Questions tagged [active-directory]
A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.
2,290
questions with no upvoted or accepted answers
1
vote
0
answers
7k
views
List AD groups beginning with X on Linux
In the organization wide Active Directory we have user groups that all begin with a prefix blaha-, how do I list all groups with that prefix on a Linux machine?
getent group only seems to list local ...
- 639
1
vote
1
answer
354
views
Active Directory multi-site "trust proxy"
We have a multi-site domain with several sites in a hub and spoke-design. From the hub site, we have established a one-way trust to another domain though a VPN tunnel.
Now, when someone from the ...
- 956
1
vote
0
answers
1k
views
SoftEther VPN not allowing clients to connect using AD credentials
We are trying to get SoftEther VPN to work on a SBS 2003 domain but it is rejecting apparently valid user credentials. (The server application is running on our actual SBS 2003 domain controller and ...
- 1,180
1
vote
0
answers
384
views
How to use Group Policy to control local administration access (LOCAL ONLY)
At the company I work for, we have about 75 computer users.
We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory.
When users need to install software,...
- 311
1
vote
0
answers
37
views
DNS query from active directory is reaching reaching firewall in the same subnet
DNS query for root dns from active directory is reaching firewall which is in the same subnet. Default route for this active directory is L3 router which has no route to firewall unless traffic is ...
- 11
1
vote
0
answers
1k
views
Unable to view trusted domains in ADUC
My domain is Server 2003 (domainA) and the remote domain is Server 2008R2 (domain functional level) (domainB). At some point in the recent past, I lost the ability to view domainB (ADUC -> open a ...
- 131
1
vote
0
answers
680
views
DNS Server gone and now I get Zone Not Loaded by DNS Server
We have several domains in our infrastructure, separated by differing subnets (obviously). From our primary domain (call it domain A), we have a DNS forward lookup zone to domain B (which consists of ...
- 11
1
vote
0
answers
412
views
AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain
The method I use to authenticate a user's credentials on active directory is (Simplified):
New DirectorySearcher(New DirectoryEntry(path, user, pass, AuthenticationTypes.Secure)).FindOne()
On fail, ...
- 111
1
vote
0
answers
700
views
Getting Group Policy identifier in PowerShell
Some of our computers have a random "local group policy" being set that forces them to check a nonexistent intranet server for Windows Updates instead of using WU over the internet as they should. ...
- 107
1
vote
2
answers
156
views
Trying to join servers (on remote VPNed network) to Active Directory without forwarding all DNS queries over the tunnel
At our company, we have a coloc at a local datacenter (where we host our public Web Servers) and a Site-to-Site VPN set up between the coloc and our office. We would like to join the servers at the ...
1
vote
1
answer
66
views
Gpresult provides wrong output on vista machine regarding UAC settings
I have two workstations running Windows 7 Professional 64bit with SP1 and Windows Vista Business 32bit with SP2. Both are in the same OU and have a GPO linked named Hardening_Computers_Clients.
This ...
- 2,478
1
vote
0
answers
664
views
AD DNS conditional forwarding returns short name instead of fqdn
First of all this isn't a copy of DNS Conditional forwarder returns NETBIOS instead of FQDN (just sounds very similar).
We have two separate domains that do conditional forwarding to eachother. Each ...
- 61
1
vote
0
answers
763
views
Event 2042 - Replication-Error Lies?
On a windows 2008 R2 server, in the Event Viewer under
Applications and Services logs > Directory Service
I'm getting the following error twice an hour:
Invocation ID of source directory server:
...
- 1,530
1
vote
1
answer
1k
views
ad lds to create built in administrator account
I created an Administrator account using AD LDS but cannot log in with it. I used ADSI tool to create the user:
CN=LDSAdmin,CN=Admin,O=MyCompany,C=CH
and then added it to the built in group
CN=...
- 11
1
vote
0
answers
1k
views
Security considerations for AD one way trust from DMZ to corporate LAN
I am a Sharepoint developer and have been asked to deploy a Sharepoint server within a DMZ which will be accessed from a corporate LAN.
Currently the DMZ has public IP's (which are protected by a ...
- 11
1
vote
0
answers
703
views
ADFS 3.0 SSO Form authentication Issue - Subdomain not found under certain circumstances
Let me preface that I'm not near the server at the moment so I cannot give a direct readout of any error messages.
We have implemented an ADFS 3.0 Server and are using Microsoft's included SSO ...
