Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

7
votes
5answers
8k views

How to find the computer name a user logged on to

Is there a tool or script or some other way of knowing what computer name a specific user is currently logged on to? Or even was logged on to? Say the user "HRDrone" is working on his machine whose ...
1
vote
0answers
20 views

Windows 7 + Dialup Network Connection (“Wizard cannot create the connection”)

We have a banking application[1] that requires a Dialup Connection object to establish it's connection. We've recently upgraded to Windows 7 and are unable to create the connection; the error message ...
0
votes
1answer
1k views

Where do I define a group policy that will set a users desktop background color to green the first time they log in?

Servers: W2k8 R2 x64 Desktops: Win7 Pro x64 Our current group policy uses a custom ADM file to define certain properties of the desktop (Background Image (centered), Background Color is green (00 74 ...
0
votes
0answers
25 views

Program to find out which computer a user is logged into [duplicate]

I am a Network Admin for a local company, and we have many users that login to their computers remotely. Often, these users forget the name of their work computer they left on. I found psloggedon, ...
4
votes
1answer
93 views

PowerShell DSC Group Resource - “Could not find a principal with the provided name”

I am trying to use PowerShell DSC to add a domain group to the local administrators group. Here is the code: Configuration TestSetup { Node localhost { Group Administrators { ...
-1
votes
1answer
29 views

User right to only be able to add machines to an Active Directory domain

I know that to be able to add a machine to AD a user need domain rights. I would like to know if is it possible to give a user only the right to add a machine to AD but without the rest of the rights ...
4
votes
1answer
28 views

Should all AD USNs be the same?

I have two AD sites, one with 5 DCs and the other with 2 DCs. I'm seeing most DCs with zero difference between current and original USNs, and only two (on the same site) showing any difference. Is ...
0
votes
2answers
298 views

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I ...
-2
votes
2answers
64 views

What's the difference between an User Account vs Computer Account for Active Directory? [closed]

I did some search on this already but still don't understand it. Can someone explain their differences as simple as possible? It seems like they do pretty much the same thing....
0
votes
1answer
1k views

Multiple domains, Exchange 2010, mailbox access via OWA

We currently run two separate domains where our new implementation of exchange 2010 is currently on a separate domain the users. My problem is: joe@domaina.com cant access his mailbox at ...
2
votes
1answer
2k views

Domain Trust 2008 to 2003

I'm having trouble setting up the trust relationship between a Windows Server 2003 and a Windows Server 2008 AD. Domain a is Windows Server 2003 Forest functional level. Domain b is a Windows Server ...
0
votes
1answer
37 views

How do I apply NTFS permissions to protect user profiles?

I want to set NTFS permissions on a users home directory so that one user cannot access another users home directory. How do I go about doing that? I need to be able to apply this to hundreds of users ...
0
votes
1answer
824 views

Error setting up Data Protection Manager 2010 Agents / Network “Unauthenticated” in network settings

I'm not sure if the two are connected but i suspect they are. Basically I'm tring to setup Data Protection Manager 2010 on a fresh install of Server 2008 R2 in a SBS 2003 domain. Everything went fine ...
3
votes
1answer
631 views

Automatically refresh credential after password change

Lets say we have around 300 Windows XP machines on our ActiveDirectory domain that are used for processing something. Each has an account which is patterned on the machines name. As these are ...
-2
votes
1answer
61 views

Two domains within the same IP Range

We are in the process of implementing MS Dynamics AX and a requirement by our consultants is to have a test environment. We can build this environment and let it use our live AD setup however I wish ...
1
vote
1answer
1k views

Outlook 2010 exchange setup prompts for username@domain.local rather than email@domain.com

We use a hosted exchange service. When users want to set up Outlook 2010 to access their account, they open Outlook and run through the configuration steps. Autodiscover is enabled, and in the ...
0
votes
1answer
645 views

Moving mailboxes between Exchange 2007 and Exchange 2013, with servers being on different domains

