A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
25 views

AD domain name: Did I choose appropriately? [duplicate]

Edit: I realize this type of question has been asked before as active directory domain naming practices is a common topic of debate. I have read past posts, but I don't feel they are quite ...
-2
votes
0answers
24 views

Authentication issues because of Domain Controller Offline

We are a Development company & have multiple locations. We have 4 DC's, 2 in US & 2 in India. Currently the 2 DC's in US are down/Offline & as a result all the solutions like ...
-2
votes
1answer
23 views

NAS External Users [on hold]

I'm planning on setting up a new NAS on my small office (work) network with 1 DC running Windows Server 2008 R2 and a back up server also running Windows Server 2008 R2. My DC is my DHCP, DNS, File ...
1
vote
0answers
28 views

Mysterious Terminal Server HTTPS issue

The University I work for recently got into Terminal Servers, and one of them has been plagued by an unusual HTTPS issue where, after enough users have logged in and logged out, eventually users can ...
0
votes
1answer
46 views

Can't open Active Directory Users and Computers, Group Policy settings issues

In the past I've been able to open "Active Directory Users and Computers" to manage the users and computers on our Windows Server 2008 R2 box. We just recently made some changes to our Group Policy to ...
0
votes
0answers
17 views

Should %LOGONSERVER% be set to the RODC [on hold]

I'm not sure if I am properly authenticating with the RODC or not. If I go into the RODC's event viewer I can see LOGON events for various clients. When I go to the client and issue an echo ...
0
votes
0answers
10 views

RODC fails to enroll Kerberos certificate but works with the rest

I've a read only domain controller (WS2K8R2) that fails when enrolling the Kerberos PKI Certificate template. However, the rest of the domain controllers works with that template. In fact the ...
-1
votes
0answers
32 views

Linux User Management Best Practices [on hold]

I am a long time Windows administrator and I am working on moving into Linux. One thing that I really like about Windows is the ability to use Active Directory as a central user\group repository. I ...
0
votes
0answers
13 views

AD and exchange 2010 issues on domain name [closed]

I seriously need help concerning a problem I have on my domain name. I searched but can't find a solution. I have domain name in @eb4g.com in AD with smtp and x.400 standard. A technician created an ...
-1
votes
1answer
50 views

Prevent internet from being monopolized by one user

In our company, there is a training room which contains 15 computers. Our employees (or external individuals) can follow a training there using these computers. However, we want to prevent the ...
-2
votes
0answers
34 views

Cannot bind to localhost nor 0.0.0.0 on Windows Server with Active Directory

I have an application (IEDriverServer, Selenium's IE driver) which by default binds to 0.0.0.0. It works fine on my Windows 7 machine, however when I try to run it on Windows Server 2012 R2 with ...
0
votes
1answer
18 views

Copy data from Azure AD to vm AD?

Currently I only have Azure AD that work with Office 365. Now I am planning to create a vm to use RADIUS server. I need to copy user and groups from Azure AD to vm AD. So, how can I do that? I read ...
-1
votes
1answer
56 views

How do you “prevent powerful accounts from being used on unauthorized systems”? [closed]

I was browsing through Microsoft's Best Practices for Securing Active Directory and saw the chart linked which includes some of the best practices included in the document, rated by importance. At ...
4
votes
1answer
41 views

Powershell - Merging Results in one table

I am new to powershell. I am trying to create a report that shows AD accounts that expire soon. The report should include the User Name, AccountExpirationDate and the Manager. I have the ...
2
votes
1answer
21 views

csvde to find 1 user based on SamAccountName

I want to use csvde to find 1 user based on SamAccountName and export all the details about that person to a CSV file. The problem I am having is filtering by SamAccountName csvde -f search.txt -p ...
2
votes
2answers
49 views

How to clone, disjoin & rename a Windows 2008 R2 VM offline, then rejoin domain online

I have a Windows 2008 R2 domain joined server, which should be cloned as test server in the same domain! There is an MSSQL 2012 instance and Team Foundation Server 2013 installed, but this shouldn't ...
0
votes
1answer
25 views

AD FS and DC on same Server

i have to connect AD with Azure AD but we have a 2008 r2 server and wwe don`t want to upgrade the server to 2012 r2. Is it possible to have the domain controller and the ADFS server on the same ...
1
vote
0answers
40 views

How do I workaround inaccessible DCs in a spoke site, in a hub and spoke configuration?

