Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

2
votes
1answer
32 views

Active Directory control client hyper-v permissions

I've done lots of googling and the only thing I find relates to, I believe, Hyper-V server and not client Hyper-V. The scenario is that we have a domain here at the college and we are trying to use ...
1
vote
1answer
113 views

Winbind Centos wrong UID/GID

Here's the scenario: I have two machine: Ubuntu, running ldap to authencticate users CentOs, uses winbind to authenticate users to mount homedirs I use fstab and nfs shares. The problem is this: ...
0
votes
2answers
22 views

Restore User or Backup exec settings after demoting

Just don't mess with a server when you're not feeling focused, because you can end up something like i did: I have a server (WS2003 R2) which acts as backup server (backup exec 2010). We needed a ...
1
vote
3answers
72 views

Office365 and Active Directory Integration (and On-premise Exchange Disintegration)

We used to have on premise exchange server which is integrated with active directory (the PDC and Exchange Server are all the same Windows 2008 small business server). We migrated our Exchange to ...
0
votes
1answer
20 views

How to add password authentication to working OpenVPN server?

I have already working OpenVPN server, which connects 25 branches. Config is below. Our company has outsourcing developers, and they need to access servers in DMZ. How do I add N number of ...
3
votes
1answer
99 views

How to authenticate a user from an external Windows Domain (Active Directory)

I have a service (AcmeService) running on a domain (ACME.COM) and a user running in another domain (DISNEY.COM). mickey@disney.com wants to authenticate with the AcmeService. The service knows about ...
0
votes
1answer
77 views

How do i get centos 7 to use uids and gids from active directory?

I'm preparing for an eventual upgrade from CentOS 6 to CentOS 7. Right now, in version 6, we just use LDAP mapped to AD for authentication. This then uses the UID and GID from the Active Directory ...
0
votes
2answers
30 views

restrict media access by user

I recently took over a network and I'm still pretty raw in regards to AD and group policy. I've been trying to use group policy to restrict CD burning rights to only 3 users and only their 3 ...
0
votes
0answers
18 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...
0
votes
0answers
59 views

Restoring read only domain controller from VM checkpoint

I have several RODC on remote sites, and sometimes power failures corrupts ADDS database which takes some time to recover. I'd like to move RODC to virtual machine (on same server) to be able in case ...
6
votes
1answer
151 views

How can I generate a list of the security groups a set of users belong to?

I have been asked to generate a list of the security groups (so specifically not the distribution groups) that a list of approximately 50 users belong to. I have a list of users, users.txt that ...
0
votes
1answer
45 views

what happens to sql server if the active directory server goes down?

What happens to sql server if the active directory server goes down and the sql agent services is logged on as a windows user.
0
votes
1answer
109 views

Host (A) record (DNS) updated with wrong IP address

I recently installed a new Domain Controller running Windows Server 2012 (called "srv3") in a domain with two existents DCs that are running Windows Server 2003 (called "srv1" and "srv2"). All roles ...
2
votes
0answers
29 views

Is dual directory integrations possible with Windows?

In the Mac world, you can integrate OS X systems with dual directories so that OS X looks towards Active Directory for authentication and OpenLDAP for OS X managed preferences. Is the following ...
0
votes
1answer
14 views

How can configure IIS to service to AD users only?

I have an intranet in my company and I have a domain controller that users authenticate with this,I have an internal web site (IIS) I want limit this site that services only to my domain users.How can ...
1
vote
2answers
394 views

PBIS Open AD authentication stops working on ubuntu with errors: “user accout has expired” and “is your account locked?”

