A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
16 views

Do I need a DNS in my domain to let my clients find the WSUS server?

I have my WSUS installed on the same system as my Active Directory management. The weird thing is, that when i put a client in the same domain, i find it in my AD but not on my wsus. The client ...
0
votes
0answers
9 views

How to restrict asdm access based on Active Directory group membership?

I have a Cisco ASA 5505. I have enabled AAA authentication for ASDM to authenticate with my Active Directory server. How can I restrict logging into ASDM to certain users that belong to a specific ...
0
votes
0answers
10 views

How to give permissions to user (not admin) to access task manager WS 2012 R2?

I have a terminal server with ws 2012 R2. In it I have installed domain server and remote desktop services. I have administrator account, and other account without administrator rights called ...
0
votes
0answers
12 views

Retrieving the AD machine account password on an Ubuntu machine

I'm trying to perform an LDAP query against Active Directory from a script (very similar to this question) from a domain-joined Ubuntu machine. The script can't prompt for a password, as it won't be ...
1
vote
1answer
14 views

unable to join server to existing domain in azure within virtual network

I have created a Virtual Network on Azure and have created two VM's within the Virtual network, with IP's 10.0.0.4 and 10.0.0.5. I have added Active Directory role to a one of the VM's and promoted it ...
0
votes
1answer
21 views

I see my clients in AD but not in WSUS

I set up a WSUS but dont see any clients in the Unassigned Computers group. I can find my clients in the ADAC, when I select myWSUS (local) > computers. My group policy management got a domain ...
0
votes
0answers
12 views

Samba 4 not working correcty as dns for internal (LAN) addresses

I have a Debian Wheezy fully updated with Samba 4.1.17 as and AD. I've been updating/upgrading for months. Years ago the server lost some HDD and the configura was corrupted. in that time trying to ...
12
votes
4answers
848 views

How can we remotely administer our “fleet” of Windows 7 laptops?

I'm working with a startup that's teaching kids to program. We've just obtained our first "fleet" of laptops - half a dozen refurbished thinkpads running Windows 7 - and I'm looking for the best way ...
1
vote
1answer
15 views

caching AD credentials on 2012 r2 File Server

I am setting up a fileserver at a remote branch office that has very very limited bandwidth Is there a way to store the 10 or so users authentication credentials locally on the File Server so that ...
-3
votes
2answers
20 views

Domain & Active Directory Migration [on hold]

We just acquired a very small company, what is the best and easiest way to integrate a small domain to our own domain?
0
votes
1answer
18 views

Broken Exchange in AD Environment

One of our testing exchange servers hadn't been used for awhile and when a tech was trying to get it working again (hub transport wouldn't start, SID errors in event log, etc.) he got frustrated and ...
0
votes
0answers
10 views

Active Directory Server not listing on Port 636, although CA certificate installed

I'm desperately trying to enable LDAPs on an Active Directory server. After some research on google I installed the Active Directory Certificate Services and issued an certificate to the name of my ...
0
votes
0answers
15 views

How do I set up a Windows image (not part of the domain) to sync time with the domain controller?

I'm creating a Windows image to distribute to computers, and I want to set it up so that it will sync time to the domain. The problem is that the image is not joined to the domain, so w32tm /config ...
-1
votes
0answers
22 views

Boss-friendly OpenVPN server with Active Directory? [on hold]

Has anyone found a license-free OpenVPN server with AD integration that "Just works"? We need a VPN for our admin team, but don't want to spend days learning and setting up RADIUS by hand. I've seen ...
1
vote
2answers
30 views

Windows Server 2003 Directory Services Restore Mode Lock-Out

I've got a Windows Server 2003 R2 Standard machine. Against my advice, the company making use of this server made it do everything. Zero redundancy outside of some flat file backups. After months ...
0
votes
0answers
22 views

Adding a Domain Suffix - safe or bandage solution?

Coming into a new organization with an AD environment that was more or less experimental. We're ready to go all in, but I don't like that the domain was setup with a ".local" suffix, due to the ...
4
votes
2answers
23 views

Is there a difference in bandwidth consumption between a RODC and RWDC?

