Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

0
votes
0answers
1 views

Jave 8 Update 25 Install Over GPO - Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using the GPO. Going to Computer Configuration > Policies > Software Settings, ...
1
vote
1answer
13 views

Active Directory remove user from GroupA if member of GroupB

In Active Directory, how do I efficiently remove all users from GroupA who are members of GroupB? Basically I want to subtract B from A. Have now: AAA BBB --- --- Alice Alice ...
3
votes
1answer
30 views

What is MS-Membership Transitive.LDF?

When installing ad-lds, you have the option to import several LDF files. Some of them are described here: http://technet.microsoft.com/en-us/library/cc771943.aspx. Can anyone tell me what the ...
1
vote
1answer
14 views

How to set up an authentication system to authenticate users against an existing SQL Server database

I have a pre-existing SQL Server database with login information (user names, password hashes) for thousands of users maintained by an ASP.NET website. I would like to provide an authentication ...
0
votes
0answers
7 views

libnss-ldap getent passwd - AD replies correctly but output shows local /etc/passwd

I am trying to configure libnss-ldap to provide AD authentication to my Linux Debian servers. This is working fine if user exists locally, I want to make it work for Domain users. Here is my ...
0
votes
1answer
19 views

Debian Active Directory to LDAP migration

These days I am working on LDAP and Active Directory migration. I want to migrate to LDAP but I cannot get passwords from Active Directory. I want to seemlesly migrate to LDAP, and I want a solution ...
0
votes
0answers
17 views

OpenLDAP caching meta

I have configured Meta on OpenLDAP server for two different Active Diretories and it's work. But now I'd like set caching for this, but I'm not sure how. From my slapd.conf database meta suffix ...
2
votes
1answer
29 views

dsadd run from batch file fails with “The specified account already exists” when there is no existing account with the same dn

I am programmatically creating thousands of test users from a txt file containing First Name, Last Name, Username, and Password using the following command (saved as a batch file, run in cmd, modified ...
0
votes
1answer
18 views

Amazon Zocalo with Active Directory - can't login

I just setup a Zocalo site for my company using the active directory connect option. The Domain Controller we are connecting to is in an AWS VPC. I setup the zocalo site fine and it says active, but ...
0
votes
0answers
19 views

AD Authentication with SAMBA, Winbind and SSS

I'm having trouble authentication with AD to a SAMBA share on a linux server. Authentication appears to be working, but only halfway... [root@myserver ~]# wbinfo -a my_ad_user%password123 ...
0
votes
1answer
14 views

How can I know where and how a security group is triggering a logon script for some users?

The organization I work for has implemented application access and scripts via Security Groups. This is, if a person needs to access some applications or have a script run when he logs on, we add ...
2
votes
1answer
27 views

Missing DomainControllers in Active Directory Object

We are setting up a new network environment that will have two domain controllers and ran into an issue with Windows not recognizing the existing domain controllers (DC-01 and DC-02) as Domain ...
6
votes
2answers
225 views

Outline the quirks of Windows Small Business Servers (SBS)

I'm not much of a Microsoft administrator. However, I do work extensively with new and existing Microsoft Exchange deployments. That's just how the career-arc went. I'm working with a small customer ...
0
votes
0answers
12 views

Builtin group membership not updating on client machines

I have a small active directory setup which is semi-live (i.e. being used by only a few of the computers in the network), however when i try adding members to the builtin groups, and more specifically ...
-1
votes
0answers
27 views

Scripting command that can be executed on Macs to generate/remove (NOT SIMPLY BIND/UNBIND) those Macs as computer objects in Active Directory?

I have searched the stacks fairly thoroughly to find a scripting language-based command that can help me develop a script to be executed on Macs capable of actually generating (NOT SIMPLY BINDING) ...
8
votes
2answers
259 views

How do I block inheritance/application of a single GPO?

