A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
3 views

AD Roaming Profiles via VPN not synchronizing

I want to create local Client-VMs (Windows 8.1) for our developers. These should connect to our VPN and login on our AD server (Windows Server 2012 R2). I'm using serverside profiles for this so that ...
0
votes
0answers
6 views

Debugging libnss_ldap AD synchronization

I am trying to configure my Debian server to talk to an AD. I have a connection to the LDAPs port of the AD, and i can use LDAP search to connect and retrieve results. I can also see that the getent ...
0
votes
0answers
18 views

Problematic Active Directorys CA certificate

i came across one DC, which gives me RPC errors when dealing with AD Certificate Service.I can see in AD there is 2 Root CA , one is problematic. Is it safe to remove it? Or is there a procedure for ...
0
votes
0answers
7 views

Using Windows Server 2012 CA to provide internal certificates

I want to use Windows AD CS in order to provide any web interface internal to my company with SSL encryption and trust certification. What I want is to make the HTTPS interfaces of webapps, switches ...
0
votes
1answer
35 views

Find IP of computers using AD account

I cant seem to find a log that contains the info I want in AD. I want to log logon events so I can see each user login and where it came from, similar to the information logged when a user provides ...
23
votes
2answers
1k views

Why can a and o in samAccountName be replaced with danish å and ø?

A coworker just demonstrated to me that accounts in our test AD was able to authenticate when replacing every a character in their samAccountName with Danish character å (ASCII 134 / å). E.g. ...
1
vote
1answer
21 views

Replace the domain controller without copying the AD

we might have some special terms to do with replacing our DC. The current DC is running on an old machine with Windows Server 2003. As of the GPOs we aren't able to manage all new computers and as the ...
0
votes
0answers
10 views

Script adding an NISMap object in Active Directory from Windows and RHEL6

I am working on using Server 2008R2 Forest to house AutoFS maps in the existing schema using NISMap and NisObject class objects. I can manually create them (and it works) with ADSIedit. I have ...
0
votes
0answers
6 views

Possible SPN issue with AGPM Authentication

here is an AGPM server in our forest root - AGPMServer.example.biz. The AGPM service is running as example\AGPM. If I log onto the server that hosts AGPM, I can connect no problem. My workstation ...
3
votes
1answer
22 views

Deploy Software via GPO, but also deploy configuration file

When deploying software through a group policy, is there any special trick that will allow you to also deploy a separate, say config, file along with it? Here's the specific problem: We have a ...
0
votes
1answer
25 views

Windows Server 2003 secondary DC issues

I have some strange issues with my domain controller. I have primary DC called 'netsun' with ADDS, DNS and DHCP, and secondary DC called 'ex_serv' with ADDS service and exchange. So my primary DC is ...
0
votes
1answer
14 views

In which order will GPOs be applied when a USER try to login to a PC in a different OU

If we have this Group Policy Management configuration (Windows Server 2008): domain.local OU1 PC1 USR1 GPO1 (Linked) OU2 PC2 USR2 GPO2 (Linked) ...
0
votes
1answer
38 views

Assigning Department based on Active Directory OU's

We have just gone to Office 365 tied in with ADFS. We want to be able to see people's departments automatically when we view their contact info in Office 365. We do not have any Department ...
1
vote
1answer
40 views

How can I remove the minimum password length for a specified user in an OU?

How can I remove the minimum password length for a specified user in an OU? (I do not want the default domain password policy affecting my GPO.) When the "minimum password length" in my default ...
0
votes
0answers
3 views

Connect MSSql using Service account “domain/User” via PHP/Yii [migrated]

i trying to use a windows service account user "DOMAIN/username" to access an existing MSSQL db environment via PHP/Yii i m able to successfully login to the MSSQL database directly using this ...
0
votes
1answer
40 views

How do I move Active Directory user information to the Exchange Global Address Book?

I am running Exchange 2013 and I have noticed in Outlook that a lot of the contacts in the Global Address Book are out of date. I recently went and update all of the Active Directory details so how ...
0
votes
1answer
47 views

Merging multiiple domains with the same existing domain name (office.local)

I am working with a new client who has 5 offices and four of which have a single domain controller with the name of OFFICE.LOCAL and another one with the domain controller DENTAL.LOCAL. Oh and all of ...
1
vote
3answers
36 views

Linux / AD integration with SSSD: how to choose what systems a user can log into?

