A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

learn more… | top users | synonyms (2)

2
votes
3answers
58 views

Stop Domain Users from Installing Software

This is my last shot to figure this out. If I can even figure it out. Is there any way to stop a user from installing programs on their computer? We'll be running Server 2016. I've tried denying ...
0
votes
0answers
10 views

Set up Samba with Active Directory and local user authentication

My main goal is to set up a Samba-Server, to where users can connect to by using their Active-Directory credentials. Additionally, local linux users on the Samba-Server should be able to authenticate. ...
0
votes
0answers
17 views

How to access remote user name in nginx?

Please help, I have a RoR application running on RedHat 6.6 with Nginx as webserver and Passenger as application server. Now i need to implement SSO with windows authentication, i.e if a user has ...
1
vote
0answers
14 views

Group policy setting to prevent asking user which encryption mode to use

Asked a similar question previously: Group policy setting to prevent asking user where to store recovery key I'm trying to enforce the encryption mode to the new XTS-AES so that if the users ...
-2
votes
0answers
29 views

How to fix error: The security database on the server does not have a computer account for this workstation trust relationship [on hold]

Sys Admins I need your help! Logged onto my Windows 2008 r2 NAS server & received the following error message: Group Policy Service failed logon access denied. So googled the issue and ...
-1
votes
2answers
67 views

An active directory domain could not be contacted

I have this problem with joining client PCs to the domain. I think i did everything right, set up AD DS, DHCP, DNS on my server, turned off the DHCP server on my router. I ensured that the Preferred ...
0
votes
0answers
8 views

IPMI and Recursive AD group permissions

It seems that SuperMicro's IPMI service does not allow for Active Directory permissions to be recursive, that is, a user in a group, with that group in a group that has admin permissions. Is there a ...
0
votes
2answers
56 views

GPO shows applied under user settings, but contains only computer settings

I am having a spot of trouble with my policies and applying them on my Windows 10 machine. I have several GPOs applied at the top of domain level, some contain only computer settings, some contain ...
1
vote
1answer
13 views

Windows Server 2008 R2 functional level - inactive computer objects

I'm planning a domain migration and I would to understand which computer objects are up and running. Already tried the command “dsquery computer domainroot -stalepwd” but I still have some doubts with ...
0
votes
1answer
37 views

AD Replication with 3 sites/locations

I have created new forest with domain.local. Domain have 3 locations - A, B, C. ( One dc per location ) First dc-A is owner all FSMO roles. After configure all 3 sites with subnets added 3 IP "Inter ...
0
votes
1answer
31 views

Setting up local administrator accounts that still require a domain administrator for certain tasks

Having started in a new place recently, I've been tasked with setting up 2 new workstations, however I'm having a hard time figuring out exactly how the workstations here were configured in the past, ...
0
votes
2answers
49 views

Which security group in AD to manage domain computers

I want to add another user rights to manage all domain computers. I created a group in AD called ITAdmin and added myself and this user in it. Then I added this group to several other groups like : ...
0
votes
0answers
41 views

How to delete old profiles saved on a shared server folder

We have a Windows Server 2012R2. Just a bit of a background, we are replacing the old IT team at this place, and we've ran into a few problems trying to organize and clean up this network. What we ...
0
votes
0answers
21 views

Show domain user on login screen

I've a domain used by both teachers and students. Right now teachers can able to input username and password easily but for the students its quite difficult for them to do the task. I've created two ...
0
votes
1answer
12 views

redirect specific computers to Specific ou

Helle All, I am planning to redirect the specific name of the computers to specific OU like as below Condition 1. Name which starts with CMP* need to move to "Com" OU Condition 2. Name which starts ...
1
vote
1answer
23 views

Prevent conflicting Active Directory object from being created?

I have an environment with separate Active Directory and DNS infrastructures and am using DNS CNAMEs for several storage servers. Normally windows clients can reach the storage correctly whether ...
2
votes
1answer
52 views

Cannot promote Windows Server 2012 R2 to Domain Controller at a new site. “The wizard cannot gain access to the list of domains in the forest.”

