Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

1
vote
0answers
9 views

Is there an easy way to add yourself to an Active Directory group, with only Add/Remove Self permission?

At my work where there is an Active Directory / Exchange / Outlook setup (sorry I'm not a Microsoft pro), I'm trying to set up a distribution list to act like a mailing list. That means users should ...
0
votes
0answers
8 views

SSH from Windows to Linux with certificates generated by a central PKI stored in AD

I would like to have a central PKI where certificates are issued for all sorts of services and devices as well as users. I would like to push these certificates to one or more active directories. (so ...
0
votes
1answer
19 views

Active Directory User Not Seeing Public Folder

I'm putting shortcuts into the All User folder, and the Administrator of the PC can see it, but the AD user can't. Is there some setting I'm missing or what? Using Server 2012 Datacenter R2 and Win 7 ...
-3
votes
0answers
8 views

Allow Domain User Account to Unlock and Reset Domain Admin ID

Can normal domain user UNLOCK and RESET PASSWORD for Domain Admin User? Thanks in advance
0
votes
0answers
7 views

RPC Ports getting reset to 5000-5002 on reboot

I've run into a very common issue with RPC Endpoint Mapper ports not being available. The default RPC ports are 5000-5002. When I edit the registry and set the ports to a wider range (say, xx100 - ...
1
vote
2answers
21 views

Batch script to export info from Active Directory (name, phone numbers, location, etc) into a csv file

The secretary at my work uses a spreadsheet that lists names, phone numbers, and locations of employees to look up info if someone asks. All this info is located in AD, but the problem is that we are ...
0
votes
0answers
6 views

EFS decrypt access denied

I have a very weird behaviour here on a Windows 7 box (in AD). The user has (good boy) stored the files encrypted with EFS on his local disk. When he wants to open a file, e.g. in Word, he receives ...
3
votes
0answers
11 views

How do I enable SAML Passive Authentication in ADFS 3.0?

For several years, I've used ADFS 2.x as a SAML IDP that works with SAML Passive Authentication. When the isPassive=true flag was set on the Request, the Response would include the following ...
0
votes
0answers
23 views

Strange behavior from demoted DC

We used to run our own domain (referred to as OLD) but are now in the process of completely removing it and using the campus wide domain (referred to as CAMPUS). We have 2 DCs still active for our ...
2
votes
3answers
43 views

Is there a shiny way to make Windows shares web accessible?

I'm new here, and I hope this isn't too much of a shopping question. I'm the under-qualified director of technology at a small college that may be acquired by a larger school. We have Office 365 ...
2
votes
1answer
18 views

Active Directory control client hyper-v permissions

I've done lots of googling and the only thing I find relates to, I believe, Hyper-V server and not client Hyper-V. The scenario is that we have a domain here at the college and we are trying to use ...
0
votes
0answers
21 views

Winbind Centos wrong UID/GID

Here's the scenario: I have two machine: Ubuntu, running ldap to authencticate users CentOs, uses winbind to authenticate users to mount homedirs I use fstab and nfs shares. The problem is this: ...
0
votes
1answer
11 views

Restore User or Backup exec settings after demoting

Just don't mess with a server when you're not feeling focused, because you can end up something like i did: I have a server (WS2003 R2) which acts as backup server (backup exec 2010). We needed a ...
1
vote
2answers
33 views

Office365 and Active Directory Integration (and On-premise Exchange Disintegration)

We used to have on premise exchange server which is integrated with active directory (the PDC and Exchange Server are all the same Windows 2008 small business server). We migrated our Exchange to ...
0
votes
1answer
12 views

How to add password authentication to working OpenVPN server?

I have already working OpenVPN server, which connects 25 branches. Config is below. Our company has outsourcing developers, and they need to access servers in DMZ. How do I add N number of ...
3
votes
1answer
81 views

How to authenticate a user from an external Windows Domain (Active Directory)

I have a service (AcmeService) running on a domain (ACME.COM) and a user running in another domain (DISNEY.COM). mickey@disney.com wants to authenticate with the AcmeService. The service knows about ...
0
votes
1answer
35 views

How do i get centos 7 to use uids and gids from active directory?

