A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
14 views

How to export LDAP RootDSE attributes to LDIF file?

How to export LDAP RootDSE attributes to LDIF file? I was able to use Active Directory Explorer to see RootDSE attributes but I can not export them: ...
1
vote
0answers
33 views

enter-pssession : Connecting to remote server failed with the following error message : The user name or password is incorrect

I am unable to connect to domain controller via below script. This script is working for another domain controller so it mean script is correct. While I am connecting i am getting an error: ...
2
votes
1answer
65 views

EAP-TLS for Wireless with Active Directory

My question is more from a conceptual point of view, rather than implementation (even though I'm asking about proprietary protocols and products). Assuming I have users and credentials set up in my ...
6
votes
2answers
76 views

Cached credentials in ActiveDirectory and setting up machines

If one has a bunch of Windows machines which will be used remotely and off-domain (at first), is there a way to presynch the usernames and passwords from Active Directory so the users may login via ...
1
vote
1answer
28 views

Powershell remoting with active directory

I am able to connect to domain controller via below scrip remotely, but after that i want to run disable-ADAccount ,Get-ADUser command but I am getting error Get-ADUser : The server has rejected the ...
0
votes
1answer
16 views

infrastructureUpdate type OU called Infrastructure in Active Directory

A new OU called infrastructure with the type infrastructureUpdate has appeared in my Active Directory. It has just appeared. I have been going through the setup recently and the last major thing I ...
0
votes
0answers
34 views

Public Share with Samba4 AD DC does not work

I tried to set up a public share on my Samba4 AD DC but Windows always asks for username and password before mounting. I can't figure out what is going wrong. The only thing is, that testparm does not ...
1
vote
1answer
48 views

Why can't we link GPO to an AD container?

Containers are used to segment and organize a network and were designed with specific uses and restrictions in mind. Is this the only reason why we can't link GPO to a Container and only to OU? Are ...
2
votes
1answer
34 views

Best practice DNS in multi-forest environment

I have a multiforest environment, both forests exist in the same network. I want DNS between them to operate as smoothly as possible. Forward lookups are easy and can be handled with conditional ...
3
votes
2answers
54 views

Deploying printers to specific users via Group Policy

I have noticed two different ways of deploying printers to specific user with Group Policy in Windows Server 2012. The first method is by creating separate GPOs for each group, and the second method ...
1
vote
2answers
117 views

Active Directory Rebuild - User Login

I have around 100+ users in a windows 2008 active directory. There is only one active directory controller / server in the network. If the server hard drive crashed, and if I rebuild the active ...
-2
votes
1answer
35 views

Trouble Active Directory windows 2012

We are using a windows server 2012 and we have a problem. Our stations use windows 7 and windows 8. When we add a person in an access group in our Active directory, the user must restart their ...
0
votes
0answers
35 views

kdm and ssh detecting different fully qualified domain name when using kerberos authentication

I'm attempting to setup Kerberos login support (Windows AD domain providing the kerberos) for Kubuntu 12.04 Linux workstations at the company I'm at. It's almost completely working but I can't get ...
0
votes
2answers
38 views

Using Exchange 2013 with Samba as DC

I realize that Exchange relies heavily on AD, and I was wondering if it is possible install Exchange 2013 into an environment that is running Samba 4 as the DC?
1
vote
1answer
26 views

Active Directory 2008 multiple local user accounts

I have installed a new Active Directory 2008 Domain controller into my environment. We are currently running the 2008 AD server as a secondary. The primary AD server is a 2003 Domain Controller. We ...
1
vote
1answer
40 views

How to avoid frequent KVNO increases, when using Apache HTTPD with mod_auth_kerb talking to AD?

I've setup Apache HTTPD 2.4 with mod_auth_kerb, created a service account on Active Directory, added a SPN for my http hostname, created a keytab file on the linux machine, and had SSO start working ...
0
votes
1answer
42 views

User Unable To Login Remotly

When we configure a computers, we always connect it to our company domain after we add the user into our AD. So the next time we reboot the system we can login with the user credentials since we join ...
1
vote
5answers
202 views
+150

How to prevent remote code execution from a domain member server?

