A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
4answers
526 views

How to execute files on LAN drives in a Windows Domain

We have a very small LAN here, but some peolpe here think we need Active Directory, though nobody knows how to maintain it. I am not in the position to change this. How can I get full access (on ...
69
votes
6answers
284k views

How can I figure out my LDAP connection string?

We're on a corporate network thats running active directory and we'd like to test out some LDAP stuff (active directory membership provider, actually) and so far, none of us can figure out what our ...
2
votes
2answers
121 views

Remote site AD design (2003)

A remote site has about 25 of our 50-ish employees. They have their own AD domain presently (2003) but I want to look at getting them onto the same global domain for ease of access/administration. The ...
3
votes
2answers
624 views

How do I figure out what is changing the userWorkstations attribute in Active Directory?

I just took over the IT for a medium sized business with a three domain controllers (2003/2008 Standard) and whenever I create a new user, after some time the user account cannot log into most ...
3
votes
1answer
3k views

Is there a way to completely flush cached AD credentials on a user workstation?

An AD user updated their AD password, but a couple applications on their workstation appear to still be using their old AD credentials. Is there an easy way to flush out cached AD credentials on ...
1
vote
2answers
2k views

How do I prevent 'net ads join' from doing DDNS update?

I'm using 'net ads join' to add Linux servers to an AD domain. The servers are multi-homed, with a public IP on eth1 and a non-routable private background network on eth0 (in the 172.20 space, used ...
2
votes
3answers
1k views

Active Directory LDAP and user issues (using apache2 for svn access)

I currently have a setup where I work that lets users use their active directory domain logins and passwords to authenticate and authorize access to Subversion. Currently I need to allow application ...
0
votes
5answers
169 views

Are less domains better than more domains in active directory?

A colleague of mine wants to add a domain to our forest. He said it would be good for security. I believe him but I have no idea why it is any better than with just one domain. I read this on ...
0
votes
2answers
89 views

For a new domain controller

I have 2 series of IP.I want to make a domain controller in windows server 2003.all clients system are XP.I want to know can i make a domain server.if yes how its is possible ?
1
vote
2answers
224 views

users permission for department computers

i have 4 different types of department IT team, Development, Training, marketing. I want IT team to have full permission to login to any machine on any department. other users on other department only ...
1
vote
3answers
2k views

Logon Failure: the target account name is incorrect after making a ghost image of a server

I recently replaced a failing SCSI drive in a Windows 2000 server with an IDE drive. I made an image of the SCSI drive and Ghosted it. The purpose of the machine was to give out DHCP at one location ...
2
votes
1answer
64 views

Exchange 2010 install locks out high level accounts

Basically, when we installed Exchange 2010 alongside our Exchange 2003 server (we assume), this is what caused our problem. The Exchange 2010 server is not active, just running on the domain. What's ...
3
votes
2answers
4k views

AD DS or AD LDS

I need a suggestion about having AD DS or AD LDS for my infrastructure. I have a website which as of now do not have any log in facility for the visitors, now we are developing a new application so ...
1
vote
1answer
607 views

Cannot access domain from windows 2003 client

First off I am a novice at AD and DNS so please bear with me. This is my current situation: I have one server which is a DC and DNS server (win2k3) - Machine 1. I have another machine which is trying ...
1
vote
3answers
171 views

How to recover files from a non-booting windows server?

I'm having a problem with a windows server 2008 server. After it was demoted from a AD domain controller, it is unable to get to the login screen (it reboots after applying user settings). Is there a ...
0
votes
2answers
477 views

NetDom at Startup

We have a Bat file running on a pc login to migrate a pc from Domain A to Domain B this works brill but. @ECHO OFF cmd /c netdom move /domain:B %computername% /OU:"OU=Computers" /ud:B Admin ...
0
votes
1answer
4k views

The session setup from the computer <computerName> failed to authenticate

Every once in a while, I get a client PC that won't be able to log into the domain. This morning it was telling us that the trust relationship between the pc and the domain failed. I checked the event ...
0
votes
1answer
91 views