I'm preparing for an eventual upgrade from CentOS 6 to CentOS 7. Right now, in version 6, we just use LDAP mapped to AD for authentication. This then uses the UID and GID from the Active Directory ...
0
votes
2answers
27 views

restrict media access by user

I recently took over a network and I'm still pretty raw in regards to AD and group policy. I've been trying to use group policy to restrict CD burning rights to only 3 users and only their 3 ...
0
votes
0answers
14 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...
0
votes
0answers
29 views

Restoring read only domain controller from VM checkpoint

I have several RODC on remote sites, and sometimes power failures corrupts ADDS database which takes some time to recover. I'd like to move RODC to virtual machine (on same server) to be able in case ...
6
votes
1answer
123 views

How can I generate a list of the security groups a set of users belong to?

I have been asked to generate a list of the security groups (so specifically not the distribution groups) that a list of approximately 50 users belong to. I have a list of users, users.txt that ...
0
votes
1answer
35 views

what happens to sql server if the active directory server goes down?

What happens to sql server if the active directory server goes down and the sql agent services is logged on as a windows user.
0
votes
1answer
87 views

Host (A) record (DNS) updated with wrong IP address

I recently installed a new Domain Controller running Windows Server 2012 (called "srv3") in a domain with two existents DCs that are running Windows Server 2003 (called "srv1" and "srv2"). All roles ...
2
votes
0answers
23 views

Is dual directory integrations possible with Windows?

In the Mac world, you can integrate OS X systems with dual directories so that OS X looks towards Active Directory for authentication and OpenLDAP for OS X managed preferences. Is the following ...
0
votes
1answer
12 views

How can configure IIS to service to AD users only?

I have an intranet in my company and I have a domain controller that users authenticate with this,I have an internal web site (IIS) I want limit this site that services only to my domain users.How can ...
1
vote
2answers
129 views

PBIS Open AD authentication stops working on ubuntu with errors: “user accout has expired” and “is your account locked?”

We have been using PowerBroker Identity Services Open to authenticate active directory users from ubuntu hosts successfully for six months. Recently AD authentication stopped working on several ...
0
votes
0answers
14 views

Priorities or ambiguos DNS reverse zone with Bind

In my internal DNS running on Bind9 all machines are available at up to 3 different domain names, i.e. all machines are listed as machine.legacy.domain and machine.new.domain. Some machines are joined ...
0
votes
0answers
20 views

Cannot configure Exchange Server 2010 on mobile device because of “the connection to the server failed” error

I have a server with Exchange Server 2010 in a Win2008R2 domain. The fact is that whenever I try to configure Exchange access from a mobile device I get the following error in the event viewer: Log ...
1
vote
1answer
25 views

Active Directory Sync to Remote Domain

I have a client that needs to sync certain object AD info from their secure domain to our domain. Something like the Windows Azure Directory Sync Tool, but just not for Azure. I would like to use ...
2
votes
2answers
182 views

Authenticated Users builtin group in AD deleted

I have a large-ish AD setup, where one of the already fired admins, for reasons unknown deleted the subject group. Been googling for a while, but besides explanations what the group is for and ...
0
votes
1answer
29 views

Multi-Site AD design

I have a new client with 3 sites and I want to join/combine/trust ADs. The setup is as follows: Site 1: No AD. Site 2: Hosted VMs on a dedicated local domain (for the 3 servers in the VLAN only). ...
-2
votes
0answers
19 views

How to integrate Active Directory with visualSVN [closed]

Can anyone give me a clearly instruction to integrate Active Directory with visualSVN step by step and how do we know whether this integration is success or not? Thanks in advance
0
votes
0answers
21 views

Site to site active directory for hyperv replication

We have two dedicated servers across two different sites. They host hyper v virtual machines for email hosting etc. I'd like to have hyper v do replication between them and so I have a copy elsewhere, ...
0
votes
1answer
39 views

SBS 2003 - Rename Domain Netbios Name Without Renaming Active Directory Domain Name

I have client running a Small Business Server 2003 R2 network with a strangely named domain. The fully qualified domain name is a straightforward contoso.local. The domain netbios name (shown as ...
-2
votes
0answers
11 views

Spring Security 3.1 & Active Directory - how to set up config for users and groups with out a password? [closed]

I have a website and I would like to validate if a user should have access via an AD Group. If they click on the site - in the background it would check we would check AD, without the user entering ...
0
votes
0answers
22 views

How to get free hours of a user using EWS?

