A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
39 views

Main DC is no longer NTP or hold FSMOs

Good Afternoon, We two virtual DC and one local physical read only DC. When we moved our data center offsite with a warm backup site we p to v our DC’s and DC1 was the master schema. While ...
7
votes
1answer
67 views

Active Directory forest with same name as root DNS zone and browsing to site with same name

Related to this previous question of mine about why it's a bad idea to use the root domain name as your Active Directory forest's name... I have an employer, whom I will refer to as ITcluelessinc, ...
-1
votes
1answer
14 views

Simulate WAN / Route Between 2 Virtual networks (Vmware)

i am in the process of doing some Labs on VMWARE ESXI 5.5, i am currently testing replication between 2 AD sites, i have set up Site A containing 2 DC's and want to setup Site B Contains 2 DC's as ...
1
vote
1answer
23 views

Change Active Directory in Samba share server

I have the next scenenario: Legacy Windows 2k Server as PDC (Primary domain controller) called A Samba share server with some resources connected by winbind with A Clean Installation of Zentyal ...
-1
votes
1answer
13 views

How to integrate Active Directory in VisualSVN Server

I'm using the VisualSVN Server Standard Edition. Is it possible to integrate Active Directory in VisualSVN Server with this version? If it's possible, how to do that? I researched a lot via google ...
2
votes
2answers
37 views

Putty Kerberos/GSSAPI authentication

I configured a few Linux servers to authenticate with Active Directory Kerberos using sssd on RHEL6. I also enabled GSSAPI authentication in hopes of passwordless logins. But I can't seem to get ...
3
votes
3answers
152 views

LDAP Query behind Get-ADUser commandlet

How can I view LDAP Query executed by Get-ADUser behind the scenes, ie. this command Get-ADUser -Filter * -Properties * | Where { $_.Enabled -eq $True } | Where { $_.PasswordNeverExpires -eq $False } ...
-3
votes
0answers
22 views

scrip to delete user profiles based on disable OU [on hold]

I need powershell or VBS script to delete user profiles and theie home directories who are located in disabled OU, environment AD windows server 2008/2012 and win7sp1 desktops.
-1
votes
0answers
13 views

Stop search Active Directory when not available [migrated]

I have a PC laptop with Windows 8.1 at work and we use AD (Active Directory). But at home there is no AD. How can I prevent Windows spend time search AD on Network at home even if it always fail?
2
votes
1answer
30 views

openssl s_client ignoring custom root CA certificate in /usr/share/ca-certificates

I've set up an Active Directory server and configured LDAP-over-SSL, which works fine for machines on the domain, however because it's using certificates provisioned by AD's Certificate Services it ...
1
vote
1answer
85 views

AD cross forest trust logon workstations

Our business unit has been bought out by an external entity. We are running 2008 R2 AD, they are running 2012 AD, the domains are not joined or trusted. They have servers including domain ...
0
votes
0answers
27 views

UDP traffic got blocked by unknown reason?

Here is my situation. One of our major software suddenly refused to getting license from license server under normal user login. but under admin login, this software is running fine and getting ...
0
votes
1answer
27 views

Setup Windows Server Local DNS on WAN

I inherited a WAN with centrally hosted DNS,AD Servers. I have clients connecting to Application Servers hosted locally on site. Problem is when the WAN link goes down clients can't connect to ...
-1
votes
1answer
67 views

Find Computers Recently Joined to Active Directory

How can I find Computers recently joined to Active Directory? Edit: I've searched google for the title phrase, and have also searched here, but can find nothing specifically about filtering on when ...
4
votes
1answer
46 views

How to manage computers from another AD domain with Windows MMC?

I am currently managing computers distributed across 2 different AD domains. I shall call the 2 domains MEDIA and DATA. My workstation is a member of the MEDIA (192.168.10/24) domain, along with most ...
0
votes
0answers
18 views

Additional Keyboard settings from Active Directory

We have some users in our company who need to use additional Keybaords, in order to achieve this one of the other admins had set up a VBS script which runs when users in a particular group log in to ...
1
vote
0answers
78 views

My domain controller/active directory server can't establish a connection with the global catalog

I have a Windows Server 2008 R2 running as my domain controller. It is responsible for Active Directory, DNS, and DHCP. It is the only DC in the forest. Active Directory reports errors every hour: ...
4
votes
1answer
46 views

“Get-AdComputer -filter” doesnt return anything when looking for Vista Clients

Why does Get-Computers -OperatingSystem "Windows VistaT Business" not return anything? It works perfectly for all the other OS types. Function Get-Computers { Param($OperatingSystem) ...
0
votes
1answer
23 views

Does Active Directory alone is not enough to secure hadoop?