- 21
1
vote
0
answers
278
views
Promote Windows Server 2012 to domain controller in an existing samba network
I have a Windows Server that I want to use as a domain controller to push gpo's to workstations that are on a samba 3 domain served from an Oracle Solaris server. If I were to promote this server to a ...
- 11
1
vote
0
answers
223
views
Not able to RDP with any other users
I have a strange problem in my Active Directory using Windows Server 2008 R1. Only one of my users is able to make use of remote desktop functionality from the 50 users I have in my domain. The rest ...
- 11
1
vote
1
answer
306
views
Remote location management copy and install large software updates to 50 LAN
Initially posted to Stack Overflow and was directed here. I'm new to programming and am trying to write a powershell script to manage software updates.
I'm in a windows domain environment with over ...
- 11
1
vote
0
answers
606
views
Specify DNS/Domain Controller when authenticating against a different domain
Client has two domains residing on the same subnet/physical network. Essentially there's just a POP3 mail server (OLDSERVER) and one of the old DCs (OLDDC) on life support to keep OLDSERVER happy. ...
- 14k
1
vote
0
answers
162
views
Authenticating devices instead of users via PEAP/Radius
Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
- 7,888
1
vote
0
answers
2k
views
Redirect DNS-Queries in Samba4 AD of local domain
I am running an Ubuntu 14.04 Samba4 AD Server and I control my networks DNS via a different server. I am using the samba version served by ubuntu which is 4.1.6.
Is it possible to configure the ...
- 151
1
vote
0
answers
1k
views
Give a user permission to insert and remove computer from windows domain
I want to give a specific domain user in my domain the permission to add/remove computers in the domain.
How do I do that? and more important, does anyone know what is the permission name that I need ...
- 111
1
vote
0
answers
118
views
Change Server 2012 R2 domain name in network section
In the network section of a Windows Server 2012 R2 displays the name of the domain as domain 2. For example: "mydomain.net 2". Ive seen similar problems with wireless profiles and that can be resolved ...
- 11
1
vote
0
answers
1k
views
Unable to access Samba fileshare on CentOS 7 from Windows 7 on AD Domain
I'm trying to stand up a new CentOS 7 server running Samba and I'm unable to get access to the shared directories from my Windows 7 local machine. As I'm not super familiar with CentOS 7, I followed ...
- 61
1
vote
0
answers
72
views
Rollout approach for centOS/RHEL linux servers to achieve centralised authentication through AD
We have 3 environments testing develop and production each having more than 40 Linux servers. Need to establish centralized authentication through AD for all these environment.
Which is the best ...
- 11
1
vote
0
answers
4k
views
pfSense Ldap Group Authentication
I have been battling with this for 3 days now and it's driving me a little crazy.
I can authenticate via user using Ldap using the following search filter:
sAMAccountName=%s
I cannot seem to get ...
- 11
1
vote
0
answers
223
views
Unable Join SOME 64 bit Windows 8.1 Pro Clients to Windows Sever 2003 Domain
We just deployed 12 brand new Windows 8.1 Pro 64 bit client machines. They are all identical models and all wired identically to our network/server room. 8 of the machines joined the domain with no ...
- 11
1
vote
0
answers
111
views
Server Migration 03 -> 12
I have run into a wall and out of ideas. Here's the situation. I have a client that has a old '03 DC with a 12 replicating the '03 server. It is out dated and has to many group policies and stuff it ...
- 11
1
vote
0
answers
2k
views
Migrating AD Lightweight Directory Services (LDS) or ADAM data to Azure Active Directory (WAAD)
We currently have an ADAM instance that we authenticate our ASP.NET web users against. We have a requirement to replace this instance with an Azure Active Directory instance instead with a new schema ...
1
vote
0
answers
2k
views
reset lost administrator password for Windows Server 2003 (AD)?
I've been contacted by a local golf course that has lost login access to their Windows 2003 server (suspected cause is a password change by a disgruntled ex-manager).
When I visited the site, they ...
- 783
1
vote
1
answer
691
views
Windows Server 2012 hide external HDD for non-admins
I am setting up a server where people connect to via Remote Desktop. It uses AD DS and uses an external HDD with a share on it for people's data.
However when these people log on, aside from the ...
- 141
1
vote
1
answer
206
views
Folder Redirection Issue
I am currently having a rather urgent issue with folder redirection. We attempted to move the files from the old server to the new server and everything works except documents. It appears to create ...
- 41
1
vote
0
answers
161
views
Setting environment variables based on passing Require directive
I finally succeed on configuring Apache as a SPNEGO reverse proxy for my app, and I'm using the AUTHORIZE_SAMACCOUNTNAME, AUTHORIZE_CN and AUTHORIZE_MAIL to figure out some information about the ...
