A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

6
votes
1answer
59 views

Error adding child Active Directory domain to existing forest

I'm building a test environment containing multiple Active Directory domains in the same forest, but I'm having strange issues while trying to add a child domain to the forest root domain. All ...
1
vote
2answers
857 views

Roaming Profile Permissions and Migration

Currently a client as 2003 DC and we are migrating them to a 2008R2 on a 2012 Hyper-V Host. They have a handful of roaming profiles - but with the usual setup - i.e. the only permissions on the actual ...
-2
votes
0answers
20 views

Active directory removal [closed]

I am new to my company, and not much aware of the configurations done by the previous sys admin. I was the one assigned to remove AD but restore the network drives which are mapped. Current Scenario: ...
0
votes
1answer
87 views

Domain Controller loses major functionality randomly

I have a weird scenario going on, 2 domain controllers at 2 different sites that communicate over a BOVPN. At random the main server (named SERVER) will no longer be able to resolve DNS and even ...
4
votes
1answer
2k views

How should DNS be configured for remote VPN access to a Windows Domain?

Suppose you have a small windows domain configured as follows: domain name is ad.example.com (as per these guidelines) DC1 is at 10.10.10.3 DC2 is at 10.10.10.4 DC1 and DC2 are running the ...
28
votes
13answers
15k views

Do I really need MS Active Directory? [closed]

I manage a shop of arround 30 machines and 2 terminal servers (one production, one standby.) Should I really deploy Active Directory in our network? Are there any really benefits, that could ballance ...
0
votes
1answer
42 views

Unable to join win 7 machines to a domain running Server 2003

I am fairly new to server administration, but have worked with computers a long time. I am experienceing a problem I have never had before; I am unable to join any new machines to the domain because ...
-1
votes
1answer
64 views

DFS Namespace inaccessible when PDC is unavailable or moved

Our current setup uses two DFS servers acting as referral servers for our DFS Namespace. The data is replicated from the Live server to the DR server at our second location. The aim is to have the ...
2
votes
1answer
180 views

How can I use Azure Active Directory users as virtual machine users?

Is there a way to use users in an Azure Active Directory as users for an Azure Virtual Machine? Respectively, is there a way to create multiple user accounts for an Azure Virtual Machine?
1
vote
1answer
55 views

Make DNS server know of it's ADDC server

I have a problem and haven't been able to find an answer for it on the googles, so now I ask you I have 2 servers: Server A, ubuntu 14.04, running DNS/DHCP through bind9 and isc-dhcp-server Server ...
4
votes
1answer
68 views

ADFS - Restrict to AD Group

I just implemented an ADFS server to connect a third-party chat tool with our Active Directory via SAML 2.0. Everything works fine so far but there's a little problem: As soon as a user logs in, the ...
4
votes
2answers
64 views

Audit policy being overwritten by “something”

I'm installing vendor software which requires account auditing to be enabled on our DCs. The problem is Audit Policy is not being pushed. Checking secpol.msc shows Windows Settings->Security ...
1
vote
3answers
876 views

Local Profile Map to New Active Directory Login

Preface: I am sure this has been asked some where on the site before but I couldn't find any questions about it, or maybe I am not using the correct verbiage... Our admins are giving us a new active ...
0
votes
0answers
9 views

SharePoint 2013 User Profile Sync - Attributes Not Synced

I have a SharePoint 2013 farm that is utilizing SharePoint Profile Sync to import Active Directory user accounts. A handful of users are importing without the 'Manager' attribute populated. All ...
0
votes
0answers
10 views

dropped security events on PDC

Running a Windows 2008R2 Active Directory environment geographically dispersed over WAN links. Have used group policy to apply increased verbose security logging on domain controllers. Using ...
1
vote
2answers
22 views

Add properties to Azure Active Directory User “Work Info” tab

Within Azure Active Directory, if I create a new Active Directory and begin to manually add users, I have visibility of a number of fields: However, there are way more tabs/fields on the server ...
0
votes
2answers
2k views

LDAP authentication issue with Kerio Connect

We have Kerio Connect (mail server) running on a Windows Server 2003 server on a domain. In the webmail client, users are able to change their domain password. This functionality used to work fine ...
1
vote
2answers
30 views

