A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
16 views

Make sssd respect Acctive Directory nested groups

I have managed to get sssd working and getent passwd *username* as well as getent group returns AD data. I am now facing a problem with nested groups in Active Directory. In the AD i have supergroup ...
-2
votes
0answers
20 views

Can i recover my all domain computers and users from IFM and in-cooperate them in new forest? [on hold]

My only Active Directory Server on win server 2008 R2 with one domain controller crashed today. The only backup that i had was IFM media. So what i have done till now to recover it is a follow I ...
-1
votes
0answers
7 views

Alfresco Group Sync with Active Directory. Looking for a real groupID

I have an Alfresco Community 4.2.e running and synchronized with Active Directory lvl 2008. It has also other LDAP for user authentication, but the users and groups are imported from AD. My Question: ...
0
votes
0answers
26 views

Unable Join SOME 64 bit Windows 8.1 Pro Clients to Windows Sever 2003 Domain

We just deployed 12 brand new Windows 8.1 Pro 64 bit client machines. They are all identical models and all wired identically to our network/server room. 8 of the machines joined the domain with no ...
1
vote
0answers
32 views

Server Migration 03 -> 12

I have run into a wall and out of ideas. Here's the situation. I have a client that has a old '03 DC with a 12 replicating the '03 server. It is out dated and has to many group policies and stuff it ...
0
votes
0answers
27 views

sssd can't save user. Missing uid

I am trying to sync my Debian server using sssd. When i run the getent passwd username@domain, the user is not returned. The log says it's because i am missing an uid from the ldap lookup. However, i ...
0
votes
0answers
15 views

AD Roaming Profiles via VPN not synchronizing

I want to create local Client-VMs (Windows 8.1) for our developers. These should connect to our VPN and login on our AD server (Windows Server 2012 R2). I'm using serverside profiles for this so that ...
0
votes
0answers
10 views

Debugging libnss_ldap AD synchronization

I am trying to configure my Debian server to talk to an AD. I have a connection to the LDAPs port of the AD, and i can use LDAP search to connect and retrieve results. I can also see that the getent ...
0
votes
0answers
25 views

Problematic Active Directorys CA certificate

i came across one DC, which gives me RPC errors when dealing with AD Certificate Service.I can see in AD there is 2 Root CA , one is problematic. Is it safe to remove it? Or is there a procedure for ...
0
votes
0answers
8 views

Using Windows Server 2012 CA to provide internal certificates

I want to use Windows AD CS in order to provide any web interface internal to my company with SSL encryption and trust certification. What I want is to make the HTTPS interfaces of webapps, switches ...
0
votes
1answer
42 views

Find IP of computers using AD account

I cant seem to find a log that contains the info I want in AD. I want to log logon events so I can see each user login and where it came from, similar to the information logged when a user provides ...
24
votes
2answers
1k views

Why can a and o in samAccountName be replaced with danish å and ø?

A coworker just demonstrated to me that accounts in our test AD was able to authenticate when replacing every a character in their samAccountName with Danish character å (ASCII 134 / å). E.g. ...
1
vote
1answer
22 views

Replace the domain controller without copying the AD

we might have some special terms to do with replacing our DC. The current DC is running on an old machine with Windows Server 2003. As of the GPOs we aren't able to manage all new computers and as the ...
0
votes
1answer
12 views

Script adding an NISMap object in Active Directory from Windows and RHEL6

I am working on using Server 2008R2 Forest to house AutoFS maps in the existing schema using NISMap and NisObject class objects. I can manually create them (and it works) with ADSIedit. I have ...
0
votes
0answers
7 views

Possible SPN issue with AGPM Authentication

here is an AGPM server in our forest root - AGPMServer.example.biz. The AGPM service is running as example\AGPM. If I log onto the server that hosts AGPM, I can connect no problem. My workstation ...
3
votes
1answer
24 views

Deploy Software via GPO, but also deploy configuration file

When deploying software through a group policy, is there any special trick that will allow you to also deploy a separate, say config, file along with it? Here's the specific problem: We have a ...
0
votes
1answer
26 views

Windows Server 2003 secondary DC issues

I have some strange issues with my domain controller. I have primary DC called 'netsun' with ADDS, DNS and DHCP, and secondary DC called 'ex_serv' with ADDS service and exchange. So my primary DC is ...
0
votes
2answers
26 views

