A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
29 views

Find Computer in AD from non-joined Windows 7

I have a powershell script we use for several things, when a new computer has been installed with Windows 7. We also use it on Windows 10, and it all works well. It runs at first login and the ...
2
votes
2answers
30 views

Which Ports need to be accesable on a Domain Controller for Clients to logon?

We are currently segmenting our network. We will move the servers in another subnet than the clients. Of cause the clients still need access to the domain controller to authenticate against it. I ...
0
votes
0answers
15 views

Cannot join domain from different subnet

This is the first time I have encountered such a strange problem. I am not able to join my machines with domain. Here are details. Subnets: 192.168.1.0/24 192.168.2.0/24 both subnets can ...
0
votes
1answer
15 views

Delegate Specific rights to Helpdesk on AD

Domain Controller - Windows Server 2008 R2 standard I need to delegate only below task to helpdesk id for specific OU i.e 1) Creating User 2) and after creating that user, add them to specific ...
0
votes
0answers
10 views

“Move the contents of folder to the new location” not working

I have a GPO that applies to all of my users for folder redirection. The GPO is being processed and the folders are being redirected, however, the contents of the local profile folders are not being ...
0
votes
1answer
15 views

Can an Exchange Online distribution group be configured to forward mail to it's users alternate email?

I've been trying to figure out how to create a distribution list containing personal email addresses for all our staff. This could be done by adding each staff member as a mail contact with their ...
0
votes
0answers
12 views

Active Directory on Server 2008, How do I Delegate the right to add WriteMembers ACL on AD group

$group = Get-ADgroup $Group_RW $groupDN = $group $Ruta = "AD:\"+ $GroupDN $acl = get-acl -Path $Ruta $SID = new-object System.Security.Principal.SecurityIdentifier $GrupoOUsuario.SID # The following ...
2
votes
2answers
28 views

Does Active Directory send a user's access token across the network?

Question: does AD send a user's access token across the network? Research: The following two passages contradict themselves--given that TGTs are transmitted across the network by design. From the ...
0
votes
0answers
11 views

Active Directory, wildcard security certificate, and remote access

Is there any way to secure an entire Active Directory (AD) domain using a single trusted, third-party Certification Authority (CA)-signed wildcard security certificate so that remote access will be ...
0
votes
0answers
12 views

Why is my sshd looking for a wrong kvno in keytab?

My FreeBSD box is using Heimdal Kerberos-implementation. It is registered with the corporate AD, its msDS-KeyVersionNumber-attribute is set to 2, and its keytab has the following entries: FILE:/etc/...
3
votes
1answer
34 views

Can I recover a bitlocker encrypted drive offline?

Windows 10, server 2012 R2 domain I'm confused about the options for recovering a bitlocker encrypted drive offline. Lets say I'm encrypting the HDDs of domain computers with bitlocker using TPM (...
1
vote
1answer
23 views

Writing a script to find what computer a user is logged into

So I want to specify a username and return the computer name. When I run this, it tells me that my $computers obj is null. Why would $computers = Get-ADComputer | where {$_.accountdisabled -eq $false}...
0
votes
0answers
8 views

Last Name attribute not available for Read/Write in Delegation of Control Wizard

I am using Active Directory Users and Computers version 6.1.7601.17514 I am attempting to delegate the ability for our HR users to edit the First and Last Name for user accounts in Active Directory. ...
4
votes
2answers
42 views

Disable password complexity on Windows 2012 R2

I have a Windows Server 2012 R2 that is my domain controller. I want to disable the password complexity rule for a few users only. I have created a group (called Formation) in AD to identify these ...
0
votes
0answers
20 views

Security Filtering not working on group policy [duplicate]

I am trying to achieve something which should be theoretically straightforward: Group Policy Object called "Staff shared drives" applied to all users GPO contains a few drives mapped through User -> ...
0
votes
1answer
16 views

Generate duplicate Active directory on Server 2008 r2

Currently We are using window server 2008 r2 and installed Active directory on server, which working fine. Problem is that, Some of roles which are not working well(Can not install/uninstall roles), ...
0
votes
1answer
27 views

