2
votes
0answers
12 views

Auditing anonymous binds to AD LDAP

We're about to commence an AD upgrade to 2012 R2, and I have just found to my horror that anonymous LDAP binds have been enabled in the 2003 domain. We've certainly been issuing accounts for LDAP ...
1
vote
1answer
20 views

Domain Authentication over SSLVPN

I will start with a little background information before asking my question. Network Setup: 5-site MPLS w/ cloud firewall. SSLVPN client connects to Cloud Firewall and authenticates users against our ...
0
votes
0answers
28 views

Quest Migration - AD account that doesn't sync properly

I have an issue with an AD account that has been "migrated" using Quest Migration Manager for Active Directory, version 8.8. This organisation currently have two forrests. Let's call them ad.local ...
1
vote
1answer
39 views

Windows Server 2008 R2 CA not issuing more than 2 years

I have active directory environment in 2003 R2. I have installed 2008 R2 Enterprise Edition CA. Then I have created custom template from web server template and add expiry date as 15 years. my root ...
1
vote
1answer
55 views

Querying GPO Details

I need some help on querying GPO. I want to know how many total GPOs applied for each OU. GPO with out no parameters and no link GPO's With less than 2 parameters and less than 2 links Can any ...
0
votes
1answer
45 views

Nagios NRPE plugin check_ad - Fixed

i've reading about this problem much and trying to solve it on my own ways but still not luck. I've running debian 7 as nagios server. Problem is that i cant check state of my Active Directory Domain ...
0
votes
1answer
34 views

Upgrade users to new domain controller

I currently have server 2003 as my domain controller. I am planning to upgrade this to 2012, though several articles and videos are available to migrate active directory domain controller from 2003 to ...
2
votes
2answers
29 views

Global Catalog position in a multi site Active Directory single domain on Windows 2003

I've inherited a Windows 2003 active directory single domain spread across multiple site locations. I'm checking configuration because previous admin left without leaving any information about his ...
1
vote
0answers
24 views

EFS file access problems

in my organization, i have a deadline to deploy EFS using AD CS, and i am working with a single windows server 2003 box, which is the Root CA, and is the same server responsible to certificate ...
10
votes
3answers
313 views

Active Directory user names: why does the canonical name vary? Can I do something to make them uniform?

I am a self-taught administrator of a work Active Directory network used for Windows logins on ~30 PCs. I inherited the system from someone else who also didn't have any direct Microsoft training and ...
0
votes
1answer
153 views

Join Windows 2003 R2 guest to Windows 2012 R2 domain controller

I'm trying to join a Windows Server 2003 R2 guest to a domain with a Windows Server 2012 R2 Domain controller server. I get the error "The following error occured attempting to join the domain ...
1
vote
1answer
53 views

DFS Root/Active Directory Errors

I'm running into some issues, and I can't find conclusive information about what causes the errors I'm seeing. This is a single server, running Windows Server 2003 Enterprise. It runs DNS (although ...
0
votes
1answer
22 views

Find record of unauthorized domain logon on 2003 domain controller

My manager wants to know who has logged in as him from his PC or any other PC and sent an email. The DC is a Windows 2003 server and the workstation is Windows 7. Is there there any utility that can ...
-4
votes
1answer
56 views

Why does second domain controller not display [closed]

We have 2 domain controllers DC1 and DC2, both sharing the same AD database The "Active directory users and computer" console of both DC1 and DC2 display DC1 only, under "Domain Controllers". what ...
0
votes
1answer
49 views

Can I have a machine in a DNS subdomain, but Active Directory main domain?

