A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

3
votes
3answers
19k views

An Active directory domain controller could not be contacted

After creating an Active Directory domain controller I tried to add client computers to the domain but I kept hitting a snag. The following error occurred when DNS was queried for the service ...
0
votes
1answer
4k views

Sync Active Directory Users in FreeNAS

This is for FreeNas-9.1.1, I am using active directory which appears to be connecting ok, since the following list users/groups from that server with no problems wbinfo -u wbinfo -g I can also join ...
1
vote
0answers
11 views

Easier method of setting up Winbind auth in LMDE?

Some GNU/Linux distros (CentOS comes to mind) have a neat Authentication Config tool, in which you may specify which auth methods (files, NIS, Winbind etc) to use. You specify the needed parameters (e....
1
vote
1answer
78 views

User groups without Active Directory

Is it possible for Windows Server 2003 R2 to configure several user groups with different setups without using Active Directory? The admin has turned it off for 'security reasons'. Which setups I ...
0
votes
0answers
9 views

Is it possible to create this directory structure in AD LDS?

A customer is determined to have a directory structure like this: cn=lab1,ou=HHH, l=London, C=GB, OU=ACME Research,O=ACME Is this possible in AD LDS? How would I go about creating it? Currently ...
11
votes
1answer
820 views

GPOs fail to apply; reason: Inaccessible, Empty, or Disabled; Server 2012 R2 and Windows 10

I have a Windows Server 2012 R2 Domain. Yesterday, a computer’s (running Windows 10 Pro) network drive stopped working. After further investigation (gpresult /h) it appears ALL group policy objects ...
1
vote
1answer
20 views

FreeIPA and AD password synchronisation

I am attempting to integrate FreeIPA with Active Directory to provide single-sign-on for Windows and Linux users by following this guide. I have successfully created the 'winsync' agreement and ...
0
votes
2answers
27 views

Does GPO Security Filtering need to match ANY or ALL rules in the Filter?

my main question is this: Is the security filtering for a GPO calculated using AND logic or with OR logic to apply the filters? Here is the context of my situation for a background on why I am ...
1
vote
1answer
33 views

Granting a user permissions to PS Remote without allowing RDP

Is there a way I can grant a user the ability to use Invoke-Command in PowerShell remotely without giving them RDP Access to the server?
1
vote
1answer
24 views

Total Number of Certificates issued / revoked

Currently using Active Directory Certificate Services. Is it possible to find out the total number of certificates that have been published and revoked up till today, and if so how do I do it?
0
votes
2answers
544 views

OSX clients on Active Directory mounting wrong Home path

I am adding an OSX Open Directory server to a Windows 2008 Domain. I've got OSX clients authentication properly against AD and getting the settings from OD. In AD, the users profiles are set to ...
1
vote
2answers
86 views

SSSD Kerberos AD Centos troubleshooting

I followed the Configuration 3 from the RedHat AD integration (https://access.redhat.com/sites/default/files/attachments/rhel-ad-integration-deployment-guidelines-v1.5.pdf); but I am stuck. I am on ...
1
vote
2answers
84 views

AD Synchronization/Replication issue between 2 sites having Window Server 2008 R2 as OS

We have AD forest having Root Domain (Main office, HQ) & 4 child domain. Out of which 1 child domain is having 2 sites. AD Directory services are running on 2008 R2. All sites AD Directory ...
1
vote
1answer
1k views

Problematic Active Directorys CA certificate

i came across one DC, which gives me RPC errors when dealing with AD Certificate Service.I can see in AD there is 2 Root CA , one is problematic. Is it safe to remove it? Or is there a procedure for ...
0
votes
2answers
171 views

Virtual Machine with Two NIC's Losing Internet

Please Forgive my newbieness... I'm just a developer trying to learn a little of the hardware side. I've tried to look this question up but all results produce VMWare which I am not using. I've ...
2
votes
1answer
29 views

why use an Active Directory multi-tree design?

I get asked the same question a lot. Why use multi-tree forests when designing Active Directory? I know that the two trees will belong to different namespaces and that they will share Scheme/...
1
vote
0answers
23 views

Internal EV SSL From A Windows Server 2012 R2 Root CA Shows Up As A Normal Certificate

I am trying to setup an internal ev ssl server for all of my internal applications giving ie the little green bar and chrome displaying my company name. It works fine in IE displaying the green bar as ...
0
votes
1answer
52 views

Anyway to limit IP Access for Certain Users?

I am currently tasked with allowing Vendors onto our process network. The issue is I need to make it so each vendor is only able to connect to PLCs on their own machines "each PLC has its own IP". Is ...
0
votes
1answer
33 views

Active Directory multi-tree, single forest DNS configuration

So, I have a multi-tree single forest that contains 2 tree domains called simpson.local (forest root) flanders.local Now both domains have full trust and both domains use Active Directory-...
0
votes
1answer
1k views

likewise-open issue

I've been struggling non-stop for two days on this issue and it is driving me insane. I am trying to get my Linux-Mint machine to connect to the Windows Domain so that I can gain access to the ...
0
votes
3answers
3k views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
1
vote
3answers
102 views

How to simulate a WORM environment w/Active Directory/NTFS

In NTFS/Active Directory, assume I have two drives mapped: H:\ I:\ Users can edit files in H:\, but not in I:\ . I want users to be able to, using a script, move their files to the I:\ drive unless ...
8
votes
3answers
12k views

Search AD by GUID

How do I search Active Directory for objects by GUID? In other words, what would be a good way to find what objects belong to specified GUIDs?
0
votes
0answers
11 views

RunAs netonly with credentials saved

I can start a process with runas /netonly and runas /savecred but I can't use both the flags at the same time. Is there a way to run a process as a different user remotely without having to type the ...
3
votes
3answers
4k views

Azure print server - running everything in Azure?

