A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

-3
votes
0answers
14 views

Migrating from server to 2008 R2 [on hold]

I found the pdc of the 2003 server is from DC1 and i have to replace 2003 with 2008 R2 but before doing that i need to take all those Active Directories to the 2008 R2 and if the PDC is in another ...
0
votes
1answer
8 views

'realm join --client-software sssd' on centos-7 joins two realms (one with sssd and one with winbind)

On clean installed centos-7 host: realm join -U foo --client-software sssd AD.EXAMPLE.COM After running realm list output looks initially like this: AD.EXAMPLE.COM type: kerberos realm-name: ...
1
vote
1answer
16 views

Samba Domain Management [on hold]

I've recently setup a 2 Samba Domains using version 4.11 and trying to find a way to to manage the environment without using the shell. I know we could use some of the mmc tools from Microsoft, but ...
0
votes
1answer
25 views

Solution to Implement/Realize Two(Multi)-Factor Authentication within Microsoft Windows Server 2012 R2 Domains [on hold]

I'm currently looking for a way to implement a secure Two(Multi)-Factor Authentication within a Windows Domain Network (all Servers/Clients are at least Windows Server 2012R2/Windows 8.1) utilizing a ...
0
votes
0answers
6 views

Error deleting Azure Directory - associated with existing Trial Subscription which is owned by a deleted account

Steps taken so far: Created a new Azure Organizational account called: name@company.onmicrosoft.com Started a Free Azure Trial, with credit card details. This created a single Directory with the new ...
-3
votes
0answers
13 views

active directory dropdown attribute [on hold]

I would like to add a dropdown attribute to my active directory to use it on apps, i searched the web and i find that it is posible but always using third party software. Is there a way to add ...
1
vote
3answers
24 views

nslookup shows wrong data

I am currently an administrator and have about 150 windows systems running. The previous administrator turned out be be a real nightmare for me before he left. The network assignes some windows ...
1
vote
1answer
55 views

File extension .QCOW2 on Windows [on hold]

While I was researching for solution, I saw the file extension could have something to do with vmware, thats why I am asking my question here. I would like to know how, what software should I use, to ...
0
votes
0answers
8 views

How to handle (and test) hybrid multi-forest with Office365

Let's say we have two domains: contoso.com and fabrikam.com. Both have: two UPNs (.local and .com) Then: Contoso.com have Lync servers on-premise. Exchange, Sharepoint 2013 and Azure AD on ...
-1
votes
0answers
18 views

Active Directory Domain Failure (uBuntu - Kerberos)

i try to join active directory and samba4 in uBuntu 12.04.05, but when it come to test come out error if i type host -t SRV _ldap._tcp.4ecap.sg' and comes out error Host _ldap._tcp.4ecap.sg ...
-1
votes
1answer
30 views

Can I replace local Microsoft Active Directory with AWS Directory Service?

We have a very basic AD usage (basically manage user password reset) and for that we have to maintain a old Windows server. All the services our internal users access are on the cloud (GMail, Google ...
-2
votes
0answers
29 views

Are the UID of users from a domain maintained locally in a machine?

This could be total nonsense but as I am new and am trying to learn. I came across this question. I have seen many of my office linux machines connected to some domain. I am wondering as if a ...
1
vote
1answer
29 views

What does a new user object in an AD domain have access to by default?

Background: An application requires that user objects be created to contain various users' information. These user objects exist for their data only, and the user objects should not be able to log in, ...
0
votes
0answers
26 views

Active directory creates network issues

I have an OpenStack virtualization environment, where I created 3 VMs using the same Windows Server 2012R2 image. Each machine is syspreped after initial deployment. My goal was setting up a simple AD ...
1
vote
0answers
28 views

ADFS 3.0 SSO Form authentication Issue - Subdomain not found under certain circumstances

Let me preface that I'm not near the server at the moment so I cannot give a direct readout of any error messages. We have implemented an ADFS 3.0 Server and are using Microsoft's included SSO ...
1
vote
2answers
30 views

Parse a copy of the SYSVOL

I have a full copy of a client's SYSVOL folder. The only DC on site had failed and been restored, but that got me wondering if there was a tool to look through a copy of the SYSVOL folder for ...
0
votes
0answers
16 views