I am trying to secure Hadoop environment installed in windows. So basically I started to analyse how to secure a Unix-based hadoop cluster. Have gone through various links related to Kerberos and ...
1
vote
0answers
14 views

Cross-Realm trust verify failed with 'netdom' command

Question 1: Am having my ActiveDirectory in Windowsserver 2012 machine - its domain name is AD-DEMO.LOCAL Kerberos admin-server is in another Ubuntu machine - its realm KERBEROS.COM Added trust in ...
5
votes
3answers
59 views

Identify applications that are configured to connect to a specific domain controller

I work with a Windows domain that has many domain controllers (DCs). I'm looking to remove some of these, but I know there are some applications that are hard-coded to use a specific domain controller ...
-3
votes
0answers
26 views

Enabling admin$ via group policy [on hold]

I am trying to learn AD management. The task I am trying to do is enable admin share for any computer on this domain using group policy. For this I enabled "Windows Firwall: Allow inbound file and ...
0
votes
0answers
13 views

Setting up SPN for SSRS in a CRM load balance environment

I'm getting this exception randomly in a CRM load balance LIVE environment when running Reports from CRM. System.ServiceModel.Security.SecurityNegotiationException: A call to SSPI failed, see inner ...
1
vote
0answers
31 views

Two-Factor Authentication on Domain Controller Server [closed]

I need to configure Two-Factor authentication OTP for my Domain Controller and only want to allow this for Helpdesk User, who will take Remote Desktop of my Domain Controller. For example, first they ...
2
votes
4answers
171 views

Detecting duplicate IP address from improperly cloned virtual machines

One of our production servers was "cloned" to make a secondary test environment. The source server is a virtual machine (VMWare vSphere environment) joined to a domain and with a static IP address. ...
0
votes
0answers
19 views

Enabling trust between two domains

I have the forest contoso.com, which my user is part of (alexander@contoso.com), my computer is part of (laptop0815.contoso.com), and our servers (server01.contoso.com and server03.contoso.com). Now ...
-7
votes
0answers
31 views

Synchronisation between AD & MySQL server [duplicate]

I would like to know if there is a way to synchronise a MySQL's database to a AD. By exemple the user created in MySQL's database is sychronized to the active directory and vice versa. And if it's ...
0
votes
1answer
16 views

User properties in AD not opening (WS 2003)

My Windows 2003 Server has this annoying problem... It happens several times and till now, my only solution, is to reboot the server... The problem is that when I open AD (dsa.msc) nad try to go to ...
0
votes
0answers
12 views

Office 365 - Outlook For Mac Not Authenticating

We have Office 365 (for business) and a few users who want to use O365 apps on their Mac. Outlook is causing a problem when trying to authenticate / authorise the application (before adding the email ...
0
votes
0answers
20 views

Provisioning Zentyal 4.0 for OpenChange after joining existing Samba AD PDC

I have an existing Samba AD primary DC. For now, I have another server that acts as mail server and queries the Samba DC for LDAP account information. We want to migrate to the Exchange protocol, and ...
0
votes
0answers
27 views

Powershell - Output username and pwdLastSet that will expire in X days

I found this code that could print out AD user account whose password will expire in 7 days. Param([int]$next=7) Import-Module ActiveDirectory #get current domain password policy ...
-2
votes
1answer
31 views

Target object for this command has incorrect format

I'm doing some 70-410 training and this script that I'm trying to run that I made keeps on failing due to an error that I receive that I stated in the topic. doesanyone see anything wrong in this: ...
1
vote
1answer
80 views

gpupdate doesn't work on everything

On a Win2008 Domain Controller, I've changed an user account property "Account is sensitive..." Of course, I want that GPO to apply immediately So I try gpupdate (or gpupdate /force), but it ...
3
votes
1answer
34 views