I might have get dragged into a Project involving moving the whole IT shop into Azure. Now that means they have on-site AD, LOB Applications, SQL, Sharepoint etc, plus of course moving to Office 365, ...
-1
votes
1answer
65 views

Get AD users who have not logged in the past x Days and are member of a specific group?

I'm sorry if this looks like a duplicate. Actually the same question has been asked under http://serverfault.com/questions/783399/get-a-list-of-users-who-are-domain-admins-and-have-not-logged-in-the-...
3
votes
2answers
1k views

Winbind/AD: Local users with identical AD usernames

We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and I'...
1
vote
2answers
116 views

Get a list of users who are Domain Admins and have not logged in the past 30 days?

How can I get a list of users from AD who are Domain Admins and have not logged in the past 30 days?
3
votes
1answer
56 views

The password on this account cannot be changed at this time?

A user in my company forgot his password and I had to reset it to a temporary one. I checked the box that says "User Must Change Password at Next Logon". When he logged on and entered the temporary ...
2
votes
1answer
42 views

Recover GPO Rights

I messed up at work today, and I've accidentally denied a group (I don't know which one) from read-level permissions. I went to work on delegation for a user for a GPO, and I must have accidentally ...
4
votes
2answers
4k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.example.org port 636 with the ssl checkbox. This is on the local server itself. ...
2
votes
1answer
80 views

how to fix remote desktop access in Windows Server 2012 R2

Kind of an embarrassing question but... One day I was playing around with GPOs to try and grant local Administrator access to a specific User group for a specific Client computer. Somehow, I messed ...
1
vote
2answers
28 views

Can a Unix host obtain Kerberos keytabs for another host from Active Directory?

We use Puppet to configure our servers, but creating Kerberos keytabs for them is currently a manual process. We would like the Kerberos keytabs of the Unix machines to be automatically generated, ...
1
vote
1answer
18 views

FreeIPA AD Trust based Integration using SunLDAP to store Policies

If we want to use the FreeIPA Active Directory Trust Integration Option, can we use an existing implementation of SunLDAP to store the Policies (e.g. sudo, hbac etc.) Essentially we don't to create ...
2
votes
1answer
21 views

Exchenge 2010 server is not finding GC server in the domain

Exchenge 2010 server is not finding GC server in the domain even the domain controler . All Domain controllers are Windows Server 2012 Std. In the atest.local forest I have 3 DC and all 3 are GC: PS ...
2
votes
0answers
38 views

Why can't I see the file version of files in system32 remotely?

Here's the situation: I can RDP into a computer, go to C:\Windows\System32, and check file versions to my heart's content. Such as winlogon.exe, explorer.exe, etc. If I map the drive, and try to ...
0
votes
1answer
47 views

DC3 doesn't replicate with newly added DC1

[DC 1 - LOTUS] [DC 2 - IRIS] [DC 3 - FLORA] The picture above shows my domain network connection. My original DC1 was PYRUS, due to some reasons, it is dead and be replaced by LOTUS. I Seize all ...
0
votes
1answer
27 views

Impact on application after workstation join Active Directory?

I want to migration a mix of 20+ workgroup Windows OS (7, 8 and 10, home & pro version) machines to Active Directory and would need to find out impact to the user & preparation; example ...
0
votes
1answer
2k views

Linux webfilter with LDAP SSO authentication

I'm looking for a self-made linux proxy/webfilter server and stumbled upon several products. (squidguard, dansguardian, ..) I found Privoxy the most appealing. Now I went searching on the internet for ...
0
votes
0answers
12 views

“Office” field in Outlook 2010 Contact Card

I'm working on updating our active directory information and I'm trying to find the AD field which populates the "Office" contact card field (example). I've updated the "Office" field in Active ...
5
votes
3answers
22k views

How to Reset Active Directory Secure Channel If Broken

Occasionally, a computer account can lose its secure channel to a domain controller. How can secure channel be reset without rebooting the computer? The computer in question is a clustered SQL ...
6
votes
4answers
14k views

How to check AD DS domain/forest functional level from domain joined workstation?

Is it possible to define AD DS domain/forest functional levels from domain joined workstation? Preferably through CLI/PS and if possible w/o Domain Admin rights... How I can accomplish it?
0
votes
1answer
23 views

Mail Server Fails to Replicate Active Directory Users

My business recently made the jump to Active Directory, and wanted our mail server to replicate AD accounts. Both the domain controller and the mail server are running Windows Server 2012, and we're ...
1
vote
1answer
60 views

WMI “Access Denied” to Read Only Domain Controller

From a management machine using wbemtest, we are able to successfully connect to a remote Read-Only Domain Controller that is running Windows Server 2012 R2 Datacenter with a user who is a member of ...
2
votes
1answer
41 views

Auditing Registry events through AD

I want to audit registry related events (modify key delete key etc) , so i enabled it via group policy and setup a "Global Object Access Auditing" for auditing on "Authenticated Users". Unfortunately ...
5
votes
2answers
2k views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
0
votes
2answers
33 views

Can Foreman register a new host with Active Directory?

We use Foreman and Puppet to manage our Unix systems here, but the Kerberos infrastructure is implemented over Active Directory (because Exchange). Registering the newly bootsrapped hosts with AD is ...
4
votes
4answers
36k views

How to export a detailed list of Active Directory users' “Member of” tab?

I am currently in the process of restructuring the Active Directory user list of the company I'm working for, and the person who did it did an awful job, and is of course, not working here anymore. ...
-1
votes
1answer
43 views

Windows server 2008- domain conflict

I was running a windows server 2008 R2 with active directory setup for all the other workstations, which was all setup by someone else before me. The issue is that the server OS got corrupted a few ...