A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
11 views

Preventing Remote Desktop Use for Active Directory Users

Is it possible to restrict the applications that an active directory user can have access to? Specifically is there a way where I can prevent them from using Remote Desktop?
-1
votes
0answers
10 views

where Server in Domain save his Site?

I Had problem in Exchange that the mailbox Database was dismounted, Status was service down, I checked in Event viewer what was the problem, and I saw he doesn't find the Site. I remembered: I change ...
0
votes
1answer
14 views

how to allow remote desktop on one computer and deny on another for the same domain user

This is my scenario. I have two servers. First one is the domain controller. 2nd one is the backup domain controller. Both are windows 2008 R2. I want to setup user permissions so that say userX in my ...
0
votes
1answer
23 views

Active Directory authentication without Kerberos?

A friend of my has a Linux machine hosting Jenkins and a Windows 2008 Domain Controller. He uses Active Directory authentication in Jenkins and only specified the domain name and domain controller in ...
1
vote
0answers
20 views

How do I fix a non-starting “Microsoft Key Distribution Service”? (not to be confused with Kerberos KDS)

The Microsoft Key Distribution Service is not starting on my DC (kdssvc.dll) and when I look at the event log under Microsoft\Kdssvc, I see the events: Event ID 4001 Group Key Distribution ...
2
votes
2answers
23 views

Which symbols to avoid when naming AD DS groups?

can somebody point out to the symbols which is better not to use when naming AD DS groups? I want to have some explanations/links to documentation on why those should not be used. For example Windows ...
1
vote
1answer
28 views

DNS not working on AD DC

I am an IT student setting up AD on a small computer lab. The lab's workstations are all connected to a switch, along with a server running Windows Server 2008 R2. I have installed AD DS and DNS on ...
1
vote
0answers
29 views

Windows Disk Image (sysprep) with multiple domain accounts

I have not a simple problem. I would like to make personalized sysprep (Windows disk image) for more than 50 windows domain account. Suppose I have more than 50 computers with the same parameters, ...
4
votes
2answers
379 views

Are my failed password attempts to different domain controllers cumulative?

If I have two domain controllers (DCs) in my environment and two different computers are used to log in to the separate domain controllers, can the password attempts be exceeded? Additionally, does ...
3
votes
0answers
22 views

Merging Office 365 users with AD DS?

We have just started to deploy a Hybrid Office 365 Solution and we already had some users who signed up to Office 365 themselves, before we had full access to the domain and enabled DirSync. This has ...
0
votes
0answers
15 views

Central windows login and access management windows 7 home network [on hold]

I want to configure my home network computers(7) with following One computer which can act as server for all authentication and access management. I know it can be done with Active directory and ...
0
votes
1answer
16 views

Track down source of event 4771: Kerberos pre-authentication failed

Some process on a remote server is generating failed log-on attempts for a specific user account. I want to know what process it is. The account in question started generating these bad password ...
2
votes
1answer
11 views

Apply Windows Firewall Rule GPO to Computer Group

One of our vendors is requesting that we provide Skype access, which uses specific ports and IPs. In order to facilitate the access, we need to deploy a set of Windows firewall rules. The target ...
2
votes
0answers
19 views

How to find which templates a GPO are using?

With a Windows 2012 R2 AD domain, we have a Central Store for group policy templates. Over time, a number of unnecessary templates were added to this store (most of them are not used) and it has ...
0
votes
0answers
19 views

IBM Domino Directory Assistance with Active Directory

I have added an Active Directory Entry in the Directory Assistance DB. The command "show xdir" shows the new directory as used. The users from AD can login to the web server. But I don't know how to ...
-1
votes
0answers
7 views

Why is my WSUS Server itself appearing in “Unassigned Computers” within the WSUS Console, even though it is in an Active Directory OU?