View GPOs applied to a specific security group

A group was created in the Active Directory Users and Computers to give local admin rights to certain users on our domain. After taking over management of this system from a previous employee I am ...
0
votes
1answer
1k views

Cannot connect to domain error: The format of specified network name is invalid

I cannot connect clients to sbs2003 domain because of this error: The format of specified network name is invalid. Before that there is a prompt for a login and password, so the server is found. I ...
4
votes
1answer
50 views

Event ID for an Active Directory Domain Rename

My Active Directory forest has 6 child domains. As part of a security control, we are required to get alerted (e.g. using SCOM) when someone triggers a change in the domain name. My question: Is ...
1
vote
1answer
1k views

Cannot Access Windows 2008 R2 Member Servers From The DMZ Zone to the Internal Network Domain Controller

I have 2 Sharepoint Servers and 1 Fast Server(All Windows 2008 R2) moved From Internal Network To The DMZ layer. Now these 3 servers cannot communicate with the DC & DNS(Windows 2000). All the ...
20
votes
3answers
8k views

What is Group Policy and how does it work?

This is a Canonical Question about Active Directory Group Policy Basics What is Group Policy? How does it work and why should I use it? Note: This is a Question & Answer to new ...
11
votes
10answers
49k views

Command line active directory query email address for username

On Windows XP in an Active directory environment - what is the easiest way for me to query a user's email address from AD given their username on the command line. (Assuming I know where it is kept ...
1
vote
0answers
30 views

Promote Windows Server 2012 to domain controller in an existing samba network

I have a Windows Server that I want to use as a domain controller to push gpo's to workstations that are on a samba 3 domain served from an Oracle Solaris server. If I were to promote this server to a ...
0
votes
0answers
16 views

Guest clients browsing very slow

I have AD, DHCP, DNS, RRAS, Print and File Services on my Windows Server 2003. I have a small network of 40 desktop computers and 10 guest laptop connecting cables for mobile staff. I have a Cisco CE ...
17
votes
1answer
1k views

How to time-bomb a GPO?

I am doing a lot of work in higher education where it is a rather common requirement to reconfigure a number of Windows domain members (e.g. PCs in a classroom) for the duration of a specific course ...
-1
votes
0answers
14 views

Multiple Forests on One Exchange 2010 Server

We currently have one AD Forest with an Exchange 2010 server. We need to rename our domain, so I'll be creating a new forest and migrating the objects across with ADMT. Can the one existing Exchange ...
2
votes
1answer
117 views

Single MailCleaner installation for two distinct domains with user authentication

I would like to use one MailCleaner installation to handle two distinct domains as one centralised spam management system, sharing configuration and mainly the bayesian filtering database. Both ...
1
vote
0answers
56 views

Not able to RDP with any other users

I have a strange problem in my Active Directory using Windows Server 2008 R1. Only one of my users is able to make use of remote desktop functionality from the 50 users I have in my domain. The rest ...
1
vote
1answer
23 views

saslauthd on Red Hat 6.5 NO “authentication failed”

I'm trying to authorize an user of an active directory in a red hat linux 6.5. To do that I am using saslauthd. This is its configuration: /etc/saslauthd.conf: ldap_servers: ...
-1
votes
2answers
43 views

memberOf AD explorer search error

I'm using AD Explorer from Sysinternals. I'm performing a memberOf search against the container OU= Alaska Users for the following user: CN=Doe.John,OU=Alaska ...
2
votes
1answer
40 views

Can group managed service accounts be granted privileges such as “log on as batch job”?

