A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
8 views

Admin Users cannot write to New Custom AD Attribute, Normal Users can

I have extended our AD schema and added a field called TerminalName to the User Class. The logon script gets the ClientName environment variable and writes it to the field. Initially the script got an ...
2
votes
1answer
30 views

Error Creating OU: Name is Already In Use

I have an OU structure for computers that looks like this: Workstations |-- Building | |-- Floor, Department, or Approximate Location ... I want to create a child OU called "3 North" in ...
0
votes
0answers
5 views

Mounting samba directory changes all file permissions to user who mounted it

I have a xubuntu 14.04 client, a debian 8 Samba File server and an external Active Directory service. I log in as user1 on the client authenticating against the ADS with winbind. My home directory ...
2
votes
0answers
30 views

Why do Roaming User Profiles stay at home?

PREFACE: I am a helpdesk operator/student who has volunteered to work on local small business IT problems for experience. I apologize in advance if I have missed an obvious solution! I am attempting ...
0
votes
2answers
26 views

Restricted group local administrators can RDP into DC

I have added restricted groups to my Desktops OU and this adds the "Local Admins" security group to the Local Administrators group on workstations in that OU. The issue is, that after this GPO is ...
-1
votes
1answer
16 views

Increasing Size of VHD having DFSR Data

I have two file servers which are replicating files through DFSR across two different locations over WAN link. I want to increase one of partition size having replication group folders on it. I was ...
3
votes
0answers
62 views
+100

LDAP not preventing disabled users from authenticating

I have an interesting situation where we have the exact same application running in a "Development" environment and another in a "Testing" environment behaving differently when authenticating with AD ...
2
votes
0answers
15 views

How can I change the default location of the Adobe Premiere Pro (creative cloud) media cache location?

Adobe Premiere Pro on Windows machines stores its 'media cache' files in the %appdata% directory. On our network, this is redirected to a server share, and consumes significant amounts of storage ...
0
votes
0answers
28 views

All options greyed out when trying to configure Active Directory Domain Services Windows Server 2012 R2

I am configuring the first domain controller for a new domain. The install of Active Directory Domain Services seemed to go ok, but when I attempt to configure the domain controller it gets stuck on ...
-4
votes
1answer
45 views

Change computer (AD member) password on second computer (VM with the same SID) [on hold]

I have a laptop that is connected to an AD. It tends to be slow so I converted it to a VMWare virtual machine that I can run on my home office desktop. The VM has the same SID as the physical machine. ...
0
votes
0answers
13 views

Must change password during password change AD on SVR 2003

I have a Server 2003 AD (going to be replaced next quarter) with around 100 users, only around 50 or so are active. I've noticed that in the past month, any time a user password expires they are ...
1
vote
3answers
46 views

Store GPO Scripts in Netlogon or Policy Folder?

Is it best practice to store logon scripts centrally in \\DOMAIN\Netlogon or in the policy folder they get put in by default, eg. ...
5
votes
1answer
75 views
+50

NTFS: User can edit/delete files without rights

I have a very strange NTFS rights phenomenon on a fileserver and I cannot find my mistake, pulling my hair out for hours now. What am I missing? My goal is: User from Group-A should be able to ...
2
votes
2answers
56 views

Permissions reset?

I am a developer and I have a Windows Server 2012 development environment. Nothing special, onlyAD and a WebServer are installed on it. Everything is configured with the default values. When I do the ...
0
votes
0answers
10 views

Redirect outgoing ports in windows [closed]

first of all this is my first post so I want to say hello to this community. I want to create an Active Directoy server at home, just to learn how to do it. At home I have configured the server but ...
1
vote
0answers
21 views

Find Active Directory Groups for a specific location

I am a system admin for a site that I inherited from a previous admin. I am currently trying to determine what AD Groups are associated with this site (access to servers, other resources) so I can do ...
2
votes
1answer
20 views

System State Backup on Domain Controller

I wanted to do a one-time full server backup of the Domain Controller. However, there was almost 1 TB of data to backup. So I am just doing a System State backup instead, which is less than 5 GB. At ...
0
votes
1answer
36 views

Samba file server on Windows Domain can't authenticate users - gives “credentials chain check failed”

