A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
2answers
28 views

How to find out the list of users and their details on active directory?

I would like to know if there is a single line command in dsquery or LDIFDE or any other command to fetch the details of all the users in all the domains in my Active directory.
-3
votes
0answers
13 views

Active directory files and folders [on hold]

I went an interview for administrator, they have asked what happens after dcpromo, and what are files will create, what is the active directory physical storage structure & fSmo physical storage ...
0
votes
0answers
14 views

CentOS 7 Automated SSL Generation from Active Directory

I have an Active Directory Server setup for Certificate Services. I am able to manually generate certs as needed. However, I need to find a way to automate the sending of the cert request to AD and ...
7
votes
3answers
79 views

PowerShell: Get-ADUser Properties with åäö

I'm trying to extract select sets of users with Get-ADUser. The users belong to companies whose names include non-ASCII characters, e.g. "Gåäördet". Unfortunately, we do have to use the company ...
0
votes
0answers
9 views

How to get root CA certificate in windowsserver 2012

I am trying to connect to W2k12 server AD from my local unix box using net::ldaps. There seems to be CA certificate issue, as openssl s_client -connect AD.server.ip:636 is failing: [root@rh64-0 ~]# ...
0
votes
0answers
17 views

Why I need to login two times to apply changes to AD group membership or GPO filtering?

If I add a user to a group in AD, to reflect that change on a computer (see it on gpresult in security groups), I need to sign in and off the user session two times. Also the same happens when I add ...
0
votes
0answers
10 views

How to set cups quotas per users on centos from active directory domain?

How can I import cups users from active directory domain which is installed on windows server 2008 R2 and set quotas per users on cups printing server which is installed on centos 6.6 ?
0
votes
2answers
36 views

User's AD account deleted then recreated, now cannot access TFS

I have a user who a couple months ago had access to our Team Foundation Server (TFS) 2013 instance (he was able to access queries, work items, backlogs etc via the web interface). Recently, we needed ...
0
votes
0answers
14 views

Cannot search for user and groups in a trusted forest. Server asks for password of trusted domain

I am currently familiarizing myself with trusts.On each of two Server 2012 R2 I installed a domain controller in a new forest. dc1.forest01.local, 192.168.10.10/16 dc2.forest02.local, ...
1
vote
2answers
39 views

Windows 8.1 locks account after 3 invalid attempts even if GP is not defined

I mistyped my password three times today, and my account became locked on my windows 8.1 pro workstation. I checked Resultant Set of Policies (rsop.msc) and all three relevant settings are "Not ...
0
votes
2answers
48 views

Windows refuses to add an additional DC

I am trying to add a second DC to my network. It seems to go well: I install AD DS on a second server, I enter my credentials and the domain, and the domain is shown. I choose it, but when I click ...
2
votes
1answer
44 views

Install Active Directory PowerShell module on Windows Server 2012

I need to install the AD PowerShell module on Windows Server 2012 but I can't afford for the server to restart during business hours. My question is can the AD module be installed from Add/Remove ...
1
vote
1answer
22 views

Disable anonymous bind to an Active Directory on Windows Server 2012R2

I have set up Active Directory on a Windows 2012R2 machine. I have been trying to disable Anonymous Binding to the AD but have not yet figured out how to do that. As a result, I am able to do bind to ...
1
vote
2answers
60 views

Replace DC/DNS in Active Directory

I have just tried to replace one of my domain controllers in a single domain forest keeping the old IP (But a new computername). As this is an environment I have "inherited" from a previous sysadmin I ...
0
votes
2answers
14 views

Is it possible to delegate AD FS admin functions via a web interface?

I am looking at IAM for a SaaS application. The application will have client organisations accessing it and each organisation will want to manage their own users, permissions and roles. Of course only ...
1
vote
2answers
41 views

create my own active directory in a EC2 instance of Windows 2012 in AWS?