I'm opening a new site (physical and logical) in my international Windows domain. The site is connected to the main office by a VPN over a slow connection (I'm using pfsense as my main router and ...
1
vote
1answer
31 views

Windows Server promote to Domain Controller succeeded and failed?

Edit: Ignore this post. It turns out I'm having other problems, even with another brand new install of Windows Server 2012 R2 on a different physical box. So I'm pretty sure there is a different ...
-2
votes
1answer
40 views

Every two days Windows Domain removes my administrative privileges [on hold]

My computer, running Windows 7 professional, is on a domain. I have to change my account to set it administrative privileges every two weeks. I don't know why, every two days, my user is remove from ...
0
votes
1answer
32 views

Group policy vs. Local group policy: which is correct for this use case?

Quick background: I've been working with group policy since Win2k; I'm in an organization that's just getting around to rolling out Active Directory. I've got a few cases where I need to provide ...
0
votes
1answer
17 views

Suggestion required for Mailbox migration from Mailenable 7.5 POP/SMTP to Exchange Server

I need some help and suggestion for some mailbox migration. I have an Active Directory domain where all my new Exchange Server 2016 is installed and configured. The domain name is mydomain.com which ...
0
votes
0answers
50 views

How to change from the default shell authenticating using SSSD/AD

Within in the sssd.conf file, does anyone know what the syntax should be to allow me to switch between different login shells? Thanks example@example.com:~$ chsh -s /bin/zsh Password: chsh: user '...
0
votes
1answer
32 views

Active directory account logging in from an unknown application or service

I have a 2008 R2 AD domain, where there are repeated attempts to login by a user is no longer here. The password has been changed, so the failed attempts are expected, but what I don't know is where ...
9
votes
1answer
306 views

Is it possible for a child domain and a OU in the parent domain to share the same name?

I'm adding this Q/A because I just stumbled upon this limitation today, and I was not able to find any documentation about it; there is an old KB article about this issue, but it's currently not ...
-3
votes
0answers
14 views

Windows 10 creating .v2 profile versions, then fails to load them (Domain account) [closed]

So we've got a domain account here and for whatever reason everything works but every Win 10 computer creates .v2 profle version. In the end logging as "temporary user". Anyone got the some problem? ...
6
votes
2answers
103 views

Using Azure AD to push Group Policy settings

I am trying to use Azure Active Directory instead of using a traditional domain controller. I would like to use Azure AD to authenticate users and to push GPO settings, such as folder redirection, ...
-1
votes
1answer
41 views

Export Active Directory from 2008R2 to Samba 4 DC

I know that they can co-exist, but is it possible to export the contents of an AD into an Ubuntu server Domain Controller that's setup with Samba4 AD? I'm hoping to reduce disruption as we take down ...
0
votes
1answer
14 views

ion Where can I find a good list of Active Directory ldap attributes? [closed]

To be clear, I'm looking for the node data, and NOT the keys in Active Directory's ldap tree node. To be specific I suppose I'm looking for the official Microsoft documentation on this.
0
votes
0answers
49 views

Unable to change domain credentials on Windows client PCs

Any time a user's password expires, or they want to change the password before it does, they will see the following error message: configuration could not be read from the domain controller either ...
0
votes
0answers
13 views

AD LDS administrator that can access more than one application partition

We had an AD LDS instance setup with 1 application directory partition: O=ACME The application that uses this partition can write to it using an administrator account we have created with the ...
-1
votes
0answers
21 views

Ubuntu Samba 4 SSH [on hold]

I have a Samba 4 up and running as a (single) DC on my ubuntu 16.04 machine. (My setup is based on this and this tutorial) Now I'd like to allow the samba 4 users to authenticate on ssh with their ...
-2
votes
1answer
36 views

Power plan GPO applies, but doesn't change sleep interval [on hold]

I am having a problem trying to make a new GPO to change the interval for sleeping while plugged in. I am seeing that the GPO sets High Performance as the active plan, but even though I set the ...
2
votes
1answer
36 views

SUDO Keeps promting for password, when using SSSD with AD

Hi I am trying to setup SSSD to authenticate to AD on RHEL. I able able to login with my AD user and password and see my groups when I run id. But when I try to use sudo, it just keeps prompting for ...
0
votes
1answer
52 views

User account keeps getting locked out

I have a user in my environment that keeps getting locked out. I have managed to trace the source of the lockouts and found a process on a server which is located on C:\Windows\System32\inetsrv\w3wp....
0
votes
1answer
29 views

Troubleshooting AD LDS

I have a Win 2012 Server that I've created a new AD LDS forest on. I'm running a software application on the server that uses this forest for user credentials. The software application is not logging ...
-1
votes
0answers
41 views

How to disable client drives from Windows Server 2008 R2?

