Tagged Questions

A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
16 views

UDP traffic got blocked by unknown reason?

Here is my situation. One of our major software suddenly refused to getting license from license server under normal user login. but under admin login, this software is running fine and getting ...
0
votes
1answer
19 views

Setup Windows Server Local DNS on WAN

I inherited a WAN with centrally hosted DNS,AD Servers. I have clients connecting to Application Servers hosted locally on site. Problem is when the WAN link goes down clients can't connect to ...
-1
votes
1answer
59 views

Find Computers Recently Joined to Active Directory

How can I find Computers recently joined to Active Directory? Edit: I've searched google for the title phrase, and have also searched here, but can find nothing specifically about filtering on when ...
4
votes
1answer
41 views

How to manage computers from another AD domain with Windows MMC?

I am currently managing computers distributed across 2 different AD domains. I shall call the 2 domains MEDIA and DATA. My workstation is a member of the MEDIA (192.168.10/24) domain, along with most ...
0
votes
0answers
18 views

Additional Keyboard settings from Active Directory

We have some users in our company who need to use additional Keybaords, in order to achieve this one of the other admins had set up a VBS script which runs when users in a particular group log in to ...
2
votes
0answers
58 views

My domain controller/active directory server can't establish a connection with the global catalog

I have a Windows Server 2008 R2 running as my domain controller. It is responsible for Active Directory, DNS, and DHCP. It is the only DC in the forest. Active Directory reports errors every hour: ...
4
votes
1answer
36 views

“Get-AdComputer -filter” doesnt return anything when looking for Vista Clients

Why does Get-Computers -OperatingSystem "Windows VistaT Business" not return anything? It works perfectly for all the other OS types. Function Get-Computers { Param($OperatingSystem) ...
0
votes
1answer
20 views

Does Active Directory alone is not enough to secure hadoop?

I am trying to secure Hadoop environment installed in windows. So basically I started to analyse how to secure a Unix-based hadoop cluster. Have gone through various links related to Kerberos and ...
1
vote
0answers
8 views

Cross-Realm trust verify failed with 'netdom' command

Question 1: Am having my ActiveDirectory in Windowsserver 2012 machine - its domain name is AD-DEMO.LOCAL Kerberos admin-server is in another Ubuntu machine - its realm KERBEROS.COM Added trust in ...
5
votes
3answers
54 views

Identify applications that are configured to connect to a specific domain controller

I work with a Windows domain that has many domain controllers (DCs). I'm looking to remove some of these, but I know there are some applications that are hard-coded to use a specific domain controller ...
-3
votes
0answers
24 views

Enabling admin$ via group policy

I am trying to learn AD management. The task I am trying to do is enable admin share for any computer on this domain using group policy. For this I enabled "Windows Firwall: Allow inbound file and ...
0
votes
0answers
12 views

Setting up SPN for SSRS in a CRM load balance environment

I'm getting this exception randomly in a CRM load balance LIVE environment when running Reports from CRM. System.ServiceModel.Security.SecurityNegotiationException: A call to SSPI failed, see inner ...
1
vote
0answers
27 views

Two-Factor Authentication on Domain Controller Server [on hold]

I need to configure Two-Factor authentication OTP for my Domain Controller and only want to allow this for Helpdesk User, who will take Remote Desktop of my Domain Controller. For example, first they ...
2
votes
4answers
160 views

Detecting duplicate IP address from improperly cloned virtual machines

One of our production servers was "cloned" to make a secondary test environment. The source server is a virtual machine (VMWare vSphere environment) joined to a domain and with a static IP address. ...
0
votes
0answers
17 views

Enabling trust between two domains

I have the forest contoso.com, which my user is part of (alexander@contoso.com), my computer is part of (laptop0815.contoso.com), and our servers (server01.contoso.com and server03.contoso.com). Now ...
-7
votes
0answers
31 views

Synchronisation between AD & MySQL server [duplicate]

I would like to know if there is a way to synchronise a MySQL's database to a AD. By exemple the user created in MySQL's database is sychronized to the active directory and vice versa. And if it's ...
0
votes
1answer
16 views

User properties in AD not opening (WS 2003)

My Windows 2003 Server has this annoying problem... It happens several times and till now, my only solution, is to reboot the server... The problem is that when I open AD (dsa.msc) nad try to go to ...
0
votes
0answers
11 views