I have a Hub and Spoke configuration. The spokes can never see another spoke. SCOM is reporting errors that GPO can't access \company.com probably because every Domain Controller has an NS record, ...
3
votes
1answer
29 views

Integrating FreeIPA or RH IdM in an existing MS AD environment

I want to deploy FreeIPA or Red Hat IdM in my existing environment Currently my domain is managed by MS AD which is controlled by a separate group. Assume that changing anything in MS AD is going to ...
0
votes
0answers
19 views

Clients not authenticating with RODC - nltest gives SERVICE_NOT_ACTIVE

I am new to the Windows world and pretty much followed the guide from this Windows Server Blog For the life of me I can not get clients to authenticate with the RODC. When I have the on-site RWDC ...
4
votes
1answer
110 views

sAMAccountName used for logged on users

When RDP'd to a server I'll often find that there are no available sessions as there are users currently logged in. Within our environment we utilise a user privilege management solution which creates ...
0
votes
3answers
35 views

Active Directory Export GPO user

I would like to get in .csv (or any other readable format) all my AD users and the policies that they need to comply (the type of authentication each user needs, his event logging properties and even ...
1
vote
2answers
55 views

How to setup a Domain Controller in the cloud

We are implementing a new Windows Server 2012 R2 domain controller for our 2 small offices, and we want to set it up on Amazon EC2. I have read that with this type of setup you normally use a VPN. How ...
1
vote
1answer
32 views

Deleted GAL in EMC and ADSIEDIT now Error

I attempted to delete a Global Address List via Exchange Management Console and ADSIEDIT as I made a typo during the creation. Now when I try to create a new GAL, i get the following error [PS] ...
1
vote
1answer
35 views

Accessing local groups remotly for a Windows Fileshare where user accounts are on an AD

I am asking this question with almost no knowledge of Windows and Active Directory. I have a Windows Server (2012), that I am using as a file server (FILE01.domain.tld). There are some local groups ...
5
votes
1answer
48 views

Windows 7 login issues

I have one user who has been having this issue I have never seen before. She is always having issues starting up her machine, such as Windows getting stuck on welcome screen after logging in, or stuck ...
0
votes
0answers
17 views

Removable Storage User Configuration Group Policy not working when Windows Server 2008 R2 is used as a client

I have enabled read write restriction for a group of users, if a user from this group is to log onto a win 8.1 system or Windows 7 system and tries accessing a USB drive it says access is denied, ...
1
vote
2answers
33 views

Server 2008 R2 > 2012 Migration

I am pretty new to windows server so please bare with me, i am looking to upgrade our current small server from server 2008 rs to windows server 2012 essentials, however we are only using one server ...
3
votes
1answer
28 views

Why does a SPN on a different host cause a server to lose its trust? How should I fix it?

I have a brand new server image that loses its trust as soon as it's joined to the domain. I suspect it's because of the duplicate SPN I discovered using the LDAP version of this Powershell script ...
7
votes
1answer
72 views

Exchange Server Using Wrong Active Directory Site

Our Exchange 2013 server suddenly started logging errors about bad replication between sites (there should be no replication as there is no other server) as well as several other issues that appear to ...
0
votes
1answer
38 views

Link server 2012 account picture with active directory

We have a Windows Server 2012 R2 remote desktop deployment, with a session collection consisting of 6 session hosts. We also use Office365 and DirSync to enable single sign on with ADFS running also. ...
5
votes
1answer
75 views

In Active Directory, how do I delegate write permissions on specific attributes of protected user accounts?

We have a tool being developed that will keep specific attributes of Active Directory user objects up to date with an authoritative source of employee information truth elsewhere, so that when ...
24
votes
3answers
1k views

What features of Windows 8.1 Pro will not work without a Microsoft Account?

With respect to domain-joined Windows 8.1 Pro machines, what features of Windows will not work unless a Microsoft Account is used? Also, aside from "feature loss," are their any gotchas of not using ...
5
votes
2answers
306 views

Is there a way to tell how long a machine has been in an security group?