In which order will GPOs be applied when a USER try to login to a PC in a different OU

If we have this Group Policy Management configuration (Windows Server 2008): domain.local OU1 PC1 USR1 GPO1 (Linked) OU2 PC2 USR2 GPO2 (Linked) ...
0
votes
1answer
40 views

Assigning Department based on Active Directory OU's

We have just gone to Office 365 tied in with ADFS. We want to be able to see people's departments automatically when we view their contact info in Office 365. We do not have any Department ...
1
vote
1answer
44 views

How can I remove the minimum password length for a specified user in an OU?

How can I remove the minimum password length for a specified user in an OU? (I do not want the default domain password policy affecting my GPO.) When the "minimum password length" in my default ...
0
votes
0answers
3 views

Connect MSSql using Service account “domain/User” via PHP/Yii [migrated]

i trying to use a windows service account user "DOMAIN/username" to access an existing MSSQL db environment via PHP/Yii i m able to successfully login to the MSSQL database directly using this ...
0
votes
1answer
44 views

How do I move Active Directory user information to the Exchange Global Address Book?

I am running Exchange 2013 and I have noticed in Outlook that a lot of the contacts in the Global Address Book are out of date. I recently went and update all of the Active Directory details so how ...
0
votes
1answer
48 views

Merging multiiple domains with the same existing domain name (office.local)

I am working with a new client who has 5 offices and four of which have a single domain controller with the name of OFFICE.LOCAL and another one with the domain controller DENTAL.LOCAL. Oh and all of ...
1
vote
3answers
38 views

Linux / AD integration with SSSD: how to choose what systems a user can log into?

We are trying out ActiveDirectory integration on some linux systems with SSSD. So far so good we joined the linux systems to the domain and we can log into linux systems with AD-defined users. Right ...
-1
votes
0answers
20 views

access AD through Public IP [closed]

I have an Active Directory set up on a public facing Windows Server 2008 machine. I have an application which is deployed on another server(a linux machine) which is required to access that AD. How ...
7
votes
3answers
160 views

Server 2012 R2 Active Directory Domain SRV dns records suddenly disappeared

I have a test domain that I recently configured. All of a sudden, no users can log in except those with cached credentials. The domain includes two domain controllers that are both global catalogs ...
0
votes
0answers
28 views

Outlook not finding newly created mailboxes

We are running Exchange 2010. All of my thin clients (Office 2007 - WinServer 2008) and my few PC laptops (Office 2007 - Win7) aren't able to find any recent users that have been added into the ...
0
votes
2answers
52 views

Running a Windows Server 2012 Domain Controller in Hyper-V

I attempted to install Windows Server 2012 on a Dell PowerEdge 2850 and found out that the server may not support Server 2012. Is there any downside to running a Windows Server 2012 domain controller ...
-2
votes
1answer
61 views

User profiles for ESXi [closed]

I have configured active directory with my ESXi Server and all is great. I created User Profiles for this experiment within Windows 2008r2. Logged in with a windows 7 VM within Vsphere, and all works. ...
1
vote
2answers
46 views

Block Administrators authentication attemps from workstations

My Administrator user once in a while is getting locked-out by the workstations in our lab, due to failed logon attempts. (While this is a problem that should be addressed, because this means there is ...
0
votes
1answer
21 views

how to enable user login after Offline domain join?

Is it possible to add computer from remote location to AD (windows 2008R2) and enable user login? I've run DJOIN as described here: http://technet.microsoft.com/library/dd392267(WS.10).aspx but ...
0
votes
2answers
24 views

vsFTPd authenticating with SSSD

I am currently trying to setup an FTP sever that authenticates through Active Directory using SSSD. My config files are as follows: /etc/vsftpd/vsftpd: [root@StudentOrgFTP vsftpd]# cat vsftpd.conf ...
-1
votes
4answers
62 views

Exchange 2013: Unable to install Exchange on domain for the 2nd time

I'm trying to set up Exchange 2013. There are two errors - not sure which one is fatal (perhaps both) Eror 1: Setup encountered a problem while validating the state of Active Directory: The Active ...
0
votes
1answer
15 views

Active Directory - Migrate objects from Win Server 2003 R2 to Win Server 2008 R2

I am about to migrate some users and objects from a domain managed by Win Server 2003 to a domain managed by Win Server 2008 R2. I heard about AD migration tools, but are there issues concerning ...
2
votes
1answer
23 views

Enable application to send emails in Exchange 365 hybrid deployment

Question from a still-learning Exchange administrator: Is there a recommended way to create & configure an email account to be used solely by an application to send messages (alerts, reports, ...
1
vote
1answer
29 views

Is there a way to know what version of Exchange a users mailbox is on via AD?