I have been using Azure where I could use one of the Windows VM as a domain server with AD sitting in subnet 1 while others VMs sit on the subnet 2. So far so good. Now I am building the similar VMs, ...
0
votes
0answers
20 views

Group Managed Service Accounts: -PrincipalsAllowedToRetrieveManagedPassword

So the documentation for creating gMSAs says that the parameter "-PrincipalsAllowedToRetrieveManagedPassword" should restrict the ability of using the gMSA to the machines that are part of the ...
0
votes
2answers
28 views

disable logon to active directory with a blank password

I have set up Active Directory on a Windows Server 2012R2 instance. I have written a basic application which I use to authenticate to the AD. Basic authentication works, but I noticed that I am able ...
4
votes
1answer
30 views

Re-install ADCS CA Certificate & CRL on Workstation

I installed Active Directory Certificate Services and created a Standalone CA. Everything went fine and it automatically installed the CA certificate and CRL on all my domain workstations. On one of ...
0
votes
1answer
26 views

How to block incoming ports using group policy in active directory windows server 2012

We have a domain, and there are some computers in this domain. we applied some many policies like password policy and etc to this domain which makes it easier for us to control the use PC in our ...
2
votes
1answer
29 views

Prevent windows from assigning certain drive letters

After configuring our network to use certain drive letters, I bumped into a problem when at some times, some of our users plugs one or two USB disks to the computer before boot. Windows then, ...
0
votes
2answers
58 views

WIN 2012 DNS Issue

I am troubleshooting an issue with the dns server on the main DC in our forest. I ended up at this point while trying to get a second controller up and running. Current results for dcdiag /test:dns ...
0
votes
1answer
25 views

Active Directory in EC2: Can't create new users

I'm trying to set up a series of EC2 instances running Windows Server 2012 connected with Active Directory. This is a new AWS account and I've only done the following: created a VPC with a public and ...
1
vote
1answer
62 views

Samba 4 (Ubuntu) Administration (Active Directory) via RSAT using Windows 7 error

I want to administrate Samba 4 (Active Directory) via RSAT (Remote Server Administration Tools) using Windows 7. I have installed the RSAT and opened the "Active Directory Computers and Users" tool in ...
0
votes
1answer
34 views

mmc.exe blocked by group policy

I am changing some permissions on a small work network that I've been playing in. Domain admin and administrator permissions were so tied up that they essentially were the same account. After getting ...
-2
votes
0answers
14 views

EventID 1521 for local profiles

at our small business we run an active directory (windows server 2012 R2) with about 15 clients. all windows 7. the roaming profiles work fine but when i try to log in as local administrator on a ...
2
votes
0answers
23 views

Windows Server - Protect websites with AD user

My question is a bit tricky to explain :) We have ASP.NET websites running on Windows Server 2012. Some websites use SqlServer authentication, others use Windows authentication, some don't have any ...
-2
votes
0answers
33 views

Force remove computer from domain

My computer was joined to our work domain. I created a VM with the same computer name as mine and joined that to our domain. Now my computer has been unjoined from the domain. I just need to unjoin ...
0
votes
2answers
49 views

One domain controller configured in a failover cluster? Or two DCs, one on each cluster node?

I am currently planning a high available Windows Server 2012 R2 environment within a Hyper-V-Cluster with two nodes. I am not sure about how to deploy the virtual domain controller for the work ...
1
vote
2answers
20 views

Windows domain account, expired vs. disabled status

I know that expiration feature in a Windows domain environment for user accounts is useful for automation processes. But I'd like to know if a disabled account is the same than an expired account in ...
7
votes
1answer
166 views

How to edit Active-Directory Site properties via Powershell?

I am having trouble accessing the location property of my Active-Directory's Site via Powershell. (Windows Server 2012 R2) The following command returns no value: > (Get-ADReplicationSite ...
1
vote
1answer
47 views

Why is ping not returning local DNS cache result? (Using DNS caching server on an internal network.)

