Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

0
votes
0answers
7 views

Domain controller not allowing me to connect to it over IPSec tunnel

I'm trying to connect a Windows 7 computer to a domain controller over an IPSec tunnel. The tunnel has formed and the network is accessible. I have set the IPSec connection to use the windows domain ...
-3
votes
0answers
17 views

missing computer account cant join to AD

I have megait.co.za server 2008 r2 domain controller. i created a win7 called internet vm. when i tried joining it i got "No mapping between account names and security IDs was done". tried sysprep. ...
2
votes
1answer
56 views

Remotely determine how long a user has been idle

How do I determine how long it's been since a user with files opened on my server has been actively using their workstation in a Windows Active Directory environment (XP, 7, 8 clients and Server 2008, ...
0
votes
1answer
17 views

How do I make browser shortcuts w/custom proxy settings available on user desktops?

In our environment, we have about 30 testers (website testers) located at different physical locations. However, they all log on to the same AD. As it is now, their MSIE is configured to access the ...
-1
votes
1answer
29 views

Setup Domain Controller and Active Directory on Amazon EC2 as Primary AD [on hold]

I am planning to deploy an Active Directory and Domain Controller on AWS for my company. It will primarily be used for these: User Authorization (Login/Logoff Process) File Sharing / Management ...
4
votes
1answer
69 views

Exchange 2013 Setup fails - Couldn't find the Enterprise Organization container

I'm working on an Exchange 2013 CU6 installation at a site whose AD was comprised of two Windows 2003 domain controllers (in an odd HA cluster configuration). New Windows 2012 R2 DCs have been ...
0
votes
0answers
30 views

Server 2008 folder redirection not working on local domain controller

I have set up folder redirection using the default domain group policy for users connecting to our domain. Folder redirection works fine when users login through their client machines. When I attempt ...
0
votes
0answers
7 views

Lync 2010 - Search Returns “Presence Unknown” for E-mail Address

I've inherited Lync infrastructure and my knowledge of the product is limited. This issue appears to affect only one account. Searching for the specific account on a Lync 2010 client returns ...
0
votes
1answer
27 views

Adding a new Exchange 2013 mailbox from Powershell error

I am trying to add a new mailbox via the Powershell and I get the following error: #New-ADUser -Name AreallyTest -SamAccountName AreallyTest -AccountPassword (ConvertTo-SecureString Password1234 ...
3
votes
1answer
84 views

Better to share File Services role with Active Directory DC role OR with the RDS Terminal Server role?

We are a small business setting up a new server... budget is limited of course. I have ~500GB of data to share that needs to be stored locally on the single server we have. Host Server: Dell ...
1
vote
2answers
51 views

relationship between user and computer

I have been using Get-ADUser and Get-ADComputer a few times to help troubleshoot problems in the system. I have seen a few ways of identifying which user is logged on a specific machine through ...
1
vote
2answers
41 views

active directory structure and replication for dummies

I have to install an Active Directory environment for our company and it would be the first from scratch installation one for me, so I have questions, basically about the structure. First some ...
-1
votes
1answer
25 views

Duplicate computer name but one of them with SID

I have seen duplicate computer name in AD. e.g. One PC was call 456 and the other called 456 cnf:850255521 Why they are two same PC name, I have ask everyone but know one knows why. Can someone ...
0
votes
0answers
9 views

SQL Client failing SSL certificate encryption under a AD Domain

I have a client machine (web server) that is attempting to connect to a SQL server. The SQL server is 2008 and has the force encryption flag turned on. Both servers are joined to the domain. The ...
1
vote
1answer
46 views

My Active Directory replication settings don't look right

I have recently added a new site to my Active Directory domain (single forest, single domain). I have mapped subnets to the sites, and added one DC to the new site with our remaining 4 on the original ...
4
votes
2answers
27 views

Joining a NetApp to a domain on a Read Only Domain Controller

I have an isolated network, into which I've built a vfiler. The point of this network is that it's a non routed 'test' network. However, there's a need for LDAP/Kerberos and CIFS access to the ...
0
votes
1answer
28 views

Remove PCs older than X days from Active Directory [duplicate]

