A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
24 views

Active Directory Users Delegated Permissions

This is probably a dumb question, but how does the delegated user access ad to make these changes? I have set this up but a user cannot launch the active directory users and groups tool. Only admins ...
-1
votes
1answer
12 views

Migrating an Active Directory hub and spoke workplace to an Office 365 and a cloud AD solution

Hi Serverfault / Stack Exchange Community, I was looking for a few points of view on a solution that I am working on for a SMB to be more mobile that is about 40-50 people in size. They are ...
-3
votes
1answer
22 views

How to list OrganisationalUnits (OU's) in Active Directory with the count of users in each OU?

I want to export the list of OU's within our organization alongside their number of users they have. So far I managed to get the list of OU's with Get-ADOrganizationalUnit -filter * | Sort-object ...
1
vote
1answer
25 views

Domain names on 2 similar windows domains (active directory)

I am fairly new to windows administration (Server 2008r2), but I am putting together a new environment, and am setting up active directory domains. I have broken my system into 2 parts, management ...
0
votes
1answer
15 views

Can a base DN for LDAP queries be a group DN?

I am trying to do LDAP integration for user authentication in HP NNMi. (NNMi on RHEL6 to Active Directory on W2K8 R2) I know I can get it to work if I use the OU that my users are in as the base DN ...
2
votes
2answers
38 views

How to remove an orphaned Child Domain on Server 2012

I have a domain (working on Server 2012 functional level) and multiple child domains. I'm really stupid and therefore deleted the only domain controller on the child domain before demoting it and ...
1
vote
1answer
22 views

Do Explicit Deny ACLs apply to a Domain Administrator account?

I've had a need come in a client with a two way trust (source company doesn't want us to have full admin rights, so we're having lots of permissions issues). We effectively need Domain Admin rights ...
1
vote
1answer
23 views

authentication error on WS2012 (trust relationship failed)

Given the following lab setup: HOST1 on Windows Server 2012 R2 (host running Hyper-V, joined test.local domain, static IP) DC1 on Windows Server 2012 (VM under Hyper-V on HOST1, AD and DNS roles, all ...
-1
votes
0answers
13 views

Building a Paid Subscription Website [on hold]

I would like offer a paid subscription-based service to my family and friends through a website portal but I am not sure how to do this. I am thinking that I need a website portal that has a payment ...
-3
votes
0answers
23 views

Restoring a Win2000 AD domain from a Win2000 BDC?

This is where I landed, I have a Win2000 "DC" That in actuality is a BDC. My predecessor left it as is since it worked and he didn't have to redo the user profiles. I now want to upgrade to 2008, ...
3
votes
1answer
34 views

Create a security group that can promote a member server to domain controller without being in the domain admins group

I am trying to figure out a way to delegate permission to a security group to add domain controllers to a domain. The catch is I do not want to add them to the Domain Admin or Enterprise Admin ...
-1
votes
1answer
25 views

Place Date in Description when moved to different OU

I am not sure if this is possible, but i am wondering if i could create a powershell script that would move any/all users listed in a CSV file to a different OU and add the date in the Desription ...
0
votes
0answers
9 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
2
votes
2answers
29 views

AD server not using cert for Active Directory LDAP + SSL

I'm trying to enable SSL for Active Directory in our domain. The problem I'm running into is that the server is failing to recognize the certificate I've made for it. Whenever I try to query the ...
-1
votes
0answers
11 views

subdomain working but not the main website

I am managing all my subdomains through ADC. I have created multiple sub and assigned them an IP in A record. They are all working. But when I ping or browse main website it is not working from ...
3
votes
1answer
103 views

DNS settings for DCs in remote sites

I have our main DC here at the main site acting as the DNS server by itself, I have plans to put an additional one later. This is how its IP is configured DC1 IP: 10.10.5.201/24 Preferred DNS: ...
-2
votes
0answers
15 views

Searching users from another domain produces no results [on hold]

I am trying to add a user from another domain to grant permission to a folder but it seems it cannot contact the other domain since it doesn't give any results. What could be the possible cause of ...
0
votes
1answer
24 views

How to deny access on files to several groups easily?

