A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
7 views

Active Directory crashed without backup or failover. Recreating from scratch

My Active Directory server crashed and I do not have a secondary DC, no RAID, no backup and the system disk is completely dead. I know it is bad and stupid to not have a backup but let's leave those ...
0
votes
1answer
19 views

AD SelfService for creating users

I've set up a small computer lab with approx. 30 computers with Win8. They are connected to an Active Directory (Windows Server 2012R2) and have roaming profiles. However, creating users causes ...
1
vote
1answer
27 views

AD administrator password out of sync between controllers and clients

I have found myself in an odd situation. I have a development network of 15 Windows 2012 R2 servers on a HyperV virtualisation server. There are two AD controllers for the single domain, and 13 ...
0
votes
0answers
23 views

As DNS clients do DCs put more load on DNS servers than regular workstations?

All DCs in this example are running DNS and DFSR. Edit: this is a single domain with an AD integrated zone. I have a DC in a central location and 60 or 70 DCs each in different a branch office. ...
0
votes
1answer
15 views

How can I create a filter in Active Directory to show only 'Enabled' Computer Accounts

Please note: I am referring to COMPUTER accounts. Not USER accounts. In Active Directory, it is easy to create a filter to show only Disabled Computer Accounts by ticking the box "Disabled Accounts" ...
0
votes
1answer
26 views

What actually happens when a computer is deleted from Active Directory?

If I open AD and then delete a computer, what will happen to that computer? Will it physically get removed from the domain? What would happen if I tried to log into the computer after it had been ...
0
votes
0answers
11 views

Exchange 2013 Schema Prep Error

I am installing Exchange 2013 CU9 into a site with an existing Exchange 2013 Cu3 installation. During the ADPREP phase of installation I am getting the following error. PS ...
0
votes
1answer
33 views

Remote Desktop will not connect using hostname, DNS issue related to WLAN/LAN switching

We have a set of wireless devices in our directory. While these are connected wirelessly, I can connect Remote Desktop with no problems. The issue is when it's connected directly, the hostname seems ...
0
votes
1answer
19 views

Do I need a DNS in my domain to let my clients find the WSUS server?

I have my WSUS installed on the same system as my Active Directory management. The weird thing is, that when i put a client in the same domain, i find it in my AD but not on my wsus. The client ...
0
votes
0answers
15 views

How to restrict asdm access based on Active Directory group membership?

I have a Cisco ASA 5505. I have enabled AAA authentication for ASDM to authenticate with my Active Directory server. How can I restrict logging into ASDM to certain users that belong to a specific ...
0
votes
0answers
21 views

How to give permissions to user (not admin) to access task manager WS 2012 R2?

I have a terminal server with ws 2012 R2. In it I have installed domain server and remote desktop services. I have administrator account, and other account without administrator rights called ...
0
votes
0answers
27 views

Retrieving the AD machine account password on an Ubuntu machine

I'm trying to perform an LDAP query against Active Directory from a script (very similar to this question) from a domain-joined Ubuntu machine. The script can't prompt for a password, as it won't be ...
1
vote
1answer
23 views

unable to join server to existing domain in azure within virtual network

I have created a Virtual Network on Azure and have created two VM's within the Virtual network, with IP's 10.0.0.4 and 10.0.0.5. I have added Active Directory role to a one of the VM's and promoted it ...
0
votes
1answer
27 views

I see my clients in AD but not in WSUS

I set up a WSUS but dont see any clients in the Unassigned Computers group. I can find my clients in the ADAC, when I select myWSUS (local) > computers. My group policy management got a domain ...
0
votes
0answers
15 views

Samba 4 not working correcty as dns for internal (LAN) addresses

[Edit] We tried to use samba_internal dns and also bind9_dlz on the server where samba is installed, but both cause problems when trying to access internal addresses even by IP. So we use our DNS, ...
12
votes
4answers
903 views

How can we remotely administer our “fleet” of Windows 7 laptops?