WSS audiences dont show all AD Groups

Not all of my AD Groups are showing in the Audience list. I want to create a new audience based on if the user is in a group. Some AD groups show up, and others don't. Many the newer ones do not show ...
0
votes
2answers
6k views

NTDS Replication Warning (Event ID 2089)

I have a simple little network with 3 AD servers in 2 sites. Site A has Win2k3 SP2 and Win2k SP4 servers, site B has a single Win2k3 SP2 server. All have been in place for at least 3 years now. Just ...
0
votes
2answers
4k views

AdPrep logs show an LDAP error

What I am trying to do is transition our domain from Server 2003 Enterprise x32 to Server 2008 R2 Enterprise x64. Here is what I have done thus far. The 2003 server is a physical machine, the 2008 ...
2
votes
1answer
179 views

New AD-DC in a new Site is refusing cross-site IPv4 connections

We just added a new Server 2008 (sp2) Domain Controller in a new Site, our first such config. It's over a VPN gateway WAN (10Mbit). Unfortunately it is displaying a strange network symptom. ...
2
votes
1answer
1k views

Is it possible to extend the Active Directory schema in a Windows 2003 DC (NOT R2) to support DFSR?

We're in the process of installing a brand new Windows Server 2008 Web cluster and we would like to synchronize some files between the servers. The problem is that the DC in the domain is an old ...
3
votes
1answer
468 views

Can you authenticate into SSAS with AD LDS (ADAM) accounts?

I'm very new to AD LDS and experienced but not qualified with SSAS, so my apologies for my ignorances with these. We have a couple implementations where we expose SSAS via an HTTPS proxy ...
2
votes
2answers
364 views

Removing Windows 2003 Server and Domain from Network

I have a Windows-2003-Server with five computers (Windows XP) accessing it using a domain. I would like to remove the server and the domain and go straight to peer to peer (file sharing via a NAS). We ...
4
votes
3answers
4k views

Quick-n-Easy way to remove outdated ActiveDirectory users?

We have around 70 current employees, but 178 accounts in ActiveDirectory. The prior administrators never removed old accounts, and sometimes they weren't even disabled. As it is, I am considering ...
0
votes
1answer
3k views

Tomcat SPNEGO authentication against Active Directory not working

I'm trying to authenticate against AD using the http://spnego.sourceforge.net component with tomcat. I've created my SPN's "setspn.exe -A HTTP/servername SVCTomcat" & "setspn.exe -A ...
1
vote
4answers
1k views

What alternatives are there to ActiveDirectory to administer a large number of computers?

I would like to know what the different options are or if ActiveDirectory is the only choice.
1
vote
2answers
301 views

AD license query

A basic question about AD license, if on my company website, clients makes an account and would be authenticated through AD server, do i need to have the licenses for the clients coming via web. and ...
4
votes
1answer
616 views

How to set common NTP server for all computers in AD [duplicate]

Possible Duplicate: How to set a frequent period for NTP client to sync with the NTP server. I want to set default NTP server to pool.ntp.org to all computers joining my domain. How can I ...
6
votes
2answers
9k views

IIS7.5 Domain Account Application Pool Identity for SQL Server Authentication

In Windows Server 2003/IIS6 land we typically create an app pool that runs as the identity of an AD account created with minimal privileges simply for that purpose. This same domain user would also be ...
0
votes
1answer
253 views

What does ActiveDirectory provide above sharing password protected files, which windows has anyway?

I'm quite new to this so I'm trying to figure out the reason for ActiveDirectory existing in the first place.
8
votes
3answers
2k views

Automatically mounting a network share as Shared Resource

we're running an ActiveDirectory environment (Windows 2008 Server, XP Clients) and want to have some shares listed as Shared Resources under the Network Neighbourhood. I do not want to map it to a ...
4
votes
5answers
7k views

What is the difference between the “Authenticated User” and “user” groups in windows server 2008 (or 2003)?

