Active Directory is a directory service created by Microsoft for managing Windows environments. It is used for: A centralized Authentication/Authorization source for Kerberos and NTLM protocols. Providing a single authentication/authorization domain for member servers and workstations. Providing ...
1
vote
1answer
15 views
SBS 2003 Distribution Group not showing up in Active Directory, but it still works
Under the "MyBusiness" object in Active Directory we have our "Users" folder where I can see all our users as well as all our distribution groups -- except one particular group. Let's call it ...
1
vote
1answer
37 views
Determine what is running under a given logon SID
One of my domain controllers is an abnormally large number of windows auditing events. The common thread I have been able to identify is that 90% of these logs share a common logon guid.
These ...
1
vote
2answers
38 views
Active Directory Integration over VPN
I recently started working as a network admin for a company who has 2 locations and we use a VPN to connect them. We need to set up an Active Directory and Exchange Server at the second location to be ...
5
votes
1answer
55 views
Two ways of deploying printers via group policy
I've noticed two options for deploying printers via group policy:
Create and link Group Policy in GP Management, add printer(s) via User Configuration > Preferences > Control Panel Settings > ...
0
votes
1answer
34 views
Inconsistent information in Active Directory Members and Member Of properties
I'm trying to get a list of the members of a group in Active Directory. I'm using LDAP queries, but I think that's not relevant. I've found what I believe to be an inconsistency in Active Directory's ...
0
votes
1answer
32 views
Migrating Data between servers but keeping permissions
I need to migrate my shares from an old Server (server2003 DomainA.co.uk) to a new server (2008R2 DomainB.Local) these are on different domains. My major problem is I need to keep share permissions on ...
0
votes
1answer
34 views
SharePoint Server 2010 change Domain Controller to RODC
i'm struggeling with the SharePoint Server 2010.
I moved my SPS 2010 into a DMZ within the same site as my RODC.
The SPS 2010 should get AD information from the RODC, but however, it dosen't, since it ...
1
vote
2answers
24 views
Windows Server 2003 - How to control sleep settings through GPO?
Is there a way to control sleep / power settings in a Windows Server 2003 AD via GPO? Ideally, without installing anything on the client, or running scripts on the client?
Ultimately I am looking ...
0
votes
1answer
40 views
Is it possible to switch to Kerberos only Windows domain
Is it possible to configure both Windows servers and workstations (Windows 7) to use only Kerberos for authentication and not use NTLM for authentication within the Domain?
I was told that Kerberos ...
0
votes
0answers
18 views
Active Directory: How to create an Outlook Importable address book from certain users?
We currently provide our users with a CSV file with contacts for all our locations. This CSV file is then imported to Outlook so one has all of the current employees.
The problem is that there is no ...
0
votes
0answers
18 views
Dynamics CRM 2011 Multi-Tenant Active Directory issue
I've been tasked with identifying the needs and lab-simulating a hosted Dynamics CRM 2011 multi-tenant solution. I've read through the 'Service Provider Planning and Deployment Guide', however I'm ...
2
votes
2answers
68 views
How to allow some (non-admin) users to edit address/phone properties for all AD users?
I need to allow HR people to edit some attributes for all Active Directory users (phone numbers, address, and similar contact informations), without giving them full administrative rights. They will ...
2
votes
1answer
82 views
trying to add multiple computer accounts to an AD group using powershell
I'm trying badly to add multiple existing computer accounts to an AD group and i've tried the following syntax's but none worked:
Import-module ActiveDirectory
foreach ($c in Get-Content ...
0
votes
1answer
18 views
Does AD LDS support account lockout?
Does Active Directory Lightweight Directory Services support account lockout like how the full Active Directory domain services does?
0
votes
0answers
19 views
Windows 2008 Active directory Backup/Recovery not working
I successfully backup windows server active directory using Windows Server Backup. After restore the user credentials for the active directory is not working. Users can not login to server.
Please ...
1
vote
2answers
64 views
Listing all windows machines names and IPs
I would like to list all machines names from a domain and their current ip if they are online.
I am thinking of using dsquery on the domain controller to list all machines.
I am wondering:
Will it ...
