0
votes
0answers
7 views

DFS Setup - The namespace server cannot be added. The system cannot find the path specified

I went to DFS Management and added a created a New Namespace. For the namespace server, I specified my Primary Domain controller (netbios name: primarydc). For the namespace, I enter Files. I use a ...
1
vote
2answers
35 views

How to bring a redirected user account back from the dead in Windows Server 2008 R2?

A user at the place where I work left the company, we deleted his account out of AD and then he came back...and now his redirected profile exists, but with the wrong permissions on the folder.. I ...
1
vote
1answer
137 views

Continuously check LDAP connectivity to Domain Controllers ( LDAP Heartbeat Check)

working on developing script which runs via schedule task ; whole purpose of it is to target few domain controllers and continuously(for every 2 sec) do a ldap query targeting that particular DC and ...
3
votes
0answers
42 views

Expensive LDAP queries from Workstations

Troubleshooting high LSASS process on a DC found expensive queries originating from a few workstations. Each query is as follows: Visited Entries: 1Million+ Returned Entries: <50 (most of the ...
1
vote
0answers
15 views

Does having an extreamly high number replication partners in Active Directory pose an issue in 2014?

I'm consulting a network where they have 5 domain controllers in central location and a lot of Read Only controllers in additional locations. SCOM is shouting that there are extremely high number ...
0
votes
1answer
64 views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
1
vote
1answer
48 views

User suddenly don't see correct DFS share on some servers

Setup: 2 Windows 2008 R2 DC also holding DFS shares, replication works fine. Suddenly my user (is administrator too) got the wrong/empty redirected desktop etc. I only see the local C:\users\public ...
1
vote
2answers
80 views

Password Changes and Exchange Activesync AD lockouts

Not sure how others are doing this but the main issue we are having arises when a user changes their password on a PC. When they change it the ActiveSync on the phone does not update automatically. It ...
2
votes
1answer
30 views

Testing for Active Directory Schema modification (not upgrade)

I am trying to test a schema modification. That is i need to add one of the attributes to global catalog by modifying schema , initially in a lab which is exact replica.My questions are below; -> ...
1
vote
0answers
35 views

What's the Correct Way to Implement Certificates on an RDS Farm?

We currently deploying six terminal servers in a farm that will be accessed by thin clients running Windows Embedded. The idea behind the thin clients is to have a seamless single-sign on whereby as ...
0
votes
1answer
23 views

Powershell waiting for more parameters when asking for all users from a specific OU?

I want to get all the users from OU "myusers" so I have this cmdlet right here: get-aduser -filter * -searchbase"ou=myusers,dc=domain,dc=com" But when Im running it, powershell prints a >> ...
2
votes
0answers
40 views

doing ODBC System DSN's from Active Directory

2008R2 Active Directory, workstations are Win7 Ent, Office/Excel 2013, Oracle 11.2. Excel fetches data from Oracle using System DSN's. Where can I put ODBC System DSN's in Active Directory? Do I ...
0
votes
1answer
58 views

Folder Redirection won't load on Windows 7 Machine in Windows 2008 R2 Network

Okay so redirected profiles don't load exactly, but the computer is joined to the network and it won't display any of the users files on their desktop that are in their redirected profile. I know ...
1
vote
1answer
54 views

How to logon with local account? RODC “There are no logon servers to process your request”

I have a site-to-site VPN, writeable DC in main office, Read-only DC in branch office. Today the VPN went down, but i couldn't log in to the read-only DC - the error message came up There are no ...
2
votes
2answers
145 views

Active Directory Certificate Enrollment Error

I'm seeing this error in my Active Directory log. The error is on my primary dc which is an SBS 2008 box. The computer performing the request is my secondary dc running server 2008 r2. Active ...
0
votes
2answers
48 views

Difference between LDAP Search and Virtual List View

An member server has some application using service account to query active directory for users and groups. I am using LDP to connect/bind and do queries using LDP.exe , "Bind" works succesfully with ...
5
votes
1answer
150 views

“Anonymous Logon” vs “NTLM V1” What to disable?