I'm working with a startup that's teaching kids to program. We've just obtained our first "fleet" of laptops - half a dozen refurbished thinkpads running Windows 7 - and I'm looking for the best way ...
1
vote
1answer
16 views

caching AD credentials on 2012 r2 File Server

I am setting up a fileserver at a remote branch office that has very very limited bandwidth Is there a way to store the 10 or so users authentication credentials locally on the File Server so that ...
-3
votes
2answers
22 views

Domain & Active Directory Migration [closed]

We just acquired a very small company, what is the best and easiest way to integrate a small domain to our own domain?
0
votes
1answer
20 views

Broken Exchange in AD Environment

One of our testing exchange servers hadn't been used for awhile and when a tech was trying to get it working again (hub transport wouldn't start, SID errors in event log, etc.) he got frustrated and ...
0
votes
1answer
26 views

How do I set up a Windows image (not part of the domain) to sync time with the domain controller?

I'm creating a Windows image to distribute to computers, and I want to set it up so that it will sync time to the domain. The problem is that the image is not joined to the domain, so w32tm /config ...
-1
votes
0answers
22 views

Boss-friendly OpenVPN server with Active Directory? [closed]

Has anyone found a license-free OpenVPN server with AD integration that "Just works"? We need a VPN for our admin team, but don't want to spend days learning and setting up RADIUS by hand. I've seen ...
1
vote
2answers
33 views

Windows Server 2003 Directory Services Restore Mode Lock-Out

I've got a Windows Server 2003 R2 Standard machine. Against my advice, the company making use of this server made it do everything. Zero redundancy outside of some flat file backups. After months ...
0
votes
0answers
23 views

Adding a Domain Suffix - safe or bandage solution?

Coming into a new organization with an AD environment that was more or less experimental. We're ready to go all in, but I don't like that the domain was setup with a ".local" suffix, due to the ...
6
votes
2answers
29 views

Is there a difference in bandwidth consumption between a RODC and RWDC?

My organization has deployed 2008 RODCs on multiple seagoing platforms. The idea was to extend our shore-based domain onto our ships to better control security policies. RODCs were selected with the ...
-1
votes
1answer
32 views

Unable to log in into a (Win 2012) server using domain account

Our domain server is Windows Server 2008 (lets say domain ABC) and there is another server successfully added to domain (say ABC.EFG.local) But we are not able to log into the (win 2012) server using ...
3
votes
0answers
32 views

Best practice for defining user “HOMEDRIVE” “HOMEPATH” “HOMESHARE”

Is it considered a best practice to map domain users' "HOME" environment variables to a network path? If so, why? By "HOME" variables, I am referring to: %HOMEDRIVE% %HOMEPATH% %HOMESHARE% This ...
2
votes
1answer
47 views

What is ADFS (Active Directory Federation Services)?

So I've been told that our PHP application may need to support authentication using ADFS. For a non-Microsoft person, what is ADFS? How does it differ to things like LDAP? How does it work? What ...
-4
votes
2answers
54 views

Create a domain on server to have all users on it + shared SQL Server 2012

I'm new to Active Directory Domain Services and to Windows Servers in general. I created a domain on Windows Server 2008 R2 using AD DS and I joined all company's PCs to this domain. Now what I want ...
0
votes
1answer
42 views

Is running a TS (RDP) on a DC a very bad idea?

For a project we only have one Windows Server available. We need to run both a TS (Terminal Server) with RDP and ADDS on this server. I have asked this question and got the answer that if we don't ...
3
votes
1answer
23 views

Use “Client Site Name” in Group Policy Preferences

In Active Directory, you can map IP addresses to Client Sites. ...and then you can map Group Policy objects to sites. Which is great and all, but I have a client that is growing rapidly, and ...
1
vote
1answer
57 views

Lock screen doesn't remember username

On Windows Server 2008 R2, when I lock the machine, when I return, the Logon Screen screen doesn't remember my username: I definitely still have a session, because when I log back in, it remembers ...
-1
votes
1answer
45 views

Is installing Windows Server 2012 R2 using .com versus .local going to cause future problems? [duplicate]

I know using example.com would cause a conflict, but what about ad.example.com, corp.example.com or internal.example.com? I have a web .com domain. Will need to remote in and/or VPN etc. I am being ...
2
votes
1answer
55 views

Domain A record on active directory controller

Currently we have an Active Directory setup for a small network running on Debian 8 and Samba 4. At one point we had to change the ip address of the AD server from 100.0.0.4 to 100.0.0.100. I edited: ...
0
votes
1answer
30 views