Windows 7 client machine login without Ad connection

We Have a windows server 2012 and client domain machine is windows 7. The problem is the user can login from the windows 7 machine without the activedirectory connection.So how to prevent this login ? ...
0
votes
0answers
7 views

Can't add trusted domain's users to ACLs

I am currently testing external trusts as a way to share resources with another organisation we're very close to. The test environment includes 2 servers running 2012 R2. One for each domain with AD (...
-1
votes
1answer
24 views

Username and password are incorrect

I have a domain organization with windows 7 computers. From time to time users can not seem to log on, the error message is "Username and password are incorrect" The password used is the correct one. ...
0
votes
0answers
16 views

Sernet Samba 4.4 on Scientific Linux 7.2 cannot join AD as DC

I've bought a subscription, installed sernet-samba and sernet-samba-ad. I'm failing on doing the domain join from the Samba wiki. We've got SSSD and member server / computer domain auth working in ...
0
votes
1answer
18 views

How to setup AD DNS in split brain mode just for one host

I am sorry for imperfect terminology (have only very basic understanding of network administration). I have two DNS: Public DNS which manages zone 1 Internal DNS (which is AD DNS based on Windows ...
0
votes
0answers
9 views

kerberos - active directory domain trust - SSO only working for linux machines

I have an Active Directory Server (2008r2) and a MIT Kerberos Server. Between the realms "AD.EXAMPLE.COM" and "INTERN.EXAMPLE.COM" is a two-way transitive trust, set up on the windows-side with the ...
9
votes
1answer
333 views

What are the implications of converting all my groups to universal groups?

In Exchange 2010 distribution groups must be universal. This is supported by documentation You can create or mail-enable only universal distribution groups. I am trying to create a role based ...
0
votes
1answer
51 views

Group Policy Objects stopped applying to most security groups [duplicate]

I have a Server 2008 R2 Domain with quite a few Group Policy Objects that should be applied to various OUs and security groups (Using security filtering). I got reports from users that they were ...
0
votes
0answers
28 views

“Password is incorrect” when link between primary and secondary domain controller downs

I have Single Forest and Single Domain with 4 sites on which I have Places Min 2 domain controllers , On One site name as HADEED , When the Replication link/Domain Controller Links Down the user at ...
0
votes
2answers
41 views

How can I propagate IIS settings across multiple servers in AD?

I have an active domain with about 20 machines, each running some applications we have setup. We need to set up IIS on these machines to serve files that some of these applications are outputting. ...
1
vote
0answers
11 views

Easier method of setting up Winbind auth in LMDE?

Some GNU/Linux distros (CentOS comes to mind) have a neat Authentication Config tool, in which you may specify which auth methods (files, NIS, Winbind etc) to use. You specify the needed parameters (e....
1
vote
1answer
77 views

User groups without Active Directory

Is it possible for Windows Server 2003 R2 to configure several user groups with different setups without using Active Directory? The admin has turned it off for 'security reasons'. Which setups I ...
0
votes
0answers
9 views

Is it possible to create this directory structure in AD LDS?

A customer is determined to have a directory structure like this: cn=lab1,ou=HHH, l=London, C=GB, OU=ACME Research,O=ACME Is this possible in AD LDS? How would I go about creating it? Currently ...
0
votes
2answers
27 views

Does GPO Security Filtering need to match ANY or ALL rules in the Filter?

my main question is this: Is the security filtering for a GPO calculated using AND logic or with OR logic to apply the filters? Here is the context of my situation for a background on why I am ...
1
vote
1answer
24 views

Total Number of Certificates issued / revoked

Currently using Active Directory Certificate Services. Is it possible to find out the total number of certificates that have been published and revoked up till today, and if so how do I do it?
0
votes
1answer
69 views

negative WMI-Filter for security filtering in GPO

I need to create a group policy object (GPO) that will disable printer redirection for all computers except certain servers. I considered making a security group and adding all the computers except ...
1
vote
1answer
33 views

Granting a user permissions to PS Remote without allowing RDP

Is there a way I can grant a user the ability to use Invoke-Command in PowerShell remotely without giving them RDP Access to the server?
1
vote
1answer
20 views

