Active Directory is a directory service created by Microsoft for managing Windows environments. It is used for: A centralized Authentication/Authorization source for Kerberos and NTLM protocols. Providing a single authentication/authorization domain for member servers and workstations. Providing ...
3
votes
1answer
14 views
Keep getting the password complexity error for a OU that should have it disabled
I have a specific Organizational Unit in my Active Directory domain that needs to have weak password settings. I set up my GPO and created a new policy for the OU OU=Limited ...
1
vote
1answer
35 views
Dovecot+AD not work
I have Windows Server 2008 R2 as AD server and Debian Squeeze with Dovecot 1.2.15 as IMAP server.
When I try to login with telnet, Dovecot is freezing and do nothing.
# telnet localhost 143
Trying ...
4
votes
2answers
44 views
Handling name changes in active directory/exchange
What is the correct procedure for changing someone's name and email address in an active directory 2003 with exchange environment? For example when staff marries and their surname changes. Both our ...
1
vote
1answer
28 views
Deny Folder Renaming
I have a folder in a shared network path which I want used as a template -- It contains many subfolders with naming conventions. This folder is meant for users to copy, and then rename their newly ...
0
votes
0answers
25 views
How does one access shares on a domain computer using a local account with the netlogon service deactivated?
For reasons outside of my control, netlogon has to be disabled on a specific server. That server also happens to be on the domain.
I need to be able to remotely access a share on the box using a ...
0
votes
3answers
100 views
New Primary Domain Controller won't start Active Directory unless Old DC is booted
I'm no Active Directory Wizard. Here's what I did:
Old W2003 R2 PDC needed to be replaced with a new server
Rolled out W2008R2 and used DC Promo to add it the domain
Due to some DNS issues, had a ...
2
votes
1answer
37 views
Uninstalling DNS Server and having ISP run DNS
When I installed Microsoft Small Business Server 2008, it automatically installed DNS and DHCP.
However we simply do not need a DNS server on our server box (we really only use it for file storage ...
1
vote
0answers
30 views
really slow active directory lookup from member server when adding user permissions to folders
I have a unique issue with a current server 2008 r2 deployment that is a member server on our internal domain. When I create a folder and set the permissions from the security tab, if I choose to ...
0
votes
0answers
63 views
+50
Windows 7 cannot join samba domain
I have a 3.5.6 samba server with a LDAP backend (both on Debian 6.0). I've been successfully adding Windows XP machines to the domain for years. I now try to add Windows 7. I have made the recommended ...
0
votes
0answers
12 views
Inherited ASP.NET code that connects to OD not working when connected to AD
I've inherited a piece of software that connects to our Open Directory to provide web authentication. When connected to the OD it works like a charm but we want to transition to using Active Directory ...
1
vote
0answers
16 views
Removing an orphaned AD domain: “a referral was returned from the server”
Note: the problem has been resolved, the admin of the parent domain managed to remove the DC object. I gather he used ADSIEdit.
I'm working with an AD forest (in an isolated test environment, ...
1
vote
1answer
24 views
Is there any way to authenticate a SCO login to an Active Directory user?
I currently have a SCO OpenServer 6 server. I also have a Windows Server 2008 R2 server, controlling an Active Directory domain and doing a mighty fine job at it. On any given day, users are ...
3
votes
2answers
50 views
Domain Name does not resolve to site's DC
I am facing a puzzle:
My company has several branches, each branch's subnets have been defined in their own respective site, and each branch has its own RODC.
However, when pinging to the domain ...
-3
votes
0answers
31 views
self-service password reset [closed]
Does anyone have experience with Namespace myPassword? or any other products ?
We are looking at password reset solutions and was wondering your thoughts on any vendors in this field.
Thanks.
...
1
vote
2answers
26 views
Expand a custom attribute in Active Directory 2003
I'd like to expand custom attributes in AD 2003. Currently, we are using +50 custom attributes. but we need to add 40 custom attributes in order to support other project.
My question is, is there any ...
0
votes
1answer
20 views
How to enable Audit Failure logs in Active Directory?
I have a user account that keeps on getting locked out. I am trying to find out what caused it. So I want to enabled failure audits in event viewer as a start. But, I don't know how!