I have two TurnKey Linux Fileserver 13 (basically Debian 7.3) running Samba to share folders on our mostly-Windows LAN. Samba is configured to authenticate users using Active Directory on our domain ...
1
vote
0answers
29 views

Windows Active Directory and Linux integration: new AD Group does not show up in Linux

In my organization, the support team has created a new AD group for me but it does not show up on any of the nodes in our cluster(using RHEL). I went through this article to understand Windows and ...
1
vote
1answer
28 views

Apache LDAP (Active Directory) not working

I've had some mixed success with Apache and LDAP. First, it is working.. but not entirely. So, a basic LDAP config, it looks like this: AuthLDAPBindDN "omitting this" AuthLDAPBindPassword ...
0
votes
1answer
15 views

Dsquery group –name A* --> dsquery failed:'A*' is an unknown parameter

From here: http://ss64.com/nt/dsquery-group.html Examples Find all groups on the current domain with a name that starts with 'Admin' C:\> dsquery group -name Admin* Find all groups in the ...
0
votes
1answer
33 views

How to secure AD administration with MFA

I'm evaluating an MFA solution such as Duo or Okta (any one have an opinion on that?). Adding MFA to web logins is straight forward but I want to add another layer of security to our Active Directory ...
0
votes
0answers
25 views

Active directory failed connectivity in dcdiag

I have been having some trouble with Active Directory on Windows Server 2012 R2. After doing a dcdiag I can see a fail at the top of the report. This dcdiag was run on the server itself, not a ...
-1
votes
0answers
30 views

Powershell to find conflict objects in Active Directory

We are doing AD remediation in our enviornment with ADRAP tool and received lot of errors. One of the error where I stuck is Conflict Objects. Below is the description. When two or more objects with ...
0
votes
0answers
44 views

Windows Server 2012 has stopped accepting new wksts joining our domain, error 53: the network path was not found

We have Windows Server 2012 R2 Standard as our DC. Several workstations were added to our domain successfully. But then (I cannot determine what exactly could be a show-stopper) it stopped accepting ...
-1
votes
0answers
33 views

Noob Q: Active Directory GPO not applied immediately

What are the reasons why a GPO could take multiple days to apply? What I'm doing is adding servers to a group. The group has a GPO applied to it which determines the members of the Administrators ...
0
votes
1answer
32 views

How do you get detailed information on Active Directory logon failures?

In my domain controller event log, I'm getting an account failure from a username of a service account. The info is: Security ID: DOMAIN\serviceaccount Account Name: serviceaccount Additional ...
0
votes
1answer
27 views

Buffalo Linkstation(NAS) Joining Active Directory

I am using Windows Sever 2008. I have 2 Buffalo Linkstation and there are same problem. Cannot to join Active Directory Domain Failed to join Active Directory Domain. Please confirm the Active ...
-6
votes
3answers
97 views

How to set up Active Directory in windows 7? [on hold]

I just installed Remote Server Administrative Tools (RSAT) on windows 7, and turned features on as mentioned in the installation guide. Now the Administrative Tools have been installed and ...
0
votes
1answer
37 views

Roaming Administrator Profile

I have a 2012 R2 AD server running 100%. A certain group of users need to be able to run programs that require elevation and install programs as needed. I have tried making the user a member of ...
0
votes
0answers
46 views

How to open FileZilla Client in windows explorer?

We have a shared drive (windows 7), and I want to set up a server-client FTP system on office local network, so that people can have access to different folders or sub-folders with permission. I ...
0
votes
1answer
34 views

Do i need a print server at each remote site?

I am planning a network for a project and am wondering how to proceed with print services. This topology has a main office with 2 remote branch offices. I plan to create one domain with 2 remote ...
0
votes
0answers
22 views

AD authentication on Centos7

I set my configuration on centos 6 and it works but when I pushed it on centos 7 it doesn't work. Here is my configuration : # authconfig --test caching is disabled nss_files is always enabled ...
3
votes
0answers
44 views

How to configure Windows to trust a network share using a GPO?

