A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

3
votes
1answer
1k views

How should DNS be configured for remote VPN access to a Windows Domain?

Suppose you have a small windows domain configured as follows: domain name is ad.example.com (as per these guidelines) DC1 is at 10.10.10.3 DC2 is at 10.10.10.4 DC1 and DC2 are running the ...
0
votes
3answers
2k views

RPC Server Unavailable When Trying to Join W2003 Server to W2003 Active Directory Domain

I have an Active Directory Domain with a Windows 2003 Standard SP2 Server as the DC. When trying to join an additional Windows 2003 Standard SP2 server to the domain I get message "The following error ...
0
votes
1answer
526 views

Cluster Aware Updating set up - VirtualComputerObjectName ignored

I am trying to set up Cluster Aware Updating, but it always fails with the following error: Add-CauClusterRole : Unable to create the CAU clustered role because a Network Name resource could not be ...
0
votes
0answers
19 views

Clients not authenticating with RODC - nltest gives SERVICE_NOT_ACTIVE

I am new to the Windows world and pretty much followed the guide from this Windows Server Blog For the life of me I can not get clients to authenticate with the RODC. When I have the on-site RWDC ...
4
votes
1answer
110 views

sAMAccountName used for logged on users

When RDP'd to a server I'll often find that there are no available sessions as there are users currently logged in. Within our environment we utilise a user privilege management solution which creates ...
1
vote
1answer
33 views

Deleted GAL in EMC and ADSIEDIT now Error

I attempted to delete a Global Address List via Exchange Management Console and ADSIEDIT as I made a typo during the creation. Now when I try to create a new GAL, i get the following error [PS] ...
0
votes
3answers
36 views

Active Directory Export GPO user

I would like to get in .csv (or any other readable format) all my AD users and the policies that they need to comply (the type of authentication each user needs, his event logging properties and even ...
1
vote
2answers
57 views

How to setup a Domain Controller in the cloud

We are implementing a new Windows Server 2012 R2 domain controller for our 2 small offices, and we want to set it up on Amazon EC2. I have read that with this type of setup you normally use a VPN. How ...
6
votes
2answers
78 views

Setting up a Windows Domain in a O365-only company

My company is quite young and small, but since we're growing, we want to rollout some software deployment solution. We haven’t decided which one yet, but they usually need a Windows Domain, and we ...
3
votes
2answers
773 views

Limiting view of Active Directory Users and Computers

I am delegating a group of users to a specific person to be able to keep up with thier account management, and I have delegated them the authority to do this to just this group. Is there a way that I ...
0
votes
2answers
1k views

Installing Exchange in a RODC Site

I'm trying to install Exchange 2010 to a server in a site that uses an RODC. It tells me that "No domain controllers for the domain DOMAIN and the site SITE are available" I'm going to be moving the ...
1
vote
1answer
347 views

do I need to create an AD site for VPN network

I have Windows Domain level 2008 R2. There are four GC DC in four different physical locations. I have Kerio-based VPN network for replication and remote administration. Here is how network ...
0
votes
1answer
1k views

Cannot connect to domain error: The format of specified network name is invalid

I cannot connect clients to sbs2003 domain because of this error: The format of specified network name is invalid. Before that there is a prompt for a login and password, so the server is found. I ...
0
votes
1answer
1k views

Group Policy Preferences Printers Server 2008R2 Error 0x80070bc4 does not set default printer after a printer has been created

Alright after calling upon the almighty Google I have been unable to find a good solutions to this problem along with many other users. So I am turning to Server Fault for some support here. I am in ...
0
votes
2answers
89 views

what happens when a DC fails? How can the clients identify DC failure? [closed]

When a DC fails, it loses the privilege to authenticate and so client will find for secondary DC closest to its site. In another scenario, client has selected a DC closest to its site by using subnet ...
1
vote
1answer
56 views

Additional Keyboard settings from Active Directory

We have some users in our company who need to use additional Keybaords, in order to achieve this one of the other admins had written a VBS script which runs when users in a particular group log in to ...
1
vote
1answer
35 views

Accessing local groups remotly for a Windows Fileshare where user accounts are on an AD

I am asking this question with almost no knowledge of Windows and Active Directory. I have a Windows Server (2012), that I am using as a file server (FILE01.domain.tld). There are some local groups ...
2
votes
1answer
779 views