I have my WSUS linked to Active Directory via group policy. My WSUS server is contained within my "Servers" OU on Active Directory. I have multiple servers in this OU. However once I look at the WSUS ...
2
votes
1answer
27 views

New Domain DC Adds FQDN (including forest) to DNS - Cant Resolve

I added a new domain recently to our AD. It was added using the option to add a new domain to an existing forest. So now we have the original domain.local which is in the forest also called ...
0
votes
0answers
25 views

External Trust broken

I had a network issue on DomainA.local (switches has to be restarted), issue resolved. logged onto DomainA fine, went to click on mapped drive (located on DomainB.local) no access "There are no login ...
0
votes
1answer
21 views

Apache Subversion with active directory authentication not working

I'm trying to configure Apache Subversion with active directory but the credentials of a domain user are not working. I'm new to Subversion but what I had first was: LoadModule dav_svn_module ...
4
votes
3answers
194 views

Can I represent physical rooms in Active Directory?

Given a certain AD user, I want to know what room he is in inside the company. Is it possible to map this relationship in AD? I want to write a software that needs to know the room of the logged in ...
0
votes
1answer
30 views

Updating AD DNS Records Dynamically from Excel Sheet

We have a Microsoft SBS 2011 server at work which handles DHCP and DNS for our company. We have an excel spreadsheet stored in a shared directory on the SBS itself of all the public IP addresses that ...
0
votes
1answer
17 views

I need to find what users where logged on to the network (AD) at a given date and time

I am trying to trace who logged into a server at a given time but the event logs have been deleted for time period I need. Can I get a list of all users logged in to the domain at a specific time?
1
vote
2answers
32 views

New Windows 2012 R2 Server on SoftLayer - AD DS no _msdcs resource entries created

First - Many thanks to any for their support. I feel I am going slightly crazy. I have created a Virtual Machine on SoftLayer. It is Windows 2012 R2 SE. A vanilla/new install. I want this machine to ...
0
votes
0answers
15 views

Set Up OpenVPN with Ldap support on CentOS7

We are trying to set up OpenVPN with ldap support via openvpn-auth-ldap on CentOS7. The EPEL repository is not listing openvpn-auth-ldap anymore for CentOS7. For CentOS6, there was a working relase. ...
-3
votes
2answers
31 views

Demoted the Domain Controller and would like to promote again

I have demoted the active Directory server "dc01"--running Windows server 2012 r2--and would like to promote it again. I also didn't make a note of what FSMO roles it held before I demoted it. How ...
-2
votes
0answers
22 views

Exchange 2013 Incoming email not received with Anonymous Users Disabled

I have a Exchange 2013 server deployed in my Active Directory network that fails to allow incoming email from outside the domain when 'Anonymous Users' is turned on from the Receive Connector in EAC ...
-2
votes
0answers
21 views

Exchange 2013 Receive Connector Scoping and Open Relay

I have an Exchange 2013 server which was a victim of spam infiltration, and the exchange server was being used as an open relay for unauthorized users (and domains) to remotely send spam. I have done ...
-1
votes
1answer
20 views

After reinstalling the Active Directory roles, I cannot see the users and computer objects

I have two Active Directory servers, Server01 and Server02, both of them were in the same domain, both run on Windows 2012 Server R2. Due to some reason, I moved server01 to another office, and I ...
0
votes
0answers
35 views

Finding appropriate service for PC management [closed]

I am looking for a management system similar to Active Directory for a small company (< 20 employees) without the requirement of setting up a server on premises, and preferably with less ...
-1
votes
4answers
39 views

How to create connection between AWS VPC and my PC/LAN?

May be it's little bit odd, but yes i want to make connection between AWS VPC and my PC/LAN, so i can ping any EC2 instance using their Private IP. More Details: I'm using AWS Directory Service(DS) ...
0
votes
2answers
37 views

Active Directory passwords not syncing with Office 365

User passwords set under Active Directory are not syncing with Office 365. i.e. users cannot login to the Office 365 portal with their domain passwords. The Directory Sync tool is installed on a ...
-3
votes
0answers
45 views

Windows 10 not allowing admin privileges to help desk account [closed]

I have created a Active Directory domain using Samba 4 on CentOS 7. I have created an account specifically for doing "admin" stuff, it is in the Domain Admins group, Enterprise Admins and a group I ...
0
votes
0answers
31 views

Firewall & DNS issue

Server: Windows Server 2008 R2 When firewall is running on the DC no machines can resolve DNS which is running on the DC. It also prevents AD user logins. It also prevents Group Policy update. ...
1
vote
1answer
29 views

