Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

0
votes
2answers
1k views

LDAP authentication issue with Kerio Connect

We have Kerio Connect (mail server) running on a Windows Server 2003 server on a domain. In the webmail client, users are able to change their domain password. This functionality used to work fine ...
0
votes
1answer
38 views

How to change Samba4 AD realm

I have an Ubuntu 14.04 server that runs Samba4 as Active Directory PDC. The server is called athena and its DNS name is athena.ad.domain.com. The realm is AD.DOMAIN.COM and the NetBIOS name is ...
0
votes
2answers
43 views

Local Privileges/Rights Issues after Domain Rename Windows Server 2012 Std R2

After renaming a domain from .com to .local I've noticed that none of my credentials work when I try to make any changes using my domain Administrator account. When I try to install software that ...
1
vote
0answers
51 views

Active Directory Mismatch

I have a Active Directory Mistmatch how do I fix this? I have 2 x 2008 R2 Domain Controllers and a 2008 Domain Controller and I was trying to add a 2012 R2 Domain Controller. The Schema Version of ...
0
votes
3answers
28 views

Migrating shared directories from Windows Server 2003 SP2 to Windows Server 2008 R2

I'm setting up a new Active Directory server and need to migrate all the shared directories from the old server. I've found a lot of information about DFS Replication, but that isn't available until ...
0
votes
0answers
28 views

Move application servers from one domain to another

I have built a new domain and created a trust between the new domain and old domain. I have migrated the users and PCs but have yet to move the servers. Does anyone have any suggestions as to the ...
0
votes
1answer
567 views

Active Directory GPO not working with Windows XP clients. Work fine with Windows 7

We have 2008 Enterprise R2 64 bit domain controller with Windows XP and Windows 7 as clients. When i try to use a group policy to make all users desktop wallpaper to a common JPG image ( Image is ...
0
votes
2answers
27 views

Starting application on RDS connection

I have the following servers: Server 1 - Windows 2003: The original Domain Controller for AD, DNS Server server 2 - WIndows 2012: The latest server, upgraded to a domain controller too Now when I ...
3
votes
2answers
690 views

Winbind/AD: Local users with identical AD usernames

We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and ...
0
votes
0answers
23 views

GID/UID Wrong with Samba4 Member server

I have joined a Ubuntu 14,04 server to my 2012 domain using Samba4 but when I check the id of a user I get GID that are out of range. The GID/UID of running a "ID domain_user" come back completely ...
1
vote
2answers
1k views

Group policy logon script copies files to client PC but does not execute exe

We are trying to copy 3 files from our domain controller to a user PC and have it execute from a .bat file when a user logs in via Active Directory. When we associate the .bat file to a user in AD ...
0
votes
3answers
639 views

Move-ADObject errors upon taking CSV-file input

Hoping you can help! Where I work, when we create a user, the object is put in "CN=>User's full name<,OU=Something1,OU=Something2,DC=SomethingElse,DC=local". From there the user object needs to ...
0
votes
0answers
20 views

Are there any standalone Windows debug/query tools that use ADSOpenObject?

I have an application that uses ADsOpenObject to initiate a connection to global catalog servers and validate AD credentials. Lately, connections from this application have been very slow to ...
0
votes
1answer
2k views

Samba/Winbind: adding domain users to local groups based on domain group

I have a Redhat ES 6 server that's successfully joined to a domain via Winbind (i.e. I can login to the Redhat server using domain credentials with no issues). What I'm looking to do at this point is ...
2
votes
1answer
734 views

New Domain Controller Cannot Enroll for KerberosAuthentication Certificate

I have an AD domain. 2003 FFL/DFL. The schema was upgraded to version 56 for Server 2012. The domain contains a mix of domain controllers from Server 2003, Server 2008, Server 2008 R2, and now Server ...
0
votes
1answer
920 views

Cannot connect to domain error: The format of specified network name is invalid

I cannot connect clients to sbs2003 domain because of this error: The format of specified network name is invalid. Before that there is a prompt for a login and password, so the server is found. I ...
0
votes
1answer
1k views

Windows server 2003 MMC has detected an error in snap. It is recommended that you shutdown and restart MMC

