A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
3 views

Samba 4 not working correcty as dns for internal (LAN) addresses

I have a Debian Wheezy fully updated with Samba 4.1.17 as and AD. I've been updating/upgrading for months. Years ago the server lost some HDD and the configura was corrupted. in that time trying to ...
7
votes
2answers
267 views

How can we remotely administer our “fleet” of Windows 7 laptops?

I'm working with a startup that's teaching kids to program. We've just obtained our first "fleet" of laptops - half a dozen refurbished thinkpads running Windows 7 - and I'm looking for the best way ...
1
vote
1answer
14 views

caching AD credentials on 2012 r2 File Server

I am setting up a fileserver at a remote branch office that has very very limited bandwidth Is there a way to store the 10 or so users authentication credentials locally on the File Server so that ...
-3
votes
2answers
17 views

Domain & Active Directory Migration [on hold]

We just acquired a very small company, what is the best and easiest way to integrate a small domain to our own domain?
0
votes
1answer
16 views

Broken Exchange in AD Environment

One of our testing exchange servers hadn't been used for awhile and when a tech was trying to get it working again (hub transport wouldn't start, SID errors in event log, etc.) he got frustrated and ...
0
votes
0answers
9 views

Active Directory Server not listing on Port 636, although CA certificate installed

I'm desperately trying to enable LDAPs on an Active Directory server. After some research on google I installed the Active Directory Certificate Services and issued an certificate to the name of my ...
0
votes
0answers
14 views

How do I set up a Windows image (not part of the domain) to sync time with the domain controller?

I'm creating a Windows image to distribute to computers, and I want to set it up so that it will sync time to the domain. The problem is that the image is not joined to the domain, so w32tm /config ...
-1
votes
0answers
21 views

Boss-friendly OpenVPN server with Active Directory? [on hold]

Has anyone found a license-free OpenVPN server with AD integration that "Just works"? We need a VPN for our admin team, but don't want to spend days learning and setting up RADIUS by hand. I've seen ...
1
vote
2answers
28 views

Windows Server 2003 Directory Services Restore Mode Lock-Out

I've got a Windows Server 2003 R2 Standard machine. Against my advice, the company making use of this server made it do everything. Zero redundancy outside of some flat file backups. After months ...
0
votes
0answers
20 views

Adding a Domain Suffix - safe or bandage solution?

Coming into a new organization with an AD environment that was more or less experimental. We're ready to go all in, but I don't like that the domain was setup with a ".local" suffix, due to the ...
4
votes
2answers
23 views

Is there a difference in bandwidth consumption between a RODC and RWDC?

My organization has deployed 2008 RODCs on multiple seagoing platforms. The idea was to extend our shore-based domain onto our ships to better control security policies. RODCs were selected with the ...
-1
votes
1answer
26 views

Unable to log in into a (Win 2012) server using domain account

Our domain server is Windows Server 2008 (lets say domain ABC) and there is another server successfully added to domain (say ABC.EFG.local) But we are not able to log into the (win 2012) server using ...
3
votes
0answers
30 views

Best practice for defining user “HOMEDRIVE” “HOMEPATH” “HOMESHARE”

Is it considered a best practice to map domain users' "HOME" environment variables to a network path? If so, why? By "HOME" variables, I am referring to: %HOMEDRIVE% %HOMEPATH% %HOMESHARE% This ...
2
votes
1answer
42 views

What is ADFS (Active Directory Federation Services)?

So I've been told that our PHP application may need to support authentication using ADFS. For a non-Microsoft person, what is ADFS? How does it differ to things like LDAP? How does it work? What ...
-4
votes
2answers
48 views

Create a domain on server to have all users on it + shared SQL Server 2012

I'm new to Active Directory Domain Services and to Windows Servers in general. I created a domain on Windows Server 2008 R2 using AD DS and I joined all company's PCs to this domain. Now what I want ...
0
votes
1answer
37 views

Is running a TS (RDP) on a DC a very bad idea?