My organization has deployed 2008 RODCs on multiple seagoing platforms. The idea was to extend our shore-based domain onto our ships to better control security policies. RODCs were selected with the ...
-1
votes
1answer
26 views

Unable to log in into a (Win 2012) server using domain account

Our domain server is Windows Server 2008 (lets say domain ABC) and there is another server successfully added to domain (say ABC.EFG.local) But we are not able to log into the (win 2012) server using ...
3
votes
0answers
31 views

Best practice for defining user “HOMEDRIVE” “HOMEPATH” “HOMESHARE”

Is it considered a best practice to map domain users' "HOME" environment variables to a network path? If so, why? By "HOME" variables, I am referring to: %HOMEDRIVE% %HOMEPATH% %HOMESHARE% This ...
2
votes
1answer
43 views

What is ADFS (Active Directory Federation Services)?

So I've been told that our PHP application may need to support authentication using ADFS. For a non-Microsoft person, what is ADFS? How does it differ to things like LDAP? How does it work? What ...
-4
votes
2answers
52 views

Create a domain on server to have all users on it + shared SQL Server 2012

I'm new to Active Directory Domain Services and to Windows Servers in general. I created a domain on Windows Server 2008 R2 using AD DS and I joined all company's PCs to this domain. Now what I want ...
0
votes
1answer
38 views

Is running a TS (RDP) on a DC a very bad idea?

For a project we only have one Windows Server available. We need to run both a TS (Terminal Server) with RDP and ADDS on this server. I have asked this question and got the answer that if we don't ...
3
votes
1answer
22 views

Use “Client Site Name” in Group Policy Preferences

In Active Directory, you can map IP addresses to Client Sites. ...and then you can map Group Policy objects to sites. Which is great and all, but I have a client that is growing rapidly, and ...
1
vote
1answer
37 views

Lock screen doesn't remember username

On Windows Server 2008 R2, when I lock the machine, when I return, the Logon Screen screen doesn't remember my username: I definitely still have a session, because when I log back in, it remembers ...
-1
votes
1answer
43 views

Is installing Windows Server 2012 R2 using .com versus .local going to cause future problems? [duplicate]

I know using example.com would cause a conflict, but what about ad.example.com, corp.example.com or internal.example.com? I have a web .com domain. Will need to remote in and/or VPN etc. I am being ...
2
votes
1answer
53 views

Domain A record on active directory controller

Currently we have an Active Directory setup for a small network running on Debian 8 and Samba 4. At one point we had to change the ip address of the AD server from 100.0.0.4 to 100.0.0.100. I edited: ...
0
votes
1answer
30 views

How to recover users from ntds.dit

My primary (and single) DC died by mistake (not booting) however all the files are intact. What are my options to restore users on new DC on other server? died DC: Windows server 2008 R2
0
votes
0answers
17 views

block user object settings at cross domain forest registration

I got the following infrastrucute: Domain A: User Forest | Domain B: Ressource Forest (Citrix AD with infrastructure services) | one way trust-relationship The user of domain A signs on the citrix ...
-2
votes
1answer
36 views

IIS on Domain Server, Cannot Access To Website from Remote [on hold]

I recently rent a virtual server over some country, and activate it's ISS service and Active Directory.... What now bother me, though i had no idea what i'm doing (though most of it went right) is ...
1
vote
1answer
28 views

List all kerberized SPN's in Linux

Is there a way to list/show all SPN's in an kerberized AD using a Linux Client? In Windows one can use setspn -T <domain> -Q */* to get them. Is there something similar? Haven't found anything ...
0
votes
1answer
25 views

Populate “Lab” Domain via LDAP

I have a lab environment where I need to own Active Directory Services/DNS/DHCP/etc at work. I have a pseudo "production" environment in this lab that has everything from vCenters to Jenkins to VDI ...
0
votes
2answers
88 views

Bulk Update AD Attribues with Employee ID as matched key

I have a CSV file that I need to bulk update AD with. The file has an employeeID, which would match the employeeID field in AD. So far, I've been able to update a user successfully with a CSV file if ...
1
vote
0answers
15 views

GitLab Active Directory authentication: no results and no authentication

I'm trying to set up LDAP authentication with GitLab (version 7.12.2 installed on Ubuntu 14.04 amd64 on a VM, Omnibus set up). I've edited my gitlab.rb file to look like the following: ...
1
vote
0answers
36 views

Domain name record in Active Directory points to .0 IP address, is this safe to delete?

