Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

1
vote
0answers
14 views

Samba Authentication

I know it's going to seem like I haven't done the research here, because I have done it, and I know how many related questions and tutorials there are. I have read every tutorial I can find online for ...
3
votes
2answers
245 views

Should I be able to log into a locked out active directory account by disabling internet connectivity?

My active directory account just got locked out. On a whim I unplugged the ethernet cord and turned off the wifi radio switch and I was able to log into my account. I plugged the ethernet back in and ...
4
votes
2answers
96 views

Can I set up conditional forwarding for a parent DNS zone?

If my domain is ds.usepowershell.com, can I set up a conditional forwarder for usepowershell.com and not redirect my internal queries (since technically, ds.usepowershell.com is a subdomain of ...
0
votes
2answers
47 views

Setting up a LAN with load balanced internet

I have been looking and researching for the last week on this but haven't found anything conclusive which might apply to the situation that we are trying to solve. I have a small start-up which now ...
1
vote
2answers
23 views

Force domain password change in the future?

I want to force all my domain users to change their passwords, but I want it to happen on a specific day in the future. Is there a way I can automate that today, either using a GPO or PowerShell ...
1
vote
2answers
22 views

Importing Active Directory objects using LDIFDE or CSVDE

I'm going to make some changes on an Active Directory environment (mainly deletions), before doing so I'd like to make backup of few objects using LDIFDE or CSVDE. The distinguished names of these ...
4
votes
1answer
39 views

Powershell query lastlogondate (lastlogontimestamp) returning mostly blank values (not matching the ADSIedit value for corresponding user attribute)

I am running a very short script to simply print out all users and their last logon time: get-aduser -filter * -property * |ft name, lastlogondate I noticed only a small handful of users have a ...
2
votes
2answers
48 views

How Active Directory Dynamic DNS updates works behind the scenes?

I've looked through the AD documentation and I was not able to find any conclusive answer to this question. It's plain simple, but hard enough to be answered. How DDNS of AD works behind the scenes? ...
0
votes
0answers
19 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
-4
votes
1answer
33 views

Configure Active Directory on Windows 7 [on hold]

I am to configuring Active Directory on Windows 7. I have followed this link and installed AD LDS. But i am unable to create a new user in the active directory. Also, I am able to browse the ...
2
votes
2answers
50 views

Get OU management status from User object?

In a Windows Server 2008 R2 AD, is it possible to get a list of OUs managed by a User from the User object or does one needs to parse the list of OUs? (ie, is there representation on the User object ...
1
vote
1answer
30 views

LDAP connections favoring 1 DC over the other in same site

Observing spikes in "AD Search Subops" counter and "PROC LSASS%" counter daily on DC A relative to DC B; its not in maintainence windows; its at start of business hrs daily. -> Eliminated the point ...
1
vote
1answer
83 views

Correct way to change domain name in Active Directory

I'm trying to fix an existing AD infrastructure that was implemented using the external domain name as root domain name in the Active Directory. So it's running on "contoso.com". I want to put the ...
1
vote
2answers
31 views

Samba share with AD authentication is only authenticating users on some windows machines

I've searched high and low for help with this. What I've found is that most have given up. I have found that I can mount the samba share from a few different windows hosts with different users. ...
0
votes
0answers
14 views

Server 2012 SysPrepped Image Prompts to Approve Eula after Domain Join

I am trying to upgrade our base web server image from Server 2008 R2 to Server 2012. Our cloud vendor allows us to SysPrep an IAAS instance, image it and then restore it. I have this part all ...
0
votes
0answers
16 views

How do I delete a public folder that exists in AD but not in Exchange System Manager? [on hold]

I have a mail enabled public folder that apparently exists in Exchange 2003, but I can't seem to find it in my Exchange System Manager. I can find it in AD using a custom search for ...
12
votes
3answers
282 views
+50

Common wisdom about Active Directory authentication for RHEL/CentOS Linux Servers?

