A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
0answers
21 views

Is using the AD home directory attribute to map the home drive really no longer a best practice?

I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
0
votes
2answers
19 views

Windows 802.1X WiFi First Login To Domain Laptop

So I have my Windows laptops using 802.1X for authentication to connect to my WPA2-Enterprise WiFi network. This works well except for one edge case. These laptops are Windows 7 Pro and Windows 8 ...
0
votes
0answers
11 views

AD Account Policies/Group Policy not updating Mac keychain passwords

We currently run Windows Server 2008 R2, AD and have a multi Desktop OS environment ranging from Macs to Windows. Macs are bound to AD for login and password authentication through the directory ...
0
votes
0answers
9 views

Domain policy expiration doesn't match net user command

In Active Directory, we have recently changed our password policy. We had our users set to where their passwords would not expire previously. Now, we have set max password age in our domain policy ...
1
vote
1answer
37 views

Can computer change his AD Domain Site binding on network reconnection?

Can a computer's AD DS site be reassigned on network reconnection? For example, I connect a computer to network 172.16.1.x, and then boot it up. The computer recognizes the subnet as belonging to ...
1
vote
2answers
36 views

an active directory domain controller could not be contacted

After creating an active directory domain controller i tried to add client computers to the domain i kept hitting a snag. The following error occurred when DNS was queried for the service location ...
0
votes
0answers
9 views

IE11 & 2012R2 History GPO

probably a really simple one but I've not been able to find it. I am running a 2012R2/Win 8.1 environment and want to stop IE from storing any browsing history on a machine level. I've already set ...
2
votes
1answer
28 views

W2012 R2 AD certificate Services sha algorithm

So shortly after configuring an offline root CA and online AD subordiante CA with SHA512 for future proofing. We discovered a thin client vender (teradici zero client with View 6) only supports SHA1 ...
1
vote
2answers
31 views

where should I point my top level domain DNS for Internal Active Direcotry Services

We are planning to switch our environment from workgroup to domain (active Directory services). We are planning to register our top domain at some public register. That domain is going to be used just ...
1
vote
0answers
14 views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
0
votes
1answer
16 views

Computer under domain gives req_timed_out in browser for application

I've Windows Server2008R2 with ADDS configured. Also the same server got the Java application running in Tomcat. So, when I open the particular service of that application from the computer which is ...
1
vote
0answers
13 views

Secure channel trust verification fails

Working on an issue with setting up a trust between two domains with several firewalls in between, and a pinhole routing between two servers in them. newdc.newdomain.com is a 2012 server in a brand ...
1
vote
1answer
13 views

Does DSML Services for Windows run on Windows Server 2008?

I realize that DSML Services for Windows lists Windows 2000 or Windows Server 2003 as a requirement, but can anybody tell me if it will still run on Windows Server 2008? We're using DSML to talk to ...
0
votes
0answers
17 views

One user shows as Contact instead of Mailbox, after migration to Office365

We recently did a cutover migration from an on-premises Exchange 2010 server to Office 365. We've set up dirsync to synchronize accounts and passwords from our local AD. All mailboxes and shared ...
0
votes
1answer
17 views

Cannot log in to active directory

I am having a great trouble here. We are working on a research project in which we need SharePoint 2013. Therefore, we used a cloud environment and booted up three machines and installed Active ...
3
votes
3answers
47 views

PowerShell: How to retrieve a specific property _exclusively_

How can I retrieve a specific property exclusively? I am aware of the select-object cmdlet which seems to be dowdy in that respect: PS C:\> Get-ADOrganizationalUnit -SearchBase ...
0
votes
0answers
30 views

Windows 2-node failover cluster with AD setup

Is it possible to create a 2-node failover cluster with AD, but only with 2 physical servers? Creating a failover cluster requires an AD, but sadly I don't have any available hardware to install it. ...
0
votes
2answers
37 views

Make sssd respect Acctive Directory nested groups

I have managed to get sssd working and getent passwd *username* as well as getent group returns AD data. I am now facing a problem with nested groups in Active Directory. In the AD i have supergroup ...
-3
votes
0answers
34 views