We've merged with another company, and part of our revamp is to move to a new hosting location, and new servers. The company currently has an Exchange 2007 server/s, with about 200 mailboxes, for ...
0
votes
1answer
909 views

Samba/Winbind: adding domain users to local groups based on domain group

I have a Redhat ES 6 server that's successfully joined to a domain via Winbind (i.e. I can login to the Redhat server using domain credentials with no issues). What I'm looking to do at this point is ...
0
votes
0answers
12 views

Creating a template/default roaming profile

With Windows Server 2012 R2 Datacenter and running Windows 8.1 machines, is there a way to create a default or template that will contain shortcuts and files for a new user when they are created? ...
2
votes
2answers
51 views

Active Directory with custom domain name? [closed]

I'm new to the Active Directory world (I know how to use it, not set it up :) ). I just bought a server from Leaseweb running Windows Server 2012 R2 and plan to use it for Active Directory. It has its ...
1
vote
1answer
20 views

Domain Authentication over SSLVPN

I will start with a little background information before asking my question. Network Setup: 5-site MPLS w/ cloud firewall. SSLVPN client connects to Cloud Firewall and authenticates users against our ...
4
votes
2answers
200 views

Active Directory Time Synchronisation - Time-Service Event ID 50

I have an Active Directory domain with two DCs. The first DC in the forest/domain is Server 2012, the second is 2008 R2. The first DC holds the PDC Emulator role. I sporadically receive a warning ...
0
votes
0answers
52 views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
1
vote
1answer
1k views

Windows authentication failure between multiple domains (sites)

I have just rolled out a new Intranet company wide - the company has 6 UK sites, each has a local domain called (for example) london.local, derby.local, thatlotupnorth.local etc etc, and each has its ...
1
vote
1answer
22 views

How to debug SASL authentication via LDAP towards active directory

I am trying to configure SASL running on Centos 6.5 to allow authentication towards the corporate active directory server. The end goal is to authenticate access to some subversion repos which are ...
9
votes
2answers
361 views

Win7 clients failing with cached credentials on samba4 RODC

I'm setting up a test environment for a customer about to deploy samba4 into 1400 remote sites and I'm running into a problem. It's my job, after all, to run into problems and then solve them. Active ...
1
vote
1answer
38 views

Windows Server 2008 R2 CA not issuing more than 2 years

I have active directory environment in 2003 R2. I have installed 2008 R2 Enterprise Edition CA. Then I have created custom template from web server template and add expiry date as 15 years. my root ...
3
votes
3answers
575 views

Redeploying Office to a single client after manual uninstall

One of our client PC's recently got random crash issues with MS Word. I manually uninstalled Office 2003 locally on the client, ran "gpupdate /force /boot" and expected the client to reinstall Office ...
2
votes
1answer
68 views

AD Account Keeps Locking out

We have a GPO that states if a user that unsuccessful logs on more than 3 times to lock the account for 30mins We have a single user who keeps getting locked out and there are no services, scheduled ...
0
votes
1answer
30 views

Can AD Domain Services authentication be influenced by custom code?

I am wondering if it is possible to cause AD to service authentication requests in any way besides simply consulting its internal password hashes. Ideally, I'd like to have it call code I provide ...
2
votes
1answer
619 views

(Powershell) Method to return a list of groups where a specific user has 'write member' security

We use a piece of web-based software that users can log on to in order to manage access to shares controlled with AD groups. The list of groups a user can manage are the groups on which they have ...
0
votes
0answers
27 views

Quest Migration - AD account that doesn't sync properly

I have an issue with an AD account that has been "migrated" using Quest Migration Manager for Active Directory, version 8.8. This organisation currently have two forrests. Let's call them ad.local ...
-1
votes
0answers
13 views

active directory many dc to many dc external trust

this is related to preferential active directory one-way trust targets DomainA_ForestA has 4(dc1,dc2,dc3,dc4) dc DomainB_ForestB has 4(dcc1,dcc2,dcc3,dcc4) dc DomainA 2-way external trust DomainB ...
3
votes
1answer
726 views

How do I stop DFSR replication preventing a Domain Controller from advertising Domain Services?

