A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
1answer
2k views

Windows 2003 Domain - Certificate Authority - New Automatic Certificate Request

I have an issue with a certificate authority in a windows 2003 domain. We need one configured to allow ssl/tls encrypted traffic over LDAP so that our Application Gateway server is able to allow users ...
0
votes
1answer
809 views

Active Directory GPO not working with Windows XP clients. Work fine with Windows 7

We have 2008 Enterprise R2 64 bit domain controller with Windows XP and Windows 7 as clients. When i try to use a group policy to make all users desktop wallpaper to a common JPG image ( Image is ...
2
votes
0answers
79 views

cifs Required Key Not Available

I have joined to a zentyal domain (AD Domain) using PowerBroker IS and I want it to mount my remote home directories when a remote user logs in. this is the config for PBIS: AllowDeleteTo "" ...
0
votes
1answer
26 views

Windows Server 2003 secondary DC issues

I have some strange issues with my domain controller. I have primary DC called 'netsun' with ADDS, DNS and DHCP, and secondary DC called 'ex_serv' with ADDS service and exchange. So my primary DC is ...
1
vote
3answers
42 views

Linux / AD integration with SSSD: how to choose what systems a user can log into?

We are trying out ActiveDirectory integration on some linux systems with SSSD. So far so good we joined the linux systems to the domain and we can log into linux systems with AD-defined users. Right ...
0
votes
1answer
47 views

How do I move Active Directory user information to the Exchange Global Address Book?

I am running Exchange 2013 and I have noticed in Outlook that a lot of the contacts in the Global Address Book are out of date. I recently went and update all of the Active Directory details so how ...
2
votes
1answer
1k views

AD: What is the difference between a managed and unmanaged computer?

I'm working on setting up Windows Deployment Services on a Windows Server 2003 machine. In my exploration of the various options for configuring this system, I wanted to learn the difference between ...
3
votes
1answer
153 views

How do I enable SAML Passive Authentication in ADFS 3.0?

For several years, I've used ADFS 2.x as a SAML IDP that works with SAML Passive Authentication. When the isPassive=true flag was set on the Request, the Response would include the following ...
1
vote
3answers
3k views

How to grant a group permission to access c$ shares

I'm looking for a way to centrally grant access to the c$ share of all our PCs to our IT active directory security group. They often use this to check desktop shortcuts, etc. Right now they have to ...
1
vote
1answer
45 views

How can I remove the minimum password length for a specified user in an OU?

How can I remove the minimum password length for a specified user in an OU? (I do not want the default domain password policy affecting my GPO.) When the "minimum password length" in my default ...
3
votes
2answers
23k views

List All Groups and Their Members with PowerShell on Win2008r2

I am new to powershell, but I've been reading manuals and practiced a little bit. My objective is to List all users in all Security Groups under specified path. I have found the way to do it: ...
4
votes
13answers
58k views

Can I get all active directory passwords in clear text using reversible encryption?

EDIT: Can anybody actually answer the question? Thanks, I don't need no audit trail, I WILL know all the passwords and users can't change them and I will continue to do so. This is not for hacking! ...
0
votes
1answer
663 views

Password reset fails for end users when minimum password age set for more than 0 days

Our Help Desk has been resetting user passwords with "user must reset password at next logon" for years. Recently reset default domain policy for "minimum password age" from 0 days to 5 days. Now ...
0
votes
0answers
3 views

Connect MSSql using Service account “domain/User” via PHP/Yii [migrated]

i trying to use a windows service account user "DOMAIN/username" to access an existing MSSQL db environment via PHP/Yii i m able to successfully login to the MSSQL database directly using this ...
4
votes
2answers
355 views

Modifying Active Directory Connection Objects

In Windows Server 2008, Active Directory's automatically created connection objects for domain controllers have an attribute called options with a value of 0x1 = ( IS_GENERATED ). This value tells the ...
0
votes
1answer
48 views

Merging multiiple domains with the same existing domain name (office.local)