LDAP & RPC Causing A/D Issues

Having an issue with authentication on my network. Running Windows Server 2008 R2 Layout: Network is a non internet connected network using DCs running DNS/AD/File Sharing. NO DHCP all addresses are ...
0
votes
0answers
12 views

Config passwordhook.dll in ws 2012 r2

Do you have any ideas how should i configure the "Environment" value in passwordhook.dll ? The available documentation for this dll is not so good. Right now, i'm using my Path from Environment ...
7
votes
1answer
59 views
+250

Kerberos service login only possible for 30 minutes after running ktpass.exe

I'm trying to Kerberize an Apache-server, and allow the created server principal to sign on to the Active Directory. I've followed one of the numerous tutorials available online, and it seems to work ...
4
votes
1answer
62 views

Is there anything wrong with adding a computer to AD before joining the computer to domain?

I've always been taught to stage a domain join: Add the computer to the domain (via AD Users and Computers), in the right area, and then join it. Is there anything wrong with that?
0
votes
0answers
22 views

Logon To not working

I'm trying to use "Logon To" in AD to restrict remote access to computers. (I only have a few users and require a very simple solution). I want each individual user to have access to a specific list ...
4
votes
1answer
30 views

Is there an easy way to set up Active Directory Constrained Delegation for all Domain Controllers

We've worked through configuring AD constrained delegation for a service account in our domain, and we've gotten everything to work in principle. However, to do so we had to set up LDAP delegation to ...
1
vote
1answer
26 views

Group Policy Map Drive to Display Name

I'm trying to create a Group Policy to map users Home Drives among others when they login. All the other drives are mapping fine, however because of the way in which the usernames are formatted, I've ...
0
votes
0answers
15 views

Windows AD server allows communication with-out LDAPs

I have a windows server 2008 AD setup with LDAPs signing requirement. I try a simple bind (through port 389) it is getting blocked as expected. But when I try a bind through 636, the ldaps port, It ...
0
votes
1answer
36 views

How to remove any remnants of NT from your windows domain?

Even though our domain has been renamed to company.com there still seems to be remnants of COMPANY_NT in different places. For instance, in remote desktop the domain still displays as "COMPANY_NT" and ...
0
votes
1answer
15 views

sssd using remote ad servers instead of local ad servers

I am using sssd to join Redhat servers to a windows server 2008 r2 domain. Most of the time things work fine but I have noticed that sssd is trying to reach remote domain servers instead of being ...
0
votes
0answers
21 views

LDAP NET-IQ DRA (Active Directory) Group member of does not work

I am trying to list a couple computers, that do not have a specific group membership. This is what I have at the moment: ...
-1
votes
1answer
31 views

Active Directory DNS and Forest Root Domains [duplicate]

I am a little confused on the proper active directory configurations for the forest root domain. Recommendations call for using corp.example.com or internal.example.com. However, what is the best ...
-1
votes
0answers
17 views

AD searching returns users with incorrect domain name

This is a strange one so buckle in. I have a domain, company.com with pre-2000 name of ASDF. Occasionally we have an issue where when searching for a user to apply to a security ACL it will return ...
1
vote
0answers
9 views

Effective permissions for a shared mklink to a non-shared folder and subfolders

What are the effective permissions if you share a symlink but not the folder it points to? From what I can see, there are 3 sets of permissions: 1) the target folder permissions 2) the symlink ...
2
votes
1answer
23 views

Group Policy settings for account policies disappeared

Looking for any ideas, we discovered that our group policies (default policy) was no longer applying our account policies (password age/complexity/history etc). Our DCs still had the local policy ...
1
vote
1answer
40 views

Is there an Effective Permissions option for “Administrators” group on a Windows server?

A file or a folder in a Windows server has the option of Effective Permissions or Effective Access where you can provide an user or a group and it will check what kind of permissions this user has. ...
0
votes
1answer
40 views

join vm to domain in vpc on aws

I have created a Virtual Private Cloud(VPC) on AWS. I have created two Windows Server R2 machines. One of them I have added Active Directory role and promoted it to a Domain Controller. I want to add ...