A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

-1
votes
0answers
11 views

subdomain working but not the main website

I am managing all my subdomains through ADC. I have created multiple sub and assigned them an IP in A record. They are all working. But when I ping or browse main website it is not working from ...
2
votes
2answers
2k views

New 2012 Domain Controller and error “The security database on the server does not have a computer account for this workstation trust relationship”

I have a Windows Server 2012 domain controller on a domain DOM1 running at a Windows Server 2008 R2 domain and functional level. All other domain controllers in DOM1 are 2008 R2. DOM1 has a two-way ...
-1
votes
2answers
3k views

How do I grant local administrator rights, but not Domain Administrator Rights?

How do I grant local administrator rights, but not Domain Administrator Rights? i.e. For user x, I want to grant install rights on the computer, but the user should not have Domain admin rights as I ...
2
votes
1answer
3k views

Can I add a Distribution List as a member to another Distribution List?

I'd like to add some distribution lists as members of a different distribution list to make things easier. Is this possible? If so, can somebody tell me how to set this up? Thanks in advance.
2
votes
1answer
3k views

New Domain Controller Cannot Enroll for KerberosAuthentication Certificate

I have an AD domain. 2003 FFL/DFL. The schema was upgraded to version 56 for Server 2012. The domain contains a mix of domain controllers from Server 2003, Server 2008, Server 2008 R2, and now Server ...
4
votes
1answer
2k views

Slow “applying computer settings” on workstation when I simulate domain controller being turned off that holds the FSMO roles in a two DC domain

Slight problem testing fail-over procedure with my two domain controllers. I have two domain controllers, DC1 and DC2. DC1 has all FSMO roles, is Active Directory integrated DNS DC2 is Active ...
0
votes
1answer
2k views

Lookup Active Directory entry by implicit UPN

In our company exists a forest-wide UPN suffix company.com and almost all user accounts have the explicit UPN set to fistname.lastname@company.com. This value is also set in the Active Directory ...
2
votes
3answers
2k views

Powershell - Find users belonging to more than one AD group

I'm new to AD and Powershell so please forgive me if I use the wrong terminology. I have a series of 50+ Active Directory groups called "ABC-something". Every active user needs to belong to exactly ...
0
votes
2answers
26k views

Windows Domain Controller/DNS Failure

I have a previous question up about this, but I've come to some new information and I figured I would start a new post to stir up some new discussion. To start, I will give you all a short ...
2
votes
0answers
200 views

LSA SID cache keeps old entry for renamed domain user - why?

I have a question about LSA SID cache on a domain member server. Recently I run into the issue when some users after their name was changed in AD has difficulties accessing application I support, and ...
3
votes
1answer
107 views

DNS settings for DCs in remote sites

I have our main DC here at the main site acting as the DNS server by itself, I have plans to put an additional one later. This is how its IP is configured DC1 IP: 10.10.5.201/24 Preferred DNS: ...
-2
votes
0answers
16 views

Searching users from another domain produces no results [closed]

I am trying to add a user from another domain to grant permission to a folder but it seems it cannot contact the other domain since it doesn't give any results. What could be the possible cause of ...
4
votes
3answers
200 views

How to check who reset the password for a particular user in active directory on a windows server?

I have the details about a user account when it was last modified (a password reset was done). But I would be interested to know who reset the password for this user. Is there any way I can find this ...
-1
votes
1answer
54 views

Join domain on Samba DC with a Windows 7 client [closed]

i'm an IT apprentice and i'm new on this forum. I've a problem for join my samba domain. I use Samba 4.2.1 on debian 7.8 and i use a virtual machine on virtualbox. So the problem is when i'm trying ...
-1
votes
2answers
37 views

Add user to a group in Active Directory using powershell

I am trying to add a user to a group in AD using powershell. I am using the following command: Add-ADGroupMember -Identity ...
0
votes
1answer
26 views

How to deny access on files to several groups easily?