Yet another post about this nslookup works but ping does not. I’ve read a handful of forum posts but could not find anything relevant to my setup and problem, of resolving external domain names on an ...
1
vote
1answer
54 views

Why would I want to resolve external domain names in an internal testlab network? [closed]

So I'm building a lab to learn AD and networking best practices and I've setup an AD domain on an internal network. Doing some reading, I've come upon an idea of using a caching DNS server to resolve ...
5
votes
2answers
81 views

AD Site link configuration

I'm going to be honest here - this question has been ripped straight from a exam example, but I'm intrigued to see how such a layout would be configured in the real world (I'm not entirely sure of the ...
1
vote
1answer
29 views

Windows 8.1 No picture password option, despite enabling in policies

I want to enable picture logon to domain-joined Windows 8.1. However in Settings > Accounts > Sign-in options, there is no option for that, but unhelpful "Some settings are managed by your system ...
2
votes
1answer
38 views

Does a DCPROMO move FSMO roles automatically?

There's seems to be a fair bit of conflicting information out there - and although I have never tried this personally (have always manually moved the FSMO roles to a new DC prior to demotion) and ...
1
vote
2answers
91 views

How to resolve a host name in all sites in Active Directory?

I am learning AD DS currently. The scenario in my company looks like the following. WorkingPC.Asia.Corp.domain.com 172.10.212.62 FileServerA.Asia.Corp.domain.com 172.11.13.21 ...
1
vote
0answers
34 views

Authenticating OpenBSD 5.6 to Windows server 2008R2 active directory?

How do I make openBSD to authenticate to Windows server 2008R2? I currently have installed Identity Management for Unix (IDMU). Also I have installed login_ldap in openbsd. but I dont know what to ...
4
votes
2answers
89 views

Security Risks of a One-Way Trust Relationship between Domains

A vendor is asking us to create a one-way trust relationship between their domain and ours so that our users can log onto their applications/servers with credentials from our domain. What are the ...
1
vote
1answer
46 views

Powershell service creation with ad credentials logon error

Powershell service creation with ad credentials issue I use the powershell below to create a service running with AD credentials. However when I run it I get an error messgage (also below). If I ...
-1
votes
1answer
37 views

how to list all Domain Controllers in a forest based on domain name given using java? [closed]

For a domain name given, need to list out all the Domain controllers that can be contacted. currently i am able to get only DCs for the domain i am connected right now. Some one can help me with this ...
0
votes
0answers
17 views

List AD groups beginning with X on Linux

In the organization wide Active Directory we have user groups that all begin with a prefix blaha-, how do I list all groups with that prefix on a Linux machine? getent group only seems to list local ...
0
votes
1answer
21 views

Creating AD SPNs with realmd/sssd on Cent7

Is it possible to use the system tools provided by realmd/sssd on a CentOS7 system to create and write out service principals for Apache and other servers? Or are we still reliant on other tools, ...
2
votes
3answers
37 views

How to use Group Policy to force user compliance

I need recommendations for using group policy to restrict a user's computer/network access until the user takes an action, in this case acknowledging he has read an acceptable use policy. The user ...
0
votes
1answer
24 views

unable to change environment variable using setenv()

I have an a member server with a windows PDC with active directory. Security=ads. I am trying to set an environment variable(credential cache) using C: setenv("CCACHE","cache_name",1); However, ...
1
vote
1answer
47 views

Mass updating Group Policy, may be with scripts

Sorry for long preamble and thanks in advance to one who could read it all. I have about 60 network printers. Some are in HQ, some are in distant locations (from 1 to 300 km away of HQ). Some ...
2
votes
1answer
51 views

Active Directory member servers in the DMZ [duplicate]

I want to be specific about terms. When I say DMZ I'm talking about a place where you would put servers that expose a service to untrusted networks like the Internet, or in some cases merely networks ...
1
vote
2answers
38 views

Unable to change domain password even if the password is complex

I have a problem with users not being able to change their passwords. When they try to change the password, they get this error: "Your new password does not meet the length, complexity, or history ...
0
votes
1answer
18 views

How to recover default background of domain computers

I have set a default logon screen for computers on a WinSrv 2012 , but for some stupid reason have ticked the "Remove this item when no longer applied", and now I was re adjusting the policy and after ...
0
votes
1answer
50 views

Security-Kerberos Error, event ID 4

I have two new Domain Controllers on new Forest. Servers have DFS and IIS services installed. Everything seemed to go Ok for a While. After updating servers I got new errors. Now once in hour ...