Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

2
votes
0answers
15 views

Active Directory backup/restore without DSRM

I'm trying to backup my local DC to AWS for DR. When running locally, a system state backup and a restore through DSRM works fine. Unfortunately, a server in DSRM fails to boot in AWS (a situation ...
1
vote
0answers
22 views

DFS Setup - The namespace server cannot be added. The system cannot find the path specified

I went to DFS Management and added a created a New Namespace. For the namespace server, I specified my Primary Domain controller (netbios name: primarydc). For the namespace, I enter Files. I use a ...
0
votes
2answers
25 views

Which Group Policy wins out of two enforced policies with similar settings?

I have a situation where I need to modify an enforced group policy object, however due to the sensitive nature I must test my results first to one test user. In order to do this I plan to create new ...
5
votes
0answers
29 views

Synology and Active Directory - “no logon servers available”

I have a Synology Diskstation DS412+ here configured for Active Directory authentication on the shared folders. I have a shared folder that our backup software writes backups to (so, CIFS). This all ...
-3
votes
0answers
14 views

KCC replication issue when AD is behind firewall in Forest, any suggestions without changing firewall? [on hold]

KCC uses Sites and Services to create a replication path for all Domain Controllers in the Forest. Unfortunately, I have some that are behind Firewall so they can't all talk to each other, any other ...
2
votes
1answer
39 views

How to restrict the TCP listening address of a Windows 2003 AD DNS server

I have a Windows 2003 AD integrated DNS server which I want to listen for DNS traffic on adapter IP addresses only. I have followed the steps in the technet article, however. After I complete them ...
-1
votes
1answer
48 views

How can I check my permissions in Active Directory? [on hold]

I have my virtual machine (Windows XP) and some user account assigned to me. I also belong to several groups. What I actually know is my user name, password and a couple of other things that I have ...
2
votes
0answers
14 views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
-1
votes
1answer
21 views

Roaming Profile Control [on hold]

I noticed that with Roaming Profiles enabled that even applications have been roaming. Is this normal? Is there a way to keep applications from roaming? I like how Firefox bookmarks move from machine ...
2
votes
0answers
13 views

Mavericks - APN Active Directory Users not being pushed

We have hit a problem with our current AD -> OSX Server integration project. We have our OSX server (mavericks) connected to our AD domain and running open directory/profile manager. AD users can ...
1
vote
0answers
18 views

How to determine the values for an LDAP bind to a Windows Server 2012 DC? [ldap_bind: Invalid Credentials (49)]

Sigh. I have been trying for nearly 6 hours to get my Gitlab deployment to authenticate via Windows Server 2012 Essentials Active Directory LDAP. I am running Ubuntu 14.04 for my Gitlab server. ...
1
vote
1answer
13 views

Is the Kerberos SPN FQDN significant to the server, or is the keytab enough?

I spend most of my time as a developer, so I'm not familiar with all the details... I have a service running on a linux host. I want to use Kerberos to transmit identity information to the service. ...
0
votes
0answers
8 views

SCCM 2012 R2 install: error with samba4 domain

Am attempting to install SCCM 2012 R2 onto a member server in a domain with a Samba4 DC. I have every reason to believe that AD is working: smbclient reports (what I believe) are the appropriate ...
1
vote
2answers
36 views

add exchange extensions to AD

we have a windows server 2012 with AD on it. we sync that to office 365 but a few of the options like moderated email groups are not present. I contacted Microsoft tech support about this and they ...
0
votes
1answer
32 views

Password reset fails for end users when minimum password age set for more than 0 days

Our Help Desk has been resetting user passwords with "user must reset password at next logon" for years. Recently reset default domain policy for "minimum password age" from 0 days to 5 days. Now ...
-1
votes
0answers
22 views

Bitlocker doesn't store the recovery key in AD

On Windows 2008R2 and Windows 7 Enterprise N 64Bit, when i execute the command: manage-bde -protectors -adbackup C: -id { recoveryGUID } it says the key is backuped in the AD. But when i'm going to ...
1
vote
2answers
35 views

How to bring a redirected user account back from the dead in Windows Server 2008 R2?