I have Windows Server 2003 STD x64 SP2 and I have been installed AD on it. When I try to add computer there is an error message saying: MMC has detected an error in a snap. it is recommended that ...
1
vote
1answer
36 views

Windows 2K8 R2 in AD environment not allowing SMB connections

I've got 2 Windows2k8R2 VMs. One is the domain controller, the other one is a TS server. Both have network discovery and file sharing enabled. Currently the TS server is not allowing any SMB ...
-1
votes
0answers
22 views

AD/LDAP: User accounts lost “Change password” permission for SELF

Seemingly random user objects in our 2003 Native Active Directory lost the non-inherited "SELF" and "Everyone" entries that grant "Change password." This has resulted in random people not being able ...
1
vote
1answer
65 views

Use Roaming Profiles as Default in AD (running Samba)

I've just set up an Active Directory Domain Controller (running Samba 4), created users, shares, groups, etc and everything is working. However, I have an environment where the use of roaming ...
3
votes
1answer
780 views

Automatically refresh credential after password change

Lets say we have around 300 Windows XP machines on our ActiveDirectory domain that are used for processing something. Each has an account which is patterned on the machines name. As these are ...
2
votes
1answer
2k views

How to connect AD Explorer from Sysinternals to Global Catalog

I'm using the sysinternals AD Explorer quite frequently to search and inspect an Active Directory without any big problems. But now i'd like to connect not only to a single AD Server. Instead i like ...
0
votes
1answer
47 views

Automated third party software for Active Directory administration [closed]

I have a situation where there are multiple Active Directory (AD) groups that each account is added to but each group have different expiration dates. For example, user1 will be in groupA and ...
3
votes
1answer
72 views

AD Sites and Services - Adding Subnets

We have various physical sites with servers, workstation, printers, switches, and routers. Is there a reason to add subnets that do not contain Windows devices? For example printers or switches? We ...
-2
votes
1answer
53 views

powershell script that outputs date of the day as a file name

I have a script which lists local admins of all hosts in Active Directory below: $Searcher = New-Object DirectoryServices.DirectorySearcher([ADSI]"") $Searcher.Filter = "(objectClass=computer)" ...
1
vote
3answers
46 views

_msdcs Zone Not Updating

I've been working on cleaning up our DNS/DHCP and I'm about ready to turn on scavenging (it's never been enabled) to start cleaning up some old records, but before I do, I wanted to check something. ...
1
vote
3answers
50 views

AD Sites - Replication Connections

As I understand it, the KCC should automatically create To and From replication connections for your sites unless you disable this feature. Looking through our AD Sites and Services, I can see that ...
1
vote
1answer
49 views

Do both Active Directory servers need to see each other for replication?

I'm trying to set up a remote DC for DR, and I've chosen to put it in AWS in a VPC with our other servers being backed up. I can restrict that with security groups to only accept traffic from the main ...
2
votes
1answer
54 views

Active Directory backup/restore without DSRM

I'm trying to backup my local DC to AWS for DR. When running locally, a system state backup and a restore through DSRM works fine. Unfortunately, a server in DSRM fails to boot in AWS (a situation ...
0
votes
0answers
44 views

Is my understanding of Microsoft data interaction correct?

I am creating diagram to help our Tier 1 and 2 staff understand the flow of data from ADUC as well as other databases in our company. I'm trying to get a good grasp of how a users data is accessed by ...
-1
votes
0answers
52 views

2008 R2 DC / ADDS disaster recovery plan help needed [on hold]

First off, I have a perfectly healthy production domain with 2 domain controllers. One is 2008R2, the other is Server 2003. Replication occurs between them, the only issue is there on the same site. ...
0
votes
0answers
57 views

The Destination Server is Currently Rejecting replication Request - Error Event ID1864. Warning ID 2092

hope some one can help me with the subject mentioned error. My current set is that I have physical Win2k8R2 Box and a Virtual server with the same configuration. recently I am having replication ...
2
votes
1answer
1k views

Unable to join Fedora 20 machine to Active Directory with realmd

I don't know a lot about Active Directory, but I have some basic knowledge of what it does. I have been trying to join a Fedora 20 machine to the domain, and have been having some issues. I ran the ...
1
vote
1answer
36 views

How can I delegate “Attributes 1-15” in Exchange / AD?