Office 365 - Outlook For Mac Not Authenticating

We have Office 365 (for business) and a few users who want to use O365 apps on their Mac. Outlook is causing a problem when trying to authenticate / authorise the application (before adding the email ...
0
votes
0answers
16 views

Provisioning Zentyal 4.0 for OpenChange after joining existing Samba AD PDC

I have an existing Samba AD primary DC. For now, I have another server that acts as mail server and queries the Samba DC for LDAP account information. We want to migrate to the Exchange protocol, and ...
0
votes
0answers
26 views

Powershell - Output username and pwdLastSet that will expire in X days

I found this code that could print out AD user account whose password will expire in 7 days. Param([int]$next=7) Import-Module ActiveDirectory #get current domain password policy ...
-2
votes
1answer
30 views

Target object for this command has incorrect format

I'm doing some 70-410 training and this script that I'm trying to run that I made keeps on failing due to an error that I receive that I stated in the topic. doesanyone see anything wrong in this: ...
1
vote
1answer
75 views

gpupdate doesn't work on everything

On a Win2008 Domain Controller, I've changed an user account property "Account is sensitive..." Of course, I want that GPO to apply immediately So I try gpupdate (or gpupdate /force), but it ...
3
votes
1answer
32 views

Active Directory Delegated AD Admins editing properties of users

I have delegated some (non-admin) users as admins for several OUs, however they are unable to edit their own properties or those of other delegated admins. I chose these settings for each user: ...
0
votes
0answers
29 views

ADFS Azure Multi Factor

I've setup a VM with Windows Server 2012 R2, it has an active directory and ADFS. I've used Visual Studio 2013 to create an application and used the project wizard to connect the application to ADFS. ...
-1
votes
1answer
40 views

Domain controller is not listening on port 445

Is there a way to find why the DC is not listening on 445? -> Firewall rules checked , no denies found and the traffic is allowed. -> file share and print share services running. What else to check? ...
5
votes
1answer
70 views

Active Directory Users - All Attributes Suddenly Blank

We had an instance yesterday where approximately 130 of our well over 5,000 user objects suddenly became corrupted. Every attribute you can possible set with the exception of sAMAccountName and cn ...
1
vote
2answers
32 views

Active Directory Replication Design

Primer/Environment: Sites: Santa Clara (data center), San Francisco (office), Seattle (office), Boston (office) Two Domain Controllers at each site. All sites are able to talk to San Francisco but ...
2
votes
1answer
38 views

Understanding LDAP traffic with ActiveDirectory

In looking at LDAP traffic through Wireshark I was curious to understand the conversation between the a windows client and Active Directory. Each conversation would vary to less than 80k bytes. But ...
3
votes
1answer
20 views

Active Directory components appearing on an Exchange Server which is not a Domain Controller

Folks, I am having a little -still awkward- issue here. I have an HP ProliantDL380p Gen8 server which serves as a Windows 2012 R2 Hyper-V host for 2 VMs. One VM is a Windows 2012 Server R2 Exchange ...
0
votes
1answer
18 views

802.1.x GPO configuration with restriction by computers and users

802.1.x configuration possible using Machine Policy GPO. So, typical scenario is creating security group for computers and applying our policy with 802.1.x to this group. After this all machines from ...
1
vote
1answer
35 views

Host Active Directory in a VM and have Hyper-V server a member of the domain

I'm putting together a Windows 2012 (Standard) server that's sort of a special case - it needs to be an "all in one" appliance. I literally don't have any other physical servers I can use. As part of ...
0
votes
2answers
44 views

Pull Office 365 Users to Active Directory

I am currently working with an existing Office 365 subscription that needs to have a new instance of Windows Server 2012 R2 in Azure manage the users through Active Directory. The server 2012 VM is ...
0
votes
2answers
15 views

Are certificates from all Active Directory domain controllers needed on client for LDAPS?

I am setting up LDAPS on our AD servers to encrypt ldap authentication between the domain and a web server using an internal CA cert. The AD servers and web server are on one side of the firewall but ...
4
votes
4answers
124 views

How can I view information for domain groups from the command line with just core Windows utilities?

