A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
6 views

Squid NTLM authentication started to fail

I have a squid server authenticating against a Win2k3 AD. The authentication is failing since today and I'm sure it is something on the windows side because on the linux machine there were no ...
0
votes
0answers
9 views

Is it possible to import a GPO into Samba 4 without the use of Windows tools?

I have an Ubuntu 12.04 server which also includes a Samba 3 installation. Currently, I only use it to authenticate users who try to log on into Windows workstations and it works very well. Now, I ...
0
votes
1answer
17 views

Ldap+kerberos authentication through AD

Is it possible to configure ldap+kerberos authentication on a linux machine without joining it to windows domain? I have to create a pool of VMs using RHEVM with a pretty short lifetime and I do not ...
1
vote
0answers
12 views

Single Sign on for Virtual Machine

Does anyone know if it is possible for a Windows Virtual Machine on a Windows host to take advantage of Single Sign on? The objective is to only have to login once to the host machine and for the ...
0
votes
0answers
32 views

How to do when rename Domain Name in Active Directory

I installed a DC on Windows Server 2012 R2 over MS Azure. Now I see that the name of the domain what I use, isn´t so good, so I must change it. When I start Start the Active DIrectory users and ...
-3
votes
0answers
26 views

Where and how do I download Active Directory Migration Tool? [on hold]

I'm trying to download the Active Directory Migration Tool, but the Microsoft download page I'm trying to use keeps giving me a 404 error. I'm trying to get it from connect.microsoft.com here, which I ...
0
votes
1answer
19 views

If I apply local group policy for the first time why it is not taking effect untill I restart the machine?

I applied local group policy (Computer Configuration - Software Restriction Policy) but policy is not taking effect. I tried this on domain member (machine is in connection with Domain Controller) and ...
0
votes
1answer
26 views

What is the difference between Site Link Bridges and BASL?

I have a hub and spoke network where the spokes can't communicate with each other. I understand that BASL is what's responsible for making links to sites that are non routable. How does a Site Link ...
1
vote
0answers
20 views

Benign “The specified domain either does not exist or could not be contacted” error while using Active Directory Users and Computers

I have a single Windows Server 2012 R2 Active Directory Domain Controller for domain MYDOMAIN. I want to perform remote administration of the Active Directory from a workstation that is not joined to ...
0
votes
0answers
33 views

Kerberos, Active Directory, and Linux/Unix Servers

I have done some research on the topic, but I can't quite find a straight answer to my question. Please tell me if my understanding is correct. Kerberos can be used as the bridge between a ...
1
vote
0answers
22 views

Specify DNS/Domain Controller when authenticating against a different domain

Client has two domains residing on the same subnet/physical network. Essentially there's just a POP3 mail server (OLDSERVER) and one of the old DCs (OLDDC) on life support to keep OLDSERVER happy. ...
1
vote
2answers
38 views

How to find potential AD-groupname and OU-structure dependencies of eco-systems?

Currently we are in the process of redesigning our AD infrastructure. I am pretty concerned about the possible impact a change of several group- or OU-names might have to our eco-systems (like IAM ...
1
vote
0answers
24 views

Windows Server 2003 Active-Directory migration

I am going to migrate my windows server 2003 active directory to a windows server 2008. Nearly everthing works fine now but I can't set the operations masters. I am logged in as Administrator on my ...
0
votes
1answer
40 views

The user name or password is incorrect error while joining Windows domain

I am trying to add an second domain controller (DC) to my domain. The server is running Windows Server 2012 R2. After getting the error when promoting it to an domain controller I tried uninstalling ...
0
votes
0answers
14 views

PHPPGAdmin on Windows - authenticate users against Active Directory

I installed PHP, Apache 2.4, and PostgreSQL 9.4.1 on Windows machine which belongs to Windows domain. My pg_hba.conf: hostnossl all postgres 127.0.0.1/32 md5 hostnossl all all ...
1
vote
0answers
8 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
2
votes
5answers
74 views

Pursuit of True Active Directory Integration

Before you laugh at me and say, "If you want Active Directory, use Windows" or tell me to use Google, hear me out. My company relies very heavily on AD. Nay, we are married to it at this point, and ...
-4
votes
2answers
52 views

Possible to name a computer the same as a domain?