Is there a way, using a firewall, Group Policy setting, or other control, to prevent someone logged into a domain member from being able to remotely execute code on a domain controller (that they ...
1
vote
1answer
41 views

Ubuntu 14.04 Failing to join domain for Integration with Active Directory (winbind & samba)

I've followed the tutorial at this link https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto Everything seems to be configured somewhat correctly, net rpc join worked and the realm is listed ...
0
votes
0answers
38 views

Forward Lookup Zone Domain, Name Server IP “Unknown”

I have added the first new 2012r2 DC to an existing domain, that is running on 2003 servers. After getting it all setup, ADDS replicating, DNS replicating, DHCP setup etc. Everything I think seems to ...
1
vote
1answer
28 views

Active Directory: Permissions to get Kerberos Service Ticket

I have an Active Directory with a KDC running on Windows Server 2012. At the moment, every user can request service tickets for every service from the TGS. I'm looking for a solution where the KDC ...
2
votes
0answers
92 views

How can the x-frame-options HTTP header of ADFS 3 be manipulated?

By default, ADFS 3 responses contain the "X-Frame-Options: DENY" HTTP header. This prevents ADFS from being run in an iframe, because this presents an opportunity for clickjacking attacks. At the ...
0
votes
0answers
23 views

How to sync Azure AD users to on-premise domain controller? [duplicate]

I have just setup a on-premise domain controller with Windows Server 2012 R2. I now need to add users to it. I want to use the list of users I already have in my Azure AD. My ultimate goal is to be ...
0
votes
0answers
22 views

(Windows 7) Have Log on screen show local user “Tiles” and “Other”

I have a domain running windows 2008 R2. In one lab (running Windows 7 SP1) I want to be able to manage them using Group policy for the machine, but don't want the users to have to type in a network ...
1
vote
1answer
25 views

Windows Authentification with IIS and domain groups

We have a web application (ASP.NET MVC) installed on IIS for one of our clients with Windows Authentication enabled. The authentication is working perfectly but the problem is at the authorization ...
0
votes
0answers
47 views

Unable to edit Account Options with Delegate AD access (Access Denied)

We allow the IT services in other countries to manage certain parts of their AD/OU via Delegate Control. Under one Country OU, the delegate rights to edit Account Options are no longer working. This ...
2
votes
1answer
31 views

2 different names in Microsoft Active Directory

Can you tell me, how I can keep a name in 2 different languages in Microsoft Active Directory? One name must be in native language (Russian or Chinese), second in English.
0
votes
2answers
35 views

Removed AD User, Need to Associate Existing Profile to New Account

Some details Server 2012 R2 (AD Server) Windows 7 (Users Computer) Accidentally removed an AD User, stupid mistake. Unfortunately it seems the user was permanently deleted (didn't make use of the ...
1
vote
4answers
88 views

How to access a machine with a wrong network address?

I have a Windows Active Directory network in a LAN of addresses 192.168.10.0/24. I have another site that has addresses of 192.168.11.0/24, where all AD servers are in the 192.168.10.0/24 site (I ...
-1
votes
1answer
26 views

Connecting an Azure VM to active directory domain behind ISP NAT

I have an active directory local domain set up with 2 DC's running DHCP and DNS. Because my ISP uses NAT there is no way to host services externally. How can I link an Azure VM into my local active ...
-2
votes
1answer
54 views

AD Best Practice for the connection specific DNS suffix network setting

What is best practice for this setting? It also goes by DNS Domain Name in DHCP scope settings. The only documentation I can find about these suffixes and domain name settings specifies the the ...
0
votes
0answers
22 views

How to add a domain user to passwd for OpenSSH in Cygwin?

I have OpenSSH installed on a Windows Server machine (package from MLS Software). I want to add some domain user to the passwd file. I do mkpasswd -d -u username, but the program just hangs because ...
0
votes
1answer
48 views

What user accounts are necessary on the domain controller pc?