I've just started virtualising some Linux servers, and want them to have DNS names like this: name.vm.company.internal Our DNS is hosted on Windows 2003 Active Directory, so most machines are ...
1
vote
1answer
38 views

Active Directory Integrated DNS Domain Controller

In one forest, I have a Windows 2003 AD Integrated DNS as my primary DC. I then configured an additional DC on the same forest with it being AD Integrated DNS as well. My thinking is that on my ...
3
votes
2answers
87 views

Renaming administrator name in Windows Server 2003

I know some folks out there recommend not to rename the built-in administrator in Windows Server 2003. Instead, create another admin account with the same privileges and disable the built-in ...
1
vote
3answers
102 views

GPO Replication SysVol Inaccessible on Windows Server 2003

In our current AD setup, we have the following Domain Controllers: DC1: Server 2012 R2, Operations Master (All roles) DC2: Server 2012 R2 Mailserver1: Server 2003, Also hosts Exchange 2007 The ...
1
vote
2answers
49 views

Configure Active Directory and move users from Server 2003 to Server 2008

I am currently using Active Directory in Windows Server 2003 to manage my small network of 10 users. The address of the current server is 192.168.2.1 I now want to configure Active Directory for my ...
-3
votes
1answer
73 views

Removing local from group

How I can restrict access to the client! It's seems like everyone in the root domain and trusted domain can access the client, I would like to restrict access for specific AD groups.
3
votes
1answer
58 views

Determine timestamp for last login onto terminal server (2003)

I am migrating a server and need a list of the last time users logged in, since just getting whos logged in currently won't help as its a remote terminal server and not everyone is logged in at the ...
0
votes
0answers
68 views

What happens when one of the 2 DC's goes down

There are 2 Domain Controllers running Windows Server 2003 x64 R2. The installed roles of DC1 (10.0.0.1) are: File Server, Print Server, Application Server, DNS Server and of course Active Directory. ...
0
votes
1answer
50 views

Active Directory 2003 to 2008 migration renders domain unusable

We have a small domain at the office running on a 32bit windows server 2003 (server1.domain.local). We have purchased a new server with windows 2008 R2 64bit (server2.domain.local) and plan to make it ...
0
votes
1answer
63 views

replica between dc failed

I have 2 dc windows 2003: one is the master and it is called dc, the other is called fs and it is not synchronized with the master. On the fs server I stopped the service netlogon because I have had ...
0
votes
1answer
41 views

Access Control issue

Ok this is stumping me mainly because of the lack of experience I have with access control. I have two folders I need to keep away from users. Payroll and Banking. I went into security and took away ...
0
votes
1answer
31 views

Access Control questions

I have a couple of questions on access control and Group Policy We use a term server for employee's to get certain documents, access databases, etc. I'm trying to build a new access control plan ...
1
vote
1answer
61 views

How to inactive Active Directory users, 1 month after their FIRST LOGIN, instead of defining a solid expiration date

We want to give access to some Active Directory users, so they can remotely have access to our server and download from a special folder of the server. The licenses we give to users, are time base. ...
2
votes
1answer
41 views

Data loss with roaming profiles on login on two different computers

We have a Windows server 2003 system with Active Directory and all of our users have roaming profiles. One of the users let someone login with his username and password on a different computer (2) ...
1
vote
2answers
73 views

Migrate AD DS Server 2003 to Server 2008 R2

I would like to get a couple opinions Found this article online and wanted to know if it is good to follow ...
-1
votes
1answer
30 views

How to design a simple Ubuntu File Server with XP clients network: accounts system

I want to switch from an old Windows Server 2003 server with Active Directory to a simple Ubuntu fileserver in a kind of school building with Windows XP client machines, with a minimum impact to ...
1
vote
2answers
133 views

WinXP GPO folder direction update ignored? Errors re: old path

I have a W2K3 server that's an AD DC. It has a GPO in place that directs users' Desktop and My Documents folders to \\oldserver\Users$\<username>. I wanted to migrate their folders to another ...
2
votes
1answer
80 views

Frequent Loss of Domain Connectivity

I have this one new Windows 7 desktop that (and it's clones (different network IDs)) looses domain trust relationship much more often than any other Windows 7 computers in the office. We use 2003 as ...
1
vote
2answers
59 views

File Access Info and How to Password protect a folder

One of our HR girls put a file in an open directory that everyone could see. We know an employee or employees looked at this info and stole some of the info. Is there away to see what users accessed a ...
0
votes
0answers
129 views

Access denied when attempting login to servers with Domain Users via RDP

I have a VM server, with VSphere, I have 2 windows server 2003 VMs: A server holds the DNS, DC and AD roles. IIS holding a web platform that allows Domain Admins to create new Domain Users (which are ...
0
votes
1answer
99 views

Windows 2003 AD Certificate services failed on primary DC?

