A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

2
votes
3answers
52k views

How to setup Domain Controller in Windows 7? [closed]

I have Windows 7 Ultimate and some few other XP Pro machines. I would like to setup Domain Controller in some sort of way, (Without having a Server OS I know this is a long shot ) so that my XP ...
1
vote
0answers
433 views

WebLogic 8.1 and 4096-bit SSL?

We have a scenario in which we'd like to configure a WebLogic 8.1 server (running on Windows, JRockit 1.4.2) to connect to Active Directory over SSL for authentication. Our Active Directory is ...
4
votes
4answers
337 views

Mass Active Directory changes and monitoring

I work with an MSP and we would like to implement something to the effect that every user within our organization can easily be added across multiple different domains that aren't nessasarily in the ...
1
vote
3answers
792 views

Mock lightweight DC possible?

I need a domain controller in my test environment. I was wondering if it is possible to run a DC service without having a full blown server? Really just need it for adding some test systems to the ...
7
votes
3answers
5k views

Where do I store sensitive data within Active Directory?

I am essentially storing a private key (Hash) in any of the OctetString attributes within Active Directory. My question is, what attribute is secure by default and makes sense to keep private data ...
0
votes
1answer
115 views

Analytics per user account on Windows Server 2008 R2

Are there any kind of logs per user account, for eg: hours logged in, etc. Or any kind of third party software's to analyze software usage patterns per user account on Windows Server 2008 R2
1
vote
1answer
1k views

How can we encrypt authentication against a Windows domain between Apache-on-Linux and client machines running Windows and OS X?

Setup: We have a machine (SRV1) serving Subversion via Apache to client machines running Windows 7 (CLI1), OS X (CLI2), and presumably some other clients running Windows XP (CLI3). While the material ...
2
votes
2answers
15k views

How to Export and Import AD Users, Groups and Group Membership?

Hallo, I want to copy my Active Directory Users, Groups and Group Memberships from one DC to another using csvde, where the machines are identical except for the only the name of the Domain and ...
2
votes
3answers
5k views

How does someone restrict read rights to certain user attributes on Active Directory?

We use this code to query an ADAM instance. DirectoryEntry adRoot = new DirectoryEntry(ConfigurationManager.AppSettings["LdapConnectionString"].ToString()); DirectorySearcher adSearch = new ...
1
vote
2answers
1k views

How can I use get-qadcomputer to return all computer objects that have msFVE-RecoveryInformation child objects

I am using the Quest AD Cmdlets to pull information about computer accounts and bitlocker recovery information. I am currently using Get-QadComputer to pull the DN and then I am using Get-QADobject ...
2
votes
2answers
147 views

Active Directory in Production?

We are preparing to deploy a new version of our application. The production environment will be two load balanced app servers connecting to two database servers (configured for mirroring). Now ...
5
votes
2answers
1k views

Can an active directory group indirectly include itself in a cycle?

Is it possible for a group to directly or indirectly include itself? In other words, is it possible for the following structure to be created: Group-A   └─ Group-B       &...
3
votes
1answer
4k views

Using Windows XP Mode Virtual Machine on a Domain

I've followed the instructions and installed and configured the Windows Virtual PC XP Mode. I've added it as a machine on the network and can log into it and use network resources. In the process I ...
2
votes
1answer
3k views

Changing file Ownership with PowerShell 2.0

We have an issue with a file server, whenever a user account is deleted the ownership of his/her files returns to their SID number, which shows up in our report as unknown. Has anyone found a way to ...
0
votes
1answer
1k views

There are no logon servers available to service the login request

On my home network I setup a laptop running windows server 2003 as a dns server and domain controller. I was able to join the domain on my PC, however if I try to login to windows with a domain ...
0
votes
1answer
272 views

Inside/Outside DNS Issue with Active Directory/ISA Server

I have a network in NY where I'm trying to migrate their MS Exchange Server to Rackspace at the DFW Datacenter in TX. The NY network, seemingly randomly, developed a strange DNS issue. The NY office ...
0
votes
1answer
8k views

Can't connect to domain controller

I setup a dns server/domain controller on a windows server 2003 box on my local network, giving it a fixed ip address of 192.168.2.9. I called the domain "toth.domain". I then changed the preferred ...
0
votes
2answers
153 views

I want to take over PC's in my Active directory

Is it possible to have something like with terminal services to take over a Pc while its running? so you can help someone with what they are doing? and preform some help. or is there something ...
1
vote
1answer
353 views

Can Windows Server 2008 DC be added to a Windows Server 2003 domain without changing the schema?