What is the common wisdom in 2014 about Active Directory authentication/integration for RHEL-like servers and modern Windows Server operating systems? Over the years since my first attempts with ...
0
votes
3answers
56 views

Migrating SBS AD to an Server 2012 AD with diffrent domains

The situation, I have a SBS 2008 server which also is the DC for the domain. The name of the domain is Example: DomainA. The other server is a W2012 server, which will be replacing the SBS server. The ...
2
votes
0answers
15 views

Auditing anonymous binds to AD LDAP

We're about to commence an AD upgrade to 2012 R2, and I have just found to my horror that anonymous LDAP binds have been enabled in the 2003 domain. We've certainly been issuing accounts for LDAP ...
0
votes
1answer
26 views

Samba server authenticating against Active Directory. Is it possible to reboot and still connect to the domain?

I have tried to setup Samba File Server with AD authentication. The authentication via Active Directory is successful but if you reboot the server the linux Samba file server will NOT join the domain ...
2
votes
0answers
42 views

Windows 7 there are no logon servers available to service the logon request subdomain

I've read other solutions, but my problem is slighlty different. Problem occurs in domain environment. We work in a subdomain, but we also have some employees coming with notebooks registered in top ...
0
votes
0answers
24 views

Windows Server 2012 R2 Standard located in our DMZ has problems with connection to RoDC

We had an environment with multiple 2008 R2 DC:s in our internal LAN and a 2008 R2 RoDC:s in our DMZ. We set up 2008 R2 servers in our DMZ and joined them to the domain using DJOIN. Everything ...
0
votes
1answer
11 views

Error on RSOP for Audit policy on DC

Domain Controller - Windows Server 2008 R2 Standard Please see the print-screen, I am unable to understood why such error is showing on my Domain Controller. I have also checked on Winlogon.log, ...
0
votes
2answers
17 views

SID's role in joining domains and AD authentication?

Thanks to recent answers to my questions, I was able to use sysprep to create a Windows 7 system image ready for deployment in our organisation. I learned that the process of using sysprep creates a ...
1
vote
1answer
73 views

Backup Active Directory users' files, deploy via GPO? [closed]

Am looking for a solution which can be configured to be deployed via group policies. I've looked into Windows Backup, but it doesn't fulfill our requirements. We need something like this: Runs ...
0
votes
1answer
27 views

Exchange Server 2013 has dependency on old PDC

I am in the process of completely upgrading a Exchange 2007 system running on server 2008 R2 Hyper-V VMs hosted on a Exchange 2008 R2 domain controller. It had all the FSMO roles on it, and it was the ...
4
votes
6answers
238 views

Powershell assistance for Active Directory Cleanup

I just started a contract to clean up an Active Directory system for a large company. I was told it would be quite the busy work but after reviewing the system and seeing how disorganized and messy it ...
-1
votes
1answer
30 views

windows server 2012: delete remembered domain [closed]

I recently start experimenting with windows server 2012 and have a question about Domain controllers and creating a domain. I've tried creating a Domain Controller and a domain, then deleted the ...
2
votes
0answers
18 views

Domain Controller's DNS NIC configuration [duplicate]

I've seen conflicting information on this online, but say you have an environment with two domain controllers: one Forest, one Site, one Domain; simple as it gets. How should each domain controller's ...
1
vote
0answers
15 views

Group Policy Mapping Printer

There seems to be lots of different ways to map printers, all appear not to work (for me). Im running a Windows 2008 Environment with windows 7 clients, simple, hey? No.. I have a printer connected ...
0
votes
1answer
31 views

Can't access Active Directory Web Services via PowerShell

I have set up a test lab consisting of two 2012 R2 servers. One is a domain controller (srv1), the other a member server (srv2). When looking at 'netstat -ano | findstr 9389' i can see a service is ...
1
vote
1answer
37 views

Windows Server 2008R2 Domain Controllers - Failed test VerifyReferences

While running DCDIAG on our Windows Server 2008R2 Enterprise Domain Controllers, I discovered the following error message on both DCs. These domain controllers where migrated from a Windows server ...
0
votes
2answers
42 views

Active Directory: pfSense failing?

