Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

0
votes
1answer
11 views

Samba share with AD authentication is only authenticating users on some windows machines

I've searched high and low for help with this. What I've found is that most have given up. I have found that I can mount the samba share from a few different windows hosts with different users. ...
0
votes
0answers
6 views

Server 2012 SysPrepped Image Prompts to Approve Eula after Domain Join

I am trying to upgrade our base web server image from Server 2008 R2 to Server 2012. Our cloud vendor allows us to SysPrep an IAAS instance, image it and then restore it. I have this part all ...
0
votes
0answers
9 views

How do I manage a public folder that exists in AD but not in Exchange System Manager?

I have a mail enabled public folder that apparently exists in Exchange 2003, but I can't seem to find it in my Exchange System Manager. I can find it in AD using a custom search for ...
8
votes
2answers
92 views

Common wisdom about Active Directory authentication for RHEL/CentOS Linux Servers?

What is the common wisdom in 2014 about Active Directory authentication/integration for RHEL-like servers and modern Windows Server operating systems? Over the years since my first attempts with ...
0
votes
3answers
44 views

Migrating SBS AD to an Server 2012 AD with diffrent domains

The situation, I have a SBS 2008 server which also is the DC for the domain. The name of the domain is Example: DomainA. The other server is a W2012 server, which will be replacing the SBS server. The ...
2
votes
0answers
12 views

Auditing anonymous binds to AD LDAP

We're about to commence an AD upgrade to 2012 R2, and I have just found to my horror that anonymous LDAP binds have been enabled in the 2003 domain. We've certainly been issuing accounts for LDAP ...
0
votes
1answer
19 views

Samba server authenticating against Active Directory. Is it possible to reboot and still connect to the domain?

I have tried to setup Samba File Server with AD authentication. The authentication via Active Directory is successful but if you reboot the server the linux Samba file server will NOT join the domain ...
2
votes
0answers
30 views

Windows 7 there are no logon servers available to service the logon request subdomain

I've read other solutions, but my problem is slighlty different. Problem occurs in domain environment. We work in a subdomain, but we also have some employees coming with notebooks registered in top ...
0
votes
0answers
9 views

Error on RSOP for Audit policy on DC

Domain Controller - Windows Server 2008 R2 Standard Please see the print-screen, I am unable to understood why such error is showing on my Domain Controller. I have also checked on Winlogon.log, ...
0
votes
2answers
15 views

SID's role in joining domains and AD authentication?

Thanks to recent answers to my questions, I was able to use sysprep to create a Windows 7 system image ready for deployment in our organisation. I learned that the process of using sysprep creates a ...
1
vote
1answer
70 views

Backup Active Directory users' files, deploy via GPO? [on hold]

Am looking for a solution which can be configured to be deployed via group policies. I've looked into Windows Backup, but it doesn't fulfill our requirements. We need something like this: Runs ...
0
votes
1answer
26 views

Exchange Server 2013 has dependency on old PDC

I am in the process of completely upgrading a Exchange 2007 system running on server 2008 R2 Hyper-V VMs hosted on a Exchange 2008 R2 domain controller. It had all the FSMO roles on it, and it was the ...
4
votes
6answers
179 views

Powershell assistance for Active Directory Cleanup

I just started a contract to clean up an Active Directory system for a large company. I was told it would be quite the busy work but after reviewing the system and seeing how disorganized and messy it ...
-1
votes
1answer
28 views

windows server 2012: delete remembered domain [on hold]

I recently start experimenting with windows server 2012 and have a question about Domain controllers and creating a domain. I've tried creating a Domain Controller and a domain, then deleted the ...
1
vote
0answers
17 views

Domain Controller's DNS NIC configuration [duplicate]

I've seen conflicting information on this online, but say you have an environment with two domain controllers: one Forest, one Site, one Domain; simple as it gets. How should each domain controller's ...
1
vote
0answers
14 views

Group Policy Mapping Printer

There seems to be lots of different ways to map printers, all appear not to work (for me). Im running a Windows 2008 Environment with windows 7 clients, simple, hey? No.. I have a printer connected ...
0
votes
1answer
28 views

Can't access Active Directory Web Services via PowerShell

I have set up a test lab consisting of two 2012 R2 servers. One is a domain controller (srv1), the other a member server (srv2). When looking at 'netstat -ano | findstr 9389' i can see a service is ...
1
vote
1answer
26 views

Windows Server 2008R2 Domain Controllers - Failed test VerifyReferences

While running DCDIAG on our Windows Server 2008R2 Enterprise Domain Controllers, I discovered the following error message on both DCs. These domain controllers where migrated from a Windows server ...
0
votes
2answers
41 views

Active Directory: pfSense failing?