We have been using PowerBroker Identity Services Open to authenticate active directory users from ubuntu hosts successfully for six months. Recently AD authentication stopped working on several ...
0
votes
0answers
15 views

Priorities or ambiguos DNS reverse zone with Bind

In my internal DNS running on Bind9 all machines are available at up to 3 different domain names, i.e. all machines are listed as machine.legacy.domain and machine.new.domain. Some machines are joined ...
0
votes
0answers
42 views

Cannot configure Exchange Server 2010 on mobile device because of “the connection to the server failed” error

I have a server with Exchange Server 2010 in a Win2008R2 domain. The fact is that whenever I try to configure Exchange access from a mobile device I get the following error in the event viewer: Log ...
1
vote
1answer
30 views

Active Directory Sync to Remote Domain

I have a client that needs to sync certain object AD info from their secure domain to our domain. Something like the Windows Azure Directory Sync Tool, but just not for Azure. I would like to use ...
2
votes
2answers
192 views

Authenticated Users builtin group in AD deleted

I have a large-ish AD setup, where one of the already fired admins, for reasons unknown deleted the subject group. Been googling for a while, but besides explanations what the group is for and ...
0
votes
1answer
31 views

Multi-Site AD design

I have a new client with 3 sites and I want to join/combine/trust ADs. The setup is as follows: Site 1: No AD. Site 2: Hosted VMs on a dedicated local domain (for the 3 servers in the VLAN only). ...
0
votes
0answers
51 views

Site to site active directory for hyperv replication

We have two dedicated servers across two different sites. They host hyper v virtual machines for email hosting etc. I'd like to have hyper v do replication between them and so I have a copy elsewhere, ...
0
votes
1answer
57 views

SBS 2003 - Rename Domain Netbios Name Without Renaming Active Directory Domain Name

I have client running a Small Business Server 2003 R2 network with a strangely named domain. The fully qualified domain name is a straightforward contoso.local. The domain netbios name (shown as ...
0
votes
0answers
25 views

How to get free hours of a user using EWS?

I'm trying to find the free/busy information of a user in my Exchange Organisation. I'm using GetUserAvailability operation for this purpose. This method is returning only busy and tentative ...
3
votes
1answer
74 views

SID in AD - SID from psgetsid?

Wondering if anyone can shed some light on some SID confusion. Currently having an issue with some policy applying to a few machines that were all based off the same image. One of our admins, ran ...
0
votes
0answers
33 views

Active Directory Root Permissions

We currently have way too many users in our Domain Admins group so I'm working on redesigning our active directory structure and I'm looking at the current permissions and looking at the root our our ...
0
votes
1answer
48 views

External DNS takes a long time to resolve for AD computers

On our AD domain, end users desktops take a long time to resolve DNS from outside our company. Internally everything works fine. The desktops are pointing pointing to 192.168.2.4 and .6. Those are ...
0
votes
0answers
13 views

Enabling constrained delegation on DC computer account

Is it necessary to have constrained delegation enabled on Microsoft AD domain controller computer account? If yes then why and what are consequences of disabling it? I'm mainly interested in current ...
0
votes
0answers
17 views

OpenVPN Radiusplugin AD and the user restriction

Im using FreeRadius which is using Samba4 (AD DC) as the user/password provider. OpenVPN is using Radiusplugin, which use that FreeRadius Server for authentication. This solution work great, but I ...
1
vote
2answers
99 views

Getting list of users indirectly members of an AD group through LDAP

I'm having a bit of a problem with LDAP search that should specify whether a user is a member of a given AD group or not (recursively). Basically, what I'm doing is issue a LDAP search with the ...
1
vote
2answers
57 views

Can Microsoft accounts be created and managed via Active Directory / API?

We are in the process of shifting over to Google (Apps) for Work. One of the cool things that this provides is 'Google Apps Directory Sync' https://support.google.com/a/answer/106368?hl=en which ...
2
votes
1answer
30 views

Branch office printers listed in directory

About a month ago we added a branch office site to our corporate domain via site-to-site VPN. A domain controller was set up at the remote site to manage logons and printers for about 10-12 employees. ...
1
vote
0answers
17 views

gpo ie user force update

We use two 2008 Domain-Controllers and one 2012 DC In a gpo we set the proxy for IE-11 per user. eg: X use proxy, server: proxyserver, port: 3131 This gpo is not mandatory, so users could change ...
0
votes
1answer
11 views