I am trying to remove all of the older computers that AD stores that have not been active for 60 days. I just started working with AD recently and noticed that the AD has not had a proper cleanup in a ...
0
votes
1answer
44 views

Powershell script for specifically OU

Need help with hte following, a script that can export all members of a specifically OU with in that multiple security groups. Location of the OU is; OU=Security Groups,OU=Public ...
-2
votes
0answers
38 views

Active Directory/Domain Controller cannot resolved DNS Forwarders, AD/DC and client cannot connect to the internet

I am having an issues regarding the DNS/DNS forwarders, my Server and Client can't connect to the Internet(can able to join the Domain). I have listed the ISP DNS to Forwarders, but can't resolved. My ...
0
votes
0answers
7 views

Do kerberos constrained delegation with protocol transition on IIS to another IIS need my own application for very simple redirect

Please excuse me if its a very basic question but i'm totally lost on this as Im new to IIS and kerberos delegation but have understanding of auth protocols. Need you peoples help please as i have ...
0
votes
1answer
47 views

Powershell use Get-WinEvent with hashtable to query very specific time range

I'm trying to make a powershell script that essentially automates the account lockout tools. ideally I'll be able to get a fairly efficient query that can identify recently locked out accounts then ...
0
votes
1answer
30 views

Pre-Moving user files prior to folder redirection to new folder

I have folder redirection in place at the office I work for. The user files currently reside in a folder on my file server. I am in the process of reworking the GPO and AD structure to facilitate ...
2
votes
1answer
26 views

GPO's between domains with a trust relationship

Is it possible to apply a GPO from one domain to another domain with a trust relationship? We have a GPO that adds a management security group to the local admin group of domain joined computers. My ...
0
votes
0answers
23 views

Need set of event ids that occurs in event viewer during file creation event

I need the set of event ids that occur in the event viewer when I created a file in shared folders (auditing was enabled for the folder) in domain controllers. I know the fact that the event id 4656 ...
-2
votes
1answer
24 views

Active Directory Server how to be cautious [closed]

My company has provided us laptops. We used to use them normally but suddenly my company has announced they have installed Active directory server. We all have to shift to that server. The requirement ...
1
vote
0answers
29 views

Set SPN for all users in domain

I have a Windows 2008 R2 domain controller with more than 60 user accounts. Each time one of these users tries to connect to the DC authentication "falls back" to NTLM. Kerberos authentication fails ...
0
votes
0answers
11 views

SQL Reporting Denying Access to User After Move to New Group

We have a SQL Server 2008 server setup with reporting services so that users can log in and run certain reports. I have a user that was granted browse permissions to this as we had their initial ...
0
votes
1answer
22 views

Will a Windows server 2003 operate on a domain functional level 2012 domain?

I have found plenty of articles that address Server 2012 R2 on a functional level 2003 domain. What I haven't been able to find is anyone addressing weather or not a 2003 server would be fully ...
2
votes
0answers
36 views

Sysvol replication broken between Server 2008 R2 DCs

We recently added a second DC to our network at a different site. The DCs do not appear to have any difficulty communicating via the network, and AD objects (users, computers etc) are synchronising ...
3
votes
0answers
50 views

Import Powershell AD Module during MDT Task Sequence

I have written this short powershell script to rename a computer as part of an MDT task sequence: Import-Module ActiveDirectory $AdminUsername = 'domain.com\administrator' $AdminPassword = ...
1
vote
3answers
162 views

Active directory rename computer that has been disconnected

We named a new computer on the domain USER-2014. The computer was for someone who already had a computer on the domain called USER. We discontinued the old computer with name USER and are now looking ...
1
vote
0answers
19 views

Account Operators built in group and “User Cannot Change Password” property

I have a question about configuring of "User Cannot Change Password" property. Does default "Account Operators" domain group has ability to change this property? If not can it be delegated via AD ...
0
votes
0answers
9 views

How do I use simple_allow_groups with AD groups that have no GID in CENTOS 7

We just built a few test CentOS 7 boxes, and the configuration that we were using for 6.5 is not working for us. As best we can tell, it comes down to using simple_allow_groups and using AD groups ...
0
votes
1answer
20 views

Replication Issues in Active Directory - Computer Objects showing up in multiple OUs