Cert services show error: Event ID: 5 Description: Certificate Services could not find required registry information. The Certificate Services may need to be reinstalled. I have manualy removed CA ...
0
votes
1answer
43 views

allowing only access to TFS to external

Recently I've found the need for allowing access to external people to my TFS server, but I have to be sure that they can't access others servers. This is what I've tried so far: Created a security ...
2
votes
0answers
344 views

LDAP over SSL Unsuccessful on 2003 DC, Working on 2008 R2 DC in Same Domain

I have a publicly signed UCC for LDAP over SSL in a test domain. It contains the Server Authentication OID Extension and works fine on a 2008 R2 DC in the same domain. The CSR was generated on the ...
2
votes
3answers
822 views

User unable to change password - Active Directory Group Policy

I've seen this issue come up, but no answers seem to be applicable. When a user tries to change their password using control-alt-delete -> change password, they're getting a "Unable to update the ...
2
votes
1answer
117 views

Remote Desktop locks user account on Password Change

We maintain a Terminal Server on our network for our remote office and occasional third party vendors to connect in to. Our windows network active directory has the standard windows password ...
3
votes
1answer
42 views

How to set default login domain for a Windows 2003 server?

When users want to log into one of our servers, the default domain is set to the machine name instead of the organization's domain, which is to say that the domain dropdown shows the machine name in ...
0
votes
1answer
38 views

Auto map network from Linux drive

So I started working for a company that has a 2003 SBS as the domain controller with the workstations being Windows 7. We have a Linux server with Samba install, which acts like a file server. The ...
0
votes
1answer
19 views

Cannot access certain MS Server 2003 Active Directory users with Mountain Lion Server's Server App

The "magic triangle" is working perfectly for some users. Other users are invisible to the Mountain Lion OD master's Server App. Workgroup Manager can access all the users while Server App can't. ...
1
vote
1answer
20 views

how understand authentication log events on windows 2003

How can I understand from log events if a user has connected to the remote desktop and when ? I have an AD 2003 environment and I would like to know when a certain user has connect to remote desktop ...
1
vote
0answers
127 views

Problems with kvno + Consultation with kerberos authentication settings

I have clearly identified a problem that I can not solve. I suspect I'm missing something when setting the service running on Centos 6 on Windows Server 2003. First I tell the environment that I'm ...
0
votes
2answers
300 views

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I ...
4
votes
2answers
114 views

Can anyone help me out of this Active Directory mess?

Some background first: So I have two domain controllers (dc1 and dc2) running Server 2003 32-bit and 64-bit, respectively. They have not been able to replicate since sometime in 2012 which I hadn't ...
2
votes
2answers
88 views

I've relocated user profiles but something keeps creating new 'documents' folders on the old server

I have been moving user profiles from one server to another. For the question we'll call them 'oldserver' and 'newserver' and the user is 'jbloggs' While the user is logged out... Copy the entire ...
1
vote
2answers
398 views

Delegate permissions to Admins for Password reset and “Change password on next logon” in AD

Hello i created taskpads for remote admins to reset passwords for folks at their site.I created a group for admins and gave delegation on site OU. The problem is for doing "force change password on ...
0
votes
1answer
48 views

AD password not synchronising properly

I have 600+ users in AD, but only one causes me trouble. The problem is I can reset his password from AD, he can then log in to his machine. After that he would like to change his password from ...
2
votes
1answer
302 views

How do I manually demote a Domain Controller that is past the tombstone lifetime when I cannot log into it?

I have two domain controllers. One is failing replication. It has past tombstone expiration, so I have read it must be demoted and re-promoted. I cannot log in to this server anymore, because of ...