A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
14 views

Service dependency on Active Directory

We're having a reboot issue with services (Tomcat and IIS AppPools) that are running as domain accounts, that are not able to start due to not yet having access to the domain controllers. The ...
0
votes
2answers
30 views

Server IP is showing Firewall IP

From server 2008 r2, I check "what is my IP address", instead of showing my server IP, it showed my Firewall IP. How to rectify this.
1
vote
2answers
32 views

Active Directory PowerShell Script select field and add to another field

I'm trying to come up with a script to take a field from a user (OfficeNumber) in AD and move it to another user field (HomeNumber) proceeding by an 800 number. So essentially what we are doing is ...
1
vote
0answers
14 views

Shared Printer DENY Print ACL assigned to AD Security Group not Working

I have three servers. Server 1 - Print Server, Windows Server 2008 Standard Server 2 - Domain Controller, Windows Server 2008 R2 Standard Server 3 - Terminal Services Server, Windows Server 2008 R2 ...
0
votes
0answers
33 views

New Domain controller only works when old one is online

Firstly, I think this is probably quite similar to this: New Primary Domain Controller won't start Active Directory unless Old DC is booted But, the circumstances, and symptoms are slightly ...
1
vote
1answer
26 views

How do you rebuild a Windows 7 user profile on a PC joined to an Active Directory domain and why would you want to do this?

a question I was asked at a job interview today. Don't think I was on-target with my answer. How do you rebuild a Windows 7 user profile on a PC joined to an Active Directory domain and why would you ...
-1
votes
1answer
25 views

MS Active Directory without dynamic DNS registration

I have a running Active Directory with a non Microsoft DNS Server. The DNS Server is the authority DNS Server for the AD Domain Zone. All required DNS records for AD exists in this DNS zone. So far ...
0
votes
2answers
20 views

Exchange Hybrid no longer needed

I've wrote a few post recently regarding my troubles with Hybrid Exchange and a SPLA licence :@ Here's our current situation: We have an Exchange 2010 SP3 server that is set up as a hybrid with ...
-1
votes
0answers
21 views

My software supplier is asking me to create 150+ groups to manage user roles within AD [on hold]

My software supplier is asking me to create 150+ groups to manage user roles within the Active Directory. The names of the groups are fixed in the code, so we can't alter the names. What is your ...
0
votes
0answers
3 views

Automation of VMM Deployment DomainJoin Error

I am in the process of making my own C# .Net Application to Automate the Deployment of a VM. I am doing pretty much the same as the Virtual Machine Manager does when you click on "Create Virtual ...
0
votes
0answers
15 views

Samba on Simply Mepis 1.5G can't join Active Directory domain

As a proof of concept I have Simply Mepis 1.5G (the Linux Box) running on an Oracle VirtualBox. Also on the Network I have a Windows Vista for Business Laptop and a Windows 7 Professional Laptop. I ...
0
votes
1answer
15 views

Granular permissions needed to take Active Directory snapshot

Short and sweet, I am using ntdsutil in a script/scheduled task to take AD snapshots. The service account running the scheduled task is in the Domain Admins group so its gets proper permissions. I ...
-2
votes
0answers
27 views

Add New DC on Different domain

We have acquired an organisation with Vpn tunnel we are able to access each others network in a few days we are going to establish trust relationship But before that we are going to install a ...
0
votes
1answer
36 views

WIndows Active directory log

Hi im trying to log all the logins failed and correct from my users accounts for audit purposes (only username and time) is there a way I can do it with my windows active directory ? best regards
0
votes
1answer
28 views

Windows server 2003 DNS Issue. I cannot open a specific external website from internal Domain

Our public website was hacked and Google blacklisted it. We have fixed and it's visible for the public. This morning I wanted to see the site from our internal domain and I couldn't open it. Chrome ...
0
votes
0answers
18 views

Allow Administrators to Override Device Installation Restrictions

I am trying to set up our Active Directory domain to lock down unauthorised hardware installation. I am testing the Device Installation Restrictions in Group Policy, using the settings under Computer ...
-1
votes
1answer
38 views

How to hide 'Shut down' button from an AD group assigned in local Administrators group (Windows Server)?