Windows 2003 error 2902 “server is the owner of this FSMO role, but does not consider it valid” after DCPROMO run

I am in the process of adding a Windows 2008 R2 DC (MTC2008DC) to an existing legacy Windows 2003 SBS domain, with a view to decommissioning the old server. There is already one 2008 DC in the domain ...
0
votes
0answers
20 views

Configuring Separate Forest for DMZ

Our DMZ currently has just two Winddows Server 2008R2 servers in it. One runs Exchange 2010 Edge Transport and the other is an IIS 7 server. Currently, these are just in a workgroup. We plan to ...
0
votes
2answers
29 views

ldap query with nested group

I try to build a ldap query to MS Active Directory. I found that there is a LDAP_MATCHING_RULE_IN_CHAIN type to do so. Which results in the follow syntax: ...
1
vote
1answer
9 views

Changing default UPN for iPhone/ActiveSync seamless Setup: any downsides?

Setting up a brand-new domain and want to achieve ActiveSync/Autodiscover Nirvana: no certificate warnings, no having to entry in Server Names or Domains, just pure Contoso-like buttery bliss. Have ...
1
vote
1answer
26 views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
-1
votes
0answers
32 views

Suggestions for SSH login management across multiple servers [closed]

We are looking for a way to manage SSH logins to multiple server systems by multiple users within our organization. The current infrastructure in place consists of Windows workstations managed in an ...
-1
votes
1answer
21 views

Auto-Logoff Through GPO [closed]

We have to auto-logoff all the users who are sitting idle for more than 1 hour. We have Most of 2003 servers. We were told that Terminal server licenses has not been there else we have a group policy ...
0
votes
0answers
10 views

DFS Database Error

I am trying to setup DFS on 2 computers. I have successfully setup and created a replication group among the folders on each servers. The replication is not happening. On checking the logs i found ...
-2
votes
0answers
20 views

Active directory removal [closed]

I am new to my company, and not much aware of the configurations done by the previous sys admin. I was the one assigned to remove AD but restore the network drives which are mapped. Current Scenario: ...
3
votes
1answer
39 views

ADFS Claim to Flatten Groups and Return full DN

Is there way to create a claim that will the return the DN of all groups and super-groups a user is a MemberOf? Currently running Windows 2012 R2 ADFS. Example: I have a structure of groups like ...
0
votes
1answer
42 views

Unable to join win 7 machines to a domain running Server 2003

I am fairly new to server administration, but have worked with computers a long time. I am experienceing a problem I have never had before; I am unable to join any new machines to the domain because ...
4
votes
1answer
68 views

ADFS - Restrict to AD Group

I just implemented an ADFS server to connect a third-party chat tool with our Active Directory via SAML 2.0. Everything works fine so far but there's a little problem: As soon as a user logs in, the ...
6
votes
1answer
63 views

Error adding child Active Directory domain to existing forest

I'm building a test environment containing multiple Active Directory domains in the same forest, but I'm having strange issues while trying to add a child domain to the forest root domain. All ...
0
votes
0answers
9 views

SharePoint 2013 User Profile Sync - Attributes Not Synced

I have a SharePoint 2013 farm that is utilizing SharePoint Profile Sync to import Active Directory user accounts. A handful of users are importing without the 'Manager' attribute populated. All ...
0
votes
0answers
10 views

dropped security events on PDC

Running a Windows 2008R2 Active Directory environment geographically dispersed over WAN links. Have used group policy to apply increased verbose security logging on domain controllers. Using ...
4
votes
2answers
64 views

Audit policy being overwritten by “something”

I'm installing vendor software which requires account auditing to be enabled on our DCs. The problem is Audit Policy is not being pushed. Checking secpol.msc shows Windows Settings->Security ...
1
vote
1answer
55 views

Make DNS server know of it's ADDC server

I have a problem and haven't been able to find an answer for it on the googles, so now I ask you I have 2 servers: Server A, ubuntu 14.04, running DNS/DHCP through bind9 and isc-dhcp-server Server ...
1
vote
2answers
22 views