How do I enable ...
0
votes
1answer
28 views
How to trust a non Domain PC over a VPN connected via a Domain Account for SQL Windows Authentication
We are trying to enable a windows login to SQL Server from an untrusted laptop.
The SQL Server has been enabled to allow the domain account to login and browse the data
When a domain user connects ...
2
votes
1answer
38 views
Unable to apply Windows Updates as domain administrator
I cannot install Windows Updates on any server while logged in as the domain administrator.
The domain controller was recently migrated from a Server 2003 machine to a Server 2008 machine. This ...
0
votes
0answers
15 views
SQL Service and Duplicate Service Principal Names
When I run setspn.exe -X on my SQL Server box I get a bunch of entries but all are similar and resemble this --> MSSQLSvc/username.ourdomain.org:1293 is registered on these accounts:
...
3
votes
1answer
56 views
What are the differences in schemas of main directory servers?
Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished ...
0
votes
2answers
33 views
Locking down with Group Policy
So my company has bought a company in Africa and i am moving them over to a virtual 2003 terminal server, my users use a 2008 server to save on licenses and as they are only running sage and emails i ...
5
votes
1answer
104 views
+50
Windows 2008 DHCP service fails - “…failed to see a directory server for authorization.”
I have a small environment running Windows 2008 R2 where the DHCP service on the domain controller fails every two weeks.
The most-visible error is Event ID 1059 and the Event Viewer message is:
...
1
vote
1answer
39 views
Domain Admin requires admin elevation with UAC turned off?
I have a Domain Admin User that logs on via RDP to a w2k8 r2 server, UAC is turned off locally at that server.
Whenever I try to access certain folders, I'm getting the following prompt: "You don't ...
3
votes
1answer
96 views
Self Signed Certificate - Active Directory - Make it trustable to all users
I use Google Apps For Business + SingleSignOn, that means all my users login trough an internal interface instead of though gmail.com.
This SingleSignOn open source solution uses SAML protocol (i ...
0
votes
2answers
41 views
Server Upgrade/AD transfer
I have a server at work (a School) we are looking to upgrade and i not sure where to start.
Here my scenario.
The current (only) server we have is the DC & file server for the site, it currently ...
1
vote
1answer
38 views
Migrating a small office away from an Active Domain setup
I'm helping a small charity move away from an Active Domain setup. They will be using Google Apps and Dropbox to replace the main functionality and their new office will just have a router providing ...
4
votes
2answers
59 views
Automatically make user local administrator on their computer through GPO?
In our AD 2003 domain each user gets local admin permissions on their computer. Everyone else can login with their domain account as normal user.
Right now this means going to the desktop and ...
3
votes
1answer
56 views
Setting up an ADFS 2.0 development environment with two or more domains?
I'm trying to set up a claims-aware web app development environment. I am new to ADFS 2.0 and ultimately, I want to be able to authenticate against two different domains. I think I am very close but ...
1
vote
1answer
40 views
Change login screen behavior to ignore Enter key?
We are running a Windows domain environment with many PCs that are running Windows XP. Users log on to the PCs with their domain user.
Many users attempt to login, enter their username but then hit ...
3
votes
1answer
38 views
vCenter - Active Directory integration - permissions on specific hosts
I have 4 ESXi hosts with 1 vCenter.
I manage the whole 4 hosts with the vCenter interface. How can I block access to specific hosts within vCenter based on the Active Directory user logged on the ...
0
votes
1answer
42 views
Active Directory Cross-Site Replication Speed - Should I select Preferred Bridgehead Servers?
I have 2 sites. Site1 with 2 DCs and Site2 with 1 DC.
If I create a new user on Site1 the 2 DCs replicate the user instantly.
The Site2 DC doesn't get the new user replicated to it until some time ...
1
vote
0answers
21 views
How can I create a Windows Server 2008 domain user that AD RMS will accept?
I am trying to get basic LDAP authentication running on Windows Server 2008 (for testing purposes, so running in VirtualBox on an Ubuntu 12.04 host). I am installing Active Directory Rights Management ...
1
vote
1answer
13 views
I am trying to automate an install with Active Directory to a server core box?
I am trying to automate an install with Active Directory to a server core box?