Problems mounting Kerberos authenticated NFS share on CentOS 6.4

I'm trying to mount a Kerberos authenticated NFS share on a CentOS 6.4 machine. I have tried exporting the protected share from both another CentOS 6.4 machine and from our NetApp with the same ...
0
votes
1answer
1k views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
2
votes
1answer
2k views

How to connect AD Explorer from Sysinternals to Global Catalog

I'm using the sysinternals AD Explorer quite frequently to search and inspect an Active Directory without any big problems. But now i'd like to connect not only to a single AD Server. Instead i like ...
-2
votes
1answer
55 views

Can a site contain domain controllers from multiple domains?

For e.g. I am creating a site with 2 clients and 1 DC in it. I am setting the subnet to cover these objects. So my site say SITE1 will have 2 clients and 1 DC. So when one of these clients tries to ...
5
votes
1answer
48 views

Windows 7 login issues

I have one user who has been having this issue I have never seen before. She is always having issues starting up her machine, such as Windows getting stuck on welcome screen after logging in, or stuck ...
0
votes
1answer
38 views

Link server 2012 account picture with active directory

We have a Windows Server 2012 R2 remote desktop deployment, with a session collection consisting of 6 session hosts. We also use Office365 and DirSync to enable single sign on with ADFS running also. ...
0
votes
0answers
17 views

Removable Storage User Configuration Group Policy not working when Windows Server 2008 R2 is used as a client

I have enabled read write restriction for a group of users, if a user from this group is to log onto a win 8.1 system or Windows 7 system and tries accessing a USB drive it says access is denied, ...
0
votes
2answers
1k views

LDAP authentication issue with Kerio Connect

We have Kerio Connect (mail server) running on a Windows Server 2003 server on a domain. In the webmail client, users are able to change their domain password. This functionality used to work fine ...
3
votes
1answer
29 views

Why does a SPN on a different host cause a server to lose its trust? How should I fix it?

I have a brand new server image that loses its trust as soon as it's joined to the domain. I suspect it's because of the duplicate SPN I discovered using the LDAP version of this Powershell script ...
0
votes
1answer
47 views

Faulty DC preventing NTFRS replication

When adding a new DC (2012 R2) to a domain (2008) everything goes well except that it never advertises as DC. Doing a bit of diagnosis i found out that ntfrs replication never starts, consequently ...
1
vote
1answer
600 views

Nagios NRPE plugin check_ad - Fixed

i've reading about this problem much and trying to solve it on my own ways but still not luck. I've running debian 7 as nagios server. Problem is that i cant check state of my Active Directory Domain ...
7
votes
3answers
2k views

Active Directory disaster recovery with DPM

I have a sort of catch-22 question here. Suppose I'm using Microsoft System Center Data Protection Manager (2010 or 2012, it works the same way) to backup, amongst various other things, my Active ...
24
votes
3answers
1k views

What features of Windows 8.1 Pro will not work without a Microsoft Account?

With respect to domain-joined Windows 8.1 Pro machines, what features of Windows will not work unless a Microsoft Account is used? Also, aside from "feature loss," are their any gotchas of not using ...
2
votes
1answer
2k views

New Domain Controller Cannot Enroll for KerberosAuthentication Certificate

I have an AD domain. 2003 FFL/DFL. The schema was upgraded to version 56 for Server 2012. The domain contains a mix of domain controllers from Server 2003, Server 2008, Server 2008 R2, and now Server ...
3
votes
2answers
680 views

What are pros and cons of keeping a local administrator account in Windows 7 workstations in a domain?

We have a network with Windows 7 Enterprise machines, all members of a domain. We've been keeping a local (unlocked) 'Admin' account on each workstation in parallel to the built-in (locked) ...
5
votes
1answer
75 views

In Active Directory, how do I delegate write permissions on specific attributes of protected user accounts?

We have a tool being developed that will keep specific attributes of Active Directory user objects up to date with an authoritative source of employee information truth elsewhere, so that when ...
5
votes
2answers
307 views

Is there a way to tell how long a machine has been in an security group?