Add properties to Azure Active Directory User “Work Info” tab

Within Azure Active Directory, if I create a new Active Directory and begin to manually add users, I have visibility of a number of fields: However, there are way more tabs/fields on the server ...
1
vote
2answers
30 views

View GPOs applied to a specific security group

A group was created in the Active Directory Users and Computers to give local admin rights to certain users on our domain. After taking over management of this system from a previous employee I am ...
0
votes
1answer
87 views

Domain Controller loses major functionality randomly

I have a weird scenario going on, 2 domain controllers at 2 different sites that communicate over a BOVPN. At random the main server (named SERVER) will no longer be able to resolve DNS and even ...
1
vote
0answers
30 views

Promote Windows Server 2012 to domain controller in an existing samba network

I have a Windows Server that I want to use as a domain controller to push gpo's to workstations that are on a samba 3 domain served from an Oracle Solaris server. If I were to promote this server to a ...
0
votes
0answers
16 views

Guest clients browsing very slow

I have AD, DHCP, DNS, RRAS, Print and File Services on my Windows Server 2003. I have a small network of 40 desktop computers and 10 guest laptop connecting cables for mobile staff. I have a Cisco CE ...
-1
votes
0answers
14 views

Multiple Forests on One Exchange 2010 Server

We currently have one AD Forest with an Exchange 2010 server. We need to rename our domain, so I'll be creating a new forest and migrating the objects across with ADMT. Can the one existing Exchange ...
17
votes
1answer
1k views

How to time-bomb a GPO?

I am doing a lot of work in higher education where it is a rather common requirement to reconfigure a number of Windows domain members (e.g. PCs in a classroom) for the duration of a specific course ...
-2
votes
1answer
39 views

Create a backup domain controller, but don't want it to do anything [closed]

I set up a second domaincontroller fot backup, but if I take a look at he log files, I see that is manages logons for half of my computers, etc... Can I set it up that it actually does nothing, ...
-1
votes
0answers
23 views

Move Active-Directory profiles

I migrated a Windows Server 2003 to a Windows Server 2008. The user profiles are saved to \\DC00\profiles$\%username% on the old 2003 Server. Now I want to save the profiles to ...
2
votes
1answer
40 views

Can group managed service accounts be granted privileges such as “log on as batch job”?

I recently set up a group managed service account to ditch the headache of password rotation. The account creation went smoothly. I was able to set up a service to run as the gMSA, and the account ...
-1
votes
2answers
43 views

memberOf AD explorer search error

I'm using AD Explorer from Sysinternals. I'm performing a memberOf search against the container OU= Alaska Users for the following user: CN=Doe.John,OU=Alaska ...
0
votes
0answers
28 views

Allow access to a share on a workgroup using a user which is a part of a domain

There are 2 networks. Network A, which is domain controlled, and Network B, which is a small workgroup. A user from Network A accesses Network B using VPN (Network B is Checkpoint 600, office mode, ...
1
vote
1answer
23 views

saslauthd on Red Hat 6.5 NO “authentication failed”

I'm trying to authorize an user of an active directory in a red hat linux 6.5. To do that I am using saslauthd. This is its configuration: /etc/saslauthd.conf: ldap_servers: ...
3
votes
1answer
136 views

Check if a Domain Controller has been cloned

I have reason to believe that previous administrators cloned our Domain Controller at somepoint in its recent lifetime. The DC at one point was running on Server 2003 and has since been upgraded to ...
0
votes
1answer
56 views

An error occurred while using SSL configuration for endpoint 0.0.0.0:443

Based on information received from the network team. I have determined that the issue most likely rests with the application servers on the WAN. After replacing the certificate, I ran the ...
3
votes
0answers
45 views

Windows Server 2003 DC migration to 2 x 2012 R2 DCs - DCDiag error = Advertising: SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE

We are upgrading our single 2003 domain controller (DC1) to two 2012 R2 controllers (DC2 in Sevenoaks and DC3 in Manchester (different site in Sites and Services for Manchester)). DCpromo (the wizard ...
0
votes
1answer
24 views

Authenticate WLAN using Hostname in Access Group

The hardware is Cisco APs and Windows 7 Enterprise clients, which currently allows users to authenticate based on an Access Group in AD. We're looking at instead of users account, using the actual ...