For a project we only have one Windows Server available. We need to run both a TS (Terminal Server) with RDP and ADDS on this server. I have asked this question and got the answer that if we don't ...
3
votes
1answer
22 views

Use “Client Site Name” in Group Policy Preferences

In Active Directory, you can map IP addresses to Client Sites. ...and then you can map Group Policy objects to sites. Which is great and all, but I have a client that is growing rapidly, and ...
1
vote
1answer
34 views

Lock screen doesn't remember username

On Windows Server 2008 R2, when I lock the machine, when I return, the Logon Screen screen doesn't remember my username: I definitely still have a session, because when I log back in, it remembers ...
-1
votes
1answer
43 views

Is installing Windows Server 2012 R2 using .com versus .local going to cause future problems? [duplicate]

I know using example.com would cause a conflict, but what about ad.example.com, corp.example.com or internal.example.com? I have a web .com domain. Will need to remote in and/or VPN etc. I am being ...
2
votes
1answer
52 views

Domain A record on active directory controller

Currently we have an Active Directory setup for a small network running on Debian 8 and Samba 4. At one point we had to change the ip address of the AD server from 100.0.0.4 to 100.0.0.100. I edited: ...
0
votes
1answer
30 views

How to recover users from ntds.dit

My primary (and single) DC died by mistake (not booting) however all the files are intact. What are my options to restore users on new DC on other server? died DC: Windows server 2008 R2
0
votes
0answers
17 views

block user object settings at cross domain forest registration

I got the following infrastrucute: Domain A: User Forest | Domain B: Ressource Forest (Citrix AD with infrastructure services) | one way trust-relationship The user of domain A signs on the citrix ...
-2
votes
1answer
36 views

IIS on Domain Server, Cannot Access To Website from Remote [on hold]

I recently rent a virtual server over some country, and activate it's ISS service and Active Directory.... What now bother me, though i had no idea what i'm doing (though most of it went right) is ...
1
vote
1answer
26 views

List all kerberized SPN's in Linux

Is there a way to list/show all SPN's in an kerberized AD using a Linux Client? In Windows one can use setspn -T <domain> -Q */* to get them. Is there something similar? Haven't found anything ...
0
votes
1answer
23 views

Populate “Lab” Domain via LDAP

I have a lab environment where I need to own Active Directory Services/DNS/DHCP/etc at work. I have a pseudo "production" environment in this lab that has everything from vCenters to Jenkins to VDI ...
0
votes
2answers
84 views

Bulk Update AD Attribues with Employee ID as matched key

I have a CSV file that I need to bulk update AD with. The file has an employeeID, which would match the employeeID field in AD. So far, I've been able to update a user successfully with a CSV file if ...
1
vote
0answers
15 views

GitLab Active Directory authentication: no results and no authentication

I'm trying to set up LDAP authentication with GitLab (version 7.12.2 installed on Ubuntu 14.04 amd64 on a VM, Omnibus set up). I've edited my gitlab.rb file to look like the following: ...
1
vote
0answers
36 views

Domain name record in Active Directory points to .0 IP address, is this safe to delete?

Not sure if this is safe to delete. I have read that these AD domain name records are created by netlogon service, and/or others, and not changeable. I have two domain controllers, each showing ...
-4
votes
1answer
15 views

Domain Name Changing and exchagne server 2010

Primary name (dc1)and secondary (dc2) dns name: xyz.com All client username & computer are connected with dc1. Xyz.com domain Now I want change the primary domain name (pdc1) secondary domain ...
0
votes
0answers
14 views

How to get Time Zone information from the remote server using adsi c++ api [closed]

I want to get the timezone of a domain by connecting to any server(DC) using ADSI c++ api. Any suggestions please.?
0
votes
2answers
42 views

After a DC loads the DNS zone does it ever have to contact the DNS server again?

I have a DC in a branch office. The DC is pointed to another DNS server in a central office (which is also a DC) for its primary DNS. So let me make sure I understand how this works: When the DC ...
0
votes
0answers
16 views

Upgrade AD FS 1.0 on Win 2008 R2 to 2.0

Since AD FS 2.0 is available for Windows 2008 R2, can i simply upgrade AD FS 1.0 to 2.0 just by installing AD FS 2.0 or uninstalling AD FS 1.0 then installing AD FS 2.0. Or is this too risky? I wonder ...
0
votes
0answers
23 views

Cannot add NT Authority login into SQL Server

I installed SQL Server 2014 on a Windows 2012 R2 instance. I named the instance SQLExpress. After installing SQL Server, I joined this machine to an Active Directory domain and logged in using the ...
2
votes
2answers
43 views

dns a records become static

So here's a weird one... I'm managing a Windows AD environment. For whatever reason, when it was built, DNS was not integrated with AD. A month or so ago I went ahead and integrated DNS with AD ...
0
votes
1answer
76 views

Windows Workgroup - Maximum Workstations before a Domain is needed?