I have set up PfSense as a router and I have linked two Windows Servers to it. I can ping from SERVER01 to SERVER02 and PfSense can also ping to them. The problem is, on SERVER01 I have set up the ...
2
votes
1answer
36 views

Web server with access to internet and internet Active Directory [closed]

This might sound like a stupid and unsecure question, but we're front-end web delopers and don't know that much about these things. So here goes.. We're creating a web app where we want to log in ...
1
vote
1answer
48 views

Group Policy “Maximum password age” fails to apply

In my Windows network with all AD servers (still) running Windows 2003, I encounter the following problem: The "Maximum password age" policy apparently does not apply. Even though some of the users ...
0
votes
0answers
13 views

“The property value is invalid” when trying to create mail user

In advance of a brand new Exchange 2013 deployment to replace a third-party e-mail system, I have a lab network with a clone of our AD environment so I can test various scenarios. In this testing, ...
4
votes
0answers
51 views

Third Party Wildcard Certificate on DCs for LDAPS

I am trying to provide Authentication as a Service to my customers. LDAP authentication is perfect for this however I am not a fan of clear text sessions.... enter LDAPS. Active Directory of course ...
1
vote
0answers
25 views

Periodic SQL Server connection drop due to domain configuration?

An application of ours, running on a customers computer, reported an SQL Server connection error sporadically (4 times in a week). This connection error freezes our application for a few seconds and ...
3
votes
1answer
55 views

How to do exceptions in Group Policy?

We're implementing Group Policy for the first time at our organization and have some questions about best practices and capabilities. We've already done some work and want to see if there is a better ...
1
vote
0answers
41 views

Why is my OSX client having so much trouble connecting to our SMB server?

I'm asking this here because I think I'm more likely to find SMB/kerberos experts here than in Ask Different, which seems to be mostly related to OSX client issues. When I first connect to our SMB ...
1
vote
2answers
29 views

Is it possible to regulate printer permissions based upon computer OU

Lets say my domain is structured as follows: For the computers: DOMAIN\North\Computers\OU1\PC1 DOMAIN\North\Computers\OU1\PC2 DOMAIN\North\Computers\OU1\PC2 . . . DOMAIN\North\Computers\OU1\PCN ...
-1
votes
1answer
24 views

GPO installed network printers wont show up under user account but only admin login

I use GPO to push out a network printer per machine from server 2008. but it only shows up under admin account. I restarted the PC , login logoff , gpupdate /force.... then it still only shows up on ...
3
votes
1answer
39 views

Does anyone know how to get cross-forest printers in the ADDS “printer directory?”

I'm in the midst of an active-directory forest migration at the moment, and in addition to that, the powers that be have decided to start on an upgrade from Windows XP to Windows 7 for our client PCs. ...
0
votes
2answers
29 views

Deny AD-User Group to login on a certain AD-Computer Group

I have (simplified) two AD Groups for Users: bgs.ac.at\Students bgs.ac.at\Teachers I have (simplified) two AD Groups for Computers (like in two rooms) bgs.ac.at\Room1 bgs.ac.at\Room2 I want ...
0
votes
1answer
24 views

How to check if a computer have already joined a domain with Samba

I am using this command to add a Linux boxes to Active Directory: net ads join -U username%password I have to make this command idempotent by checking the Linux box already exists in the domain. ...
-1
votes
0answers
8 views

cvs authentication using Active Directory

I can't authenticate cvs using Active Directory ubuntu 13.10 config to authenticate usign AD seems correct on Ubuntu I can do ldapsearch to AD on Ubuntu I can login with uan AD user on Ubuntu I can ...
1
vote
0answers
21 views

Windows 7 + Dialup Network Connection (“Wizard cannot create the connection”)

We have a banking application[1] that requires a Dialup Connection object to establish it's connection. We've recently upgraded to Windows 7 and are unable to create the connection; the error message ...
0
votes
0answers
25 views

Program to find out which computer a user is logged into [duplicate]

I am a Network Admin for a local company, and we have many users that login to their computers remotely. Often, these users forget the name of their work computer they left on. I found psloggedon, ...
-1
votes
1answer
29 views

User right to only be able to add machines to an Active Directory domain

I know that to be able to add a machine to AD a user need domain rights. I would like to know if is it possible to give a user only the right to add a machine to AD but without the rest of the rights ...
4
votes
1answer
30 views

Should all AD USNs be the same?

I have two AD sites, one with 5 DCs and the other with 2 DCs. I'm seeing most DCs with zero difference between current and original USNs, and only two (on the same site) showing any difference. Is ...