0
votes
0answers
29 views
Accessing an Exchange server from two domains in the same forest
I made two domains, dc2.com and dc2.com, in same forest. I installed a DNS server in every domain.
I want to install an Exchange server in one domain then access this Exchange server from two ...
-1
votes
1answer
24 views
Two SQL Server Instances / Two Different Domains
We have two different active directory domains. Is it possible to have to SQL Server 2008 instances running on the same machine and have each instance tie to a separate domain?
4
votes
3answers
102 views
Active Directory in the cloud
My company is considering implementing Active Directory and Windows Server to manage our local network and workstations. The main benefits sought are central management of machines, security ...
0
votes
2answers
35 views
GPO: How to determine why an .msi didn't install via Active Directory
I've created a GPO to push out an .msi packages to PCs in a particular OU. I've confirmed that:
the target client PCs firewalls are not blocking traffic
the folder containing the .msi is shared on ...
0
votes
2answers
23 views
EDB repair in SBS exchange 2003
One week before in our HP PROLIANT ML370 G5 server with RAID5 one hard disk turned amber and we removed and it is working under degraded state until now.
Yesterday morning our users in the domain ...
0
votes
0answers
15 views
MSCS Limitations
I'm building SQL Server 2008 R2 MSCS cluster to consolidate all of my old Physical servers,
As far as I can see to build a shared SQL Server cluster database consolidation project, it is the Drive ...
2
votes
1answer
45 views
+100
Linux acls uses wrong gid for domain groups, but numerical gids ok
Please see edit below, as it turns out that the problem is with uid/gid to sid mapping and shows a workaround that will help understand the problem more quickly.
We have a Ubuntu 11.04 server ...
1
vote
3answers
68 views
Does Windows DNS automatically register all domain members?
I wonder if a Windows Domain DNS Server should register any Domain Member in general? I notice that this does not happen if the DHCP is an external system and not aware of the internal DNS Server.
...
1
vote
1answer
21 views
windows server 2008 standard: script for modifying account lockout policy for AD
I am currently preparing for some setup procedures for active directory setup. The servers are installed with default policy which includes account lockout policy. However, the setup requires user to ...
1
vote
1answer
18 views
Certificate Enrollment Control has stopped working on localhost AD CA server?
I'm having strange issue with my current AD CA server, when I try to generate a certificate by using the url https://localhost/certsrv/certrqma.asp I got the following error eventhough I did the ...
0
votes
1answer
28 views
Sync identity account with AD password changes
If I change an AD account's password which may be an IIS7 app-pool identity account, the app pool will not use the new password. IIS7 requires manually typed passwords, unlike software like SQL ...
1
vote
0answers
21 views
VMware View - Netlogon Errors from Linked-Clone Virtual Desktops
I am in the process of deploying View 4.6 using linked clones and non-persistent desktops. Desktops are set to delete and be recreated when users log out.
I am seeing my domain controller logs fill ...
4
votes
1answer
34 views
Adding a new location through Active Directory. How should it be done?
Our entire Active Directory forest is currently on a single 10/8 private subnet. We're looking to migrate most of our servers to a cloud provider, but I'm not sure how to set up the first domain ...
3
votes
1answer
22 views
Change what fields are copied when copying an account in Active Directory?
I've noticed that all of the address with the exception of the street address is copied when copying an Active Directory user account. Is there a way to change this? We're currently running a 2003 AD ...
-3
votes
1answer
49 views
Group Policy / Roaming Profile Issue
I am running a Server 03 DC and this is happening on a Windows 7 PC. Each time we tried logging in as the user the only thing coming up is a temp profile. We thought it might be an issue with the way ...
2
votes
2answers
27 views
Simulate/script user log-ins to an Active Directory domain
We've had some login issues in our computer lab environment. When a class of 15-30 people try to log in at the beginning of class, they sometimes have to wait upwards of 20 minutes to get a desktop. ...
0
votes
1answer
25 views
Authenticating Samba share with AD OU
I'm wanting to link Samba to Active Directory so that I can apply permissions to a share respective to the OU that windows user belongs to.
Im not entirely sure of where to start, I've currently just ...