I recently set up a group managed service account to ditch the headache of password rotation. The account creation went smoothly. I was able to set up a service to run as the gMSA, and the account ...
-2
votes
1answer
39 views

Create a backup domain controller, but don't want it to do anything [closed]

I set up a second domaincontroller fot backup, but if I take a look at he log files, I see that is manages logons for half of my computers, etc... Can I set it up that it actually does nothing, ...
-1
votes
0answers
23 views

Move Active-Directory profiles

I migrated a Windows Server 2003 to a Windows Server 2008. The user profiles are saved to \\DC00\profiles$\%username% on the old 2003 Server. Now I want to save the profiles to ...
0
votes
1answer
44 views
1
vote
4answers
1k views

Active directory failover

I have a Windows Server 2003 SP2 server which is running as Active directory for my testlab.com forrest. I observed that "netlogon" service is frequently stopping automatically as it results unable ...
3
votes
3answers
1k views

SQL Server Windows Authentication fails after tonight's security updates: The login is from an untrusted domain

We have the following setup: One Domain Controller (DC, Server 2003 R2 Standard x64) One SQL Server (SQL, Server 2008 R2 Standard x64) some clients. All machines are in the same domain. All user ...
1
vote
1answer
995 views

Activating Windows 7 with MAK passed in Unattend.xml via WDS

I have configured WDS to deploy a Windows 7 Pro image (Volume Licensed) and I'm using an unattend.xml file for the configuration. The only problem I'm running into is activation. I'm passing a MAK ...
16
votes
3answers
15k views

Force authenticated user immediate logoff (emergency case)

In Active Directory if you want to prevent a user from logging in you can either disable their account or simply reset their password. However, if you have a user who is already logged in to a ...
4
votes
1answer
346 views

Active Directory reversible encryption for single sign-on?

Problem: Creating and maintaining hundreds of student accounts The school where I work runs Active Directory on Server 2008. Every year, our students have to sign up for accounts with a third-party ...
4
votes
1answer
13k views

Location of logon script in Active Directory

I'm trying to modify a logon script that was created by a previous employee. When I look in Active Directory Users & Computers - in the profile tab - it says Logon Script: Logon.bat But where is ...
0
votes
0answers
28 views

Allow access to a share on a workgroup using a user which is a part of a domain

There are 2 networks. Network A, which is domain controlled, and Network B, which is a small workgroup. A user from Network A accesses Network B using VPN (Network B is Checkpoint 600, office mode, ...
3
votes
1answer
136 views

Check if a Domain Controller has been cloned

I have reason to believe that previous administrators cloned our Domain Controller at somepoint in its recent lifetime. The DC at one point was running on Server 2003 and has since been upgraded to ...
0
votes
1answer
39 views

AAD Sync not able to connect to online service using powershell

When trying to connect to my Office 365 tenant using connect-msolservice from powershell I get the following error: Connect-MsolService : The HTTP request was forbidden with client authentication ...
0
votes
1answer
56 views

An error occurred while using SSL configuration for endpoint 0.0.0.0:443

Based on information received from the network team. I have determined that the issue most likely rests with the application servers on the WAN. After replacing the certificate, I ran the ...
0
votes
1answer
24 views

Authenticate WLAN using Hostname in Access Group

The hardware is Cisco APs and Windows 7 Enterprise clients, which currently allows users to authenticate based on an Access Group in AD. We're looking at instead of users account, using the actual ...
2
votes
2answers
1k views

How can I get DSADD to assign home folder of newly created user account?

I use the following command to create 15 user accounts: FOR /L %i in (1,1,15) DO dsadd user "cn=Grade 6 Student %i,ou=Accounts Student,OU=School Name, dc=curric,dc=schoolname,dc=wan" -samid g6%i -upn ...
1
vote
1answer
1k views

Unable to remove userphotos from users/mailboxes in Exchange 2013

I'm trying to remove user photos from all users/mailboxes in Exchange 2013. Documentation is hard to find, most of the documentation seems to refer to previous versions of Exchange, and the methods ...
3
votes
0answers
43 views

Windows Server 2003 DC migration to 2 x 2012 R2 DCs - DCDiag error = Advertising: SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE

We are upgrading our single 2003 domain controller (DC1) to two 2012 R2 controllers (DC2 in Sevenoaks and DC3 in Manchester (different site in Sites and Services for Manchester)). DCpromo (the wizard ...
0
votes
0answers
25 views

Active Directory Won't Authenticate

Something is really buggy with our Active Directory here at our company. We can query and ping everything just fine. The time is correct. We have restarted both of our Domain Controllers. We also use ...