In Active Directory there is a property against a user called "homeMDB" That will give me the users exchange database, but is there a way to know if the user is on exchange 2013 through Active ...
0
votes
2answers
45 views

AD Existing Forests Best Practices Setup

My company was acquired by another company. Both companies have existing AD forests and domains. The company that acquired us ,also has international sites.What would be the best practice/solution to ...
0
votes
1answer
26 views

LDAPs using Anonymous Access to AD forest

There is a problem related to AD which I cannot understand what configuration is missing to fix the issue. I have two DCs: testa and testb and both contain AD. I'm logged in to testa and I'm trying ...
1
vote
0answers
33 views

Migrating AD Lightweight Directory Services (LDS) or ADAM data to Azure Active Directory (WAAD)

We currently have an ADAM instance that we authenticate our ASP.NET web users against. We have a requirement to replace this instance with an Azure Active Directory instance instead with a new schema ...
0
votes
1answer
39 views

Windows server 2008 R2 Certificate Authority error event viewer

I am getting the error "The windows default policy module initialize method returned an error. The specified domain either doesn't exists or could not be contacted the error code is 0x8007054b. The ...
0
votes
0answers
17 views

Samba Login with Trust Domain User

I'm studying Two-way Domain Trust between Samba and AD. I configured Trust, and I can login with Trust Domain User on Windows Client. But I can't login with Trust Domain User on Linux Client. I ...
0
votes
1answer
21 views

Is there a way to change which wireless network is connected to when authenticating windows 7 AD clients using single sign on over wifi?

The situation: Two domains. Two wireless networks. Each domain's users have their own network for security reasons. B is a child domain of A (A = domain.com, B = child.domain.com). Users in domain ...
0
votes
0answers
18 views

Error: “ chgrp invalid group 'domain users' ” when setting up shares

I'm following this tutorial: Samba Shares with Active Directory Login on Ubuntu 12.04, and when I enter the command: chgrp -R "Domain Users" /sharing/ , I get " chgrp invalid group 'domain users' ". ...
3
votes
4answers
44 views

Implimenting a new password policy without locking out users

Background: we have had a very relaxed AD password policy for years. Users have had 'password never expires' set and we were not enforcing strength or anything. We now want to rectify that and have ...
3
votes
2answers
66 views

Is the whenChanged Active Directory attribute editable?

I've been searching for tools to change Active Directory object attributes, and I noticed the tools and articles and found so far are explicitly not mentioning capability to edit the whenChanged ...
0
votes
1answer
15 views

ADFS allows to login only to Office 365

I need to authenticate users on my web application using AD FS, but when they are redirected from my website to the ADFS login page they receive a page with error and they cannot introduce their ...
0
votes
1answer
52 views

Account lockouts not in Event Viewer

I am having trouble getting Windows Server 2008 to log when domain user accounts are being locked. My Domain Controllers are all Windows Server 2008 R1. I am able to find Audit Failure events (ID ...
0
votes
0answers
35 views

Active Directory - Set permission if user is present in all of the specific groups

The bussiness isue: implementing RBAC (Role Based Access Control) using Active Directory Groups mechanism. imagine having the following AD "Organization" groups: Core Development Team Sales Team ...
0
votes
1answer
35 views

Capturing LDAPS traffic with tcpdump

I have an app server that authenticates against Active Directory using LDAPS. I am connecting to the AD server over port 636. I'm trying to troubleshoot/debug some performance issues and am beginning ...
0
votes
0answers
21 views

Authenticating Debian against AD using only LDAP

I have been trying to set up a number of Debian machines to authenticate and authorize users against the Company AD. I am facing a problem however, the IT department will only allow connectivity ...