Currently I'm working with permissions on files on the network with Windows Server 2012 Active Directory as follows: I set up one domain controller, on the domain controller I create users and groups. ...
0
votes
3answers
2k views

RPC Server Unavailable When Trying to Join W2003 Server to W2003 Active Directory Domain

I have an Active Directory Domain with a Windows 2003 Standard SP2 Server as the DC. When trying to join an additional Windows 2003 Standard SP2 server to the domain I get message "The following error ...
2
votes
1answer
34 views

ADDS: Mandatory Profiles through powershell

Intro I'm a networking student from Belgium and I just got assigned a big project. Basicly i'm responsible for the ADDS. We have to create several OU's and every OU needs at least 20 users or more. ...
2
votes
0answers
30 views

Adding multiple users from a group to an Active Directory group using Powershell

I have a powershell script that is supposed to go through a specific ou and store the groups into a variable $groups. Here is the code I use in the script: $Groups = Get-ADGroup -Properties * ...
1
vote
0answers
27 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
0
votes
0answers
12 views

SoftEther VPN not allowing clients to connect using AD credentials

We are trying to get SoftEther VPN to work on a SBS 2003 domain but it is rejecting apparently valid user credentials. (The server application is running on our actual SBS 2003 domain controller and ...
9
votes
6answers
10k views

Group Policy: Administrator Rights for Specific Users on Specific Computers

I'm a programmer stuck trying to administer an Active Directory setup for a small company. The Domain Controller is running Windows Small Business Server 2008. We have a staff of field workers using ...
0
votes
1answer
1k views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
2
votes
2answers
42 views

Importing users to AD with CSV, cannot get some fields to work

Been trying to build a CSV file to import users into Active Directory. I can get everything to populate, except for E-mail, Password, and Enabling the user. Just using this cmdlet in Powershell. ...
4
votes
1answer
109 views

Active Directory write permissions let edit users information but not administrator-users information

In our Active Directory (2008 R2), I used delegation to give permission to edit user information attributes such as phone numbers, title, postal address, ... to a group of non-admin users. Members of ...
0
votes
2answers
62 views

How to setup DNS correctly for computers inside a domain?

Suppose we have the following situation: there's one network with a router on which the internet access is configured and this includes the DNS IP's. Then we set up Active Directory on a server on ...
1
vote
2answers
52 views

Getting All Users From Active Directory Groups Using Powershell

I have a powershell script that I've written that gets all of the groups from an OU and stores them in a variable $groups. I want to be able to access the users of each group but seem to be having ...
0
votes
1answer
19 views

Exchange Server 2013 EXPR Section missing from autodiscover

We have a client who is having an issue with their autodiscover. They have an Exchange Server 2013 with CU1. After attempting to run an update on the server (Win 2k8R2) I needed to revert the ...
0
votes
0answers
38 views

How can I Deny permissions to logon to Remote Desktop Session Host server in powershell script?

I am need of some assistance please. I am a system admin and I am trying to create a script that will assist with the tedious tasks I have to do with disabling a user that no longer works for the ...
0
votes
3answers
1k views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
13
votes
5answers
26k views

Active Directory: Viewing “Attribute Editor” after finding an account via ADUC's “Find” option

When I activate the Advanced features (View -> Advanced Features) and open a user's properties by navigating to their OU and right clicking the user object, I see the Attribute Editor tab. However, ...
2
votes
4answers
77 views

How to get Microsoft license authentication for all machines on a network?

We have a small network (~150 desktops, ~20 servers) much of which is Linux. MS keeps wanting to audit our MS products every 3 years or so. I really don't have time to go around to 80-90 desktops and ...
0
votes
1answer
43 views

Solutions for bridging Solaris/AIX to Active Directory?

I need to have Solaris and AIX systems obtain authentication and name services to AD. I have had some success with Solaris using OpenLDAP as a proxy for user authentication. I have also successfully ...
4
votes
1answer
2k views

A single AD user can't log into a single Mac bound to the domain (DirectoryServices error). How can I resolve this?