Due to the workload generated by recent ransomware outbreaks (Cryptolocker/Cryptowall/etc.), I was recently tasked with implementing Software Restriction policies to block program execution from ...
4
votes
1answer
32 views

How to determine domain controller used for authentication

I run several web sites using IIS on both Windows Server 2003 and Windows Server 2008. These web sites use windows authentication with only the NTLM option specified (no Kerberos). These servers are ...
0
votes
0answers
15 views

Domain controller not allowing me to connect to it over IPSec tunnel

I'm trying to connect a Windows 7 computer to a domain controller over an IPSec tunnel. The tunnel has formed and the network is accessible. I have set the IPSec connection to use the windows domain ...
-3
votes
0answers
22 views

missing computer account cant join to AD [on hold]

I have megait.co.za server 2008 r2 domain controller. i created a win7 called internet vm. when i tried joining it i got "No mapping between account names and security IDs was done". tried sysprep. ...
3
votes
1answer
67 views

Remotely determine how long a user has been idle

How do I determine how long it's been since a user with files opened on my server has been actively using their workstation in a Windows Active Directory environment (XP, 7, 8 clients and Server 2008, ...
0
votes
1answer
18 views

How do I make browser shortcuts w/custom proxy settings available on user desktops?

In our environment, we have about 30 testers (website testers) located at different physical locations. However, they all log on to the same AD. As it is now, their MSIE is configured to access the ...
-1
votes
1answer
33 views

Setup Domain Controller and Active Directory on Amazon EC2 as Primary AD [closed]

I am planning to deploy an Active Directory and Domain Controller on AWS for my company. It will primarily be used for these: User Authorization (Login/Logoff Process) File Sharing / Management ...
4
votes
1answer
86 views

Exchange 2013 Setup fails - Couldn't find the Enterprise Organization container

I'm working on an Exchange 2013 CU6 installation at a site whose AD was comprised of two Windows 2003 domain controllers (in an odd HA cluster configuration). New Windows 2012 R2 DCs have been ...
0
votes
0answers
30 views

Server 2008 folder redirection not working on local domain controller

I have set up folder redirection using the default domain group policy for users connecting to our domain. Folder redirection works fine when users login through their client machines. When I attempt ...
0
votes
0answers
7 views

Lync 2010 - Search Returns “Presence Unknown” for E-mail Address

I've inherited Lync infrastructure and my knowledge of the product is limited. This issue appears to affect only one account. Searching for the specific account on a Lync 2010 client returns ...
1
vote
1answer
30 views

Adding a new Exchange 2013 mailbox from Powershell error

I am trying to add a new mailbox via the Powershell and I get the following error: #New-ADUser -Name AreallyTest -SamAccountName AreallyTest -AccountPassword (ConvertTo-SecureString Password1234 ...
3
votes
1answer
86 views

Better to share File Services role with Active Directory DC role OR with the RDS Terminal Server role?

We are a small business setting up a new server... budget is limited of course. I have ~500GB of data to share that needs to be stored locally on the single server we have. Host Server: Dell ...
1
vote
2answers
57 views

relationship between user and computer

I have been using Get-ADUser and Get-ADComputer a few times to help troubleshoot problems in the system. I have seen a few ways of identifying which user is logged on a specific machine through ...
1
vote
2answers
52 views

active directory structure and replication for dummies

I have to install an Active Directory environment for our company and it would be the first from scratch installation one for me, so I have questions, basically about the structure. First some ...
-1
votes
1answer
27 views

Duplicate computer name but one of them with SID

I have seen duplicate computer name in AD. e.g. One PC was call 456 and the other called 456 cnf:850255521 Why they are two same PC name, I have ask everyone but know one knows why. Can someone ...
0
votes
0answers
9 views

SQL Client failing SSL certificate encryption under a AD Domain

I have a client machine (web server) that is attempting to connect to a SQL server. The SQL server is 2008 and has the force encryption flag turned on. Both servers are joined to the domain. The ...
1
vote
1answer
47 views

My Active Directory replication settings don't look right

I have recently added a new site to my Active Directory domain (single forest, single domain). I have mapped subnets to the sites, and added one DC to the new site with our remaining 4 on the original ...
4
votes
2answers
30 views

Joining a NetApp to a domain on a Read Only Domain Controller

I have an isolated network, into which I've built a vfiler. The point of this network is that it's a non routed 'test' network. However, there's a need for LDAP/Kerberos and CIFS access to the ...
0
votes
1answer
29 views

