A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
1k views

Configure FreeRADIUS with Active Driectory allow specific group of users to authenticate

In order to authenticate WiFi clients I use a FreeRADIUS server configured to check for user credentials in an Active Directory environment. Currently all users with a valid account are authenticated ...
2
votes
1answer
31 views

Bulk License Office 365 Users by OU with PowerShell

I'm trying to do something that I don't think should be too complicated of a fix. My end goal: I have certain users in one AD OU that need to use a certain license in Office 365, and different users ...
2
votes
2answers
25 views

What permissions are required for a domain user to login to a domain machine?

I have been under the impression that Domain Users should be able to login to a domain joined machine with their domain credentials out of the box and no special permissions needed. I'm running this ...
0
votes
1answer
27 views

Local group policy not applying (gpresult says its empty, but it's not)

We are running a strange AD constellation here, where the same logon script is defined within the local group policy on each server (don't ask me for the reason, it wasn't my idea). Then an (AD-) ...
2
votes
1answer
1k views

How exactly does the home folder mapping in 2003 AD work?

I'm trying to troubleshoot an issue with a user's My Documents not being mapped to a network location as it should be. Most of the user have their AD account set to have H as their home folder and ...
6
votes
2answers
73 views

Cached credentials in ActiveDirectory and setting up machines

If one has a bunch of Windows machines which will be used remotely and off-domain (at first), is there a way to presynch the usernames and passwords from Active Directory so the users may login via ...
1
vote
2answers
1k views

Roaming Profile Permissions and Migration

Currently a client as 2003 DC and we are migrating them to a 2008R2 on a 2012 Hyper-V Host. They have a handful of roaming profiles - but with the usual setup - i.e. the only permissions on the actual ...
2
votes
2answers
5k views

an active directory domain controller could not be contacted

After creating an active directory domain controller i tried to add client computers to the domain i kept hitting a snag. The following error occurred when DNS was queried for the service location ...
4
votes
1answer
1k views

Reading files on network share from a Windows service (app over tomcat as service)

I have a webapp over tomcat6, which is installed as a service in a WinServer (2008 or 2003r2, don't know for sure, people haven't let me put a hand over it so far). The Tomcat service runs with a ...
0
votes
1answer
2k views

Windows server 2003 MMC has detected an error in snap. It is recommended that you shutdown and restart MMC

I have Windows Server 2003 STD x64 SP2 and I have been installed AD on it. When I try to add computer there is an error message saying: MMC has detected an error in a snap. it is recommended that ...
5
votes
5answers
7k views

Domain Admins group denied access to d: drive

I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01). The member server has a C: and a D: drive. Part ...
0
votes
0answers
35 views

Forward Lookup Zone Domain, Name Server IP “Unknown”

I have added the first new 2012r2 DC to an existing domain, that is running on 2003 servers. After getting it all setup, ADDS replicating, DNS replicating, DHCP setup etc. Everything I think seems to ...
3
votes
2answers
50 views

Deploying printers to specific users via Group Policy

I have noticed two different ways of deploying printers to specific user with Group Policy in Windows Server 2012. The first method is by creating separate GPOs for each group, and the second method ...
0
votes
0answers
17 views

Local User Account Disappeared After Domain Upgrade

I upgraded to server 2012 r2 from 2008 r2 I have all computers in AD The workstations with local logons are losing the local user that i have set up on them... (the admin logon is not disappearing) ...
0
votes
0answers
14 views

Access denied trying to login to Ubuntu 14.04 (Authentication with Active Directory)

I'm trying to set up my Ubuntu 14.04 print server to authenticate users with my Active Directory server, I've followed all of the steps using the following tutorial: ...
0
votes
0answers
36 views

Why can't we directly change a group from global scope to domain local or vice versa?

If we need to change the scope of a group from global to domain local or vice versa we first need to change it to Universal. What is the reason for this?
2
votes
1answer
1k views

Why don't Active Directory user accounts automatically support Kerberos AES authentication?