Currently I'm working with permissions on files on the network with Windows Server 2012 Active Directory as follows: I set up one domain controller, on the domain controller I create users and groups. ...
-1
votes
2answers
33 views

Add user to a group in Active Directory using powershell

I am trying to add a user to a group in AD using powershell. I am using the following command: Add-ADGroupMember -Identity ...
2
votes
0answers
29 views

Adding multiple users from a group to an Active Directory group using Powershell

I have a powershell script that is supposed to go through a specific ou and store the groups into a variable $groups. Here is the code I use in the script: $Groups = Get-ADGroup -Properties * ...
2
votes
1answer
31 views

ADDS: Mandatory Profiles through powershell

Intro I'm a networking student from Belgium and I just got assigned a big project. Basicly i'm responsible for the ADDS. We have to create several OU's and every OU needs at least 20 users or more. ...
-1
votes
1answer
50 views

Join domain on Samba DC with a Windows 7 client [on hold]

i'm an IT apprentice and i'm new on this forum. I've a problem for join my samba domain. I use Samba 4.2.1 on debian 7.8 and i use a virtual machine on virtualbox. So the problem is when i'm trying ...
1
vote
0answers
26 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
0
votes
0answers
10 views

SoftEther VPN not allowing clients to connect using AD credentials

We are trying to get SoftEther VPN to work on a SBS 2003 domain but it is rejecting apparently valid user credentials. (The server application is running on our actual SBS 2003 domain controller and ...
0
votes
2answers
58 views

How to setup DNS correctly for computers inside a domain?

Suppose we have the following situation: there's one network with a router on which the internet access is configured and this includes the DNS IP's. Then we set up Active Directory on a server on ...
1
vote
2answers
47 views

Getting All Users From Active Directory Groups Using Powershell

I have a powershell script that I've written that gets all of the groups from an OU and stores them in a variable $groups. I want to be able to access the users of each group but seem to be having ...
0
votes
0answers
37 views

How can I Deny permissions to logon to Remote Desktop Session Host server in powershell script?

I am need of some assistance please. I am a system admin and I am trying to create a script that will assist with the tedious tasks I have to do with disabling a user that no longer works for the ...
0
votes
1answer
18 views

Exchange Server 2013 EXPR Section missing from autodiscover

We have a client who is having an issue with their autodiscover. They have an Exchange Server 2013 with CU1. After attempting to run an update on the server (Win 2k8R2) I needed to revert the ...
1
vote
0answers
14 views

DNS query from active directory is reaching reaching firewall in the same subnet

DNS query for root dns from active directory is reaching firewall which is in the same subnet. Default route for this active directory is L3 router which has no route to firewall unless traffic is ...
2
votes
4answers
74 views

How to get Microsoft license authentication for all machines on a network?

We have a small network (~150 desktops, ~20 servers) much of which is Linux. MS keeps wanting to audit our MS products every 3 years or so. I really don't have time to go around to 80-90 desktops and ...
0
votes
1answer
26 views

Why must a previous computer name be removed from directory before the workstation can join with new name?

Sorry if the question is convoluted and it's difficult to search in case it's a duplicate question. I don't have keys to the castle, so as a low level tech I was wondering why I was unable to leave ...
0
votes
2answers
43 views

Group Policy | New Password Policy for a few users

We have a few users that are traveling and I would like their passwords to be changed more often than the rest of the folks in the office. How should I go about creating a new policy with their ...
2
votes
2answers
40 views

Importing users to AD with CSV, cannot get some fields to work

Been trying to build a CSV file to import users into Active Directory. I can get everything to populate, except for E-mail, Password, and Enabling the user. Just using this cmdlet in Powershell. ...
0
votes
1answer
44 views

WS 2012 r2 DNS server issue: Access was denied

I have a Windows Server 2012 r2 virtual machine as DC1 and DNS server running on Windows Azure and a Windows Server 2012 r2 local machine as DC2, DHCP and DNS server on-premise. I found my DNS server ...
0
votes
0answers
13 views

How to authenticate RHEL 6.6 to Windows Server 2012 Active Directory and LDAP? [duplicate]

Need help with setting up LDAP on Windows Server 2012 R2, I have AD setup already, but not sure what all I need to do to get LDAP running. Then I can't find any good resources online to authenticate ...
0
votes
2answers
60 views

Active Directory: Track old password changes and expiry dates?