We are trying out ActiveDirectory integration on some linux systems with SSSD. So far so good we joined the linux systems to the domain and we can log into linux systems with AD-defined users. Right ...
-1
votes
0answers
19 views

access AD through Public IP [closed]

I have an Active Directory set up on a public facing Windows Server 2008 machine. I have an application which is deployed on another server(a linux machine) which is required to access that AD. How ...
7
votes
3answers
153 views

Server 2012 R2 Active Directory Domain SRV dns records suddenly disappeared

I have a test domain that I recently configured. All of a sudden, no users can log in except those with cached credentials. The domain includes two domain controllers that are both global catalogs ...
0
votes
0answers
28 views

Outlook not finding newly created mailboxes

We are running Exchange 2010. All of my thin clients (Office 2007 - WinServer 2008) and my few PC laptops (Office 2007 - Win7) aren't able to find any recent users that have been added into the ...
0
votes
2answers
48 views

Running a Windows Server 2012 Domain Controller in Hyper-V

I attempted to install Windows Server 2012 on a Dell PowerEdge 2850 and found out that the server may not support Server 2012. Is there any downside to running a Windows Server 2012 domain controller ...
-2
votes
1answer
59 views

User profiles for ESXi [closed]

I have configured active directory with my ESXi Server and all is great. I created User Profiles for this experiment within Windows 2008r2. Logged in with a windows 7 VM within Vsphere, and all works. ...
1
vote
2answers
44 views

Block Administrators authentication attemps from workstations

My Administrator user once in a while is getting locked-out by the workstations in our lab, due to failed logon attempts. (While this is a problem that should be addressed, because this means there is ...
0
votes
1answer
21 views

how to enable user login after Offline domain join?

Is it possible to add computer from remote location to AD (windows 2008R2) and enable user login? I've run DJOIN as described here: http://technet.microsoft.com/library/dd392267(WS.10).aspx but ...
0
votes
2answers
22 views

vsFTPd authenticating with SSSD

I am currently trying to setup an FTP sever that authenticates through Active Directory using SSSD. My config files are as follows: /etc/vsftpd/vsftpd: [root@StudentOrgFTP vsftpd]# cat vsftpd.conf ...
-1
votes
4answers
60 views

Exchange 2013: Unable to install Exchange on domain for the 2nd time

I'm trying to set up Exchange 2013. There are two errors - not sure which one is fatal (perhaps both) Eror 1: Setup encountered a problem while validating the state of Active Directory: The Active ...
0
votes
1answer
13 views

Active Directory - Migrate objects from Win Server 2003 R2 to Win Server 2008 R2

I am about to migrate some users and objects from a domain managed by Win Server 2003 to a domain managed by Win Server 2008 R2. I heard about AD migration tools, but are there issues concerning ...
0
votes
0answers
39 views

How can I login as AD user on my ubuntu server? [closed]

I have setup an ubuntu server and successfully connected to AD domain controller. Now I want to login as AD user on my ubuntu server. How can I do this? I have AD setup on AWS and ubuntu server also ...
2
votes
1answer
22 views

Enable application to send emails in Exchange 365 hybrid deployment

Question from a still-learning Exchange administrator: Is there a recommended way to create & configure an email account to be used solely by an application to send messages (alerts, reports, ...
1
vote
1answer
26 views

Is there a way to know what version of Exchange a users mailbox is on via AD?

In Active Directory there is a property against a user called "homeMDB" That will give me the users exchange database, but is there a way to know if the user is on exchange 2013 through Active ...
0
votes
2answers
45 views

AD Existing Forests Best Practices Setup

My company was acquired by another company. Both companies have existing AD forests and domains. The company that acquired us ,also has international sites.What would be the best practice/solution to ...
0
votes
1answer
26 views

LDAPs using Anonymous Access to AD forest

There is a problem related to AD which I cannot understand what configuration is missing to fix the issue. I have two DCs: testa and testb and both contain AD. I'm logged in to testa and I'm trying ...
1
vote
0answers
31 views

Migrating AD Lightweight Directory Services (LDS) or ADAM data to Azure Active Directory (WAAD)