Machines get added to a security group to prevent them from getting a GPO. I'd like the machines to get removed after 30 days of being in the group. Ideally, I'd like to also be able to generate a ...
1
vote
1answer
27 views

User blocked in AD by some windroid device

We have a user that is constantly blocked. We checked the logs in the domain controllers and all the information shown is that a WINDROID device is the source. How can I know which device is causing ...
0
votes
1answer
31 views

2 Domains - 1 ADFS - 1 SharePoint - 1 Authentication way

I'm wondering if this if possible: I have 1 AD Domain: InternalDomain. I want to create a secondary domain: CustomersDomain. I would like my SharePoint to be able to authenticate users from both ...
0
votes
1answer
27 views

Adding additional 2008R2 DC to Window 2012 R2 domain

I am migrating our company's AD from a Windows SBS 2008 to a news Windows 2012 R2 Essentials server. Everything went fine and the new AD now is in production stage. The last step is adding an ...
0
votes
1answer
40 views

User logged in with temporary profile

User logs into a domain-joined Windows 7 Pro PC and gets the temporary profile error pop-up. Event 1511 User Profile Service in Event Viewer logs. Typically with this problem I delete a user's ...
3
votes
4answers
5k views

error reading keytab file krb5.keytab

I've noticed these kerberos keytab error messages on both SLES 11.2 and CentOS 6.3: sshd[31442]: pam_krb5[31442]: error reading keytab 'FILE: / etc/ krb5. keytab' /etc/krb5.keytab does not exist on ...
0
votes
0answers
35 views

Would a duplicate DC on same subnet be bad, if ALL auth is only internal to the server?

Here's a weird scenario I'm looking for some guidance on. I have a VM that is a purpose-built "self-contained" demo environment. It has an application stack installed, as well as Active Directory, ...
0
votes
1answer
861 views

Computers in site not authenticating on RODC

I have 2 networks : 172.33.0.x : My internal network 192.168.1.x : My DMZ network I have a DC in the internal network for my domain, and a RODC in the DMZ for the same domain. A firewall exists ...
0
votes
1answer
16 views

Moving site server (not PDC) into it's own new domain keeping current user accounts and permissions intact on file shares

I haven't been officially Microsoft trained so forgive my incompetence discussing what we want done and how to go about it. We currently have a MPLS style network hosting different sites which each ...
0
votes
0answers
22 views

Powershell and dsget do not return full results when querying group membership

I'm trying to get information about group membership of certain users. Ultimately I want to automate this in some way but I'm having difficulty extracting the information at all. The problem is that ...
1
vote
0answers
39 views

cifs Required Key Not Available

I have joined to a zentyal domain (AD Domain) using PowerBroker IS and I want it to mount my remote home directories when a remote user logs in. this is the config for PBIS: AllowDeleteTo "" ...
0
votes
0answers
13 views

AWS Directory Service compatibility with XenApp / XenDesktop

I have a question regarding AWS Directory Service compatibility with Citrix XenApp / XenDesktop. I am about to deploy a Citrix XenApp environment in AWS. A requirement for XenApp is a working Active ...
0
votes
1answer
37 views

Powershell AD Group creation script

I am making an AD Group creation script New-ADGroup -Name "CS-WS-PROD-Admin" -GroupCategory Security -GroupScope Global -Path "$OU" -Description "Admin Rights on PROD" -ManagedBy CS-WS-SAR-ADMINS ...
2
votes
2answers
182 views

Migrate user accounts from Azure AD to on-premise AD?

My company uses Office 365 for Exchange, SharePoint, Lync etc. including the build-in user administration via Azure Active Directory. Now we want to switch to a local AD on a Windows Server. It shall ...
0
votes
0answers
32 views

machine in domain is not accepting domain credentials

I have added a windows server 2008 (Virtual machine) into a domain. 1. The newly added machine properties shows the system name as systemname.domainname 2. The AD is listing the newly added machine ...
5
votes
3answers
182 views

In a Windows PKI, what is a Workstation Authentication CA Template used for? What happens if it expires?

Many workstations have an expiring computer certificate that was issued using the Workstation Authentication CA template. The CA of this template expires in 2 days. I've deployed a new CA, with an ...
2
votes
3answers
462 views

Run `certutil -DCInfo` on a different target domain

It seems that running certutil.exe -DCInfo Verify will check the certificates for all domain controllers in the domain of the logged-in user account. In our AD forest, we have a handful of domains. I ...