I'm familiar with using the NET commands to get information for local users and groups in most scenarios. However, I'm running into a problem using it to get information for domain groups with long ...
0
votes
1answer
20 views

Samba 4 and computer account

I have Samba4 machine, vitch is connected to Active Direcotry. Samba4 have shares with software. Domain computers can't access it. What I need to do to grain access? I have tryed : ...
0
votes
1answer
28 views

ldap/AD proxy: Unable to bind using sAMAccountName, but last name and first name is able to bind

I am attempting to set up a pass-through proxy to Active Directory, using ldap on Debian Wheezy. The slapd.conf file is below. I can bind just find by using lastname, first name: ldapsearch -x -h ...
4
votes
2answers
79 views

Adding an Active Directory to a computer-local group - which scope to choose?

I am aware of the "AGDLP" rule of thumb when it comes to group nesting inside an AD strcture. But now I am wondering if there are any best practises when it comes to adding Active Directory groups to ...
0
votes
0answers
35 views

LDAP query to obtain distinguished name of a list of users

Hi im working on a migration process on which we are migrating users from one server to another domain controller. Right now I have a list of users I migrated, but I also got another of them I didnt. ...
-1
votes
1answer
41 views

BSOD on windows server 2008 R2 reason Srv2.sys Driver_IRQL_not_Less_or_Equal [closed]

I have a issue that i have been facing with my windows server 2008 R2 (ADC Server) Additional Domain Controller (Roles Installed AD,DNS). It suddenly gives a BSOD i did analyse the dump and found out ...
2
votes
1answer
58 views

Remote Desktop to local PC

In our organization we have a control that watches users who use high privilege Active Directory accounts to RDP into any server or workstation on our network. I recently enabled this control which ...
0
votes
0answers
29 views

Events ID 4013 For DNS and 1844 for Active Directory

I have newly registered a virtual private server (windows 2008 R2). My problem is when i install an Active Directory and DNS Roles, it raises events 4013 for DNS and 1844 for Active Directory. What ...
0
votes
1answer
32 views

Best OS to rename Windows Domain

I have a Windows Server 2003 with a domain name of: test.testdomain.com I want to replace this DC with a new 2012r2 but want to know if I should rename the domain first and then promote a new domain ...
-1
votes
0answers
31 views

can't reach domain controller when internet interface is enabled [migrated]

What I want: -Windows Server 2008 R2 guest acting as Domain Controller, internet access optional -Windows 7 guest joined to the domain, with internet access. My setup is this: Server network adapter ...
1
vote
1answer
26 views

Querying for Disabled AD Users in PowerShell

When running a query such as Get-ADUser -Filter * | select DistinguishedName, Enabled the Enabled column has a lot of null values (I was expecting true or false only). Why is this? Is there a ...
1
vote
0answers
36 views

Domain controller not appearing in DNS on any server but itself?

I have a site with a DC I want to decommission, and a relatively new one (promo'd within the last two weeks). I'm having trouble demoting the old server, and in the process of trying to figure out ...
5
votes
1answer
180 views
+500

Domain computer cannot resolve internal hostnames, but nslookup can

I have a Windows 7 computer on my domain that is behaving oddly. It is possible to ping www.google.com It can ping internal hosts using their IP address It can ping the local Domain Controller/DNS ...
0
votes
1answer
44 views

Active Directory inheritance not working as expected

The question So, I have setup a new domain with two DC's. I'm trying to remove the Authenticated Users group from the one of the OU's and that works fine, however child objects do not update (they ...
0
votes
1answer
39 views

Migration from server 2k3 to 2k12r2 [closed]

I recentely joined as System administrator. And I have to migrate server 2003 from 2012R2. What precations should be taken for this? And how to complete this process? Please guide stepwise as I m d ...
0
votes
1answer
28 views

Auto forward email for mail system use Postfix + Dovecot authenticate against Active Directory

I have a mail server with postfix + dovecot lookup to Active Directory for user authenticaiton and mailbox and deliver mail to virtual mailbox (dovecot) User authentication for IMAP/POP are working ...
1
vote
0answers
86 views

pfSense: Captive portal auth via Active Directory (2003)

I'm trying to set up a new firewall server. We chose pfSense and it's working nicely so far. We managed to our Windows Server 2003 Active Directory as a user Authentication Server (System -> User ...