A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
14 views

How can i manage multiple domain with samba?

We set up our new domain controller running with Samba4 a couple of month ago (About twenty clients) Our organization change quit a bit, and a new structure manage our company. I need hits about ...
2
votes
2answers
49 views

The requested operation requires elevation

We have about 15 PCs on our network. I can make changes to all the PCs except one. I keep getting the message "The requested operation requires elevation". When I try to run a program as an admin, ...
3
votes
0answers
54 views

AD Replica DC Promotion Stall

I recently inherited infrastructure duties for a small startup I am working with. My traditional role has been development, so bear with me... I was hoping to start off on the right foot, and get ...
1
vote
1answer
34 views

Fileserver cannot find any DC's for trusted domain

The problem Due to a merger in our organisation, we are migrating to a new common Active Directory domain. Our old legacy domain and the new domain have a two-way trust between them. We have two ...
2
votes
1answer
39 views

How to programmatically logout idle users on Windows Server 2012 R2?

I've searched a lot but couldn't find a direct solution. Can anyone tell me how to logoff idle users from a remote desktop connection to a Windows Server 2012 server after a period of time? These are ...
1
vote
1answer
24 views

Backing Up User home Folders in an Active Directory

Our Domain is currently Set up with a Server 2012 domain controller. We have Home profiles enabled, which is annoying because it grants the User and only the user access to their files. We need to ...
0
votes
1answer
45 views

How can I manually initiate the creation of a home folder for an AD user in Windows?

I have an AD environment with Windows 2008R2 Server where a few Windows 7 machines use FolderRedirection . Sometimes I need to re-initiate the homefolder creation process, but the only way I've found ...
0
votes
0answers
24 views

SSPI trying to authenticate local user against domain

Our domain controller's event log is being flooded with EventID 4625 errors, "An account failed to log on." Here are some of the details from the event: Logon Type: 3 (Network) Account For Which ...
0
votes
1answer
22 views

Is ObjectSID a feature of Active Directory or is it a standard feature of all directories?

Is ObjectSID a feature of Active Directory or is it a standard feature of all directories? Is there an Object Class that provides ObjectSID which can be used in other directory services such as ...
1
vote
2answers
52 views

Linux Authentication with Windows 2012R2 Server (Deprecated IMU role)

I've been looking around the web trying to find a way to authenticate users on Linux with a Domain User account on a Windows 2012R2 Server. The way I've done this in the past is using the "Identity ...
0
votes
0answers
26 views

Samba DLC and Windows 7 Clients. Random drop of connection. Kerberos?

I have a Samba (Version 4.1.6-Ubuntu) DLC (Server role: ROLE_ACTIVE_DIRECTORY_DC) on an Ubuntu Server (Ubuntu 14.04.1 LTS) Several Windows 7 Professional Clients are connected every day and usually ...
2
votes
2answers
62 views

Demoting a server in a domain with Windows 2012 and 2008 servers

We have a domain with more DC's than necessary. Each server added to domain has become a DC. We would like to demote a few servers. For lack of a better word our main server is a Windows 2012 R2 ...
1
vote
0answers
24 views

Change Server 2012 R2 domain name in network section

In the network section of a Windows Server 2012 R2 displays the name of the domain as domain 2. For example: "mydomain.net 2". Ive seen similar problems with wireless profiles and that can be resolved ...
0
votes
0answers
55 views

Unable to access Samba fileshare on CentOS 7 from Windows 7 on AD Domain

I'm trying to stand up a new CentOS 7 server running Samba and I'm unable to get access to the shared directories from my Windows 7 local machine. As I'm not super familiar with CentOS 7, I followed ...
3
votes
0answers
15 views

Possible to import Office365 users into local active directory domain? [duplicate]

My company has an office365 setup for all employees. We also have just implemented a domain controller locally which we want to use to authenticate a few things here in the office. The problem is that ...
1
vote
0answers
16 views

Rollout approach for centOS/RHEL linux servers to achieve centralised authentication through AD

We have 3 environments testing develop and production each having more than 40 Linux servers. Need to establish centralized authentication through AD for all these environment. Which is the best ...
1
vote
1answer
41 views

is there a way to trigger a password reset to the current password in AD?