The following attributes are present on an Exchange user, and this is what my colleague sees: (notice the locks) How can I properly delegate Read access (or Read write if it must be) to these ...
4
votes
1answer
883 views

netlogon errors

I have two instances of mssql 2005 and am using CA XOSoft replication. The master is a failover cluster and the replica is a standalone server. They are all running Server 2003 sp2 x64. Same patch ...
2
votes
1answer
397 views

Outlook for Mac, Active Directory DNS and DDOS

Edit: This is not a question about DDOS, but a question about how to resolve a technical issue impacting only Mac clients of Outlook Anywhere. Problem and solution are are now known, but I cannot ...
0
votes
3answers
547 views

Migrate handful of users from one child domain to another

We have a forest SiteA We have child domains SiteB SiteC SiteD We have a few users who are on SiteB and need to be migrated over to SiteC. We used to be setup like SiteB.Comapnyname.local\USERNAME ...
1
vote
2answers
74 views

Avoiding a multi-homed Domain Controller in a dual network environment

I'm trying to take over an old infrastructure and clean it up, but I'm running into some issues deciding on the new architecture. We have a set of around a dozen or two test/production servers in a ...
5
votes
2answers
79 views

Joining a Linux host to Active Directory unattended

I'm trying to setup a block of hosts using kickstart and there's two commands that need the password to be entered. One is kinit, for that one it's easy to just generate a keytab file and pass it ...
4
votes
3answers
91 views

How do I launch a command on a remote computer with an invalid domain trust? (using local creds)

I intend to use WMIC to reset the trust of a machine that is remote, and off the network. All of the following variations result in an "access denied": The following works fine: net use ...
1
vote
0answers
52 views

Authenticate users from Active Directory with UserPrincipalName or Mail with FreeRADIUS

According to this documentation: http://deployingradius.com/documents/configuration/active_directory.html ; FreeRADIUS can authenticate Active Directory users using Samba's ntlm_auth, and in fact it ...
2
votes
2answers
4k views

What is the best way to see objects attributes in Active Directory?

I can not find how to see objects attributes in Active Directory in Microsoft Management Console (MMS). Please tell me if it is possible to do it in MMS. I found the Active Directory Explorer that ...
0
votes
1answer
21 views

Create alias for UNIX username in LDAP for DB2

I want to use LDAP data for the authentication process in DB2. I have already configured DB2 via PAM to retrieve the information of the NIS server that is in the ActiveDirectory. It works perfect ...
0
votes
0answers
50 views

squid authentication error kerberos - windows active directory

I use squid on RHEL6 and I want that authentication is via AD windows 2008, I already joined the server to the windows domain and all users is already seen by wbinfo -u wbinfo -g but wbmin -t show ...
1
vote
1answer
58 views

Why don't Active Directory user accounts automatically support Kerberos AES authentication?

I'm playing around with a test domain on Windows Server 2012 R2. I'm operating at the highest possible functional level and have no backwards-compatibility issues in my small test environment. ...
5
votes
1answer
224 views

Does OWA let users change their AD passwords once their passwords are expired?

We have a cloud active directory server which is running Exchange 2013. We have a lot of users with only exchange accounts and most of them will have their passwords expired in a few days, I was ...
0
votes
2answers
3k views

processing of Group Policy failed only on 2008 Servers and Name Resolution failure on the current domain controller

Spent last 3 months doing a upgrade from 2003 domain to a 2008R2 domain. our last DC was rebuilt (5 total) and brought up on line. After it was put on line we have some 2008 and 2008R2 servers (10 ...
1
vote
1answer
56 views

Force active directory replication after joining a server to a domain?

I'm trying to create more 'self-service' virtual machines for the developers to use. On of the requirements is after running a script to bootstrap the machine and join it to the domain, that the ...
0
votes
1answer
66 views

Group Policy Preferences Printers Server 2008R2 Error 0x80070bc4 does not set default printer after a printer has been created

Alright after calling upon the almighty Google I have been unable to find a good solutions to this problem along with many other users. So I am turning to Server Fault for some support here. I am in ...
1
vote
1answer
48 views

Get a csv/txt list of users using the “net group” command

I'm trying to end up with a txt file of usernames (1 user per line) using the net group /domain <group> command. However, the output of this command is not conducive to parsing. Does anyone ...