I am working with a new client who has 5 offices and four of which have a single domain controller with the name of OFFICE.LOCAL and another one with the domain controller DENTAL.LOCAL. Oh and all of ...
0
votes
2answers
54 views

Running a Windows Server 2012 Domain Controller in Hyper-V

I attempted to install Windows Server 2012 on a Dell PowerEdge 2850 and found out that the server may not support Server 2012. Is there any downside to running a Windows Server 2012 domain controller ...
7
votes
3answers
162 views

Server 2012 R2 Active Directory Domain SRV dns records suddenly disappeared

I have a test domain that I recently configured. All of a sudden, no users can log in except those with cached credentials. The domain includes two domain controllers that are both global catalogs ...
0
votes
1answer
2k views

Windows server 2003 MMC has detected an error in snap. It is recommended that you shutdown and restart MMC

I have Windows Server 2003 STD x64 SP2 and I have been installed AD on it. When I try to add computer there is an error message saying: MMC has detected an error in a snap. it is recommended that ...
2
votes
1answer
1k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
1
vote
1answer
30 views

Is there a way to know what version of Exchange a users mailbox is on via AD?

In Active Directory there is a property against a user called "homeMDB" That will give me the users exchange database, but is there a way to know if the user is on exchange 2013 through Active ...
0
votes
3answers
870 views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
-1
votes
0answers
22 views

access AD through Public IP [closed]

I have an Active Directory set up on a public facing Windows Server 2008 machine. I have an application which is deployed on another server(a linux machine) which is required to access that AD. How ...
1
vote
1answer
30 views

What does “Assigned” mean in the Azure AD Application user list?

Within the Azure portal, inside an Active Tenant I have an application with users listed, of which are created in the tenant. What does the term Assigned mean? I incorrectly assumed that it meant ...
1
vote
1answer
2k views

Cleaning up AD and DNS on Windows SBS 2008

I searched serverfault.com for duplicates of this question but couldn't find anything close enough for my needs, so here goes. I'm administering a small Windows domain, where a Win SBS 2008 is the DC ...
4
votes
1answer
2k views

A single AD user can't log into a single Mac bound to the domain (DirectoryServices error). How can I resolve this?

On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly. However, we have one ...
0
votes
0answers
30 views

Outlook not finding newly created mailboxes

We are running Exchange 2010. All of my thin clients (Office 2007 - WinServer 2008) and my few PC laptops (Office 2007 - Win7) aren't able to find any recent users that have been added into the ...
7
votes
1answer
21k views

How can I join a computer to a new domain remotely?

I have a large number of PCs that are joined to domain abc.com and I want to move them over to xyz.com so they are no longer a member of abc.com. Can I do this with a script? Thanks
1
vote
1answer
1k views

Active Directory FRS problems. 13508 error and other problems

I have 3 Domain Controllers. We will call them DC1, DC2 and DC3. DC3 and DC2 show Event ID 13508 in their FRS logs with no follow-up event(13509 I think) to say the error had been fixed. DC1's FRS ...
1
vote
2answers
1k views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
0
votes
1answer
15 views

Active Directory - Migrate objects from Win Server 2003 R2 to Win Server 2008 R2

I am about to migrate some users and objects from a domain managed by Win Server 2003 to a domain managed by Win Server 2008 R2. I heard about AD migration tools, but are there issues concerning ...
0
votes
1answer
903 views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
-2
votes
1answer
61 views

User profiles for ESXi [closed]

I have configured active directory with my ESXi Server and all is great. I created User Profiles for this experiment within Windows 2008r2. Logged in with a windows 7 VM within Vsphere, and all works. ...
-1
votes
4answers
66 views

Exchange 2013: Unable to install Exchange on domain for the 2nd time

I'm trying to set up Exchange 2013. There are two errors - not sure which one is fatal (perhaps both) Eror 1: Setup encountered a problem while validating the state of Active Directory: The Active ...
1
vote
2answers
46 views

Block Administrators authentication attemps from workstations

My Administrator user once in a while is getting locked-out by the workstations in our lab, due to failed logon attempts. (While this is a problem that should be addressed, because this means there is ...
0
votes
1answer
874 views

Windows Server 2012 R2 Standard located in our DMZ has problems with connection to RoDC

We had an environment with multiple 2008 R2 DC:s in our internal LAN and a 2008 R2 RoDC:s in our DMZ. We set up 2008 R2 servers in our DMZ and joined them to the domain using DJOIN. Everything ...
1
vote
2answers
53 views

Possible to authenticate Samba via Kerberos but without domain-join?