- 11
1
vote
0
answers
4k
views
Login as domain user fails in Linux
Using pbis, joined a Linux (Ubuntu 14.04) node to the domain successfully.
# /opt/pbis/bin/get-status
LSA Server Status:
Compiled daemon version: 8.2.1.2979
Packaged product version: 8.2.2979.68390
...
- 203
1
vote
0
answers
213
views
How do I workaround inaccessible DCs in a spoke site, in a hub and spoke configuration?
I have a Hub and Spoke configuration. The spokes can never see another spoke.
SCOM is reporting errors that GPO can't access \company.com probably because every Domain Controller has an NS record, ...
- 8,961
1
vote
1
answer
93
views
Accessing local groups remotly for a Windows Fileshare where user accounts are on an AD
I am asking this question with almost no knowledge of Windows and Active Directory.
I have a Windows Server (2012), that I am using as a file server (FILE01.domain.tld). There are some local groups ...
- 131
1
vote
1
answer
77
views
When an Active Directory User Logs in to Local Windows 2012 Server Launch a Virtual Machine; Possible?
I won't get into the reasons why this needs to happen, however, is this possible.
I have a Windows Server 2012 R2 box that needs to be used as a daily driver for a few of a clients employees.
Ideal ...
1
vote
1
answer
346
views
Change Active Directory in Samba share server
I have the next scenenario:
Legacy Windows 2k Server as PDC (Primary domain controller) called A
Samba share server with some resources connected by winbind with A
Clean Installation of Zentyal 4.0 ...
- 129
1
vote
1
answer
915
views
Additional Keyboard settings from Active Directory
We have some users in our company who need to use additional Keybaords, in order to achieve this one of the other admins had written a VBS script which runs when users in a particular group log in to ...
- 1,014
1
vote
0
answers
539
views
Setting up SPN for SSRS in a CRM load balance environment
I'm getting this exception randomly in a CRM load balance LIVE environment when running Reports from CRM.
System.ServiceModel.Security.SecurityNegotiationException: A call to SSPI failed, see inner ...
- 131
1
vote
0
answers
1k
views
pfSense: Captive portal auth via Active Directory (2003)
I'm trying to set up a new firewall server. We chose pfSense and it's working nicely so far.
We managed to our Windows Server 2003 Active Directory as a user Authentication Server (System -> User ...
- 161
1
vote
0
answers
2k
views
AD Authentication with SAMBA, Winbind and SSS
I'm having trouble authentication with AD to a SAMBA share on a linux server.
Authentication appears to be working, but only halfway...
[root@myserver ~]# wbinfo -a my_ad_user%password123
...
- 662
1
vote
0
answers
180
views
Builtin group membership not updating on client machines
I have a small active directory setup which is semi-live (i.e. being used by only a few of the computers in the network), however when i try adding members to the builtin groups, and more specifically ...
- 111
1
vote
1
answer
874
views
How do I make browser shortcuts w/custom proxy settings available on user desktops?
In our environment, we have about 30 testers (website testers) located at different physical locations. However, they all log on to the same AD.
As it is now, their MSIE is configured to access the ...
- 1,600
1
vote
0
answers
690
views
Set SPN for all users in domain
I have a Windows 2008 R2 domain controller with more than 60 user accounts. Each time one of these users tries to connect to the DC authentication "falls back" to NTLM. Kerberos authentication fails ...
- 592
1
vote
0
answers
1k
views
Account Operators built in group and "User Cannot Change Password" property
I have a question about configuring of "User Cannot Change Password" property. Does default "Account Operators" domain group has ability to change this property? If not can it be delegated via AD ...
- 1,315
1
vote
2
answers
5k
views
Active Directory SQL Server Random Handshake Timeouts
We've installed active directory on a new server and joined our database server and web servers to this new domain. However, randomly, we'll get the following error. What would be the cause of the ...
- 111
1
vote
0
answers
62
views
gpo ie user force update
We use two 2008 Domain-Controllers and one 2012 DC
In a gpo we set the proxy for IE-11 per user. eg: X use proxy, server: proxyserver, port: 3131
This gpo is not mandatory, so users could change ...
- 11
1
vote
1
answer
178
views
2003 Domain Functional Level -- Do I need to run adprep.exe to trust a 2012 DFL?
My company is still using Windows Server 2003 for the Domain Controllers, with DFL (and FFL) already raised to 2003 DFL/FFL.
Now, we need to trust the domain of our new subsidiary. Their domain is ...
- 5,138