2012 R2 environment When a server is created to be a domain controller, it can be setup using the domain\administrator account when is attached to the domain. The machine will also have the default ...
1
vote
1answer
47 views

Winbind not enumerating users and groups of trusted domain

I'm using Samba 4.1.6-Ubuntu in Ubuntu 14.04, for authenticating users from two domains with a one-way cross-forest trust between them. Samba machine is joined to DOMAINA, while DOMAINB is the trusted ...
1
vote
0answers
36 views

Changing login-formats for Linux and Active Directory

On CentOS, I run realm list and see login-formats: %U@mydomain.local I'd like to change login-formats: %U@mydomain.local to login-formats: %U How would I go about doing this? I'm assuming there is a ...
0
votes
1answer
26 views

Remembering homeMDB & msExchHomeServerName when disabling for later reconnecting

My environment requires me to be able to create Exchange mailboxes on existing users, disable those mailboxes and then, some time later, re-enable them and have Exchange reconnect them automatically ...
1
vote
0answers
39 views

Child server cannot detect parent server users

Good day! I have two Windows 2012 R2 servers in a Active Directory forest, one as parent with the domain local.test and another as a child with the domain child.local.test. The child server has been ...
-1
votes
0answers
21 views

Does Windows 8.1 Pro have CAL included? [duplicate]

I am really confused about Microsoft's licensing policies. Now I am trying to understand a couple of things. Do I need a CAL's for using AD services? Does my OEM Win 8.1 Pro include a CAL? I ask ...
5
votes
1answer
60 views

Windows 8.1 Pro migrating “Microsoft live” account to domain account

For a variety of reasons a significant number of our Windows PCs are not joined to our Windows 2012 R2 Active Directory domain. We are in the process of rectifying this, and are joining PCs on a ...
0
votes
0answers
30 views

How can I list all users in AWS Directory Service?

I'm looking for a way to list all users in an AWS AD (small), preferably with created date (of the user). Is there any way to do this? The AWS console functionality seem somewhat limited. Maybe via ...
0
votes
0answers
26 views

MultiOTP + FreeRADIUS + MS Active Directory

I am running a CentOS 6.6 64 bit Server with FreeRADIUS 2.1.12 installed from base repository. Additionally I am using MultiOTP (http://www.multiotp.net/) which is configured to connect to our Windows ...
-1
votes
1answer
49 views

give permission to Active directory user to enable/disable a device

In my network, one of users uses DOS application and he need the permission to enable and disable his graphic card using devcon command . this user is Active directory user . how can i give him a ...
2
votes
1answer
32 views

Active Directory Domains and Trusts wont start

I just installed Active Directory on Windows Server 2008, but when I tried to open Administrative Tools => Active Directory Users and Computers, it shows me this error meesage : How can I solve ...
2
votes
1answer
59 views

Linux AD integration, unable to login when using Windows Server 2012 DC

I am trying to integrate my CentOS 6.6 servers into Active Directory. I've followed this guide from Red Hat using configuration 3 (SSSD/Kerberos/LDAP). When using a Windows Server 2008 R2 server as ...
1
vote
1answer
20 views

Windows Server Domain User and Workstation Software

I have a new server with windows server 2012(domain) and want to add a few new users and workstations( with AD), so all user could login on all workstations. That is easy, but now I would like to add ...
0
votes
0answers
12 views

Outdated files after Server 2008 RAID1 failure

I have a server running Windows SBS 2008 with 2 HDDs in soft RAID-1. Today some kind of RAID crash occured - the server could not boot saying there're no bootable device. I removed both drives from ...
2
votes
0answers
22 views

Exchange 2013 and AD/GC issues

I have Exchange 2013 (minimal install and all roles are on a single server) on-premises running on a Windows 2012 R2 server (both Windows and Exchange are patched and up-to-date). Basically this ...
1
vote
1answer
31 views

Allowing Domain Group to Administer IIS Server

I have a Windows 2012 server with IIS 8 on it. I am trying to allow users within a IIS_ADMIN group on my Active Directory to be allowed to administer the server. The Problem When I log into my ...
0
votes
2answers
46 views

Connect PC to domain running on Azure Virtual Machine [closed]

This is my first time working with domains, and I was wondering how I would go about connecting a PC that runs on my home network to the domain controller that runs on a Azure Virtual Machine (eg in ...
0
votes
1answer
41 views

Windows Server 2003 AD Replication error 1864

Quick question on Active Directory replication. The AD topology is simple: Hub site and 10 Branch sites. I have one connection object between Branch "A" DC and Hub DC in Active Directory Sites and ...