If I have a domain called "HOUSE" with user "JOHN", would it be possible to rename a PC to "HOUSE" with a local user called "JOHN"? So both would then be HOUSE\JOHN. Edit: I should add, the PC is on ...
0
votes
0answers
15 views

Redirect DNS-Queries in Samba4 AD of local domain

I am running an Ubuntu 14.04 Samba4 AD Server and I control my networks DNS via a different server. I am using the samba version served by ubuntu which is 4.1.6. Is it possible to configure the ...
2
votes
1answer
97 views

Joining 150 computers to Active Directory

I am a junior system IT administrator. We have Windows server 2008 R2 standard and 150 computers with Windows 7 professional (32 bit). We have installed an Active Directory domain on the server and we ...
-1
votes
0answers
23 views

Accessing user home directories

In a theoretical AD DS setup, there's some Home Folders. These Home Folders are set up by Windows with the annoying permissions of only the Owner can access. I'm aware that you can run programs using ...
1
vote
1answer
92 views

Is there a way to force permissions to update when removing user from admins?

I'm in an Active Directory domain, remoted into a Server in which my domain account is in the Administrators group. Someone else removes me from that Administrators Group while I'm still logged in. ...
0
votes
0answers
4 views

Validate users of Remote Active Directory in C# [migrated]

I have a strange requirement to authenticate users in remote active directory with their username and password information stored when that user is created. DirectoryEntry entry = new ...
0
votes
2answers
30 views

Migrating Windows Server 2003 Active-Directory to Windows Server 2008

I would like to migrate a Windows Server 2003 to Windows Server 2008. I installed Active-Directory on the Windows Server 2003. During the installation of Active-Directory on my Windows Server 2008, ...
1
vote
0answers
7 views

Give a user permission to insert and remove computer from windows domain

I want to give a specific domain user in my domain the permission to add/remove computers in the domain. How do I do that? and more important, does anyone know what is the permission name that I need ...
0
votes
0answers
18 views

Can OS X Server Wiki show Active Directory Files?

I have active directory (2008R2) and an OS X Server (Yosemite) setup. OSX Server recognises the Active Directory and when I SSH into it with an AD account I am able to see my home folder. Now my aim ...
1
vote
1answer
31 views

Ubuntu 14.04 Active Directory auth fails after static ip config

I'm having 6 Ubuntu 14.04 servers that are joined to active directory (2003 domain functional level 2008r2 schema) All of the servers work's fine when network interface is configured to use DHCP. But ...
0
votes
0answers
30 views

How to fix multiple reboot issue after joining domain?

I'm seeing that after joining machines to a specific ADA domain that the computers require you to reboot twice. Not to join domain but for any reboot ever. This only happens after it has joined ...
-4
votes
1answer
33 views

How to apply Default wallpaper to clients in Active Directory [closed]

I have one Dell poweredge 1850 server running on server 2012. I installed ADDS and Make one OU in it then i make users (approx 20) and then move all users to OU. But know when i tried to manage the ...
0
votes
1answer
21 views

Sync DNS zones on a Standalone DNS server from a AD integrated zone

I need to install DNS services on a Server [which is a part of a domain but not a Domain Controller]. I have around 12 Domain Controllers which have DNS roles installed on them and they have around 25 ...
3
votes
1answer
70 views

Windows DirectAccess - Server 2012 R2, Windows 8.1 Client, “No SAs match the specified criteria”

I put this question on SuperUser, but judging from the lack of response I think I picked the wrong place, so I'm cross-posting here. I'm trying to get DA set up and it is being a major pain. I have ...
0
votes
0answers
15 views

How do I trade an OAuth token for a Fedauth token with Azure AD?

I am trying to access a resource that's secured with Azure Active Directory. I can see from the HTTP traffic that my browser uses a Fedauth token when accessing the resource, but I need to access this ...
1
vote
1answer
30 views

Windows computer not recognizing membership in active directory group

In my active directory setup (Windows Server 2012r2 acting as domain control), I have a group called "TestComputers". I have a domain computer called "Computer1" that is a member of this group. On ...
4
votes
1answer
36 views

At which point becomes a changed computer group membership active?

