A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
3answers
399 views

Can a Kerberos server interfere with Active Directory on the same network

I would like to set up a Kerberos server to authenticate users on our various Linux servers. However, the network that the Kerberos server will be on already has a Windows 2k3 domain controller on ...
8
votes
7answers
4k views

How do I keep the local admin password consistent across an OU?

We have a number of PCs running XP SP2 (and a couple running SP1) already in production, and we're looking to keep the local administrator's password consistent across the OU. The only solutions I can ...
2
votes
2answers
441 views

Linux in AD: Supported enctypes for Windows 2003 AD

In the MIT Kerberos implementation that comes with most Linux distributions, I can define what encryption type I want to use for ticket requests. I am not a Windows guy, but apparently, Kerberos as a ...
1
vote
1answer
4k views

GPO Policy Object removal 'Unwilling' to process the request

This is a tough one in which I don't think anyone can find the answer for, not microsoft yet at least... There is a Group Policy Object on the primary domain controller, and when I say primary, its ...
8
votes
7answers
36k views

How do you find out if Active Directory is using Kerberos or NTLM?

Is there a command line program you can use?
1
vote
4answers
28k views

Enable/disable USB devices on Windows using Active Directory on certain users

I have been asked to disable access to USB devices on Windows machines for information disclosure reasons. Although this can be done with Active Directory, the problem is that the solution should let ...
8
votes
5answers
6k views

Active Directory: Is it required that the “A” record for a domain point to a Domain Controller?

Currently we have an Active Directory setup, and say the name is 'domain.com'. The DNS entries for domain.com has two A records pointing to the two domain controllers. I would like internal users to ...
0
votes
2answers
1k views

Removing Cert Server from AD

My CA server crashed. It was used to deploy certs to messenger clients for live communication. I am no longer using live communication. I removed the server object from AD but my clients and servers ...
2
votes
2answers
2k views

Can Microsoft SQL Server Reporting Services connect to an LDAP server other then Active Directory

Can MS SSRS use an LDAP server other then AD for authentication? Is this an easy configuration or is it digging ones self into a hole?
2
votes
5answers
3k views

Cannot logon to server as AD is down and local users are disabled

I've managed to get into a loop hole and cannot find a way out. I have a server using Microsoft Virtual Server 2005 that I recently had to restart, so I shutdown all of the guests Virtual Machines ...
1
vote
6answers
4k views

Can a single user have multiple credential sets using MS Active Directory

We are currently transitioning our existing database based authentication to Active Directory. In the existing implementation, passwords are kept in clear-text in the database (I know this is bad, ...
0
votes
3answers
1k views

Removing Roaming Profile

I have roaming profile setup for all my users, however, my network is starting to slow down and users are taking a long time to sync. I decided just to roam the desktop and remove My Documents and ...
1
vote
2answers
1k views

multiple managers in active directory

In our environment, an employee can have multiple managers. They can also be in multiple departments. How can I accomodate this in active directory as the manager attribute appears to be a single ...
1
vote
2answers
891 views

Making Exchange treat email address specified in AD user properies as external

This is a strange requirement, but for demo purposes we need this. We have a test domain with Exchange 2003 and MOSS 2007. For an external demo (the SharePoint is published on the Internet) we've ...
3
votes
2answers
11k views

“Send As” Permission and “You do not have permission to send to this recipient” Error

I have an account on Windows Small Business Server 2003, for which several users have "send as" permission (not "send on behalf" but "send as"). Each of those users has "send as" enabled in active ...
13
votes
6answers
8k views

Move Active Directory from 2003 to 2008

Im not a expert admin in Active Directory so I'm in need of some help. At my work, we have bought a new server with the 2008 server OS. And the old AD domain controller is run on a 2003 server. The ...
8
votes
4answers
6k views

How do you manage service account credentials (passwords)?

In a Windows environment how do you address the following issues with service accounts? Regular Password changes - with single service accounts used on multiple machines how do you regularly change ...
3
votes
3answers
7k views

Lotus Domino Active Directory Integration - Possible and Practical?