Can i recover my all domain computers and users from IFM and in-cooperate them in new forest? [on hold]

My only Active Directory Server on win server 2008 R2 with one domain controller crashed today. i.e there wan no additional domain controller. The only backup that i had was IFM media. So can i ...
2
votes
0answers
20 views

Alfresco Group Sync with Active Directory. Looking for a real groupID

I have an Alfresco Community 4.2.e running and synchronized with Active Directory with functional level 2008. I import users and groups from Active Directory. From ldap-ad-authentication.properties: ...
0
votes
0answers
41 views

Unable Join SOME 64 bit Windows 8.1 Pro Clients to Windows Sever 2003 Domain

We just deployed 12 brand new Windows 8.1 Pro 64 bit client machines. They are all identical models and all wired identically to our network/server room. 8 of the machines joined the domain with no ...
1
vote
0answers
35 views

Server Migration 03 -> 12

I have run into a wall and out of ideas. Here's the situation. I have a client that has a old '03 DC with a 12 replicating the '03 server. It is out dated and has to many group policies and stuff it ...
0
votes
1answer
36 views

sssd can't save user. Missing uid

I am trying to sync my Debian server using sssd. When i run the getent passwd username@domain, the user is not returned. The log says it's because i am missing an uid from the ldap lookup. However, i ...
0
votes
0answers
19 views

AD Roaming Profiles via VPN not synchronizing

I want to create local Client-VMs (Windows 8.1) for our developers. These should connect to our VPN and login on our AD server (Windows Server 2012 R2). I'm using serverside profiles for this so that ...
0
votes
0answers
11 views

Debugging libnss_ldap AD synchronization

I am trying to configure my Debian server to talk to an AD. I have a connection to the LDAPs port of the AD, and i can use LDAP search to connect and retrieve results. I can also see that the getent ...
0
votes
0answers
34 views

Problematic Active Directorys CA certificate

i came across one DC, which gives me RPC errors when dealing with AD Certificate Service.I can see in AD there is 2 Root CA , one is problematic. Is it safe to remove it? Or is there a procedure for ...
0
votes
0answers
11 views

Using Windows Server 2012 CA to provide internal certificates

I want to use Windows AD CS in order to provide any web interface internal to my company with SSL encryption and trust certification. What I want is to make the HTTPS interfaces of webapps, switches ...
0
votes
1answer
45 views

Find IP of computers using AD account

I cant seem to find a log that contains the info I want in AD. I want to log logon events so I can see each user login and where it came from, similar to the information logged when a user provides ...
25
votes
2answers
1k views

Why can a and o in samAccountName be replaced with danish å and ø?

A coworker just demonstrated to me that accounts in our test AD was able to authenticate when replacing every a character in their samAccountName with Danish character å (ASCII 134 / å). E.g. ...
1
vote
1answer
24 views

Replace the domain controller without copying the AD

we might have some special terms to do with replacing our DC. The current DC is running on an old machine with Windows Server 2003. As of the GPOs we aren't able to manage all new computers and as the ...
0
votes
1answer
15 views

Script adding an NISMap object in Active Directory from Windows and RHEL6

I am working on using Server 2008R2 Forest to house AutoFS maps in the existing schema using NISMap and NisObject class objects. I can manually create them (and it works) with ADSIedit. I have ...
0
votes
0answers
11 views

Possible SPN issue with AGPM Authentication

here is an AGPM server in our forest root - AGPMServer.example.biz. The AGPM service is running as example\AGPM. If I log onto the server that hosts AGPM, I can connect no problem. My workstation ...
4
votes
1answer
30 views

Deploy Software via GPO, but also deploy configuration file

When deploying software through a group policy, is there any special trick that will allow you to also deploy a separate, say config, file along with it? Here's the specific problem: We have a ...
0
votes
1answer
27 views

Windows Server 2003 secondary DC issues

I have some strange issues with my domain controller. I have primary DC called 'netsun' with ADDS, DNS and DHCP, and secondary DC called 'ex_serv' with ADDS service and exchange. So my primary DC is ...
0
votes
2answers
31 views

In which order will GPOs be applied when a USER try to login to a PC in a different OU

If we have this Group Policy Management configuration (Windows Server 2008): domain.local OU1 PC1 USR1 GPO1 (Linked) OU2 PC2 USR2 GPO2 (Linked) ...
0
votes
1answer
42 views

Assigning Department based on Active Directory OU's

We have just gone to Office 365 tied in with ADFS. We want to be able to see people's departments automatically when we view their contact info in Office 365. We do not have any Department ...
1
vote
1answer
48 views

How can I remove the minimum password length for a specified user in an OU?