How to recover users from ntds.dit

My primary (and single) DC died by mistake (not booting) however all the files are intact. What are my options to restore users on new DC on other server? died DC: Windows server 2008 R2
0
votes
0answers
18 views

block user object settings at cross domain forest registration

I got the following infrastrucute: Domain A: User Forest | Domain B: Ressource Forest (Citrix AD with infrastructure services) | one way trust-relationship The user of domain A signs on the citrix ...
-2
votes
1answer
36 views

IIS on Domain Server, Cannot Access To Website from Remote [closed]

I recently rent a virtual server over some country, and activate it's ISS service and Active Directory.... What now bother me, though i had no idea what i'm doing (though most of it went right) is ...
1
vote
1answer
30 views

List all kerberized SPN's in Linux

Is there a way to list/show all SPN's in an kerberized AD using a Linux Client? In Windows one can use setspn -T <domain> -Q */* to get them. Is there something similar? Haven't found anything ...
0
votes
1answer
25 views

Populate “Lab” Domain via LDAP

I have a lab environment where I need to own Active Directory Services/DNS/DHCP/etc at work. I have a pseudo "production" environment in this lab that has everything from vCenters to Jenkins to VDI ...
0
votes
2answers
90 views

Bulk Update AD Attribues with Employee ID as matched key

I have a CSV file that I need to bulk update AD with. The file has an employeeID, which would match the employeeID field in AD. So far, I've been able to update a user successfully with a CSV file if ...
1
vote
0answers
17 views

GitLab Active Directory authentication: no results and no authentication

I'm trying to set up LDAP authentication with GitLab (version 7.12.2 installed on Ubuntu 14.04 amd64 on a VM, Omnibus set up). I've edited my gitlab.rb file to look like the following: ...
1
vote
0answers
39 views

Domain name record in Active Directory points to .0 IP address, is this safe to delete?

Not sure if this is safe to delete. I have read that these AD domain name records are created by netlogon service, and/or others, and not changeable. I have two domain controllers, each showing ...
-4
votes
1answer
15 views

Domain Name Changing and exchagne server 2010 [on hold]

Primary name (dc1)and secondary (dc2) dns name: xyz.com All client username & computer are connected with dc1. Xyz.com domain Now I want change the primary domain name (pdc1) secondary domain ...
0
votes
2answers
42 views

After a DC loads the DNS zone does it ever have to contact the DNS server again?

I have a DC in a branch office. The DC is pointed to another DNS server in a central office (which is also a DC) for its primary DNS. So let me make sure I understand how this works: When the DC ...
0
votes
1answer
20 views

Upgrade AD FS 1.0 on Win 2008 R2 to 2.0

Since AD FS 2.0 is available for Windows 2008 R2, can i simply upgrade AD FS 1.0 to 2.0 just by installing AD FS 2.0 or uninstalling AD FS 1.0 then installing AD FS 2.0. Or is this too risky? I wonder ...
0
votes
0answers
24 views

Cannot add NT Authority login into SQL Server

I installed SQL Server 2014 on a Windows 2012 R2 instance. I named the instance SQLExpress. After installing SQL Server, I joined this machine to an Active Directory domain and logged in using the ...
2
votes
2answers
43 views

dns a records become static

So here's a weird one... I'm managing a Windows AD environment. For whatever reason, when it was built, DNS was not integrated with AD. A month or so ago I went ahead and integrated DNS with AD ...
0
votes
1answer
80 views

Windows Workgroup - Maximum Workstations before a Domain is needed?

Several years ago I installed a Windows 2008 server and 8 PCs in a workgroup. Since then the client PCs have all been upgraded to Windows 7 Pro and the network has grown from the original 8 PCs to 23 ...
1
vote
1answer
55 views

Password Expiration / DNS Issue

Our Windows 2008 Server has AD set to have users change their passwords every 30 days. When a password expires a user is not prompted to reset it. The user is allowed to login with their expired ...
1
vote
3answers
285 views

Stop Active Directory Users installing updates

We have multiple PCs running Windows 8 for testing on an AD. However, Windows update keeps pushing the Windows 8.1, but we need the PCs to strictly be on 8. How could I stop AD users from installing ...
0
votes
0answers
8 views

Group policy to Delete unauthorised software per logon

I have a group of on-site engineers (domain users but have local administrators rights) who are using laptops. They are required to install software occasionally when they travel, therefore I need a ...