I keep getting the following warning whenever I try to open a share from my DFS. How can I configure Windows (10 in this case) to trust anything under the root of my DFS via GP? It seems odd that ...
0
votes
1answer
18 views

Cannot login anywhere on domain: Profile cannot be loaded

I'm having this issue with one of our users. This is a roaming profile, and I've tried logging in on a few machines, but we're still getting the same error. I did go through cleaning folders and the ...
0
votes
1answer
41 views

Bulk converting AD groupscope from domain local to universal

I have been testing the following command to convert individual "global groups" to "universal", it works fine. dsmod group <GroupDN> -scope {L|G|U} However, is there a way to convert a whole ...
0
votes
0answers
25 views

google chrome group policy locale

We currently have Google chrome deployed in the enterprise. We have an internal website that retrieves data from a database and people using chrome noticed the date and time format was in the US ...
4
votes
1answer
101 views

Get-ADGroupMember $Group fails when $Group contains principals from other domains

I've noticed that when I use Powershell to get the group membership of an Active Directory domain security group, the Powershell cmdlet Get-ADGroupMember $Group fails with the error message: PS ...
1
vote
2answers
38 views

RPC Server is unavailable while trying to promote a domain controller. Open firewall

So I've been scratching my head around this problem for a few days now. This is a quick schema of our infrastructure : Our Primary Domain Controller is running in an hypervisor, in our datacenter. ...
1
vote
0answers
26 views

Is it possible to use Active directory without a trust relationship for FreeIPA passwords?

I am looking to integrate FreeIPA with an Active Directory environment that I do not have full control over and most likely will not be able to get a trust relationship setup with my FreeIPA install. ...
1
vote
1answer
45 views

Check If A Service Account Has Logon Interactive Privileges

I want to loop over all my domain service accounts and make sure that people can't log on the server using that account. How can I check if a service account has interactive logon privileges and/or ...
1
vote
1answer
109 views

how to create a folder on desktop everytime a new user is created?

How can I configure the system so that whenever I create a new user, and automatically available on her/his desktop a directory called "project"?. Is there something related to C:\Users\Default??
9
votes
1answer
73 views

How many FSMO roles are there?

I've always understood that there are five FSMO roles, but sometimes I see something that says there are seven. How many are there, really?
4
votes
2answers
67 views

every 5th AD query is very slow, why?

I’m binding a FreeNAS box to AD for student logins to SMB mounts. That all works fine. I have a bash script that runs on the FreeNAS to build an index.html page pointing to a subdirectory of each ...
2
votes
1answer
33 views

Manually (re-)create Active Directory schema objects msExchRecipientDisplayType and msExchRecipientTypeDetails from Exchange on Samba AD

Somehow, my Active Directory has "lost" (at least) 2 objects from the schema. msExchRecipientDisplayType and msExchRecipientTypeDetails are what I need to recreate. I believe they were lost, because ...
0
votes
1answer
21 views

Windows security event log showing lot of firewall rule changed alert

n my server i am getting lot of event id 4946. A change has been made to Windows Firewall exception list. A rule was added. i am getting this alert every day. can you help me to reslove this. ...
1
vote
1answer
83 views

OmniOS r151018 file server visible in samba4 Active Directory but not in Windows Network Neighborhood

I have a test setup containing: 3 AD domain controllers (set up to replicate between them), all running Samba 4.3 on Univention Corporate Server 4.1 1 Windows 7 SP1 client joined to the domain 1 ...
0
votes
0answers
13 views

Windows 7 delete fingerprint from profile

I'm facing the following situation: I have a computer, joined to an AD with roaming profiles and with fingerprint logon enabled. A problem with a user profile had me delete the said profile and ...
0
votes
1answer
42 views

Group Policy Object not applied to client computer

I am taking over our entire Microsoft based management, this includes our AD servers, GPOs, etc. So with that being said, I don't know everything about how this setup is configured. However, I have ...
0
votes
0answers
27 views

Trying to add user to Active Directory via ldapadd using the admin user fails with INSUFF_ACCESS_RIGHTS

This is the ldif file I'm trying add: DN: CN=John_Smith,CN=Users,DC=ad,DC=example,DC=net objectClass: user CN: John_Smith sn: John givenName: Smith displayName: John_Smith sAMAccountName: jsmith ...