I have set up PfSense as a router and I have linked two Windows Servers to it. I can ping from SERVER01 to SERVER02 and PfSense can also ping to them. The problem is, on SERVER01 I have set up the ...
2
votes
1answer
34 views

Web server with access to internet and internet Active Directory [on hold]

This might sound like a stupid and unsecure question, but we're front-end web delopers and don't know that much about these things. So here goes.. We're creating a web app where we want to log in ...
1
vote
1answer
42 views

Group Policy “Maximum password age” fails to apply

In my Windows network with all AD servers (still) running Windows 2003, I encounter the following problem: The "Maximum password age" policy apparently does not apply. Even though some of the users ...
0
votes
0answers
13 views

“The property value is invalid” when trying to create mail user

In advance of a brand new Exchange 2013 deployment to replace a third-party e-mail system, I have a lab network with a clone of our AD environment so I can test various scenarios. In this testing, ...
4
votes
0answers
45 views

Third Party Wildcard Certificate on DCs for LDAPS

I am trying to provide Authentication as a Service to my customers. LDAP authentication is perfect for this however I am not a fan of clear text sessions.... enter LDAPS. Active Directory of course ...
1
vote
0answers
23 views

Periodic SQL Server connection drop due to domain configuration?

An application of ours, running on a customers computer, reported an SQL Server connection error sporadically (4 times in a week). This connection error freezes our application for a few seconds and ...
0
votes
2answers
24 views

Active Directory and Exchange with only Windows Live IDs [closed]

I have the idea of making Active Directory and Exchange for my family. Is it possible to host the DC and Exchange on Azure? And more important: is it possible to create user accounts with Windows Live ...
3
votes
1answer
50 views

How to do exceptions in Group Policy?

We're implementing Group Policy for the first time at our organization and have some questions about best practices and capabilities. We've already done some work and want to see if there is a better ...
1
vote
0answers
33 views

Why is my OSX client having so much trouble connecting to our SMB server?

I'm asking this here because I think I'm more likely to find SMB/kerberos experts here than in Ask Different, which seems to be mostly related to OSX client issues. When I first connect to our SMB ...
1
vote
2answers
28 views

Is it possible to regulate printer permissions based upon computer OU

Lets say my domain is structured as follows: For the computers: DOMAIN\North\Computers\OU1\PC1 DOMAIN\North\Computers\OU1\PC2 DOMAIN\North\Computers\OU1\PC2 . . . DOMAIN\North\Computers\OU1\PCN ...
-1
votes
1answer
24 views

GPO installed network printers wont show up under user account but only admin login

I use GPO to push out a network printer per machine from server 2008. but it only shows up under admin account. I restarted the PC , login logoff , gpupdate /force.... then it still only shows up on ...
3
votes
1answer
38 views

Does anyone know how to get cross-forest printers in the ADDS “printer directory?”

I'm in the midst of an active-directory forest migration at the moment, and in addition to that, the powers that be have decided to start on an upgrade from Windows XP to Windows 7 for our client PCs. ...
0
votes
2answers
26 views

Deny AD-User Group to login on a certain AD-Computer Group

I have (simplified) two AD Groups for Users: bgs.ac.at\Students bgs.ac.at\Teachers I have (simplified) two AD Groups for Computers (like in two rooms) bgs.ac.at\Room1 bgs.ac.at\Room2 I want ...
0
votes
1answer
22 views