Machines get added to a security group to prevent them from getting a GPO. I'd like the machines to get removed after 30 days of being in the group. Ideally, I'd like to also be able to generate a ...
1
vote
1answer
27 views

User blocked in AD by some windroid device

We have a user that is constantly blocked. We checked the logs in the domain controllers and all the information shown is that a WINDROID device is the source. How can I know which device is causing ...
0
votes
1answer
27 views

Adding additional 2008R2 DC to Window 2012 R2 domain

I am migrating our company's AD from a Windows SBS 2008 to a news Windows 2012 R2 Essentials server. Everything went fine and the new AD now is in production stage. The last step is adding an ...
0
votes
1answer
40 views

User logged in with temporary profile

User logs into a domain-joined Windows 7 Pro PC and gets the temporary profile error pop-up. Event 1511 User Profile Service in Event Viewer logs. Typically with this problem I delete a user's ...
0
votes
0answers
35 views

Would a duplicate DC on same subnet be bad, if ALL auth is only internal to the server?

Here's a weird scenario I'm looking for some guidance on. I have a VM that is a purpose-built "self-contained" demo environment. It has an application stack installed, as well as Active Directory, ...
0
votes
1answer
16 views

Moving site server (not PDC) into it's own new domain keeping current user accounts and permissions intact on file shares

I haven't been officially Microsoft trained so forgive my incompetence discussing what we want done and how to go about it. We currently have a MPLS style network hosting different sites which each ...
0
votes
1answer
30 views

2 Domains - 1 ADFS - 1 SharePoint - 1 Authentication way

I'm wondering if this if possible: I have 1 AD Domain: InternalDomain. I want to create a secondary domain: CustomersDomain. I would like my SharePoint to be able to authenticate users from both ...
0
votes
0answers
22 views

Powershell and dsget do not return full results when querying group membership

I'm trying to get information about group membership of certain users. Ultimately I want to automate this in some way but I'm having difficulty extracting the information at all. The problem is that ...
0
votes
0answers
13 views

AWS Directory Service compatibility with XenApp / XenDesktop

I have a question regarding AWS Directory Service compatibility with Citrix XenApp / XenDesktop. I am about to deploy a Citrix XenApp environment in AWS. A requirement for XenApp is a working Active ...
0
votes
1answer
37 views

Powershell AD Group creation script

I am making an AD Group creation script New-ADGroup -Name "CS-WS-PROD-Admin" -GroupCategory Security -GroupScope Global -Path "$OU" -Description "Admin Rights on PROD" -ManagedBy CS-WS-SAR-ADMINS ...
1
vote
1answer
38 views

How to fallback to out-of-site login server - ActiveDirectory

I pretty much spend all of my time on Linux\Networking however I am trying to set up a multi-site AD configuration. There is no root site or anything like that, I simply have two DCs in SiteA and one ...
0
votes
0answers
32 views

machine in domain is not accepting domain credentials

I have added a windows server 2008 (Virtual machine) into a domain. 1. The newly added machine properties shows the system name as systemname.domainname 2. The AD is listing the newly added machine ...
5
votes
3answers
181 views

In a Windows PKI, what is a Workstation Authentication CA Template used for? What happens if it expires?

Many workstations have an expiring computer certificate that was issued using the Workstation Authentication CA template. The CA of this template expires in 2 days. I've deployed a new CA, with an ...
6
votes
2answers
62 views

Is it possible for a schema change to not replicate, and a object that uses that schema arrive at a DC?

I'm trying to understand the risk of updating the schema of a very large AD forest, where the schema has not been on every DC, and then an object that uses that schema object is replicated An example ...
-3
votes
2answers
50 views

BYOD - AD Authentication Issues [closed]

I am a guy who brings his "own rig" to work. In this new gig I have to run some apps as a domain user provided. I shift + "right click" -> run as a different user and insert the domain credentials, ...
2
votes
2answers
59 views

Restrict access to active directory attributes from a particular computer?

I know that some attributes in AD are classified as personal information and some are classified as public information (see the "property set" column here - ...
0
votes
1answer
26 views

Official name for AD/LDAP targets

Say I have an AD user called flimflam that is "located" at OU=System, DC=fizzbuzz, DC=myorg, DC=com: What is the technical/appropriate verbiage for OU=System, DC=fizzbuzz, DC=myorg, DC=com? Location? ...