1
vote
2answers
54 views
Problems running LDAP query on 2008 R2 DC. The same one works on a 2003 DC
If I run the following LDAP sentence on a 2008 R2 Domain Controller,
adoCommand.CommandText = "<LDAP://my2008DC.MyChild.MyPDC.com/CN=Enterprise ...
0
votes
1answer
88 views
Samba authentication when AD is down?
I have succesfully added my Freebsd 9 to a Windows server 2008 R2 AD Domain.
Using samba 3.6.
The problem is that i want to be able to connect to the shares when the AD server is down.
Because the ...
1
vote
2answers
60 views
VPN Connection causes DNS to use wrong DNS server
I have a Windows 7 PC on our company network (which is a member of our Active Directory). Everything works fine until I open a VPN connection to a customer's site.
When I do connect, I lose network ...
0
votes
1answer
29 views
Active Directory / ADAM Group Name Uniqueness
Can I have 2 different groups in Active Directory in different containers that have the same name? For example, can I have an OU=baz that contains a group CN=foo and an OU=bar with a group CN=foo? ...
1
vote
1answer
50 views
Getting Macs to authenticate to AD and map home directory
I have a multi-platform environment with Macs and Windows.
I have it now setup where users can log into their Macs authenticating with their user accounts in Active Directory.
I used to have their ...
0
votes
1answer
26 views
Create root windows domain named subdomain.domain.local in the same forest of domain.local
Is it possible to create a new windows root domain named subdomain.domain.local in the same forest where the root domain domain.local already exist? Please note I am not saying to add a child domain ...
1
vote
1answer
36 views
passwd for ldap users
I'm trying to enable linux hosts to authenticate against an active directory server using port 389 and tls. I seem to have that much working, but the users cannot change their passwords via passwd.
...
1
vote
1answer
54 views
Reboot loop after sysprep of AD machine
Major screw-up here and I need to find out how much trouble I am in.
I have an AD machine that is running Server 2008 R2, hyperv, DHCP and DNS. On the hyperv machine, I have a backup AD instance ...
0
votes
1answer
36 views
Remote access dialog doesn't show users
I am trying to set up remote access for her but the computer doesn't have any local users and the computer has nothing except for the computer in the places dialog box when I go to add users to the ...
1
vote
2answers
129 views
Accidental sysprep of AD machine
Major screw-up here and I need to find out how much trouble I am in.
I have an AD machine that is running Server 2008 R2, hyperv, DHCP and DNS. On the hyperv machine, I have a backup AD instance ...
2
votes
1answer
39 views
Test Environment Domain Controller
I'm going to be testing some software, MDT 2010 and Configuration Manager. I would like to create a virtual test environment. The Host box will be running Server 2008 R2 and the clients will be Hyper ...
0
votes
1answer
29 views
WMI Security issue
When I am trying to access WMI from a remote domain controller using WMIMGMT.MSC, I keep getting "Failed to connect to \(remote server) because 'Win32: Access is denied.'. Does anyone have any ideas ...
0
votes
1answer
64 views
Cannot bind to AD from Snow Leopard
Mac OS X Snow Leopard cannot bind to my Active Directory (Tiger, Lion can with no problem). I go to Accounts > Login Options, click Join and enter the details. Upon entering the correct FQDN ...
1
vote
0answers
21 views
Adding 'manager' from seperate trusted domain
I have 2 domains that trust each other.
I need to change a single user's manager attribute to a user from the other domain.
The selection window for this only allows me to select the domain that ...
1
vote
2answers
48 views
Change Domain Controller time +5 minutes
I have medium-sized Windows network of 60 workstations and 10 servers (2 of which are Domain Controllers). One DC holds the FSMO roles including the PDC Emulator. This the DC with PDC does not sync ...
1
vote
4answers
91 views
Windows : Only Run Install Startup Script if Directory Doesn't Exist
I want to install some programs via a startup script, but once it has run for the first time it'll just reinstall wasting time and overwriting. It's a Server 2008 R2.
Somewhere I found this
IF NOT ...
5
votes
2answers
71 views
Where is my AD-Integrated stub zone data being stored?
I have an Active-Directory integrated stub zone that appears to be functioning properly (zone data is populated on every DC). It is stored in the DomainDNSZones partition, but I do not see any dnsNode ...