Hi would like to know the difference between these two, when we are setting up the permissions for an object (folder).
0
votes
2answers
3k views

Querying Domain Controller objects using Powershell

Could someone explain to me why this does not work? Import-Module ActiveDirectory $dcs = Get-ADComputer -Filter {DistinguishedName -Like "*Domain Controllers*"} I get no results for this query. ...
3
votes
2answers
6k views

Migrate users from one Active Directory domain to another?

I work for a company that hosts desktops for a number of different companies. At the moment, all the clients access a single domain controller called HOSTING. Under that are groups for each company. ...
3
votes
4answers
11k views

Slow logins with roaming profiles

We are running an ActiveDirectory environment with Windows 2008 as DC and Samba 3.3 as fileserver, using roaming profiles. Some of our offices are connected to HQ via slowish links (1/2 Mbit). ...
1
vote
3answers
3k views

Exchange 2003 - Keep user's mailbox but disable account and prevent new emails

Just wanted to know what's your take on this... A user has left the company but may return in future. I would like to disable his AD account, archive all his emails, keep his mailbox and prevent new ...
3
votes
2answers
935 views

Active Directory using Samba/Open LDAP for user accounts

I know this is the wrong way round... but Is it possible to use AD in front of Samba for our PC clients, so that the user accounts are in Samba/Open LDAP. Managing our fleet of Windows PC's is ...
0
votes
1answer
204 views

How do I allow changing of Active Directory passwords via unsecured LDAP?

As you might already know AD does not let you change the password through LDAP if you don't have a secure connection to AD. I heard that there is a registry setting to change this behavior but so far ...
1
vote
1answer
79 views

How a password is transmited to AD Server

My question is how ADSI performs SetPassword operation. According to what I have read ADSI is a COM interface and it has more capabilities than AD provides through LDAP. While you are suppose to ...
6
votes
3answers
14k views

Can you join a computer to two domains?

I have a new laptop that I intend to use both at home and at work. I happen to have a windows server setup with active directory at home, and I want to join the laptop to both domains. Is this ...
3
votes
6answers
5k views

Can't connect to domain computers until reboot

I have a domain with about 300 Windows 7 and XP machines, with the domain controllers running Server 2003. Sometimes, I lose the ability to communicate/authenticate with some of the machines until I ...
0
votes
1answer
224 views

Running .net application over a network

I need some advice please. I need to enable a .Net application to run over a network share, the problem is that this will be on clients network shares and so the path will not be identical. I've had ...
0
votes
3answers
136 views

How can I copy from one domain pc (winxp) logged off, to another domain server (w2k3)

I have a automation build server which creates nightly builds. It does this while logged off in Windows XP. This is is one domain while the server I wish to copy the builds to is in another domain ...
7
votes
3answers
5k views

Virus that tries to brute force attack Active Directory users (in alphabetical order)?

Users started complaining about slow network speed so I fired up Wireshark. Did some checking and found many PCs sending packets similar to the following: (screenshot) http://imgur.com/45VlI.png I ...
1
vote
1answer
1k views

Can DPM 2007 back up Active Directory?

We're installing Microsoft Data Protection Manager 2007 - we'll be using it to back up Exchange and SQL Server among other things. Does anyone know if DPM can also back up Active Directory? It ...
1
vote
3answers
656 views

Windows Server: Change AD account name

In my SBS 08 (AD, exchange), is it possible to change the name, email address of a user because he is leaving and I'd like to transfer all the account and credential to the new employee that is ...
0
votes
2answers
511 views

Roaming profile migration failed using Windows explorer manual copy

I'm at the final stage of migrating an old demoted DC server, now I'm stuck in migrating/copying the roaming profiles of the users from the old win2k server (oldServer1) into the new win2k3 server ...
4
votes
3answers
1k views

Summer daylight time not changing on some active directory domain clients

We just had a summer daylight change in US. and pc's on my network are behaving strange, some of them change time and some didn't. My network: 2 locations both in Midwest, same time zone. Location ...
1
vote
1answer
267 views

How to prevent slow printer performance when AD is not available

When I take a domain based computer (Windows XP) and plug it into a network that doesn't have access to the AD, the first time I select a local printer (printing directly to printer) on the current ...