I'm running Google apps password sync, but it only triggers on a "password change" event. All our users are managed from a remote database which syncs AD to it via a service, using dsmod to manage AD. ...
1
vote
2answers
90 views

Join Samba 4 AD domain, missing DNS entries?

I've just set up a Samba 4 Active Directory domain using the Samba supplied guide. So far so good, and I managed to join my fileserver to this domain by following the Setup a Samba AD Member Server ...
0
votes
0answers
22 views

Schema Mismatch Replication Error After Introducing First 2008 R2 DC

AD replication fails with Schema mismatch error after introducing first 2008 R2 DC to 2003 R2 Domain. Some notes that are worth mentioning: I did run adprep before promoting the new server to DC. ...
0
votes
0answers
28 views

CloudFormation powershell to run as domain admin + elevated priviledge

So... I'm writing some cloud formation templates. Using cfn-init, I get the machine to join the domain, and now I need to run in a Domain Admin context as local admin with elevated privilege to: ...
2
votes
4answers
124 views

Different group policies in one domain

I'm using powershell to display the password expiration of an account before I reset it at work. But the global GP from what I can see, is 180 days, and there are some employees who have 90 days set ...
0
votes
1answer
21 views

Cannot View Active Directory within Azure

I have an Azure subscription - created and owned by me. I'm the service administrator. I have set up a colleague as a co-administrator so they could sort out Active Directory for me. My colleague ...
3
votes
2answers
239 views

Should I create active directory site for site with no domain controller (but with site-to-site VPN)?

This should hopefully be a quick and easy one. I have a remote site with no domain controller (no servers at all), connected back to HQ by a site-to-site VPN. Prompted by Netlogon Event 5807 (client ...
4
votes
1answer
84 views

Why is the Computers object a CN not an OU in Microsoft Active Directory?

In my Microsoft active directory environment almost every organizational structure is an Organizational Unit. There are two common exceptions to this rule, the Computers object and the Users object. ...
3
votes
2answers
286 views

Active Directory, create user just for adding computers to the domain

I'm a linux admin by trade, and my new job has me managing windows servers. I'm trying to create a windows server 2012 base image using packer. As part of the provisioning, the VM needs to be ...
2
votes
1answer
33 views

Active Directory Security Permissions automatically reset

I have a Server 2008 R2 machine with Windows Deployment Services installed, which works perfectly well. However after some time (maybe a restart after installing updates) the security permissions ...
2
votes
1answer
49 views

Single forest with multiple domains - authentication?

I have a single forest and a 2 domains in it. Remote sites have a mix of users from both domains. All of my domain controller are global catalogs and trusts are set up. Do I need to have domain ...
2
votes
1answer
46 views

AD Forest/Domain Functionnal Rollback with DirSync/ADFS in place

At our main site we are running at 2012R2 (forest/domain) functional level and we currently have migrated our mailboxes to Office 365 using an exchange hybrid configuration with ADFS and Dirsync. We ...
0
votes
2answers
55 views

Active Directory Replication Errors

I am very new to this so bare with me, but we just installed a second Domain Controller on our domain. The installation of DC 2 went along with no hiccups. However I am running into an issue with ...
0
votes
1answer
25 views

Fine Grained Password Policy

Do Fine Grained Password Policies (in this situation, applied to a group which will have a selection of members) override the Default Domain Policy that will be applied to all other members in the ...
0
votes
0answers
43 views

Windows 2008 Web Enrollment Fails The RPC server is unavailable. 0x800706ba (WIN32: 1722)

I am setting up an RA and a Subordinate CA who is also an AD. I can issue certs through certutil and the mmc snap-in with no problem. But when I try using Web Enrollment in the RA, it fails saying ...
1
vote
2answers
75 views

Join Red Hat Linux 6 to a Windows Active Directory Domain

I am using Red Hat 6 (for testing purpose) and configure samba with active directory.Red Hat 6 has successfully join with my windows server 2003 domain. By typing the command [root@mainserver /] # ...
2
votes
2answers
83 views

Active Directory Users and Computers does not list Members of a Global Group

I have a single domain forest at Windows Server 2003 functional level (Domain and Forest are both at 2003). We have 3 Domain Controllers running Windows Server 2003, all of which are Global Catalogs. ...
3
votes
1answer
67 views

Does Windows log a “Member removed” event for security groups when an AD user account is deleted?