On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly. However, we have one ...
1
vote
1answer
2k views

Active Directory FRS problems. 13508 error and other problems

I have 3 Domain Controllers. We will call them DC1, DC2 and DC3. DC3 and DC2 show Event ID 13508 in their FRS logs with no follow-up event(13509 I think) to say the error had been fixed. DC1's FRS ...
1
vote
0answers
15 views

DNS query from active directory is reaching reaching firewall in the same subnet

DNS query for root dns from active directory is reaching firewall which is in the same subnet. Default route for this active directory is L3 router which has no route to firewall unless traffic is ...
0
votes
1answer
299 views

Active Directory remote versus local computer logon

Hope some one can help a network/server noob understand how domains work in AD. I am in an organisation with 2 AD servers in 2 different countries, e.g. US and UK, and they set up the US and UK ...
2
votes
2answers
876 views

Default Domain Policy Corrupted

It appears that our domain's default domain policy is corrupted. The GPT.ini file is corrupted. When I go to open it, I get an access denied error. I tried to take ownership through explorer, takeown, ...
1
vote
1answer
1k views

Nagios NRPE plugin check_ad - Fixed

i've reading about this problem much and trying to solve it on my own ways but still not luck. I've running debian 7 as nagios server. Problem is that i cant check state of my Active Directory Domain ...
1
vote
1answer
3k views

error creating MS Exchange distribution list: Active directory response: 00000005: SecErr: DSID-031521D0

We've migrated a client from google apps to an MS Exchange 2010 SP2 on-premise setup. The setup /prepareAD went well, and the software was installed with the Administrator account. We've used the ...
0
votes
2answers
60 views

Active Directory: Track old password changes and expiry dates?

Is there anyway to find out when the last 2 passwords changes were made for an account? I reset a account password but I want to know if it already changed hours or minutes before I reset. OR maybe ...
0
votes
1answer
2k views

Windows server 2003 MMC has detected an error in snap. It is recommended that you shutdown and restart MMC

I have Windows Server 2003 STD x64 SP2 and I have been installed AD on it. When I try to add computer there is an error message saying: MMC has detected an error in a snap. it is recommended that ...
5
votes
1answer
106 views

Active Directory: Server 2008 and RHEL 5.10

Apologies if this is a re-post. I've been googling and researching the topic for over three weeks now and I've come up against the same problem over and over again and I haven't managed to get around ...
2
votes
1answer
3k views

How to connect AD Explorer from Sysinternals to Global Catalog

I'm using the sysinternals AD Explorer quite frequently to search and inspect an Active Directory without any big problems. But now i'd like to connect not only to a single AD Server. Instead i like ...
0
votes
1answer
27 views

Why must a previous computer name be removed from directory before the workstation can join with new name?

Sorry if the question is convoluted and it's difficult to search in case it's a duplicate question. I don't have keys to the castle, so as a low level tech I was wondering why I was unable to leave ...
2
votes
1answer
2k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
2
votes
3answers
21k views

How to enable Audit Failure logs in Active Directory?

I have a user account that keeps on getting locked out. I am trying to find out what caused it. So I want to enabled failure audits in event viewer as a start. But, I don't know how! How do I enable ...
0
votes
1answer
57 views

WS 2012 r2 DNS server issue: Access was denied

I have a Windows Server 2012 r2 virtual machine as DC1 and DNS server running on Windows Azure and a Windows Server 2012 r2 local machine as DC2, DHCP and DNS server on-premise. I found my DNS server ...
0
votes
0answers
13 views

How to authenticate RHEL 6.6 to Windows Server 2012 Active Directory and LDAP? [duplicate]

Need help with setting up LDAP on Windows Server 2012 R2, I have AD setup already, but not sure what all I need to do to get LDAP running. Then I can't find any good resources online to authenticate ...
1
vote
1answer
151 views

Active Directory Mismatch

I have a Active Directory Mistmatch how do I fix this? I have 2 x 2008 R2 Domain Controllers and a 2008 Domain Controller and I was trying to add a 2012 R2 Domain Controller. The Schema Version of ...