Remove PCs older than X days from Active Directory [duplicate]

I am trying to remove all of the older computers that AD stores that have not been active for 60 days. I just started working with AD recently and noticed that the AD has not had a proper cleanup in a ...
0
votes
1answer
59 views

Powershell script for specifically OU

Need help with hte following, a script that can export all members of a specifically OU with in that multiple security groups. Location of the OU is; OU=Security Groups,OU=Public ...
-3
votes
0answers
50 views

Active Directory/Domain Controller cannot resolved DNS Forwarders, AD/DC and client cannot connect to the internet

I am having an issues regarding the DNS/DNS forwarders, my Server and Client can't connect to the Internet(can able to join the Domain). I have listed the ISP DNS to Forwarders, but can't resolved. My ...
0
votes
0answers
8 views

Do kerberos constrained delegation with protocol transition on IIS to another IIS need my own application for very simple redirect

Please excuse me if its a very basic question but i'm totally lost on this as Im new to IIS and kerberos delegation but have understanding of auth protocols. Need you peoples help please as i have ...
0
votes
1answer
54 views

Powershell use Get-WinEvent with hashtable to query very specific time range

I'm trying to make a powershell script that essentially automates the account lockout tools. ideally I'll be able to get a fairly efficient query that can identify recently locked out accounts then ...
0
votes
1answer
32 views

Pre-Moving user files prior to folder redirection to new folder

I have folder redirection in place at the office I work for. The user files currently reside in a folder on my file server. I am in the process of reworking the GPO and AD structure to facilitate ...
2
votes
1answer
26 views

GPO's between domains with a trust relationship

Is it possible to apply a GPO from one domain to another domain with a trust relationship? We have a GPO that adds a management security group to the local admin group of domain joined computers. My ...
0
votes
0answers
24 views

Need set of event ids that occurs in event viewer during file creation event

I need the set of event ids that occur in the event viewer when I created a file in shared folders (auditing was enabled for the folder) in domain controllers. I know the fact that the event id 4656 ...
-2
votes
1answer
25 views

Active Directory Server how to be cautious [closed]

My company has provided us laptops. We used to use them normally but suddenly my company has announced they have installed Active directory server. We all have to shift to that server. The requirement ...
1
vote
0answers
31 views

Set SPN for all users in domain

I have a Windows 2008 R2 domain controller with more than 60 user accounts. Each time one of these users tries to connect to the DC authentication "falls back" to NTLM. Kerberos authentication fails ...
0
votes
0answers
11 views

SQL Reporting Denying Access to User After Move to New Group

We have a SQL Server 2008 server setup with reporting services so that users can log in and run certain reports. I have a user that was granted browse permissions to this as we had their initial ...
0
votes
1answer
24 views

Will a Windows server 2003 operate on a domain functional level 2012 domain?

I have found plenty of articles that address Server 2012 R2 on a functional level 2003 domain. What I haven't been able to find is anyone addressing weather or not a 2003 server would be fully ...
2
votes
1answer
43 views

Sysvol replication broken between Server 2008 R2 DCs

We recently added a second DC to our network at a different site. The DCs do not appear to have any difficulty communicating via the network, and AD objects (users, computers etc) are synchronising ...
3
votes
0answers
62 views

Import Powershell AD Module during MDT Task Sequence

I have written this short powershell script to rename a computer as part of an MDT task sequence: Import-Module ActiveDirectory $AdminUsername = 'domain.com\administrator' $AdminPassword = ...
1
vote
3answers
164 views

Active directory rename computer that has been disconnected

We named a new computer on the domain USER-2014. The computer was for someone who already had a computer on the domain called USER. We discontinued the old computer with name USER and are now looking ...
1
vote
0answers
24 views

Account Operators built in group and “User Cannot Change Password” property

I have a question about configuring of "User Cannot Change Password" property. Does default "Account Operators" domain group has ability to change this property? If not can it be delegated via AD ...
0
votes
0answers
10 views

How do I use simple_allow_groups with AD groups that have no GID in CENTOS 7

We just built a few test CentOS 7 boxes, and the configuration that we were using for 6.5 is not working for us. As best we can tell, it comes down to using simple_allow_groups and using AD groups ...