I'm playing around with a test domain on Windows Server 2012 R2. I'm operating at the highest possible functional level and have no backwards-compatibility issues in my small test environment. ...
2
votes
3answers
484 views

The requested operation requires elevation

We have about 15 PCs on our network. I can make changes to all the PCs except one. I keep getting the message "The requested operation requires elevation". When I try to run a program as an admin, ...
0
votes
0answers
10 views

Microsoft AD DS group membership verification when authorizing user

Can somebody point out to documentation or explain how verification works in AD DS when it is necessary to authorize user to perform some actions. As far as I remember user's SID or token should ...
-1
votes
0answers
12 views

Prohibit computers to join a domain if they are not exist in the Active Directory

Whenever we join a computer to a domain, the computer object is automatically created inside Active Directory. We would like the option to be able to join a computer to a domain only if the computer ...
0
votes
0answers
24 views

Public Share with Samba4 AD DC does not work

I tried to set up a public share on my Samba4 AD DC but Windows always asks for username and password before mounting. I can't figure out what is going wrong. The only thing is, that testparm does not ...
0
votes
0answers
12 views

How to export LDAP RootDSE attributes to LDIF file?

How to export LDAP RootDSE attributes to LDIF file? I was able to use Active Directory Explorer to see RootDSE attributes but I can not export them: ...
1
vote
0answers
28 views

enter-pssession : Connecting to remote server failed with the following error message : The user name or password is incorrect

I am unable to connect to domain controller via below script. This script is working for another domain controller so it mean script is correct. While I am connecting i am getting an error: ...
2
votes
1answer
2k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
1
vote
1answer
3k views

error creating MS Exchange distribution list: Active directory response: 00000005: SecErr: DSID-031521D0

We've migrated a client from google apps to an MS Exchange 2010 SP2 on-premise setup. The setup /prepareAD went well, and the software was installed with the Administrator account. We've used the ...
3
votes
2answers
5k views

Handling domain joined laptops that are rarely on the local LAN?

We have quite a few laptops that are rarely, if ever, connected to the local LAN. Since they won't be able to contact a domain controller very often, having them joined to the domain doesn't work ...
8
votes
9answers
61k views

Get list of AD groups a user is a member of

Suppose I have the user id of a user in Active Directory. I'd like to get a list of all AD groups in which that user is currently a member of. How can I do this from the Windows command line? I've ...
1
vote
1answer
28 views

Powershell remoting with active directory

I am able to connect to domain controller via below scrip remotely, but after that i want to run disable-ADAccount ,Get-ADUser command but I am getting error Get-ADUser : The server has rejected the ...
0
votes
1answer
41 views

User Unable To Login Remotly

When we configure a computers, we always connect it to our company domain after we add the user into our AD. So the next time we reboot the system we can login with the user credentials since we join ...
1
vote
2answers
117 views

Active Directory Rebuild - User Login

I have around 100+ users in a windows 2008 active directory. There is only one active directory controller / server in the network. If the server hard drive crashed, and if I rebuild the active ...
-1
votes
1answer
45 views

Account Lockout Tools Server 2008/2012 [closed]

We have users on both Laptops and Windows OS phones and are seeing lots of lockouts. In another company I used these lockout tools from Microsoft: ...
0
votes
1answer
15 views

infrastructureUpdate type OU called Infrastructure in Active Directory

A new OU called infrastructure with the type infrastructureUpdate has appeared in my Active Directory. It has just appeared. I have been going through the setup recently and the last major thing I ...
1
vote
1answer
42 views

Why can't we link GPO to an AD container?