Is there anyway to find out when the last 2 passwords changes were made for an account? I reset a account password but I want to know if it already changed hours or minutes before I reset. OR maybe ...
4
votes
3answers
194 views

How to check who reset the password for a particular user in active directory on a windows server?

I have the details about a user account when it was last modified (a password reset was done). But I would be interested to know who reset the password for this user. Is there any way I can find this ...
-1
votes
0answers
37 views

Nesting Active Directory Groups not listing correctly in effective permissions

I'll try to build a picture of the environment I am running into: 1) old domain which is still active since a lot of workstations and accounts for this domain are still in use (and migration is not ...
3
votes
1answer
44 views

Centralizing Remote AD DCs?

Background: I'm one of two IT people managing five libraries (all part of the same library system), and each library has been set up with their own AD DC. I'd like to centralize this. I'm assuming I ...
0
votes
1answer
21 views

Group Managed Service Account (gMSA): get authorized hosts / install-adserviceaccount unknown error

After having successfully created a Group Managed Service Account (gMSA) using the command below: add-adserviceaccount -name gmsaAccount -PrincipalsAllowedToDelegateToAccount gmsaGroup -DNSHostName ...
6
votes
1answer
45 views

Any danger in copying latest ADMX (& lang files) into AD Central Store?

Is there any danger in copying the newest set of ADMX templates into my AD Central store (overwriting the old ones)? I've already upgraded my schema and copied one ADMX file in to add the new Windows ...
0
votes
0answers
13 views

What is the authentication flow when Exchange 2013 proxies to Exchange 2010?

Issue Outlook users, who are on LAN, and have an email address that is different from the UPN get prompted for authentication. Topology 1,000 clients connect to a central DAG & CAS array on ...
0
votes
1answer
56 views

ADFS without domain

Is it possible to run a ADFS 2.0 without connecting the server to a domain? We are using Shibboleth as claims provider, so we actually don't need active directory here. We manage to setup the ADFS ...
0
votes
0answers
15 views

WES09 Client not registering with dns suffix

I have HP thin clients, some running Windows Embedded Standard 2009, and some running WES 7. They are all getting DHCP addresses from our Server 2012 R2 DHCP server, with AD integrated DNS. With both ...
0
votes
0answers
29 views

Unable to view trusted domains in ADUC

My domain is Server 2003 (domainA) and the remote domain is Server 2008R2 (domain functional level) (domainB). At some point in the recent past, I lost the ability to view domainB (ADUC -> open a ...
1
vote
0answers
51 views

DNS Server gone and now I get Zone Not Loaded by DNS Server

We have several domains in our infrastructure, separated by differing subnets (obviously). From our primary domain (call it domain A), we have a DNS forward lookup zone to domain B (which consists of ...
0
votes
0answers
35 views

Trying to add group to the security tab of an extended right

. The only problem is that the rights are not propagating to the extended attribute, even in the advanced tab :(. If I go in to adsi and check the security tab of the extended right it shows ...
0
votes
0answers
20 views

AD Migration and SharePoint configuration

i have a SharePoint 2010 and o365 (AD Synchronized) account. And some guys are working on the migration process from 2010 to o365. At the same time, I'm migrating users to the new domain but all ...
4
votes
1answer
110 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
1
vote
0answers
42 views

AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain

The method I use to authenticate a user's credentials on active directory is (Simplified): New DirectorySearcher(New DirectoryEntry(path, user, pass, AuthenticationTypes.Secure)).FindOne() On fail, ...