So about 3 months ago I "inherited" a Lotus Domino setup, and quite frankly, it's a mess. Historically, it's had 10 years of the primary focus being on development rather than on management and ...
0
votes
5answers
871 views

Windows Active Directory Login Issue

For some reason, any new domain users created on Windows Server 2003's Active Directory cannot login to the domain. However, existing domain users can login just fine. I have even tried copying an ...
0
votes
1answer
563 views

SMTP Software with Active Directory Integration?

I work for a web hosting company and we are looking for some SMTP software with Active Directory integration. Really it just comes down to something our customers can use easily with the SMTP service ...
3
votes
5answers
4k views

How to repopulate DNS from Active Directory?

In some point of time (I don't know when...) the DNS on a Windows 2003 Server gets populated with all computers on Active Directory. There is any way to repopulate it again? For instance, when ...
4
votes
4answers
4k views

Is there an AD property that will tell me if an account uses ActiveSync?

I know that Exchange needs to hold onto sync status information for mailboxes, so I'm hoping I can use a related property to know who's using a smartphone to check mail. We're still on Exchange 2003 ...
11
votes
10answers
51k views

Command line active directory query email address for username

On Windows XP in an Active directory environment - what is the easiest way for me to query a user's email address from AD given their username on the command line. (Assuming I know where it is kept ...
0
votes
2answers
2k views

verrUsing netdom.exe to “Un”Join a domain

I need to unjoin a computer from the domain preferably form the command line. I know how to use netdom.exe to join a machine to a domain. Is there a corresponding way to un-join it? thanks.
2
votes
4answers
7k views

Problems with user's AD accounts randomly locking

User's AD accounts keep being locked automatically. I'm confident it isn't the obvious problem with users typing in the wrong password repeatedly. Whenever this happens the System log in Event Viewer ...
1
vote
1answer
363 views

trouble with AD and profile import

I am involuntary Admin for a MOSS 2007 site. We use profile import from AD, from two domains: Mycompany.com and AM.MyCompany.Com I was looking at the log for the PEOPLE_DL_IMPORT Content source and ...
1
vote
2answers
353 views

How to create a small (Single Machine) domain

I am trying to install Virtual Machine Manager so I can test out the Lab Mananger portion of VS2010. The Virtual Machine Manager Requires a Domain to install to. Is there an easy way to setup a ...
1
vote
2answers
866 views

Windows Server 2003 with 2 network cards and wireless router, is it possible to configure connections via router to use the AD server

In a small after school ITC class (1 server, 15 student machines), We have a vigor2800 adsl modem/wireless router. This has a Windows 2003 server connected to it which has 2 network cards, one to the ...
1
vote
4answers
987 views

Why can't my Win2003 Server connect to my Win2008 PDC anymore after a minor network change ? (FRS problem?)

I've got a win 2003 server running a TFS server, and a Win 2008 server acting as a PDC. A few days ago, I changed my DHCP and DNS server (which used to be the win 2008 server) to a Cisco Router. ...
2
votes
6answers
17k views

How to investigate windows network lockouts related to Outlook Exchange Server authentication?

I am an end-user, not an IT professional. Unfortunately my corporate resources cannot solve this problem. I am looking for some advice to give them. I've been account locked on our corporate network ...
1
vote
1answer
159 views

How can I change 'Person' SUP ( Top $ ndsLoginProperties ) to “'Person' SUP ndsLoginProperties”

How can I change 'Person' SUP ( Top $ ndsLoginProperties ) STRUCT URAL MUST to "'Person' SUP ndsLoginProperties STRUCTURAL MUST" See for more informations: ...
5
votes
3answers
13k views

Primary Domain Controller slow?

