views

Replace DC/DNS in Active Directory

I have just tried to replace one of my domain controllers in a single domain forest keeping the old IP (But a new computername). As this is an environment I have "inherited" from a previous sysadmin I ...
0
votes
2answers
19 views

Is it possible to delegate AD FS admin functions via a web interface?

I am looking at IAM for a SaaS application. The application will have client organisations accessing it and each organisation will want to manage their own users, permissions and roles. Of course only ...
1
vote
2answers
50 views

create my own active directory in a EC2 instance of Windows 2012 in AWS?

I have been using Azure where I could use one of the Windows VM as a domain server with AD sitting in subnet 1 while others VMs sit on the subnet 2. So far so good. Now I am building the similar VMs, ...
0
votes
0answers
23 views

Group Managed Service Accounts: -PrincipalsAllowedToRetrieveManagedPassword

So the documentation for creating gMSAs says that the parameter "-PrincipalsAllowedToRetrieveManagedPassword" should restrict the ability of using the gMSA to the machines that are part of the ...
0
votes
2answers
29 views

disable logon to active directory with a blank password

I have set up Active Directory on a Windows Server 2012R2 instance. I have written a basic application which I use to authenticate to the AD. Basic authentication works, but I noticed that I am able ...
4
votes
1answer
35 views

Re-install ADCS CA Certificate & CRL on Workstation

I installed Active Directory Certificate Services and created a Standalone CA. Everything went fine and it automatically installed the CA certificate and CRL on all my domain workstations. On one of ...
0
votes
1answer
33 views

How to block incoming ports using group policy in active directory windows server 2012

We have a domain, and there are some computers in this domain. we applied some many policies like password policy and etc to this domain which makes it easier for us to control the use PC in our ...
2
votes
1answer
30 views

Prevent windows from assigning certain drive letters

After configuring our network to use certain drive letters, I bumped into a problem when at some times, some of our users plugs one or two USB disks to the computer before boot. Windows then, ...
0
votes
2answers
67 views

WIN 2012 DNS Issue

I am troubleshooting an issue with the dns server on the main DC in our forest. I ended up at this point while trying to get a second controller up and running. Current results for dcdiag /test:dns ...
0
votes
1answer
28 views

Active Directory in EC2: Can't create new users

I'm trying to set up a series of EC2 instances running Windows Server 2012 connected with Active Directory. This is a new AWS account and I've only done the following: created a VPC with a public and ...
1
vote
1answer
87 views

Samba 4 (Ubuntu) Administration (Active Directory) via RSAT using Windows 7 error

I want to administrate Samba 4 (Active Directory) via RSAT (Remote Server Administration Tools) using Windows 7. I have installed the RSAT and opened the "Active Directory Computers and Users" tool in ...
0
votes
1answer
36 views

mmc.exe blocked by group policy

I am changing some permissions on a small work network that I've been playing in. Domain admin and administrator permissions were so tied up that they essentially were the same account. After getting ...
-2
votes
0answers
16 views

EventID 1521 for local profiles

at our small business we run an active directory (windows server 2012 R2) with about 15 clients. all windows 7. the roaming profiles work fine but when i try to log in as local administrator on a ...