We have AD DS security auditing enabled on a Windows Server 2008r2 functional level domain. We use a third party tool to alert us to changes to our administrative group memberships. We recently ...
-1
votes
0answers
32 views

Member of Domain Admins doesn't have permission to edit domain/users

I added myself, a domain user, into the group Domain Admins with the idea to remotely manage the domain using the remote server administration tools. When I want to edit domain users/groups, I get ...
1
vote
1answer
67 views

DNS - Remove Active Directory Integrated Forwarder on One Server

The zone in question is currently held on a single Windows 2003 Domain Controller in a remote office (the result of an acquisition), and I would like to create secondary zones at other locations in ...
0
votes
1answer
28 views

Domain Controller Demotion & static ldap querys

I am going to be demoting some DC's and want to see if there is a way via wireshark or netstat or something to see if a server might be out there that has statically mapped to them for LDAP queries. ...
0
votes
1answer
39 views

AD Organization feedback requested

I'm taking over an AD domain (not large) administration but it looks like it needs some organization. For example, under the top domain "something.com" there is a folder named "User" with many ...
2
votes
2answers
239 views

Authenticate client against specific Domain Controller

I am having an issue with an active directory account not running login scripts. The scripts run fine in one location and not in the other. Getting the following errors in the event logs: ...
-1
votes
2answers
42 views

Prevent windows users from logging into, pinging, or browsing other workstations [closed]

Bluecoat security did an analysis of the Sony attack and says the following "This particular sample highlights the value of a network architecture where workstations cannot talk to each. While ...
2
votes
0answers
20 views

What does SBS 2011 do “under the hood” when you give a user admin access?

I have been using Windows Server for many years now and when I have someone who needs local admin access over their machine, I apply it through group policy in a similar way to this answer. One of my ...
0
votes
2answers
72 views

Adding client computers to an active directory domain controller

After facing a hell of a problem with adding a client computer to a domain controller, i followed the answer i got on this site and used my server's IP address as the preferred DNS on the clients ...
0
votes
1answer
51 views

Transparent user migration to a new file server - just changing DNS?

So, file server migration. I've robocopied everything over and kept folder permissions intact, I have recreated the shared. My question is I need a transparent way of switching all the users from ...
2
votes
0answers
53 views

Is using the AD home directory attribute to map the home drive really no longer a best practice?

I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
0
votes
2answers
114 views

Windows 802.1X WiFi First Login To Domain Laptop

So I have my Windows laptops using 802.1X for authentication to connect to my WPA2-Enterprise WiFi network. This works well except for one edge case. These laptops are Windows 7 Pro and Windows 8 ...
0
votes
0answers
18 views

AD Account Policies/Group Policy not updating Mac keychain passwords

We currently run Windows Server 2008 R2, AD and have a multi Desktop OS environment ranging from Macs to Windows. Macs are bound to AD for login and password authentication through the directory ...
0
votes
0answers
22 views

Domain policy expiration doesn't match net user command

In Active Directory, we have recently changed our password policy. We had our users set to where their passwords would not expire previously. Now, we have set max password age in our domain policy ...
1
vote
1answer
40 views

Can computer change his AD Domain Site binding on network reconnection?

Can a computer's AD DS site be reassigned on network reconnection? For example, I connect a computer to network 172.16.1.x, and then boot it up. The computer recognizes the subnet as belonging to ...
1
vote
2answers
121 views

an active directory domain controller could not be contacted

After creating an active directory domain controller i tried to add client computers to the domain i kept hitting a snag. The following error occurred when DNS was queried for the service location ...
0
votes
0answers
17 views

IE11 & 2012R2 History GPO

probably a really simple one but I've not been able to find it. I am running a 2012R2/Win 8.1 environment and want to stop IE from storing any browsing history on a machine level. I've already set ...