When adding a computer object to an AD group, at which point in time does the group membership become active? Is there some kind of kerberos refresh interval (similar to group policy refresh)? I ...
2
votes
0answers
34 views

Error getting the list of sites from the target environment: An invalid dn syntax has been specified

Trying to add another (second) Domain Controller to an existing Domain. In the second step of "Active Directory Domain Services Configuration Wizard" getting the following error: Error getting the ...
2
votes
1answer
18 views

Remove printers from directory that were on an old server

I had a standalone Windows 2012 box that was acting as the printer server in my domain. Since then I've removed it and moved printer hosting elsewhere. However, when I open up the directory (through ...
2
votes
2answers
77 views

Windows Hosts DNS query for _ldap._tcp.domaincontroller, is this normal?

To make this easier to wrap my head around, here's what I'm using in my examples: deecee = my domain controller dctoo = another domain controller internal.foo.bar = the full DNSDomainName of ...
0
votes
0answers
16 views

Restrict Access to Domain Admin/Admin Group for all

We have a pretty old setup which was managed by our client. They could manage anymore and they have outsourced the entire Datacentre to us. Everything is messed up right now. Nothing in place ...
0
votes
0answers
22 views

Samba 4 Domain Join Command Fails

Have been attempting to get a test server connected to our AD (Win2k12R2) but when trying to do a domain join I get this error. it@testdom:~$ sudo samba-tool domain join xxx.com DC -Uadministrator ...
-1
votes
0answers
18 views

Groups in CentOS 5/6

I have 15 CentOS servers running a mix of version 5 and 6. Each of these servers are integrated with a Microsoft Active Directory with a tool called VAS/QAS (ventella Authentication Services /Quest ...
0
votes
0answers
11 views

When using an “Internal Relay Domain” as an Accepted Domain, what email addresses must be synched?

There are a number of SMTP addresses associated with a user in Exchange SMTP, X500, X400, etc. In addition there is a LegacyDN. Some of these email addresses are stored in the NK2 files and also in ...
0
votes
0answers
23 views

Auto-Purge AD Machines

I have a group of machines in a multi-domain multi-site forest. I am removing machines from Site-A/Domain-A and joining them to Site-B/Domain-B. Both domains span both sites and the inter-site ...
0
votes
0answers
16 views

Establish FAST encrypted channel between linux client and windows server

I am trying to setup windows server for FAST encrypted channel support to test OTP pre authentication in kerberos. I have already tested on linux machine by deploying KDC using krb5-1.12.1 source ...
0
votes
0answers
23 views

Active Directory Copy User and his password on another domain (and forest)

Is there a way (PowerShell would be nice) to copy a user (I need sAMAccountName) and his password, from one domainA (forestA) to domainB (forestB). All Active Directory servers are on LAN and this is ...
1
vote
1answer
27 views

Different account lockout policies for different users

I have few Organizational Units within Active Directory server, like below: OU1: user1 user2 OU2: user3 user4 My goal is to configure Account Lockout Policy in different way for two existing ...
3
votes
1answer
38 views

How to find all GPOs in a domain that define password policies?

We have a bunch of GPOs that have grown organically over time. I assume that many of them are defining password policies. I am aware of the fact that it only can be set once in a domain (besides PSOs ...
1
vote
1answer
36 views

Problems with Windows Domain

I have a problem in a Windows Domain. About the creation of this domain i can not tell very much - i got this job last month, without propper handover due to illness of the main admin. What i know is ...
0
votes
0answers
23 views

Difference in File System Security group policy between Windows 7 and 8 clients

I have an unexplained difference of behaviour between a Windows 7 client and a Windows 8 client. I have the following files: C:\testdir\allow_domainusers.txt C:\testdir\allow_everyone.txt ...
2
votes
1answer
118 views

Get-ADUser -Properties MemberOf returns nothing

Something that is kind of weird that I haven't ran into before. We just did a domain migration and so now when I run a Get-ADUser {username} -Properties MemberOf against a standard user the MemberOf ...
0
votes
2answers
44 views

GPO not applying to Clients

I am having issues applying the below GPOs to clients. Computer Configuration \ Policies \ Administrative Templates \ System \ Remote assistance \ "Offer Remote Assistance" Computer Configuration \ ...