I had set up a 'test' domain with two Windows 2012 AD domain controllers (DC1 & DC2), both virtual machines. Unfortunately, DC1 (the FSMO holder) became completely corrupted. While I could start ...
55
votes
6answers
72k views

How can I find out what AD groups I'm a member of?

I'm running a Windows XP desktop in a corporate environment. How can I find out what AD groups I belong to?
1
vote
1answer
30 views

Windows domain grant desktop access only to some users

I must grant only domain admin members to open a server desktop session. How to limit desktop access to some computers (typically servers) for some groups only?
0
votes
1answer
953 views

Windows server 2003 MMC has detected an error in snap. It is recommended that you shutdown and restart MMC

I have Windows Server 2003 STD x64 SP2 and I have been installed AD on it. When I try to add computer there is an error message saying: MMC has detected an error in a snap. it is recommended that ...
0
votes
2answers
26 views

Migrating server local groups (currently workgroup) to domain?

I have about ~30 workstations that I administer, plus a fileserver, all of which I inherited when I took this net admin job. The previous guy had been around forever from when the company was far ...
1
vote
1answer
43 views

windows security log - failure reason startswith %%

Please help - do You have the list with descriptions of failure reasons eg. %%2313, %%2307... I've researched Net and nothing.. :( Mainly I see it in ID 4625 in Windows security logs. On ...
1
vote
3answers
76 views

Displaying all groups that a user from another domain is a member of

My team and I are stumped on this one. We have two domains at work, OldDomain and NewDomain. We are working on migrating from OldDomain to NewDomain as mandated by ParentCompany. The trust is one ...
8
votes
2answers
240 views

Demoted domain controller still authenticating users

Why is a demoted domain controller still authenticating users? Whenever users log onto workstations with domain accounts, this demoted DC authenticates them. Its security log shows their logons, ...
1
vote
4answers
9k views

How to add a domain user to the local admin group remotely?

I need to add a domain user in the local administrator group remotly and I have to the local admin password
0
votes
1answer
37 views

sharepoint 2013 user profile sync permissions problems

I’m trying to stand up a new SharePoint 2013 farm. I've got an issue where we aren't syncing all of the user properties between sharepoint and AD, and it’s the email properties in particular that I’m ...
1
vote
1answer
27 views

What do the error messages and codes mean when creating and installing Managed Service Accounts?

When using the PowerShell Cmdlets for creating and installing Managed Service Accounts, certain errors can be thrown. What does each error mean?
-1
votes
1answer
39 views

How to check if a AD group is being denied access to a file or a folder

How to check if a particular AD group is being denied access to a particular file or a folder, using bat /powershell 2.0
0
votes
1answer
934 views

Group Policy for DNS Server Addresses

This question deals strictly with the methodology of using Active Directory to publish DNS settings and controlling the DNS server address order to domain attached clients. This is not asking about ...
0
votes
2answers
980 views

LDAP authentication issue with Kerio Connect

We have Kerio Connect (mail server) running on a Windows Server 2003 server on a domain. In the webmail client, users are able to change their domain password. This functionality used to work fine ...
1
vote
0answers
29 views

Slow first login to a AD-joined Samba box

I have joined my first Debian box to an Active Directory (2008 R2). It works, I can log in with AD credentials, browse Samba shares. There is just a problem with the time it takes for someone to log ...
4
votes
1answer
826 views

netlogon errors

I have two instances of mssql 2005 and am using CA XOSoft replication. The master is a failover cluster and the replica is a standalone server. They are all running Server 2003 sp2 x64. Same patch ...
1
vote
1answer
70 views

Fake Recycle Bin via Group Policy

Is it possible to create a fake recycle bin where the files aren't actually deleted using MS AD/ Group Policy? The goal is to be able to recover 'deleted' files after, let's say, a dirty resignation. ...