Working on getting rid of NTLM V1 logins all together in the AD environment; found lot of events, almost all of them from the user "Anonymous Logon"(4624 events) other 1(4624 events) percent coming ...
5
votes
1answer
75 views

BPA for AD Server 2008 and 2008 R2 DCs W32Time setting complaint

I have been going through some of the warnings raised by BPA against our DCs to make sure everything is as it should be. Everything has been going well until I got to the following warnings: The ...
0
votes
2answers
75 views

Restricting User Rights Assigning in Default Domain Controller Policy

I am currently reviewing my work's default domain controller policy GPO against the MS Security Compliance Manager, and one of the things I have found is that there are many things that have user ...
0
votes
1answer
54 views

How can I upgrade an ancient Win 2000 based domain controller to Windows 2008/2012? (by replacement)

We're running Windows 2000 as our domain controller (!) and a separate backup domain controller, but as the PDC is 12 years old we would like to replace it. We have a couple of 2008 R2 and Win 2012 ...
1
vote
0answers
58 views

how do i test my DC backups

I have several system state backups of my domain controller 2008r2 stored on a network location. I am wanting to build a test environment so I can practice recovering a domain controller and also to ...
2
votes
1answer
108 views

Domain Controller all FSMO roles, AD,DHCP,DNS 2008r2 backup best practice

hello I am looking to back up my 2008 r2 domain controller, we have 1 forest and 2 domain controllers, idomain-1 and idomain-2 idomain-2 is used for failover and idomain-1 replicates to it. having ...
-1
votes
1answer
31 views

Unable to determine forest/domain functional level

I already have a domain controller setup on Wind2k8 R2 Standard and am trying to get another system running on Win2k8 R2 Enterprise to also become another domain controller for the same domain. For ...
3
votes
1answer
74 views

Turn off “user must change password at next logon” checkbox by default when creating new user

On Windows Server 2008, when you add a new user (manually, i.e. using Server Manager > Roles > Active Directory Domain Services > Active Directory Users and Computers > [site name] > ...
2
votes
1answer
90 views

Access an AD attribute in a first-time logon scenario?

I have been tasked with improving our current image deployment. Right now we do a fair amount of manual setup after imaging to reduce the work for users who get a newly imaged machine. I would like to ...
1
vote
0answers
92 views

SecErr: DSID-031A1190, 4003 (INSUFF_ACCESS_RIGHTS), data 0

I am trying to change the password of the currently logged in user via ldifde using this command: ldifde -i -f pwd.ldif -t 636 My AD server is running in SSL mode with a self signed certificate. The ...
1
vote
2answers
158 views

AD Read-Only Account (for Authentication)

I have experience with Linux server administration, however when it comes to Windows I'm pretty much a newbie. I have a lot third-parties applications that use an AD admin account to perform its ...
2
votes
2answers
62 views

Get OU management status from User object?

In a Windows Server 2008 R2 AD, is it possible to get a list of OUs managed by a User from the User object or does one needs to parse the list of OUs? (ie, is there representation on the User object ...
1
vote
1answer
43 views

LDAP connections favoring 1 DC over the other in same site

Observing spikes in "AD Search Subops" counter and "PROC LSASS%" counter daily on DC A relative to DC B; its not in maintainence windows; its at start of business hrs daily. -> Eliminated the point ...
1
vote
1answer
90 views

Windows Server 2008R2 Domain Controllers - Failed test VerifyReferences

While running DCDIAG on our Windows Server 2008R2 Enterprise Domain Controllers, I discovered the following error message on both DCs. These domain controllers where migrated from a Windows server ...
8
votes
2answers
377 views

Demoted domain controller still authenticating users

Why is a demoted domain controller still authenticating users? Whenever users log onto workstations with domain accounts, this demoted DC authenticates them. Its security log shows their logons, ...
0
votes
1answer
11 views

Server Manager Remote Connection and Visual Studio unable to publish after password change

I have a developer user who changed his password in our Windows-only environment. Now he is unable to connect remotely to another machine via Server Manager and unable to publish to another server ...
5
votes
1answer
117 views

Different ACLs on two OU's with same “protect object from deletion” setting

Background After I configured our Active Directory so that the ability to move computers was delegated to helpdesk staff, I started hearing reports that computers would get "stuck" in specific OU's. ...
0
votes
1answer
59 views