Several years ago I installed a Windows 2008 server and 8 PCs in a workgroup. Since then the client PCs have all been upgraded to Windows 7 Pro and the network has grown from the original 8 PCs to 23 ...
1
vote
1answer
55 views

Password Expiration / DNS Issue

Our Windows 2008 Server has AD set to have users change their passwords every 30 days. When a password expires a user is not prompted to reset it. The user is allowed to login with their expired ...
1
vote
3answers
284 views

Stop Active Directory Users installing updates

We have multiple PCs running Windows 8 for testing on an AD. However, Windows update keeps pushing the Windows 8.1, but we need the PCs to strictly be on 8. How could I stop AD users from installing ...
0
votes
0answers
8 views

Group policy to Delete unauthorised software per logon

I have a group of on-site engineers (domain users but have local administrators rights) who are using laptops. They are required to install software occasionally when they travel, therefore I need a ...
4
votes
1answer
68 views

Add A record to Windows AD DNS remotely via cmdline?

I want to avoid rdesktop + clicking through DNS GUI, but would like to be able to push entries from some other host, preferebly any domain joined machine. Idea is to have post-join script for Samba ...
0
votes
1answer
39 views

AD keeps local accounts from timing out?

Currently, our customer requirements say that after 60 days, the local accounts on our devices are supposed to be locked. When AD is being implemented, the local accounts are not being used (everyone ...
0
votes
2answers
24 views

Get list of mailboxes in exchange where users are disabled in active directory [closed]

Hi the code bellow lists all mailboxes with some information I want (and some things i will remove). How ever I would like to be able to find out what mailboxes bellongs to users that are disabled in ...
-1
votes
0answers
10 views

Enable kerberos on windows server 2008

I have installed active directory domain services and DNS server on windows server 2008. Now How can I enable kerberos related services(KDC and AS) on server? So that I can start authentication using ...
2
votes
1answer
19 views

How can I recover an Exchange 2013 mailbox which I disabled?

My company has Exchange 2013 and I disabled a mailbox in the Exchange Admin Center under the presumption that this would work in the same way as disabling an account in Active Directory would. ...
0
votes
1answer
23 views

Office 365 DirSync Using Trial Domain

I've signed up for an Office 365 trial and have set up a test lab server functioning as a local DC with a fictitious domain -- basically the idea was that I wanted to set up a test domain/lab that's ...
0
votes
1answer
43 views

Need users to stay connected to the domain even if they temporarily lose Internet connection

We need to join our users to a domain but they are traveling a lot and often get disconnected from the Internet. I read about "offline domain join" to help them join without contacting a DC, but is it ...
1
vote
0answers
20 views

Active Directory windows 2012

I have problem with windows 2012 active directory. one of the client machine which is windows 8 could not login to active directory we need to close network connection to login windows 8 local and ...
0
votes
0answers
12 views

kerberos cross realm authentication

I want to do setup for kerberos cross realm service authentication using active directory. My question is that should I create a different domain (I read somewhere that realm is a domain) or should I ...
1
vote
0answers
25 views

Certain GPO settings are not taking effect on Clients

I've been trying to deploy a printer with Print Management on Server 2012 however it never appears on any of the clients after deployment. And this is not only the case with printers, the same thing ...
-1
votes
1answer
26 views

same DNS name internal and external server

My internal domain name with the same name as the external domain. when I'm tying to access to external domain from inside it is working properly with A record but my problem is the external IP ...
0
votes
1answer
30 views

Users Home drive given local admin permission by ADU&C when creating user

Sorry for the horrible title. So we have an issue, where the permissions on our file server are set as follows: D:\Data>cacls d:\data\mydocs\johnny.depp d:\data\mydocs\Johnny.Depp ...