There seems to be replication issues in the domain , but there is a strange occurrence. Some computer objects are moved to a different OU ; after a day when i searched for those computer objects in ...
0
votes
1answer
33 views

Active Directory SQL Server Random Handshake Timeouts

We've installed active directory on a new server and joined our database server and web servers to this new domain. However, randomly, we'll get the following error. What would be the cause of the ...
0
votes
1answer
42 views

One Certificate to Rule them all [closed]

I'm looking to roll out Exchange 2013. We also have various web facing properties. We have an internal domain name of ourdomain.local and an external domain name of ourdomain.com. To keep things as ...
2
votes
1answer
32 views

Submit a certificate request file from a non domain computer. How to figure out policy server parameters

I'm trying to submit a certificate request. I'm trying to do it from command line so I can run it from code. Previously I have done it by using the Microsoft Active Directory Certificate Services for ...
1
vote
1answer
30 views

Exchange 2010 - Remove AD User, Keep Email

We have a normal active directory user synchronized with an exchange mailbox. Is there anyway to keep the mailbox & all the email, but remove the active directory account, or prevent the active ...
2
votes
3answers
186 views

Creating a multi-tenant AD environment

We currently have the following environment (hosted on server 2003 and terminals servers on 2008 R2) and we need to upgrade this to their 2012 versions. We will create a new environment from scratch. ...
0
votes
2answers
44 views

How to copy/export live domain controllers to a test environment?

Let me explain out scenario: We have a totally virtualized live production system running all the production VMs in a Microsoft Failover cluster. The interesting VMs for this questions are the Main ...
1
vote
1answer
52 views

All networks (public + private + domain) became domain networks

I set up a new environment on a dual-nic set of servers. One of the physical networks has access to the internet, and uses public IP addresses. The second network is an internal network, no internet ...
0
votes
0answers
23 views

Impersonate and NT AUTHORITY\ANONYMOUS LOGON

I've written a little TCP C++ server which globally acts (almost) like a simple HTTP server. This server runs on a win2008-r2 domain controller. When a client (which is a valid user of the domain) is ...
2
votes
1answer
52 views

Is there an easy way to add yourself to an Active Directory group, with only Add/Remove Self permission?

At my work where there is an Active Directory / Exchange / Outlook setup (sorry I'm not a Microsoft pro), I'm trying to set up a distribution list to act like a mailing list. That means users should ...
0
votes
0answers
19 views

SSH from Windows to Linux with certificates generated by a central PKI stored in AD

I would like to have a central PKI where certificates are issued for all sorts of services and devices as well as users. I would like to push these certificates to one or more active directories. (so ...
0
votes
1answer
32 views

Active Directory User Not Seeing Public Folder

I'm putting shortcuts into the All User folder, and the Administrator of the PC can see it, but the AD user can't. Is there some setting I'm missing or what? Using Server 2012 Datacenter R2 and Win 7 ...
0
votes
0answers
27 views

RPC Ports getting reset to 5000-5002 on reboot

I've run into a very common issue with RPC Endpoint Mapper ports not being available. The default RPC ports are 5000-5002. When I edit the registry and set the ports to a wider range (say, xx100 - ...
1
vote
3answers
67 views

Batch script to export info from Active Directory (name, phone numbers, location, etc) into a csv file

The secretary at my work uses a spreadsheet that lists names, phone numbers, and locations of employees to look up info if someone asks. All this info is located in AD, but the problem is that we are ...
0
votes
0answers
14 views

EFS decrypt access denied

I have a very weird behaviour here on a Windows 7 box (in AD). The user has (good boy) stored the files encrypted with EFS on his local disk. When he wants to open a file, e.g. in Word, he receives ...
3
votes
0answers
46 views

How do I enable SAML Passive Authentication in ADFS 3.0?

For several years, I've used ADFS 2.x as a SAML IDP that works with SAML Passive Authentication. When the isPassive=true flag was set on the Request, the Response would include the following ...
0
votes
0answers
28 views

Strange behavior from demoted DC

We used to run our own domain (referred to as OLD) but are now in the process of completely removing it and using the campus wide domain (referred to as CAMPUS). We have 2 DCs still active for our ...