Not sure if this is safe to delete. I have read that these AD domain name records are created by netlogon service, and/or others, and not changeable. I have two domain controllers, each showing ...
-4
votes
1answer
15 views

Domain Name Changing and exchagne server 2010

Primary name (dc1)and secondary (dc2) dns name: xyz.com All client username & computer are connected with dc1. Xyz.com domain Now I want change the primary domain name (pdc1) secondary domain ...
0
votes
0answers
15 views

How to get Time Zone information from the remote server using adsi c++ api [closed]

I want to get the timezone of a domain by connecting to any server(DC) using ADSI c++ api. Any suggestions please.?
0
votes
2answers
42 views

After a DC loads the DNS zone does it ever have to contact the DNS server again?

I have a DC in a branch office. The DC is pointed to another DNS server in a central office (which is also a DC) for its primary DNS. So let me make sure I understand how this works: When the DC ...
0
votes
0answers
16 views

Upgrade AD FS 1.0 on Win 2008 R2 to 2.0

Since AD FS 2.0 is available for Windows 2008 R2, can i simply upgrade AD FS 1.0 to 2.0 just by installing AD FS 2.0 or uninstalling AD FS 1.0 then installing AD FS 2.0. Or is this too risky? I wonder ...
0
votes
0answers
24 views

Cannot add NT Authority login into SQL Server

I installed SQL Server 2014 on a Windows 2012 R2 instance. I named the instance SQLExpress. After installing SQL Server, I joined this machine to an Active Directory domain and logged in using the ...
2
votes
2answers
43 views

dns a records become static

So here's a weird one... I'm managing a Windows AD environment. For whatever reason, when it was built, DNS was not integrated with AD. A month or so ago I went ahead and integrated DNS with AD ...
0
votes
1answer
76 views

Windows Workgroup - Maximum Workstations before a Domain is needed?

Several years ago I installed a Windows 2008 server and 8 PCs in a workgroup. Since then the client PCs have all been upgraded to Windows 7 Pro and the network has grown from the original 8 PCs to 23 ...
1
vote
1answer
55 views

Password Expiration / DNS Issue

Our Windows 2008 Server has AD set to have users change their passwords every 30 days. When a password expires a user is not prompted to reset it. The user is allowed to login with their expired ...
1
vote
3answers
285 views

Stop Active Directory Users installing updates

We have multiple PCs running Windows 8 for testing on an AD. However, Windows update keeps pushing the Windows 8.1, but we need the PCs to strictly be on 8. How could I stop AD users from installing ...
0
votes
0answers
8 views

Group policy to Delete unauthorised software per logon

I have a group of on-site engineers (domain users but have local administrators rights) who are using laptops. They are required to install software occasionally when they travel, therefore I need a ...
4
votes
1answer
69 views

Add A record to Windows AD DNS remotely via cmdline?

I want to avoid rdesktop + clicking through DNS GUI, but would like to be able to push entries from some other host, preferebly any domain joined machine. Idea is to have post-join script for Samba ...
0
votes
1answer
39 views

AD keeps local accounts from timing out?

Currently, our customer requirements say that after 60 days, the local accounts on our devices are supposed to be locked. When AD is being implemented, the local accounts are not being used (everyone ...
0
votes
2answers
24 views

Get list of mailboxes in exchange where users are disabled in active directory [closed]

Hi the code bellow lists all mailboxes with some information I want (and some things i will remove). How ever I would like to be able to find out what mailboxes bellongs to users that are disabled in ...
-1
votes
0answers
11 views

Enable kerberos on windows server 2008

I have installed active directory domain services and DNS server on windows server 2008. Now How can I enable kerberos related services(KDC and AS) on server? So that I can start authentication using ...
2
votes
1answer
19 views

How can I recover an Exchange 2013 mailbox which I disabled?

My company has Exchange 2013 and I disabled a mailbox in the Exchange Admin Center under the presumption that this would work in the same way as disabling an account in Active Directory would. ...
0
votes
1answer
24 views

Office 365 DirSync Using Trial Domain

I've signed up for an Office 365 trial and have set up a test lab server functioning as a local DC with a fictitious domain -- basically the idea was that I wanted to set up a test domain/lab that's ...