A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
19 views

How to work around a “logon workstations” restriction to the Domain Controller stopping authentication via LDAP

I am trying to allow users of an external linux based application server to authenticate with the service using their Active Directory credentials via LDAPS. It works well for admin accounts but fails ...
0
votes
1answer
7 views

cannot config LDAP in filenet p8 5.2

i tried to fulfil this form many times and click "test LDAP connection". it's alway return success. but when i click "run task", it's alway return Running the task failed with the following message: ...
0
votes
0answers
14 views

Issues with delegating subdomain to AD server

I have a working authorative BIND 9.8.4-P2 server on freebsd on domain domain.com with IP 192.168.0.3 and name ns.domain.com that I did not set up on my own. It is a hidden server from which a subset ...
2
votes
1answer
18 views

AD | Prevent admins from changing passwords to the same thing

I have an interesting security problem: Admins with ad access have been changing their password to the same thing, and breaching the company security policy. User side, standard AD complicated ...
2
votes
1answer
19 views

Reversible Encryption - Not Defined but Showing as Enabled?

I'm reviewing our complex password policy that was setup by a previous admin and I'm trying to gain some clarification on the setting for Reversible Encryption. In our organization, reversible ...
1
vote
0answers
14 views

Create SCCM device collection based on last logged on users who are members of an AD security group

I'm trying to create a device collection in SCCM 2012 which contains only the devices who are used by the users who are members of a certain User AD Security Group. I tried to accomplish this by first ...
0
votes
1answer
15 views

Active Directory Group Policy - Default Domain Policy CSE GUID

The active directory attribute: "gPCUserExtensionNames" contain a CSE GUID and a Tool Extension GUID string value in order pass information for GPO behavior. I have found in the Default Domain ...
3
votes
3answers
661 views

When the internet is down, so does Active Directory?

I am setting up business servers for a small office use with 5 users / 5 devices or so. Nothing elaborate here. I've set up a SINGLE Lenovo TS440 server (single NIC) with Windows Server 2012 R2 ...
3
votes
1answer
102 views

Server2k8: Prevent membership in a group based on membership in another group

I'm revamping my company's service accounts, and we've discovered that some need to be able to log on locally, and some are OK with just logging in as a service. I've created two groups, ...
0
votes
0answers
16 views

how to get info on failed authentication to domain - security audit?

Setup: 1 Windows Server 2012 box as Domain Controller, named DC1. 2 Windows Server 2012 R2 boxes, S1 and S2, on the same network, same config, joined to the domain. Issue: At random times, S1, S2 or ...
0
votes
0answers
12 views

AD DC - Error 4625 Status 0x80090308

I recognzie a small amount of Event 4625 entries with a status of 0x80090308 and substatus 0x0; 2% over all 4625's. It is basically a failed logon but without any information I could use to look ...
0
votes
0answers
11 views

Two different IIS applications with different auth methods for the same domain

I have been working on a kind of SSO solution for an intranet application. My approach has been: configure the application within IIS with Windows Security authentication configure IE adding the ...
0
votes
0answers
10 views

Passwordless login: virtual smart card with no pin?

I would like to set up a domain-joined computer for passwordless login with some low-privileged domain account that is specific to that computer. I've seen some blog posts that store the username and ...
-2
votes
2answers
41 views

Windows 2008 dead server to windows 2012 Active directory move [on hold]

Our windows 2008 AD server has failed, but i am able to read the hard drive via a usb cradle. We have got a new server now running windows 2012. Is there anyway I can move the active directory? Any ...
0
votes
1answer
30 views

Is it possible to add permissions to an Active Directory account using PowerShell?