With a Kerberos config file... [realms] DOMAIN.COM = { kdc = dc1.domain.com admin_server = dc1.domain.com } ...it is possible for Linux to talk to Active Directory for password ...
2
votes
1answer
2k views

New Domain Controller Cannot Enroll for KerberosAuthentication Certificate

I have an AD domain. 2003 FFL/DFL. The schema was upgraded to version 56 for Server 2012. The domain contains a mix of domain controllers from Server 2003, Server 2008, Server 2008 R2, and now Server ...
0
votes
3answers
2k views

RPC Server Unavailable When Trying to Join W2003 Server to W2003 Active Directory Domain

I have an Active Directory Domain with a Windows 2003 Standard SP2 Server as the DC. When trying to join an additional Windows 2003 Standard SP2 server to the domain I get message "The following error ...
0
votes
1answer
21 views

how to enable user login after Offline domain join?

Is it possible to add computer from remote location to AD (windows 2008R2) and enable user login? I've run DJOIN as described here: http://technet.microsoft.com/library/dd392267(WS.10).aspx but ...
4
votes
1answer
1k views

How should DNS be configured for remote VPN access to a Windows Domain?

Suppose you have a small windows domain configured as follows: domain name is ad.example.com (as per these guidelines) DC1 is at 10.10.10.3 DC2 is at 10.10.10.4 DC1 and DC2 are running the ...
6
votes
3answers
1k views

Logging onto Windows local computer without local or network account

I have a Windows 7 Professional machine that has accidentally been removed from the active directory on the domain controller. Therefore the network does not recognize this machine and the machine ...
0
votes
1answer
1k views

Cannot connect to domain error: The format of specified network name is invalid

I cannot connect clients to sbs2003 domain because of this error: The format of specified network name is invalid. Before that there is a prompt for a login and password, so the server is found. I ...
1
vote
2answers
83 views

“User with an existing Microsoft account” cannot access app using Azure AD SSO

Yesterday I followed Vittorio Bertocci's tutorial "WS-Federation in Microsoft OWIN Components – a quick start" to set up a test application using Azure AD authentication. This is my first use of ...
0
votes
1answer
21 views

Is there a way to change which wireless network is connected to when authenticating windows 7 AD clients using single sign on over wifi?

The situation: Two domains. Two wireless networks. Each domain's users have their own network for security reasons. B is a child domain of A (A = domain.com, B = child.domain.com). Users in domain ...
2
votes
1answer
23 views

Enable application to send emails in Exchange 365 hybrid deployment

Question from a still-learning Exchange administrator: Is there a recommended way to create & configure an email account to be used solely by an application to send messages (alerts, reports, ...
0
votes
2answers
45 views

AD Existing Forests Best Practices Setup

My company was acquired by another company. Both companies have existing AD forests and domains. The company that acquired us ,also has international sites.What would be the best practice/solution to ...
0
votes
1answer
26 views

LDAPs using Anonymous Access to AD forest

There is a problem related to AD which I cannot understand what configuration is missing to fix the issue. I have two DCs: testa and testb and both contain AD. I'm logged in to testa and I'm trying ...
1
vote
0answers
33 views

Migrating AD Lightweight Directory Services (LDS) or ADAM data to Azure Active Directory (WAAD)

We currently have an ADAM instance that we authenticate our ASP.NET web users against. We have a requirement to replace this instance with an Azure Active Directory instance instead with a new schema ...
4
votes
1answer
3k views

How can I find all groups a user belongs to via DSQUERY

How can I find all groups for a specific user (groups for which the user is assigned) using dsquery?