How can I remove the minimum password length for a specified user in an OU? (I do not want the default domain password policy affecting my GPO.) When the "minimum password length" in my default ...
0
votes
0answers
3 views

Connect MSSql using Service account “domain/User” via PHP/Yii [migrated]

i trying to use a windows service account user "DOMAIN/username" to access an existing MSSQL db environment via PHP/Yii i m able to successfully login to the MSSQL database directly using this ...
0
votes
1answer
49 views

How do I move Active Directory user information to the Exchange Global Address Book?

I am running Exchange 2013 and I have noticed in Outlook that a lot of the contacts in the Global Address Book are out of date. I recently went and update all of the Active Directory details so how ...
0
votes
1answer
50 views

Merging multiiple domains with the same existing domain name (office.local)

I am working with a new client who has 5 offices and four of which have a single domain controller with the name of OFFICE.LOCAL and another one with the domain controller DENTAL.LOCAL. Oh and all of ...
1
vote
3answers
48 views

Linux / AD integration with SSSD: how to choose what systems a user can log into?

We are trying out ActiveDirectory integration on some linux systems with SSSD. So far so good we joined the linux systems to the domain and we can log into linux systems with AD-defined users. Right ...
7
votes
3answers
167 views

Server 2012 R2 Active Directory Domain SRV dns records suddenly disappeared

I have a test domain that I recently configured. All of a sudden, no users can log in except those with cached credentials. The domain includes two domain controllers that are both global catalogs ...
0
votes
0answers
31 views

Outlook not finding newly created mailboxes

We are running Exchange 2010. All of my thin clients (Office 2007 - WinServer 2008) and my few PC laptops (Office 2007 - Win7) aren't able to find any recent users that have been added into the ...
0
votes
2answers
58 views

Running a Windows Server 2012 Domain Controller in Hyper-V

I attempted to install Windows Server 2012 on a Dell PowerEdge 2850 and found out that the server may not support Server 2012. Is there any downside to running a Windows Server 2012 domain controller ...
-2
votes
1answer
61 views

User profiles for ESXi [closed]

I have configured active directory with my ESXi Server and all is great. I created User Profiles for this experiment within Windows 2008r2. Logged in with a windows 7 VM within Vsphere, and all works. ...
1
vote
2answers
48 views

Block Administrators authentication attemps from workstations

My Administrator user once in a while is getting locked-out by the workstations in our lab, due to failed logon attempts. (While this is a problem that should be addressed, because this means there is ...
0
votes
1answer
24 views

how to enable user login after Offline domain join?

Is it possible to add computer from remote location to AD (windows 2008R2) and enable user login? I've run DJOIN as described here: http://technet.microsoft.com/library/dd392267(WS.10).aspx but ...
0
votes
2answers
32 views

vsFTPd authenticating with SSSD

I am currently trying to setup an FTP sever that authenticates through Active Directory using SSSD. My config files are as follows: /etc/vsftpd/vsftpd: [root@StudentOrgFTP vsftpd]# cat vsftpd.conf ...
-1
votes
4answers
66 views

Exchange 2013: Unable to install Exchange on domain for the 2nd time

I'm trying to set up Exchange 2013. There are two errors - not sure which one is fatal (perhaps both) Eror 1: Setup encountered a problem while validating the state of Active Directory: The Active ...
0
votes
1answer
15 views

Active Directory - Migrate objects from Win Server 2003 R2 to Win Server 2008 R2

I am about to migrate some users and objects from a domain managed by Win Server 2003 to a domain managed by Win Server 2008 R2. I heard about AD migration tools, but are there issues concerning ...