How to check if a computer have already joined a domain with Samba

I am using this command to add a Linux boxes to Active Directory: net ads join -U username%password I have to make this command idempotent by checking the Linux box already exists in the domain. ...
-1
votes
0answers
8 views

cvs authentication using Active Directory

I can't authenticate cvs using Active Directory ubuntu 13.10 config to authenticate usign AD seems correct on Ubuntu I can do ldapsearch to AD on Ubuntu I can login with uan AD user on Ubuntu I can ...
1
vote
0answers
20 views

Windows 7 + Dialup Network Connection (“Wizard cannot create the connection”)

We have a banking application[1] that requires a Dialup Connection object to establish it's connection. We've recently upgraded to Windows 7 and are unable to create the connection; the error message ...
0
votes
0answers
25 views

Program to find out which computer a user is logged into [duplicate]

I am a Network Admin for a local company, and we have many users that login to their computers remotely. Often, these users forget the name of their work computer they left on. I found psloggedon, ...
-1
votes
1answer
29 views

User right to only be able to add machines to an Active Directory domain

I know that to be able to add a machine to AD a user need domain rights. I would like to know if is it possible to give a user only the right to add a machine to AD but without the rest of the rights ...
4
votes
1answer
29 views

Should all AD USNs be the same?

I have two AD sites, one with 5 DCs and the other with 2 DCs. I'm seeing most DCs with zero difference between current and original USNs, and only two (on the same site) showing any difference. Is ...
-2
votes
2answers
64 views

What's the difference between an User Account vs Computer Account for Active Directory? [closed]

I did some search on this already but still don't understand it. Can someone explain their differences as simple as possible? It seems like they do pretty much the same thing....
0
votes
1answer
38 views

How do I apply NTFS permissions to protect user profiles?

I want to set NTFS permissions on a users home directory so that one user cannot access another users home directory. How do I go about doing that? I need to be able to apply this to hundreds of users ...
-2
votes
1answer
62 views

Two domains within the same IP Range

We are in the process of implementing MS Dynamics AX and a requirement by our consultants is to have a test environment. We can build this environment and let it use our live AD setup however I wish ...
1
vote
1answer
28 views

Integrated Windows Authentication not working on PC bound to AD network

Background: Web server running LAMP stack Web server has VPN tunnel to AD network at HQ Multiple AD networks around the globe with VPN tunnels and trust relationships to HQ network Kerberos ...
2
votes
2answers
52 views

Active Directory with custom domain name? [closed]

I'm new to the Active Directory world (I know how to use it, not set it up :) ). I just bought a server from Leaseweb running Windows Server 2012 R2 and plan to use it for Active Directory. It has its ...
0
votes
0answers
53 views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
3
votes
1answer
74 views

Email account terminology

I know how to perform basic through to fairly advanced tasks in on-premises and cloud-based Exchange systems but I still sometimes get confused when trying to use the terminology. Here's what I think ...
2
votes
1answer
70 views

AD Account Keeps Locking out

We have a GPO that states if a user that unsuccessful logs on more than 3 times to lock the account for 30mins We have a single user who keeps getting locked out and there are no services, scheduled ...
1
vote
1answer
20 views

Domain Authentication over SSLVPN

I will start with a little background information before asking my question. Network Setup: 5-site MPLS w/ cloud firewall. SSLVPN client connects to Cloud Firewall and authenticates users against our ...
0
votes
0answers
27 views

Quest Migration - AD account that doesn't sync properly

I have an issue with an AD account that has been "migrated" using Quest Migration Manager for Active Directory, version 8.8. This organisation currently have two forrests. Let's call them ad.local ...
0
votes
1answer
30 views

Can AD Domain Services authentication be influenced by custom code?

I am wondering if it is possible to cause AD to service authentication requests in any way besides simply consulting its internal password hashes. Ideally, I'd like to have it call code I provide ...
1
vote
1answer
31 views

Windows domain grant desktop access only to some users

I must grant only domain admin members to open a server desktop session. How to limit desktop access to some computers (typically servers) for some groups only?
1
vote
1answer
28 views

What do the error messages and codes mean when creating and installing Managed Service Accounts?

When using the PowerShell Cmdlets for creating and installing Managed Service Accounts, certain errors can be thrown. What does each error mean?