Drive Maps via Group Policy - Overlapping Policies

((NOTE: We are on Windows 8.1 with a 2008R2 domain)) We have decided to move away from mapping drives via a log in script and attempting to do it via Group Policy. I have personally been doing this ...
0
votes
1answer
25 views

Permissions for SCCM Service Account

Does anyone know what is the least privileged Active Directory security group needed for the MS-SCCM 2012 service account to do software updates via Configuration Manager? ConfigMgr runs fine with ...
0
votes
2answers
54 views

Software installation on computers in a domain environment [closed]

The network I am working on is extremely small, my client only have 2 desktops which are in a domain setup being managed by a Windows Server 2012 machine with active directory. My client has a ...
-1
votes
2answers
68 views

Windows domain + Linux Domain on One Network

Currently our network is all tied to Active Directory with both Windows and Linux workstations/servers. We would like to implement a Free IPA server that synchronizes authentication between a Linux ...
0
votes
2answers
60 views

Part-time AD server

I'm trying to understand how current Win 7/8 machines behave when they lose access to their domain controller and if it's possible to have machines be part of a domain if domain exists only part time ...
0
votes
0answers
30 views

Mac maverick binded to AD

I got a mac laptop binded to AD successfully. Logged in with a domain user and it created a mobile account. The user used it for a day then rebooted and find that they can't login anymore. I logged in ...
0
votes
1answer
45 views

Domain Controller does not have a computer account for this workstation trust relationship

We've had an ongoing issue for a while and I'm here on a Saturday to try and figure it out, and I think I've found the problem, just not the cause... For a few months our second domain controller has ...
0
votes
0answers
37 views

Unable to add Exchange mailbox for user in domain trust environment

We have a domain trust set up between two domains (DomainA, DomainB), and when attempting to add an Outlook mailbox that resides in DomainA for a user that belongs to DomainB - it fails. However the ...
0
votes
0answers
9 views

Password expiration in SQL/ODBC before AD

I have a script that emails users that their password expires in X days. Today a user got an alert that her password expires in 8 days. She was having problems with Excel and Access databases that ...
0
votes
3answers
51 views

GPResults say my GPOs are not applied because they are “empty”

I am trying to apply several policies to my domain (running on Windows 2008 R2). Below is a sample of how I have structured my OUs. Test OU {Computer based policy} {User Based Policy} OU Users ...
0
votes
1answer
48 views

Get login name using email address with Powershell

I need a powershell script, to get login names using the e-mail address. i am having a note with e-mail address of some users. I want to get login IDs and account information of the users in the ...
3
votes
2answers
188 views

Must create PowerShell script to change Password Expiry and Date to change next password

I've been tasked with creating a script that reads in a file a list of Active Directory user IDs and then clears the flag for Password Never Expires. In addition, my security officer doesn't want the ...
1
vote
0answers
54 views

Samba4 sysvol replication error

Production environment: 4 DCs (windows server 2003) and near 150 workstations. Intention: migration to Samba4 First, I've added 5th DC (CentOS 6.5, Samba 4.1.11-9.el6.x86_64 from SerNet repository). ...
-1
votes
1answer
36 views

The Name Limit for the Local Computer Network Adapter Was Exceeded

I am facing issue with my windows server 2008r2 sp1 that every two or three days later i am unable to access active directory tools,symantec endpoint protection manager and stop file and printing ...
0
votes
2answers
58 views

How can I manage remote site printers?

Please bear with me, my server and networking knowledge is not amazing. The company that I work for has a central 'Head Office'. This is where our server room is located. We have a bunch of Windows ...
1
vote
3answers
79 views

New-ADUser -Name Length too long

I need to add about 500 users to an OU in AD I have scripted out everything I need, however, it gives the error: the name provided is not a properly formed Here is the script New-ADUser -Name ...
2
votes
2answers
283 views

When should another AD domain be created purely to reduce replication traffic

I'm going over some hypothetical AD design scenarios for learning purposes. Lets say I have one domain and two physical locations, sites and DCs. The sites are connected via a limited bandwidth WAN ...