I'm working in college that has 3 labs. In each lab there are 100 systems that are all Dell systems (not a thin clients) and which have three drives (C, D, E). I will be logged on as a local user on ...
-2
votes
2answers
40 views

Primary domain controller has crashed, and exchange 2010 don't find the secondary?

Primary domain controller has crashed, and exchange 2010 don't find the secondary one! I also promote the secondary to Primary but still nothing. Mistakenly restarted the Exchange server and now I ...
0
votes
2answers
87 views

Need to start over with a new Active Directory domain. How far do I tear down the DC?

I built a Windows Server 2012 R2 PDC for a new domain. It's still in its infancy with only one DC and one member computer. Now I need to remove all traces of that domain and start fresh because: It ...
-2
votes
0answers
25 views

AD across regions?

I've got a pair of VPCs in AWS. One in us-east, one in us-west. They're bridged via OpenVPN (linux host in each). I'm also running a windows instance in each to host AD -- my app requires domain ...
0
votes
1answer
19 views

Join Server 2012 R2 to existing Server 2008 R2 Foundation domain

Is it possible to make a server running Windows Server 2012 R2 Standard a member server of an existing domain running on a Server 2008 R2 Foundation Edition server? According to Introduction to ...
-1
votes
0answers
14 views

openldap as filtering proxy for AD

I have successfully set up an OpenLDAP as proxy; this is so that public-facing servers not in our corp network can run LDAP-authenticating web apps without having to expose the Windows AD Server to ...
0
votes
1answer
17 views

User manageable distribution group in Exchange 2010

Our users need to manage a distribution group in Outlook and want to be able to add external mail contacts to the group. We don't want to have to create a mail contact every time they need to add a ...
2
votes
1answer
75 views

What an alias group means in SID context?

Reading https://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/groupmapping.html, I found out that exist alias for groups. But what this alias means? It means that it is connected to another ...
-1
votes
1answer
20 views

Are there any consequences of deleting the Full control permission on an user object for Administrators, Domain Admins groups?

I'm trying to create a user in AD which is undeletable, unmodifiable even by Administrators, Domain Admins. Is there any problem that might occur if I delete the Full control permission on the user ...
4
votes
1answer
23 views

Automaticly apply 'list folders' permission to parental folders when user granted access to subfolder in Access Based Enumeration share

Firstly apologies if some of my terminology is off, I'm pretty new to Windows networking and Active Directory. We're running a Windows Server 2008R2 fileserver and I've been tasked with restructuring ...
0
votes
3answers
89 views

Change local admin password via GPO

I have deployed an Active Directory in a small company. Each and every user is trusted with local admin privileges on his computer with his domain account. However, in case the users can't log on to ...
0
votes
0answers
55 views

Can't open Active Directory Users and Computers, although AD is operational

This is the error I'm getting when trying to open Active Directory and Computers on the Domain Controller: Naming information cannot be located because: The network path was not found. The NETLOGON ...
0
votes
1answer
20 views

Group policy setting to prevent asking user where to store recovery key

Win10 PCs, 2012R2 domain I'm rolling out bitlocker to clients and I'm trying to restrict the options in the bitlocker wizard as much as possible. I do need users to run the wizard so they can set a ...
5
votes
1answer
69 views

get AD group path in the domain/tree

How to get the path of a specific group from the Domain/tree? I am not getting to the info with the "Active Directory Users and Groups" program. We have a extensive tree of folders beneath the ...
0
votes
1answer
28 views

User Cross Domain Authentication Explanation

We have a domain in the 2008 R2 domain functional level....all DC's are 2008 R2. We also have a Windows 2000 domain. The domains are not trusted. From any server in Domain A (Windows 2008 R2), I can ...