My production system has two Windows Server 2003 R2 servers acting as domain controllers. Can I add a Windows Server 2008 DC to the existing domain without changing the schema? This is a similar ...
0
votes
1answer
96 views

Interforest migration

We are tasked with performing a Server 2003 interforest domain migration and AD environment. Can the hive recommend some good documentation for the process? More specifically migratin the user logon ...
0
votes
2answers
2k views

Manually Removing a Replicate Domain Controller

I have a single domain environment on Active Directory, Windows Server 2003. I created a replicate domain controller to put on a remote LAN connected via site-to-site vpn. I shipped the server but ...
0
votes
3answers
258 views

Creating an LDAP script to edit active directory

When setting up a new email, the user is directed to a blank address list (so they cannot access other users email addresses). This is done manually using ADSIedit. However, there are a lot of new ...
-1
votes
2answers
447 views

How to get all logged in users in an active directory environment?

Sometimes you want to write an email to all users that are currently in the office. You could now just insert all the email addresses into a mail but you might not know who's in the office your you ...
3
votes
1answer
5k views

How do I rename a DFS root?

I am new to DFS and need to rename an existing DFS root (OldDFS$) to a new name (NewDFS$) so that it's clearer to its users. This is on an AD domain and there is no replication of the DFS data. The ...
0
votes
3answers
7k views

TFS 2010 - Adding users to a Team Project

Tried searching the archives, but nothing showed up and now I'm totally messed up in my head. I'm running my own little domain setup on a virtual server: Server 1, PDC, Exchange Server 2, SQL ...
0
votes
4answers
1k views

Exchange 2010 and Active Directory

I went through a painful Exchange 2007 to Exchange 2010 migration and faced a new problem - the utility I used for Active Directory management does not support Exchange 2010. Please advice a piece of ...
1
vote
2answers
2k views

Solaris 10: winbind can't connect to Active Directory

Goal: join a Solaris 10 machine to an existing Active Directory. Steps I did: Installed software (Samba 3.4.2 from http://www.sunfreeware.com) Received a Kerberos ticket with kinit admin-user@KERB....
0
votes
2answers
666 views

Joining a Windows 7 computer to Active Directory [duplicate]

Possible Duplicate: How to add computer to domains with Active Directory Alright, I'm just learning how to work with AD, so I have two VMWare virtual machines set up. The server, running ...
0
votes
1answer
134 views

Is it better so use numeric or name for user logins?

Is it better to have user logins based on a unique number or the users name. eg Numeric: sc12345 Based on name: simon.cropp, scropp or simoncropp Some context. Windows environment MS Active ...
1
vote
5answers
4k views

Physical Access Control using Active Directory?

I would like to know if there is a way to use Active Directory for Physical Access Control ? Example: All users will have a RFID card or a fingerprint entry registered on the domain (linked to the ...
0
votes
2answers
2k views

Change Active Directory IP Ranges?

Background We currently have Active Directory running on a Windows Server 2003 box, with ranges of 192.168.1.x and 192.168.2.x Problem As we have a lot of users vpn'ing into the network we end up ...
8
votes
2answers
271 views

Rss feed of Active Directory Changes?

Is it possible to setup a RSS feed to view all changes made to an Active Directory database?
6
votes
5answers
31k views

Grant admin rights to a certain program for all users?