I seem to be experiencing a problem with a virtualized Windows 2008 domain controller. We are running Hyper-V on a powerful server (dual quad core Nehalem Xeon, 48 GB of ram), and all of the VMs are ...
7
votes
4answers
4k views

How do I edit “PersonalTitle” field in Active Directory

I want to edit a user's "personalTitle" field in Active Directory, but cannot find where it is stored in "Active Directory Users and Computers". Can anyone point me in the right direction? Thanks, ...
1
vote
4answers
215 views

AD Domain Controllers being Slammed

My Windows Server 2008 Domain Controllers are getting hundreds of log in attempts per minute. For the most part the IP addresses are not in the Event Log however the ones that do occasionally show up ...
4
votes
5answers
12k views

How to use Active Directory to authenticate linux users

What are the best-practices for using Active Directory to authenticate users on linux (Debian) boxes? The way I would like it to work would be to add AD users to a group - say linux administrators or ...
3
votes
3answers
199 views

Upgrading Active Directory

My company operates a SaaS product. My charge is our corporate environment, i.e. users, computers and the Data Center at the Corp office. I am planning to upgrade our current Active Directory ...
15
votes
4answers
25k views

How can I determine my user account's OU in a Windows domain?

Is there any way (short of getting an active directory browser) to view my OU while logged in to the domain?
5
votes
6answers
9k views

Installing Domain Controller on Hyper-V Host

Given a resource limited setup consisting of 2 host machines (HyperV-01 and HyperV-02), is it OK to put the domain controllers in parent partition, instead of their own VM? The main reason is that ...
1
vote
1answer
3k views

Using Cisco ACS to authenticate users on multiple domains

We are a sort of service provider network for schools, and use a Cisco ACS and its internal user database to authenticate users onto the remote access VPN which we provide. Every school we support ...
2
votes
3answers
3k views

Cisco IPsec VPN Active Directory Authentication

I've been trying to get our Cisco ISR 2811 to authenticate the VPN clients towards an Active Directory server (so that the Cisco VPN client asks the user for username/password). Googling around has ...
4
votes
3answers
640 views

Setting Password Policy on Machine that is Part of a Domain

Windows Server 2003. I need my host to change a password policy (required password length) on a machine that is part of their domain. I only need the change to apply to machine accounts. They claim ...
4
votes
5answers
6k views

How to authenticate TWiki against Windows Active Directory

How would I go about getting TWiki to transparently authenticate against Windows Active Directory with Single Sign-on?
16
votes
3answers
15k views

How do you manage Java in your Windows/Active Directory environment?

Like I suppose a lot of people, we have a Windows/Active Directory environment and a lot of internal line of business apps that require Java. Our experience is that Java does not play nice in such a ...
7
votes
6answers
1k views

Securing Active Directory domains on a potentially hostile network

Active Directory is one of the best features of Windows Server, but it's also a big shiny target. If compromised it gives the attacker your Windows network. In an environment with externally facing ...
60
votes
3answers
80k views

Is there a way to view the members of an Active Directory group if you aren't a domain admin and can't log into to a domain controller?

Is there a way to view the members of an Active Directory group if you aren't a domain admin and can't log into to a domain controller?
3
votes
4answers
4k views

Differences between Active Directory Server and PDC

The Samba documentation states quite clearly that is only capable of functioning as an NT4 style Primary Domain Controller and can not function as an Active Directory server. I manage a group of ...
2
votes
3answers
1k views

Active Directory Design - Domains per site or Organisational Units per site

I work for an educational establishment that currently has three geograpically seperate schools, and about to open a fourth. Each school has 600+ computers and 1000+ users. At the moment our Active ...
1
vote
5answers
774 views

Where can I find a link to download the SP2 of OES2?

I have a Netware Novell server with an eDirectory and different objects configured. I implemented an OEServer2 SP1 to emulate a DSfW to manage the eDirectory with AD. I join the domain with the ...
1
vote
2answers
3k views

Active Directory Restore Woes 0xc000006a

I'm trying to restore our Active directory infrastructure from System State backups. This normally isn't a problem but I'm trying to do it onto a Hyper-V based server while the backup "source" is a ...
18
votes
6answers
64k views

last time an AD user has logged in?

I've noticed that we have in Active Directory more users than the company has actual employees. Is there a simple way to check multiple Active Directory accounts and see if there are any accounts that ...