Basically I need to grant a group full local administrative permissions but hide or disable the shutdown button for them in the start menu. We have Windows servers from 2008 to 2012. I did my ...
-3
votes
0answers
23 views

Stub zone or conditional forwarders?

We have main domain name abc.local and 3 sub domains 1abc.l0cal 2abc.local 3abc.local we acquired a company who has domain name xyz.local How do we start add to trust relationship by adding a ...
-1
votes
0answers
23 views

Sysvol Folder in 2008 server

Hi we have many clients with Ad as server 2003, recently we have started adding 2008 as ADC. Now I see in server 2008 sysvol folders are empty is there something to worry? how to fix this in my ...
-2
votes
0answers
8 views

home and vmware lab on same subnet (AD) [migrated]

I have a question about network topology. Namely, I wanted to set up a cluster vmware for testing SQL Server: fail over, always-on etc ... But I do not know how to reconcile this with your home ...
5
votes
1answer
98 views

How to disable all the admins accounts except built-in administrator on a domain?

Suppose that an administrator for a domain is fired and you are now the new administrator of a windows 2012 server. While managing the network, something tells you that some people are using local ...
3
votes
1answer
82 views

DC locator service (Server 2008R2/2012) - what triggers switching to alternative DC

I'm wondering how frequently DC locator checks availability of domain controller it is connected to. I assume it picks domain controller upon startup, but I'm not sure about the following: - How often ...
1
vote
1answer
26 views

Get full access to all properties in ADSI-Editor

I want to manipulate the properties of some users for testing puroposes with 'adsiedit.msc'. Is there a way to get full access to edit these values. For example i need to edit the lastLogon or ...
1
vote
0answers
24 views
+50

“HTTP 503 - Service Unavailable” when trying to access ADFS password change page from an external network

I'm using ADFS 3.0 federated domain (SSO with Office-365) and I've successfully set up the password change page to work from any workplace joined device. I'm currently trying to set it up to be ...
0
votes
0answers
16 views

Active Directory DDNS update with a DNS Hidden Master

Active Directory queries DNS server for a SOA(master DNS) record before sending out Dynamic DNS updates to the master DNS. Would AD still work if we set up a hidden master for DNS ? Usually Hidden ...
1
vote
0answers
11 views

ADSI Editor modifiedCount explanation

I would like to adjust the properties for my DC in ADSI Editor but I'm not sure what the "modifiedCount" property means. I couldn't find documentations online to explain this. Would appreciate your ...
-3
votes
0answers
12 views

I have server 2008 r2 & suddenly gpo starting giving error to give access in all accounts & repeatedly disables the Administrator account also

I have server 2008 r2 & suddenly gpo starting giving error to give access in all accounts & repeatedly disables the Administrator account also, any suggestions ? Thanks in advance...
0
votes
1answer
26 views

AWS Server 2012 R2, adding clients

I have a AWS machine running MS server 2012 R2. Setting up as a domain controller. I have both public and private IP address associated with the machine. the internal network is on 172.xxx.xxx.xxx ...
1
vote
1answer
21 views

Clients can't update dNSHostName attribute after DNS suffix change

We have a bunch of Windows 7 and Windows Vista clients that belong to domain contoso.com. The clients are registered in DNS to client.contoso.com. We have changed the DNS suffix via GPO from ...
0
votes
0answers
20 views

Unable to join domain [closed]

I am having difficulty connecting my laptop to my domain. I have recently set up a domain controller in my flat but, when I try and connect to it using my machine, it says "An attempt to resolve the ...
0
votes
0answers
22 views

Active Directory Corruption

We are looking at the topic of DR at the moment and I would like your expert help in the creation of a DR plan in the event that our Active Directory somehow becomes corrupt. We have 4 domain ...
0
votes
1answer
35 views

multi instance failover clustering (sql server)

just want to straighten my concept properly - when we are talking about SQL multi instance failover cluster, e.g. on a 2 node cluster, it means that each node can run its own sql instance, but each ...
-2
votes
0answers
30 views

2 nodes Fail over cluster with vSAN, Virtualizing DC and Secondery DC [closed]

I am building a new network for a small office from scratch (aproximetly 40-50 computers) They need: 1)-Domain Controler 2)-MS Exechange Server 3)-File Server 4)-SQL/Database Server "Not Too Much ...
-2
votes
1answer
38 views