Containers are used to segment and organize a network and were designed with specific uses and restrictions in mind. Is this the only reason why we can't link GPO to a Container and only to OU? Are ...
2
votes
1answer
33 views

Best practice DNS in multi-forest environment

I have a multiforest environment, both forests exist in the same network. I want DNS between them to operate as smoothly as possible. Forward lookups are easy and can be handled with conditional ...
0
votes
1answer
927 views

Domain controller is registering 2 IP addresses with DNS

Recently a DC was promoted and the IP was used from the old DC which was demoted and shutdown.How tostop this DC from registering 2 IP addresses with DNS? Please let me know if any questions.
3
votes
2answers
941 views

Winbind/AD: Local users with identical AD usernames

We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and ...
4
votes
1answer
2k views

How should DNS be configured for remote VPN access to a Windows Domain?

Suppose you have a small windows domain configured as follows: domain name is ad.example.com (as per these guidelines) DC1 is at 10.10.10.3 DC2 is at 10.10.10.4 DC1 and DC2 are running the ...
0
votes
2answers
1k views

Cannot connect to domain error: The format of specified network name is invalid

I cannot connect clients to sbs2003 domain because of this error: The format of specified network name is invalid. Before that there is a prompt for a login and password, so the server is found. I ...
11
votes
1answer
20k views

What permissions are required for enumerating users groups in Active Directory

I have a .net web application which needs to obtain the groups a user is a member of in Active Directory. Todo this I am using the memberOf attribute on the users records. I need to know the ...
0
votes
0answers
37 views

Can't ping domain controller from PC on a remote subnet

In trying to connect a PC from a remote subnet to our domain controller. Initally the domain controller couldn't contact the pc, but resetting the vpn connection resolved that. Currently the PC from ...
0
votes
2answers
38 views

Using Exchange 2013 with Samba as DC

I realize that Exchange relies heavily on AD, and I was wondering if it is possible install Exchange 2013 into an environment that is running Samba 4 as the DC?
5
votes
1answer
59 views

Windows 8.1 Pro migrating “Microsoft live” account to domain account

For a variety of reasons a significant number of our Windows PCs are not joined to our Windows 2012 R2 Active Directory domain. We are in the process of rectifying this, and are joining PCs on a ...
1
vote
1answer
2k views

Windows Server 2008 R2 hangs when Editing folder permissions

Background: The server in question is a member of a domain. This is a brand new server, freshly installed. I can log into this server using any domain user (which tells me that on some level it is ...
0
votes
2answers
927 views

Find deleted Organizational Unit Windows Server 2008 R2

I really need help right now. In AD DC one of our organizational units named "Columbus" is missing. It has Users in the unit, and now the Users and the Organizational unit is now missing. I searched ...
1
vote
4answers
88 views

How to access a machine with a wrong network address?

I have a Windows Active Directory network in a LAN of addresses 192.168.10.0/24. I have another site that has addresses of 192.168.11.0/24, where all AD servers are in the 192.168.10.0/24 site (I ...
2
votes
0answers
77 views

How can the x-frame-options HTTP header of ADFS 3 be manipulated?

By default, ADFS 3 responses contain the "X-Frame-Options: DENY" HTTP header. This prevents ADFS from being run in an iframe, because this presents an opportunity for clickjacking attacks. At the ...
-2
votes
1answer
35 views

Trouble Active Directory windows 2012

We are using a windows server 2012 and we have a problem. Our stations use windows 7 and windows 8. When we add a person in an access group in our Active directory, the user must restart their ...
0
votes
0answers
31 views

kdm and ssh detecting different fully qualified domain name when using kerberos authentication

I'm attempting to setup Kerberos login support (Windows AD domain providing the kerberos) for Kubuntu 12.04 Linux workstations at the company I'm at. It's almost completely working but I can't get ...
26
votes
7answers
98k views

Finding why a user is locked out in Active Directory

A user's account keeps getting locked out in Active Directory. It's probably caused by an app that's using Windows authentication to connect to SQL Server. Is there a way to find out which app is ...
2
votes
1answer
3k views

Unable to join Fedora 20 machine to Active Directory with realmd

I don't know a lot about Active Directory, but I have some basic knowledge of what it does. I have been trying to join a Fedora 20 machine to the domain, and have been having some issues. I ran the ...