I have a program installed on my W2k8 R2 server which needs admin rights to start. I have 5 users using remote desktop to remote into the server to use that program. I don't want to give those users ...
0
votes
1answer
264 views

Prestaging user accounts

In Active Directory, what is the concept of prestaging user accounts? Thanks
2
votes
4answers
7k views

Group policy not being applied unless user is in OU

I have set up my WS2k8 R2 AD like so: The OU "OU1" contains a security group called "GROUP1". I have applied some group policy to "OU1". The group policy is enforced. My users are located in the ...
0
votes
1answer
841 views

Can't access Sql Server after installing Active Directory

I had SQL Server 2008 set up with databases and sites running, then installed MS Exchange on the server which required Active Directory before moving forward. After installing both, my sites were no ...
1
vote
2answers
352 views

Querying the Active Directory domain of a Windows 2008 host in SQL

There is code in our shop that must query a SQL Server 2008 server, determine the Active Directory domain that the host belongs to, and, in SQL, create Windows login principals based on this ...
3
votes
2answers
20k views

Get user home directories recursively in PowerShell

So, I'm taking the dive into PowerShell. I've been tasked with redoing permissions on every home folder in the domain (they do not all fall under the same sub-directory - that would be too easy). I ...
7
votes
1answer
3k views

ISC Bind support for GSS-TSIG DDNS Updates?

First, has anyone EVER configured ISC bind 9.5.0 OR greater with support for GSS-TSIG Dynamic DNS Updates AND gotten it to work? If so, what is the configuration that was used to make that happen? I ...
1
vote
1answer
2k views

Websphere federated repository for Active Directory

What I am trying to achieve is to have Websphere 6.1 use Active Directory users authentication. Websphere is running on Windows 2008 R2. What I've done already: Succesfully setup a federated ...
2
votes
3answers
4k views

Install Windows Server 2008 R2 Features and Roles through Group Policy

Can I install windows built-in features and roles through group policy? If there is not a way to do this with group policy, is there some other method to this unattended to a bunch of servers that ...
0
votes
1answer
162 views

Security Permission for creating an AD Distribution Group

I would like to create an OU that only has the permission to create and manage Distribution Groups for email purposes. Is that possible and what is the permission required?
2
votes
1answer
119 views

WinXP logins no longer fully functional

Summary: Users with Roaming Profiles on my XP workstations appear to be unable to do various things, e.g. set a default printer, disable toolbars in IE8, or see icons on the left side of the Start ...
1
vote
2answers
549 views

Tools, recommendations to understand NTFS permissions?

I'm trying to troubleshoot some issues with our IIS7 FTP site--namely, why some users have access to the site when it doesn't look like they should. The basic problem is that I do not understand NTFS /...
1
vote
2answers
3k views

Sharepoint 2010 is not listing all users from the Active Directory

I have set up a SharePoint 2010 Standard server in a farm configuration with an AD as the backend for authentication. This so far has been working great but I have been noticing quite a few users are ...
0
votes
1answer
869 views

Windows Server 2003 Active Directory password reset

Hi there i'm trying to reset windows server 2003 forgotten password. Tried system rescue cd bootable linux ntfs-3g /dev/sda1 /mnt/windows –o force chntpw -l SAM (this command dont show AD users, ...
5
votes
5answers
2k views

Active Directory with public unix dns (no MS DNS)

I'm setting up a new Active Directory instance for my department at a university. I have some experience managing domains at previous jobs (NT4/2k/2003), but there are two unique things about our ...
1
vote
0answers
809 views

Multiple entries in AD for same printer name on same server with cnames?

I have been asked to replicate a client's AD/server/printer environment. They have sent me some fairly limited information and I am unable to get any more easily. They have sent a screenshot showing ...
1
vote
1answer
251 views

Log into AD account through Command Line

Our SBS2003 server likes to lose connection every so often. This appears to 'kick' everyone out, so that no-one can access the server or its shared folders without a log off > log in. It usually ...
0
votes
1answer
4k views

Accessing SAMBA share with AD account from a trusted domain

My company is planning a migration of users, computers, and groups from an acquired company. Both companies have Active Directory domains and there is a 2 way trust between them. The other company ...