Active Directory Delegated AD Admins editing properties of users

I have delegated some (non-admin) users as admins for several OUs, however they are unable to edit their own properties or those of other delegated admins. I chose these settings for each user: ...
-1
votes
1answer
41 views

Domain controller is not listening on port 445

Is there a way to find why the DC is not listening on 445? -> Firewall rules checked , no denies found and the traffic is allowed. -> file share and print share services running. What else to check? ...
5
votes
1answer
70 views

Active Directory Users - All Attributes Suddenly Blank

We had an instance yesterday where approximately 130 of our well over 5,000 user objects suddenly became corrupted. Every attribute you can possible set with the exception of sAMAccountName and cn ...
1
vote
2answers
32 views

Active Directory Replication Design

Primer/Environment: Sites: Santa Clara (data center), San Francisco (office), Seattle (office), Boston (office) Two Domain Controllers at each site. All sites are able to talk to San Francisco but ...
2
votes
1answer
40 views

Understanding LDAP traffic with ActiveDirectory

In looking at LDAP traffic through Wireshark I was curious to understand the conversation between the a windows client and Active Directory. Each conversation would vary to less than 80k bytes. But ...
3
votes
1answer
20 views

Active Directory components appearing on an Exchange Server which is not a Domain Controller

Folks, I am having a little -still awkward- issue here. I have an HP ProliantDL380p Gen8 server which serves as a Windows 2012 R2 Hyper-V host for 2 VMs. One VM is a Windows 2012 Server R2 Exchange ...
0
votes
1answer
18 views

802.1.x GPO configuration with restriction by computers and users

802.1.x configuration possible using Machine Policy GPO. So, typical scenario is creating security group for computers and applying our policy with 802.1.x to this group. After this all machines from ...
1
vote
1answer
35 views

Host Active Directory in a VM and have Hyper-V server a member of the domain

I'm putting together a Windows 2012 (Standard) server that's sort of a special case - it needs to be an "all in one" appliance. I literally don't have any other physical servers I can use. As part of ...
0
votes
2answers
45 views

Pull Office 365 Users to Active Directory

I am currently working with an existing Office 365 subscription that needs to have a new instance of Windows Server 2012 R2 in Azure manage the users through Active Directory. The server 2012 VM is ...
0
votes
2answers
15 views

Are certificates from all Active Directory domain controllers needed on client for LDAPS?

I am setting up LDAPS on our AD servers to encrypt ldap authentication between the domain and a web server using an internal CA cert. The AD servers and web server are on one side of the firewall but ...
4
votes
4answers
125 views

How can I view information for domain groups from the command line with just core Windows utilities?

I'm familiar with using the NET commands to get information for local users and groups in most scenarios. However, I'm running into a problem using it to get information for domain groups with long ...
0
votes
1answer
23 views

Samba 4 and computer account

I have Samba4 machine, vitch is connected to Active Direcotry. Samba4 have shares with software. Domain computers can't access it. What I need to do to grain access? I have tryed : ...
0
votes
1answer
29 views

ldap/AD proxy: Unable to bind using sAMAccountName, but last name and first name is able to bind

I am attempting to set up a pass-through proxy to Active Directory, using ldap on Debian Wheezy. The slapd.conf file is below. I can bind just find by using lastname, first name: ldapsearch -x -h ...
4
votes
2answers
82 views

Adding an Active Directory to a computer-local group - which scope to choose?

I am aware of the "AGDLP" rule of thumb when it comes to group nesting inside an AD strcture. But now I am wondering if there are any best practises when it comes to adding Active Directory groups to ...
0
votes
0answers
40 views

LDAP query to obtain distinguished name of a list of users

Hi im working on a migration process on which we are migrating users from one server to another domain controller. Right now I have a list of users I migrated, but I also got another of them I didnt. ...
-1
votes
1answer
42 views

BSOD on windows server 2008 R2 reason Srv2.sys Driver_IRQL_not_Less_or_Equal [closed]

I have a issue that i have been facing with my windows server 2008 R2 (ADC Server) Additional Domain Controller (Roles Installed AD,DNS). It suddenly gives a BSOD i did analyse the dump and found out ...
2
votes
1answer
61 views

Remote Desktop to local PC

In our organization we have a control that watches users who use high privilege Active Directory accounts to RDP into any server or workstation on our network. I recently enabled this control which ...