How to Map Network Drives Using Logon Scripts & Group Policy Objects? [closed]

I want to know how do I map network drives using the logon script method and the group policy objects method? If anyone could post me a in depth answer for going about these methods and explaining the ...
1
vote
1answer
28 views

Windows Security Policy not Updating - Admin templates work fine

I have a domain with a mix of physical and virtual servers. Some time ago another admin may have performed some manual scripted updates at the client level that are now preventing changes in the ...
0
votes
2answers
39 views

Server 2008 R2 PS script cannot update Active Directory

I have a Powershell script that updates users attributes in Active Directory that runs just fine from the PowerShell ISE. However when I try to run the script as a scheduled task it cannot access ...
0
votes
2answers
41 views

Powershell command regarding AD groups

We have a security group, SQL DBA. I need to know all servers that are part of this group. Is this possible? I'm a backup admin, just starting to learn AD/Windows, so apologize if its a stupid ...
1
vote
1answer
22 views

Authenticate Users based on AD group membership. Ubuntu 14.04 , Cant find help anywhere

Been Googling for two days now. I am not new to Linux, but am new to AD and using it in Linux. So. I have an AD system ( not run be me ) and its joined happily. I followed this procedure: ...
2
votes
1answer
51 views

When I add users to a Security Group using Powershell, they don't show up in AD

I have a script which has the following for adding users using a CSV file, in Powershell. Windows Server 2008 R2. looks like this: Import-Csv "C:\Users\me\Desktop\users.csv" | Where-Object {$_.Name} ...
0
votes
1answer
36 views

Active directory domain owned externally by third party

I've inherited a network where the .com domain name used by active directory internally is owned by a completely unrelated third party externally (Along the lines of companyint.com). This AD domain ...
1
vote
0answers
42 views

Multi-Factor Authentication on Windows Domain [closed]

In our network, we have a couple of Windows machine (server/desktop) configured in order to be part of a domain MYDOMAIN.BIZ under Active Directory. Some sample login scenarios are as follows: ...
-2
votes
1answer
37 views

Active directory overwriting existing computers [duplicate]

while adding another user with same computer name active directory i overwriting old one. Is there any way to prevent this? I mean can i get some message or access denied when i try to add second ...
2
votes
1answer
16 views

2000 member server, 2003 FFL/DFL, only 2012 DC [closed]

I have a 2000 member server in a 2003 FFL/DFL domain with a 2003 DC. I'm hoping to stand up a new 2012R2 DC, transfer fsmo roles and demote the 2003DC. If I keep the FFL/DFL at 2003, will the 2000 ...
0
votes
0answers
4 views

Tomcat 7 auth constraint role name active directory

I integrated waffle into my tomcat 7. I need to define the users in the active directory group that can visit the site, web.xml looks like: <security-constraint> <display-name>not ...
-1
votes
1answer
42 views

Need Required Active Directory Ports for Isolated Environment

We have a 100% isolated environment that needs to communicate with our AD infrastructure outside the isolated environment. I need to know all the ports and whether they're incoming or outgoing. These ...
-1
votes
1answer
65 views

Windows Server 2012 R2 DNS internal and external records issue

I am running into an issue with with DNS on Windows Server 2012 R2 acting as Active Directory domain controller AND DNS server I want to be able to setup certain records that will resolve internally ...
-1
votes
1answer
22 views

Active Directory Authentication from the Internet [duplicate]

I need some help finding a good solution to this problem. I know AD just fine, but admittedly, I'm not an expert. And I know I don't want to expose it to the internet... I inherited a workforce at my ...
3
votes
2answers
67 views

Unable to update the password. The value provided for the new password does not meet the length, complexity, or history requirements of the domain

I'm using federated identity for Office-365 single sign-on. I have added the password change endpoint to my ADFS 3.0 server, and successfully opened the adfs update password page. However, whenever I ...
0
votes
0answers
36 views

Cannot log into Windows Server 2008

I am running into an issue with my Windows Server 2008 machine. I have an Administrator account with 2 active directory users. However, recently I cannot log into ANY of the accounts locally on the ...
0
votes
0answers
22 views

Very Corrupted User Profile Always Logs in as Temporary

The server side version of one of our database administrator's profiles managed to become corrupted over time. It is currently logging into a temporary profile on various servers. We are using Server ...