FreeIPA and AD password synchronisation

I am attempting to integrate FreeIPA with Active Directory to provide single-sign-on for Windows and Linux users by following this guide. I have successfully created the 'winsync' agreement and ...
1
vote
2answers
79 views

AD Synchronization/Replication issue between 2 sites having Window Server 2008 R2 as OS

We have AD forest having Root Domain (Main office, HQ) & 4 child domain. Out of which 1 child domain is having 2 sites. AD Directory services are running on 2008 R2. All sites AD Directory ...
2
votes
1answer
29 views

why use an Active Directory multi-tree design?

I get asked the same question a lot. Why use multi-tree forests when designing Active Directory? I know that the two trees will belong to different namespaces and that they will share Scheme/...
1
vote
0answers
23 views

Internal EV SSL From A Windows Server 2012 R2 Root CA Shows Up As A Normal Certificate

I am trying to setup an internal ev ssl server for all of my internal applications giving ie the little green bar and chrome displaying my company name. It works fine in IE displaying the green bar as ...
0
votes
1answer
33 views

Active Directory multi-tree, single forest DNS configuration

So, I have a multi-tree single forest that contains 2 tree domains called simpson.local (forest root) flanders.local Now both domains have full trust and both domains use Active Directory-...
0
votes
1answer
52 views

Anyway to limit IP Access for Certain Users?

I am currently tasked with allowing Vendors onto our process network. The issue is I need to make it so each vendor is only able to connect to PLCs on their own machines "each PLC has its own IP". Is ...
1
vote
2answers
78 views
+50

SSSD Kerberos AD Centos troubleshooting

I followed the Configuration 3 from the RedHat AD integration (https://access.redhat.com/sites/default/files/attachments/rhel-ad-integration-deployment-guidelines-v1.5.pdf); but I am stuck. I am on ...
0
votes
0answers
10 views

RunAs netonly with credentials saved

I can start a process with runas /netonly and runas /savecred but I can't use both the flags at the same time. Is there a way to run a process as a different user remotely without having to type the ...
10
votes
1answer
720 views

GPOs fail to apply; reason: Inaccessible, Empty, or Disabled; Server 2012 R2 and Windows 10

I have a Windows Server 2012 R2 Domain. Yesterday, a computer’s (running Windows 10 Pro) network drive stopped working. After further investigation (gpresult /h) it appears ALL group policy objects ...
2
votes
1answer
74 views

how to fix remote desktop access in Windows Server 2012 R2

Kind of an embarrassing question but... One day I was playing around with GPOs to try and grant local Administrator access to a specific User group for a specific Client computer. Somehow, I messed ...
2
votes
1answer
42 views

Recover GPO Rights

I messed up at work today, and I've accidentally denied a group (I don't know which one) from read-level permissions. I went to work on delegation for a user for a GPO, and I must have accidentally ...
1
vote
1answer
19 views

Exchenge 2010 server is not finding GC server in the domain

Exchenge 2010 server is not finding GC server in the domain even the domain controler . All Domain controllers are Windows Server 2012 Std. In the atest.local forest I have 3 DC and all 3 are GC: PS ...
3
votes
1answer
56 views

The password on this account cannot be changed at this time?

A user in my company forgot his password and I had to reset it to a temporary one. I checked the box that says "User Must Change Password at Next Logon". When he logged on and entered the temporary ...
0
votes
0answers
12 views

“Office” field in Outlook 2010 Contact Card

I'm working on updating our active directory information and I'm trying to find the AD field which populates the "Office" contact card field (example). I've updated the "Office" field in Active ...
1
vote
1answer
18 views

FreeIPA AD Trust based Integration using SunLDAP to store Policies

If we want to use the FreeIPA Active Directory Trust Integration Option, can we use an existing implementation of SunLDAP to store the Policies (e.g. sudo, hbac etc.) Essentially we don't to create ...
-1
votes
1answer
42 views

Windows server 2008- domain conflict

I was running a windows server 2008 R2 with active directory setup for all the other workstations, which was all setup by someone else before me. The issue is that the server OS got corrupted a few ...