We're deploying Active Directory, and we're using PowerShell scripts for most of it: creating the forest, creating AD elements (users, groups, sites, subnets), etc. We'd like to make some users able ...
0
votes
1answer
17 views

Allow anonymous users to see contents of the Users folder in AD

I have already enabled anonymous access to AD by setting the dSHeuristics property to 0000002 for CN=Directory Service. While this allows anonymous users to bind to the directory successfully, when I ...
1
vote
1answer
18 views

Joining Linux host to Active Directory fails to update Microsoft DNS

I am joining Linux hosts (CentOS 6) to Active Directory using a special bind account. I've granted delegate permissions to this user and when I join on the default Computers OU, a computer object is ...
1
vote
0answers
38 views

Installing Active Directory after finishing installing and deploying Windows Server 2008 [on hold]

I have a small business with 5 employees and I am starting to use a Windows Server 2008 R2 to give my employees access to the server with TS RDP . The end of live of Server 2003 is coming soon which i ...
0
votes
0answers
10 views

Cross Domain LDAPS

I have a bit of an issues I am running in to. We have two domains: domain1.com domain2.com Our Enterprise and Subordinate CA Resides on domain1, let's call it subca.domain1.com. I am trying to ...
-2
votes
0answers
29 views

Migrate Linux User Account To Active Directory

How can I add a linux user to an active directory account and keeping all the settings / profile from the linux account? In otherwords how can I add a specific linux user to AD so that when I login ...
1
vote
2answers
38 views

Change different domain account without being admin Windows

I have 2 accounts on a domain. I can log into a citrix virtual desktop with the one account fine, but the other won't let me log into anything until I first change my password. I am remote, so I ...
0
votes
1answer
11 views

Adding users to a group in a Forest trusted Domain

I am doing a cross forest migration for DC-A to DC-Z. on DC-A there's a sharepoint 2007 and I would like migrated users on Forest -Z to access Sharepoint on Forest - A. What I have done so far is ...
2
votes
2answers
39 views

Authorization using LDAP OU or Groups

In the below image I have drawn two schema structures for LDAP(Active Directory) I would like to know which one is correct. In my organisation they are using Structure 1 design for PC login and ...
0
votes
0answers
6 views

Jenkins AD Auth with extended User search base

I’m trying to use a fairly large Active Directory instance to authenticate Users with Jenkins. This works quite well with the following settings: ...
0
votes
0answers
11 views

Active Directory Forest Trust

I have this problem in our company. It's about AD forest trust relationship. Our company has three sites, in US, Japan and Philippines. In Philippine site, I created another additional DC and ...
2
votes
0answers
25 views

Universal Group in domain not behaving as expected in multi-forest environment

I have an environment with 2 forests, F1 and F2 with a full, transitive, bi-directional trust between them. F1 has a single domain that holds an SSRS server. F2 has 2 domains, F2parent and F2child, ...
1
vote
1answer
20 views

Sync AD thumbnailPhoto with all company computers

I'm perfoming some tests with AD related with thumbnailPhoto and jpegPhoto AD attributes. I uploaded a photo in my AD user in both attributes using following this blog entry. However, the photo is not ...
0
votes
1answer
40 views

Allow access to only certian AD Group users to IIS site

I have created Active Directory Group to allow access to certain user to IIS site (IIS version 8.5). I have installed "URL Authorization" module as shown in below link: ...
1
vote
2answers
24 views

Do I really need an account in domain\administrators for the Web Application Proxy with ADFS 3.0 on a domain controller?

I am trying to move my ADFS / WAP to the cloud to give better resilience after experiencing a recent failure. In part to save on VM costs, I am using just 2 VMs, with ADFS installed on a domain ...
-5
votes
0answers
20 views

what are the questions we should ask customer to know about their existing Active Directory to Integrate with New Identity management solution [closed]

We are planning to deploy a new Identity Management solution for customer. As part of requtirement gathering process, what are the questions we should ask customer to know about their existing Active ...
0
votes
0answers
30 views

SSO Linux and AD Trusted Domain

Having successfully built a one-way trust between 2 AD domains, we can't lookup/id the user in the trusted domain. Here's our use case. AD1: dom1.com (Win2k8 R2) - One-way outgoing trust to AD2 ...
0
votes
1answer
47 views

Is it possible to connect with domain, when active directory is not installed?