I assume I need to set up a script. Any ideas on how to go about this.
5
votes
2answers
37 views
How to use a tab character within a GPP registry item?
I am in the process of packaging an some software settings for deployment with a GPP.
I need to include a few tab characters within string and eventually multi string values.
When I paste tabs into ...
1
vote
1answer
46 views
Can I use group policy to set the permissions on registry keys?
I know that I can use group policy preferences to set registry key values on a Windows 7 computer. But is it possible to apply registry key permissions using group policy?
Note: I've seen this post ...
0
votes
1answer
31 views
Remote desktop to particular server tries to insert printout into OneNote
We have a domain network with about 30 computers and an active directory on Windows Server SBS 2003 32bit. I've recently installed Microsoft Office OneNote and the problem started with and seems to be ...
0
votes
1answer
11 views
PowerBroker Identity Services on Solaris 5.10 - Access Denied
I was asked to investigate why when using Likewise-Open to login to Active Directory, the GIDs were not being mapped across. Logins were working fine.
I discovered that for this to work we need to ...
2
votes
1answer
49 views
Crashed Domain Controller Hard Drive OK
I have a domain controller that crashed and I don't have a current backup for it. I also only have 1 domain controller. The good news is the hard drives are fine and I can access all the files. I have ...
1
vote
2answers
52 views
AD domain name selection [closed]
Possible Duplicate:
Choosing local versus public domain name for Active Directory
I'm using company.com.qa as my email domain, which I have hosted with my ISP. Can I use same domain name, ...
2
votes
1answer
36 views
Failed Account Logon Events
We have a server running SQL 2008 R1. We have a web server in the DMZ that connects through the firewall to the SQL server and executes SQL Reporting Services reports using a domain user account.
On ...
0
votes
1answer
143 views
Ubuntu + AD; Failed to join domain: failed to set machine spn: Constraint violation
I'm attempting to join a Ubuntu 12.04 server to Active Directory. I installed samba, and kb5-user, created a machine account in AD, and did:
> net ads testjoin
Join is OK
So far so good. Then I ...
0
votes
1answer
39 views
Active Directory users not listed when trying to add users to SharePoint Foundation 2010
I'm running SharePoint Foundation 2010 on a Windows Server 2008 R2 and I'm having a problem adding users from our AD into SP groups. The server is already on the domain and I can log in with an AD ...
5
votes
3answers
139 views
If account is disabled while logged in can it remain logged in?
We have an account that connects in via VPN to pull data from one of our databases. Recently it has not been able to pull the data down.
Looking at it the account is disabled however I feel that ...
1
vote
1answer
42 views
User control with Active Directory on Windows 2003
We have a problem with users downloading applications, installing, playing games, and other such unwelcome activities. Is it possible to use Windows 2003 to control the user's desktops? I've seen it ...
3
votes
1answer
33 views
Can active directory GPO's apply to a group object?
I know I can set up an OU, move user objects in to it, and link a GPO to that OU and that GPO will apply to those users.
Is it possible to set up an OU, move a group in to the OU, and have a linked ...
1
vote
1answer
42 views
workstation on domain won't accept any domain credentials for access
Someone added a windows 7 workstation to this windows 2003 domain. They can login locally and say they are on the domain, and have mapped drive resources.
Trying to connect with psexec or anything ...
0
votes
3answers
78 views
Log/Save domain users login/logout time on Windows Server 2008 R2
My idea is to make log-in and log-out scripts to capture the login/logout time and save it
to a file (or into a Database). But, i have no idea how to capture the time.
0
votes
4answers
95 views
What happens if I restore System State that is over 60 days old?
If I do a system state restore, but the backup is over 60 days old, what will happen to my domain? This is the system state for the forest root. Will my domain simply cease to exist? I have other ...
1
vote
3answers
143 views
Domain controller offline over 2 months, now can't sync
Short Version
Domain controller was setup, then taken offline for longer than the tombstone limit. Now I can't get it to replicate again.
Relevant Error Messages
On dc2 (identical error messages ...
1
vote
1answer
32 views
Active Directory Authentication with LDAP proxy
We have a services in a isolated network.
These services need to authenticate users against the Active Directory server.
However the Active Directory server is not directly available so I have to ...