A user at the place where I work left the company, we deleted his account out of AD and then he came back...and now his redirected profile exists, but with the wrong permissions on the folder.. I ...
1
vote
1answer
138 views

Continuously check LDAP connectivity to Domain Controllers ( LDAP Heartbeat Check)

working on developing script which runs via schedule task ; whole purpose of it is to target few domain controllers and continuously(for every 2 sec) do a ldap query targeting that particular DC and ...
0
votes
0answers
7 views

Triple hop authentication

Trying to setup impersonation for web application running in IIS that connects to a web service that connects to SQL server, where all the layers are on different machines. Here is the setup Web ...
1
vote
1answer
28 views

Active Directory Extension Number and Office 365

We have our own internal VoIP system in which our employees are using to communicate to each other, each VoIP station has an extension number assigned for each employee. We would like to use Active ...
1
vote
1answer
19 views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
2
votes
0answers
17 views

Are External LDAP referrals similar to a DNS Recursive or non recursive entry?

I'm very familiar with DNS, but less so with LDAP. In DNS I have the ability to delegate the CPU and IO load of referral chasing a given DNS query... or I can set norecurse and have the client ...
3
votes
1answer
37 views

Setting up DNS forward zone when AD domain name is a subdomain [closed]

I'm in high school and want to learn about system administration, so I set up a Windows Server 2012 R2 domain controller in a lab and created the domain ad.foo.com. I own foo.com and the domain ...
0
votes
1answer
23 views

Ldap with cloud application

I was wondering if you guys could help me, I'm trying to use ldap to connect with our AD but the settings on the cloud app seem to fail. How do you set up ldap with external servers? Is there some ...
0
votes
1answer
25 views

Authentication options for staging sites

We're currently authenticating our clients who wants to view their staging environments using windows authentication. That means we have to create their accounts in our local AD and assign them to ...
0
votes
0answers
18 views

Samba4 net join member fails

I'm trying to join a RHEL6 server using samba4 to a domain. Net ads join works correctly, join member does not however. Effectively wbinfo --getdcname does not work where as wbinfo --dsgetdcname does. ...
1
vote
1answer
37 views

How to delete the metadata from a nonexisting Domain Controler object in Active Directory Sites and Services

Short story: After SBS migration we have a mixed AD enviorment with one Win2003SBS (still in function) and two Win2008R2 doman controlers and one nonexistent DC in AD Sites and services that dates ...
1
vote
0answers
11 views

Setting port exceptions for Windows Firewall via GPO. Is there a limit on the number of exceptions that can be set?

We would like to utilize GPOs to manage our Windows Firewall rule set. We have servers that have different requirements (HL7 connections, other programs) and our doctrine is to only open ports that ...
0
votes
0answers
40 views

AD showing two accounts with same name [closed]

In AD sometimes we get a account with same name as one we have which is not created by anyone. One user is with user id and the other is with SID. Acount would be they for 10 minutes and then it will ...
2
votes
1answer
58 views

Store PGP keys on Active Directory/Exchange?

I am looking to implement a transparent plugin for Outlook that would need no configuration at all. I was thinking of maybe using Active Directory/Exchange to store each user's public key and be able ...
0
votes
1answer
36 views

Single sign on and active directory federation

Can anyone please tell me, what is the difference between active directory federation services (ADFS) and single sign on (SSO)? From a simple look at things both seem to do much the same thing in ...
3
votes
2answers
64 views

Where is active directory snap-in for Server 2012 R2?