We have a small server with Win Server 2008 in our office. It is in use for a long time now. I'm new here, and there is no IT guy, but only some IT company that does business for us when we need them. ...
0
votes
1answer
22 views

recover deleted item using LDP

First this is not critical. It is a test environment. I have server 2012r2 as DC with both domain & functional level at 2012r2. I have AD recycle bin enabled. I delete a user. I can see that ...
0
votes
1answer
17 views

The configuration information describing this enterprise is not available - Error I receive

I have Windows Server 2012 R2 installed and when I navigate to 'AD DS' and try to go to 'Active Directory Domains and Trust' the error I receive is "The configuration information describing this ...
1
vote
0answers
18 views

What is the better solution for active directory on mixed Linux and Windows

In my existing infrastructure, we have two domains of Active Directory. First domain is private.com and second is public.com. Public.com has been configured to one-way trust to private.com. All user ...
2
votes
2answers
26 views

What permissions are required for a domain user to login to a domain machine?

I have been under the impression that Domain Users should be able to login to a domain joined machine with their domain credentials out of the box and no special permissions needed. I'm running this ...
0
votes
1answer
28 views

Local group policy not applying (gpresult says its empty, but it's not)

We are running a strange AD constellation here, where the same logon script is defined within the local group policy on each server (don't ask me for the reason, it wasn't my idea). Then an (AD-) ...
0
votes
0answers
33 views

Find if linux machine is domain joined

We're joining our Linux machines to our Active Directory using adcli join. Now we start doing this as part of our saltstack setup, but we cannot figure out how to determine if the machine is already ...
2
votes
1answer
34 views

Bulk License Office 365 Users by OU with PowerShell

I'm trying to do something that I don't think should be too complicated of a fix. My end goal: I have certain users in one AD OU that need to use a certain license in Office 365, and different users ...
0
votes
0answers
18 views

Local User Account Disappeared After Domain Upgrade

I upgraded to server 2012 r2 from 2008 r2 I have all computers in AD The workstations with local logons are losing the local user that i have set up on them... (the admin logon is not disappearing) ...
0
votes
0answers
15 views

Access denied trying to login to Ubuntu 14.04 (Authentication with Active Directory)

I'm trying to set up my Ubuntu 14.04 print server to authenticate users with my Active Directory server, I've followed all of the steps using the following tutorial: ...
0
votes
0answers
40 views

Why can't we directly change a group from global scope to domain local or vice versa?

If we need to change the scope of a group from global to domain local or vice versa we first need to change it to Universal. What is the reason for this?
0
votes
0answers
10 views

Microsoft AD DS group membership verification when authorizing user

Can somebody point out to documentation or explain how verification works in AD DS when it is necessary to authorize user to perform some actions. As far as I remember user's SID or token should ...
-1
votes
0answers
12 views

Prohibit computers to join a domain if they are not exist in the Active Directory

Whenever we join a computer to a domain, the computer object is automatically created inside Active Directory. We would like the option to be able to join a computer to a domain only if the computer ...
0
votes
0answers
14 views

How to export LDAP RootDSE attributes to LDIF file?

How to export LDAP RootDSE attributes to LDIF file? I was able to use Active Directory Explorer to see RootDSE attributes but I can not export them: ...
1
vote
0answers
32 views

enter-pssession : Connecting to remote server failed with the following error message : The user name or password is incorrect

I am unable to connect to domain controller via below script. This script is working for another domain controller so it mean script is correct. While I am connecting i am getting an error: ...
1
vote
1answer
60 views

EAP-TLS for Wireless with Active Directory

My question is more from a conceptual point of view, rather than implementation (even though I'm asking about proprietary protocols and products). Assuming I have users and credentials set up in my ...
6
votes
2answers
76 views

Cached credentials in ActiveDirectory and setting up machines

If one has a bunch of Windows machines which will be used remotely and off-domain (at first), is there a way to presynch the usernames and passwords from Active Directory so the users may login via ...
1
vote
1answer
28 views

Powershell remoting with active directory

I am able to connect to domain controller via below scrip remotely, but after that i want to run disable-ADAccount ,Get-ADUser command but I am getting error Get-ADUser : The server has rejected the ...
0
votes
1answer
16 views

infrastructureUpdate type OU called Infrastructure in Active Directory

A new OU called infrastructure with the type infrastructureUpdate has appeared in my Active Directory. It has just appeared. I have been going through the setup recently and the last major thing I ...