I'm trying to find the free/busy information of a user in my Exchange Organisation. I'm using GetUserAvailability operation for this purpose. This method is returning only busy and tentative ...
3
votes
1answer
66 views

SID in AD - SID from psgetsid?

Wondering if anyone can shed some light on some SID confusion. Currently having an issue with some policy applying to a few machines that were all based off the same image. One of our admins, ran ...
0
votes
0answers
31 views

Active Directory Root Permissions

We currently have way too many users in our Domain Admins group so I'm working on redesigning our active directory structure and I'm looking at the current permissions and looking at the root our our ...
0
votes
1answer
43 views

External DNS takes a long time to resolve for AD computers

On our AD domain, end users desktops take a long time to resolve DNS from outside our company. Internally everything works fine. The desktops are pointing pointing to 192.168.2.4 and .6. Those are ...
0
votes
0answers
13 views

Enabling constrained delegation on DC computer account

Is it necessary to have constrained delegation enabled on Microsoft AD domain controller computer account? If yes then why and what are consequences of disabling it? I'm mainly interested in current ...
0
votes
0answers
14 views

OpenVPN Radiusplugin AD and the user restriction

Im using FreeRadius which is using Samba4 (AD DC) as the user/password provider. OpenVPN is using Radiusplugin, which use that FreeRadius Server for authentication. This solution work great, but I ...
1
vote
1answer
58 views

Getting list of users indirectly members of an AD group through LDAP

I'm having a bit of a problem with LDAP search that should specify whether a user is a member of a given AD group or not (recursively). Basically, what I'm doing is issue a LDAP search with the ...
1
vote
2answers
47 views

Can Microsoft accounts be created and managed via Active Directory / API?

We are in the process of shifting over to Google (Apps) for Work. One of the cool things that this provides is 'Google Apps Directory Sync' https://support.google.com/a/answer/106368?hl=en which ...
-1
votes
0answers
17 views

best way to make a copy of domain controller/active directory setup onto a test system?

So I want to make a copy of my work domain controller/active directory setup onto a test VM outside of the network. This would be for testing purposes etc. Is windows backup then restore the best way ...
2
votes
1answer
27 views

Branch office printers listed in directory

About a month ago we added a branch office site to our corporate domain via site-to-site VPN. A domain controller was set up at the remote site to manage logons and printers for about 10-12 employees. ...
1
vote
0answers
13 views

gpo ie user force update

We use two 2008 Domain-Controllers and one 2012 DC In a gpo we set the proxy for IE-11 per user. eg: X use proxy, server: proxyserver, port: 3131 This gpo is not mandatory, so users could change ...
-2
votes
0answers
24 views

IP change on Domain Controller with DNS to a different subnet [on hold]

What are all the settings/changes one should be aware of while changing the IP address on domain controller??
0
votes
1answer
20 views

Permissions for SCCM Service Account

Does anyone know what is the least privileged Active Directory security group needed for the MS-SCCM 2012 service account to do software updates via Configuration Manager? ConfigMgr runs fine with ...
0
votes
2answers
49 views

Software installation on computers in a domain environment [closed]

The network I am working on is extremely small, my client only have 2 desktops which are in a domain setup being managed by a Windows Server 2012 machine with active directory. My client has a ...
-1
votes
2answers
58 views

Windows domain + Linux Domain on One Network

Currently our network is all tied to Active Directory with both Windows and Linux workstations/servers. We would like to implement a Free IPA server that synchronizes authentication between a Linux ...