We are using a Server 2003 domain. I've found the instructions for installing the Active Directory snapin for Server 2012 and earlier: http://technet.microsoft.com/en-us/library/cc732110.aspx. However ...
3
votes
0answers
43 views

Expensive LDAP queries from Workstations

Troubleshooting high LSASS process on a DC found expensive queries originating from a few workstations. Each query is as follows: Visited Entries: 1Million+ Returned Entries: <50 (most of the ...
0
votes
0answers
24 views

Users cannot change their passwords in Active Directory

We have created a new domain. The DCs are server 2012 and 2012r2 and the functional level of both forest and domain is 2008. Password policy is only set on the default domain policy and is set to ...
-1
votes
1answer
12 views

Windows Domain controller recover test

I'm testing a Exchange 2012 VM recovery in a Hyper-V test server. I have this VM, 2 DC and a Exchange server: SRVDC1 (pdc, nm, rid) SRVDC2 SRVEX2 As far as I know I need to recover also a Domain ...
0
votes
1answer
33 views

Roaming Profile Accounts logoff instantly

I am working on setting up roaming profile accounts. When I log in as one of my users, they disconnect instantly. How do I find errors on what is going on? I've check the SMB Share permissions and ...
1
vote
3answers
90 views

Add additional name to a Domain Controller

I am looking to rename a Domain Controller. Functional level and everything else means I can use netdom to carry out the process. Looking a the technet article on the subject I can see the first ...
2
votes
1answer
29 views

Active Directory Force Update Fails

I tried looking up this error and problem and found nothing. Could this be a firewall issue?
1
vote
0answers
13 views

Group policy waited for the network subsystem

In an AD domain with Windows Server 2008 R2 DCs users are complaining about delays in the bootup process of the clients. The group policy log reveals that the client is waiting ~ 20-50 seconds for ...
0
votes
0answers
15 views

Creating Exchange account for user of subdomain

We have a W2008R2 server which serves as AD DC for intra.contoso.com and Exchange server. We have a W2012 server which serves as AD DC for subdomain sub.intra.contoso.com (which is not a new forest) ...
0
votes
1answer
13 views

Server 2012 Active Directory Password policy

For our development environment, I have an AD domain intra.contoso.com on a Win 2008 R2 server, with mostly default settings set. The password policy prohibits the use of passwords with less than 5 ...
0
votes
2answers
34 views

Windows Server 2012 - one user logging on many computers [closed]

I am a newby to Windows Server World. I want to setup company's network (around 7 computers and 15 employees) like this: - all computers joined to my domain - every employee having his own user ...
-1
votes
1answer
20 views

Query AD Users from date [closed]

How can I query users in AD that have been added since an specific date and that their user logon name starts with UTX ? Im guessing I need to do it with powershell but I have very little knowledge. ...
1
vote
1answer
14 views

Factors and approaches for migrating AD across disconnected Data Centres?

I need to specify an approach for migrating a Windows 2008 Active Directory environment to a new data centre. There is not currently connectivity between the two data centres though that could be an ...
0
votes
0answers
21 views

DSQuery return error : domain can't be reach

i'm facing a problem to setup an AD auth on my Zywall firewall. I want my vpn clients tunnel to my zywall with their AD credentials To do that, i need somes infos: Base DN Admin credentials : Bind ...
2
votes
0answers
24 views

Restrict IMAP access for a given account to only one IP address in Exchange 2013

I've created a "spam crawler" account with full access to all mailboxes in an Exchange 2013 environment to get messages in the junk folder to feed the Bayesian filtering running on SpamAssassin in a ...
2
votes
0answers
38 views

How do you dirsync mailusers in Office 365 from AD?

We have Contact objects in Active Directory that are synchronized into Office 365. However, many of these are contacts for users that we have also established an AD account for, meaning we have two ...
3
votes
1answer
30 views

Apache LDAP Authentication with AD Subgroup

I am trying to authenticate using an Active Directory User on a Website running on Apache. My Setup Active Directory: User "steven" is a member of the group "staff". User "cindy" is a member of the ...
0
votes
1answer
22 views

How to not request users to enter their old passwords when ticking “User must change password at next logon” in active directory?

My problem is that I'm doing a migration from Linux mailserver "Postfix" to Exchange using a Microsoft tool called "Microsoft transporter suite" this tool requires that all users to have their ...
0
votes
0answers
18 views

How to Delete Orphon Duplicate computer entry in windows Server 2008 R2 ADS

I want to know how to delete orphan duplicate computer entry in ADS in windows Server 2008 R2..I mean for example suppose one computer joined and registered to Domain DOM1 as comp1.dom1.local. Ok now ...