How to resolve SSPI context error without changing Service Account from MSSQL

There is a issue while connecting from new Windows 8.1 Clients to SQL Server 2008 running on Windows Server 2008 R2. The SQL Service running under account Domain\mssqlservice on a machine thats works ...
0
votes
1answer
55 views

Joining an AD domain from Workgroup with runas

I've got an user A who is connected to a Workgroup. From this Workgroup, now, I want to connect, with the console, to the user "john" who belongs to an active directory (MYAD) Though I try : runas ...
1
vote
1answer
26 views

Unable to delegate Replicating Directory Changes to a user in AD - option missing from wizard

Disclaimer: I originally asked this over at SharePoint SE, but I figured I'd ask it here too as it's more of an AD problem than a SP specific one. I'm trying to delegate the Replicating Directory ...
4
votes
2answers
263 views

How to force active directory replication from one DC to another

I am having issues replicating AD from one DC to another. Both servers are Windows Server 2008 R2 SP1. I have used the GUI option in sites and service to force replication. I have also tried repadmin, ...
6
votes
1answer
96 views

Active Directory Country capitals (letters)

Does someone know how to solve the problem of changing all country fields at once and probably why the country field is multiplied each time I select + apply a country change until the Object is being ...
0
votes
1answer
50 views

New-ADUser -Path syntax?

Where can I find a detailed explanation of the -Path parameter of the New-ADUser command? I want to specify a rather detailed path without calling Set-Location many times to specify where I want the ...
3
votes
1answer
137 views

Domain Controller returns LDAP Referral for it's own domain

I have 2 domains, each with 2 Domain Controllers: company.local ad.company.com.au Both domains are in the same forest and have a bi-direction trust setup. We're migrating to the ad.company.com.au ...
2
votes
1answer
61 views

Is this USN Rollback?

I have 6 Windows 2008 R2 Domain Controllers, all GCs, across multiple locations (2+2+2). On my main site I have a clone of one of our DCs done a few month ago, usually totally isolated from the ...
0
votes
1answer
31 views

Group policy access with active directory

Under Active Directory (Win2008-R2), I want all "authenticated users" be able to access the "Add/Remove windows components" menu But where do I have to go in group policy to set this grant ? In ...
1
vote
1answer
59 views

limit user access in multiple RODC

I have a RODC and a RWDC.i prepopulate some password on RODC cache database. i already read this article How’s User Authentication Working In A Site With A RODC? I want to limit user access in ...
10
votes
3answers
946 views

Active Directory user names: why does the canonical name vary? Can I do something to make them uniform?

I am a self-taught administrator of a work Active Directory network used for Windows logins on ~30 PCs. I inherited the system from someone else who also didn't have any direct Microsoft training and ...
-3
votes
1answer
93 views

Building a Windows Server 2008 R2 (DNS, DHCP, AD, etc…) [closed]

I'm looking forward to build my own Windows Server 2008 R2 machine for a company that is in the process of establishment. I have some questions regarding the Windows Server. I'm pretty new to it .. I ...
0
votes
1answer
53 views

Set Country / Region field Access via Active Directory Delegation

After creating a security group for special permissions (edit User Objects fields like Street, ZIP etc.) I have a problem of not being able to delegate permission for the field "Country/Region" on a ...
0
votes
1answer
46 views

Unable to update service communication certificate

We have added a self-signed certificate when setting up AD FS, and now want to update the service communications certificate to our domain's wildcard cert. Following these instructions: ...
1
vote
1answer
58 views

User Permission Issues Within Domain

I have user that is in Domain Admins group. I am trying to access folder that has full permissions for Domain Admins group but for some reason I get "You don't currently have permission to access this ...
1
vote
3answers
2k views

'The'account is not authorized to login from this station' error while trying to acccess network share

Clients are getting this error when trying to access network shares on one of our 2008 R2 servers: The account is not authorized to login from this station. The problem started a few weeks ago. ...
0
votes
2answers
53 views

Can't login with another domain credentials even when a trust exists

I have a domain named A; it has 2 AD servers and some web servers. And this is configured to have a one way trust with a domain named B. In short, A trusts B, but B doesn't A. Also, the users of ...