We currently have an ADAM instance that we authenticate our ASP.NET web users against. We have a requirement to replace this instance with an Azure Active Directory instance instead with a new schema ...
0
votes
1answer
39 views

Windows server 2008 R2 Certificate Authority error event viewer

I am getting the error "The windows default policy module initialize method returned an error. The specified domain either doesn't exists or could not be contacted the error code is 0x8007054b. The ...
0
votes
0answers
14 views

Samba Login with Trust Domain User

I'm studying Two-way Domain Trust between Samba and AD. I configured Trust, and I can login with Trust Domain User on Windows Client. But I can't login with Trust Domain User on Linux Client. I ...
0
votes
1answer
21 views

Is there a way to change which wireless network is connected to when authenticating windows 7 AD clients using single sign on over wifi?

The situation: Two domains. Two wireless networks. Each domain's users have their own network for security reasons. B is a child domain of A (A = domain.com, B = child.domain.com). Users in domain ...
0
votes
0answers
18 views

Error: “ chgrp invalid group 'domain users' ” when setting up shares

I'm following this tutorial: Samba Shares with Active Directory Login on Ubuntu 12.04, and when I enter the command: chgrp -R "Domain Users" /sharing/ , I get " chgrp invalid group 'domain users' ". ...
3
votes
4answers
44 views

Implimenting a new password policy without locking out users

Background: we have had a very relaxed AD password policy for years. Users have had 'password never expires' set and we were not enforcing strength or anything. We now want to rectify that and have ...
3
votes
2answers
66 views

Is the whenChanged Active Directory attribute editable?

I've been searching for tools to change Active Directory object attributes, and I noticed the tools and articles and found so far are explicitly not mentioning capability to edit the whenChanged ...
0
votes
1answer
15 views

ADFS allows to login only to Office 365

I need to authenticate users on my web application using AD FS, but when they are redirected from my website to the ADFS login page they receive a page with error and they cannot introduce their ...
0
votes
1answer
47 views

Account lockouts not in Event Viewer

I am having trouble getting Windows Server 2008 to log when domain user accounts are being locked. My Domain Controllers are all Windows Server 2008 R1. I am able to find Audit Failure events (ID ...
0
votes
0answers
35 views

Active Directory - Set permission if user is present in all of the specific groups

The bussiness isue: implementing RBAC (Role Based Access Control) using Active Directory Groups mechanism. imagine having the following AD "Organization" groups: Core Development Team Sales Team ...
0
votes
1answer
35 views

Capturing LDAPS traffic with tcpdump

I have an app server that authenticates against Active Directory using LDAPS. I am connecting to the AD server over port 636. I'm trying to troubleshoot/debug some performance issues and am beginning ...
0
votes
0answers
21 views

Authenticating Debian against AD using only LDAP

I have been trying to set up a number of Debian machines to authenticate and authorize users against the Company AD. I am facing a problem however, the IT department will only allow connectivity ...
1
vote
2answers
46 views

Possible to authenticate Samba via Kerberos but without domain-join?

With a Kerberos config file... [realms] DOMAIN.COM = { kdc = dc1.domain.com admin_server = dc1.domain.com } ...it is possible for Linux to talk to Active Directory for password ...
0
votes
1answer
27 views

hide data in active directory to a specific account

We are contemplating using Windows AD as LDAP for an DMZ Ubuntu environment and discovered that a simple LDAP query from a DMZ ubuntu server resulted in a complete listing of all AD objects. (We ...
3
votes
0answers
27 views

Active Directory Administrative Center - resize membership part

User can be a member of 3 groups at most to be visible in ADAC without scrolling. But in reality, users are members of 5, 10 even 20 groups. We have to scroll the "member of" list to check the ...
1
vote
0answers
41 views

reset lost administrator password for Windows Server 2003 (AD)?

I've been contacted by a local golf course that has lost login access to their Windows 2003 server (suspected cause is a password change by a disgruntled ex-manager). When I visited the site, they ...
0
votes
0answers
8 views

Having trouble getting dovecot to authenticate with samb4 DC/AD

I have a Slackware64 14.1 system configured as a Samba4 (4.1.11) Domain Controller/Active Directory. The DC/AD bit works fine. I have AD users configured and working redirected folders. I've ...