Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

1
vote
3answers
47 views

_msdcs Zone Not Updating

I've been working on cleaning up our DNS/DHCP and I'm about ready to turn on scavenging (it's never been enabled) to start cleaning up some old records, but before I do, I wanted to check something. ...
0
votes
2answers
27 views

Starting application on RDS connection

I have the following servers: Server 1 - Windows 2003: The original Domain Controller for AD, DNS Server server 2 - WIndows 2012: The latest server, upgraded to a domain controller too Now when I ...
0
votes
1answer
23 views

Create alias for UNIX username in LDAP for DB2

I want to use LDAP data for the authentication process in DB2. I have already configured DB2 via PAM to retrieve the information of the NIS server that is in the ActiveDirectory. It works perfect ...
0
votes
0answers
56 views

squid authentication error kerberos - windows active directory

I use squid on RHEL6 and I want that authentication is via AD windows 2008, I already joined the server to the windows domain and all users is already seen by wbinfo -u wbinfo -g but wbmin -t show ...
1
vote
0answers
56 views

Authenticate users from Active Directory with UserPrincipalName or Mail with FreeRADIUS

According to this documentation: http://deployingradius.com/documents/configuration/active_directory.html ; FreeRADIUS can authenticate Active Directory users using Samba's ntlm_auth, and in fact it ...
5
votes
1answer
224 views

Does OWA let users change their AD passwords once their passwords are expired?

We have a cloud active directory server which is running Exchange 2013. We have a lot of users with only exchange accounts and most of them will have their passwords expired in a few days, I was ...
0
votes
1answer
83 views

Group Policy Preferences Printers Server 2008R2 Error 0x80070bc4 does not set default printer after a printer has been created

Alright after calling upon the almighty Google I have been unable to find a good solutions to this problem along with many other users. So I am turning to Server Fault for some support here. I am in ...
5
votes
2answers
81 views

Joining a Linux host to Active Directory unattended

I'm trying to setup a block of hosts using kickstart and there's two commands that need the password to be entered. One is kinit, for that one it's easy to just generate a keytab file and pass it ...
1
vote
1answer
52 views

Get a csv/txt list of users using the “net group” command

I'm trying to end up with a txt file of usernames (1 user per line) using the net group /domain <group> command. However, the output of this command is not conducive to parsing. Does anyone ...
1
vote
1answer
60 views

Force active directory replication after joining a server to a domain?

I'm trying to create more 'self-service' virtual machines for the developers to use. On of the requirements is after running a script to bootstrap the machine and join it to the domain, that the ...
4
votes
1answer
24 views

How to dump(collect) all the group policies in a domain?

I want to collect all the GPOs in a domain , for reviewing settings. How many ways are there to do it. I used Get-GPOREPORT in Powershell, but it gave a comprehensive html file, is these a way to ...
1
vote
2answers
75 views

Avoiding a multi-homed Domain Controller in a dual network environment

I'm trying to take over an old infrastructure and clean it up, but I'm running into some issues deciding on the new architecture. We have a set of around a dozen or two test/production servers in a ...
2
votes
1answer
25 views

howto restrict active directory account for PEAP/non-CIFS only

We have some voip phones that we want to integrate into our PEAP WiFi network, and I'm concerned about just creating a standard AD account and using that. If someone got hold of such long-term account ...
1
vote
1answer
60 views

Why don't Active Directory user accounts automatically support Kerberos AES authentication?

I'm playing around with a test domain on Windows Server 2012 R2. I'm operating at the highest possible functional level and have no backwards-compatibility issues in my small test environment. ...
1
vote
1answer
66 views

Use Roaming Profiles as Default in AD (running Samba)

I've just set up an Active Directory Domain Controller (running Samba 4), created users, shares, groups, etc and everything is working. However, I have an environment where the use of roaming ...
3
votes
1answer
46 views

FRSDIAG / NTFRSUTL looking for servers which don't exist

I am using the FRSDIAG room(from tech-net) to do diagnosis on FRS replication. The issue is its tying to check the DC's which no ,longer exist . Error being "missing server reference for the server ...
1
vote
1answer
36 views

How can I delegate “Attributes 1-15” in Exchange / AD?

The following attributes are present on an Exchange user, and this is what my colleague sees: (notice the locks) How can I properly delegate Read access (or Read write if it must be) to these ...
0
votes
1answer
58 views

Installing ADAM on Windows Server 2012

I'm currently tasked with moving a Web Application that uses Active Directory Application Management (ADAM) from a 2003 server to a 2012 Server. My question more about any references to install ADAM ...
1
vote
0answers
17 views

Where are the attributes for room mailbox stored?

I'm using Exchange 2007 and I've created a room mailbox. I want to know where the settings of the room mailbox are stored? What are the attributes used to store room mailbox information? Are they ...
1
vote
2answers
84 views

Windows Server 2012 R2 in a Windows Server 2008 R2 domain

Can a server running Windows Server 2012 R2 (file server, app server, etc.) exist on a network with Windows Server 2008 R2 domain controllers, or do the DC's need to be upgraded first?
0
votes
1answer
45 views

Domain controller is registering 2 IP addresses with DNS

Recently a DC was promoted and the IP was used from the old DC which was demoted and shutdown.How tostop this DC from registering 2 IP addresses with DNS? Please let me know if any questions.
0
votes
1answer
29 views

Can a Win2012 R2 domain controller be used as the AD FS host in Single Sign-On integration to Azure AD?

I have upgraded our Active Directory from Win2008 R2 to Win2012 R2 in preparation for an integration with Azure Active Directory. I know the integration can be done with Win2008 R2, but I figured ...
0
votes
1answer
35 views

Domain controller with new domain on my network

I am migrating my organization from one domain to another. The old domain can be referred to as X, and the new domain is Y. On domain X, I have created a VM that will act as a DC for domain Y. ...
4
votes
3answers
200 views

Can a user see the Active Directory computer description in the Windows network browser?

This may qualify as another Stupid Question from someone fairly inexperienced in Active Directory, but I've noticed a handy "Description" field for computers in the Active Directory Users and ...
1
vote
0answers
28 views

Sysvol Replication issue

I have read a lot about this recently and must say it is doing my head in. now what I did was 6 months ago we did a upgrade of our infrastructure. We had a 2008 R2 server for domain controller now I ...
0
votes
1answer
23 views

Get file access permission of a specific user on a server in a different domain

In my environment, there are 2 domains connected via WAN link. Please look at the image below for the system topology: I want to display the folder access permission of a user from one domain on a ...
1
vote
1answer
50 views

Do both Active Directory servers need to see each other for replication?

I'm trying to set up a remote DC for DR, and I've chosen to put it in AWS in a VPC with our other servers being backed up. I can restrict that with security groups to only accept traffic from the main ...
0
votes
0answers
40 views

samba4 DC distro with samba4 git DC

We have already Samba4 AD DC which is installed via git from sources (to Fedora), and it will work fine. Now I should add there a secondary DC to domain, but I would like to use (CentOS 6.5) distro ...
3
votes
1answer
32 views

Change service user password in AD running service

I have a running service with logon user credentials using a service account in AD. If I change the service account password in AD users and groups but not on the service startup/logon details would ...
1
vote
1answer
80 views

Can't delete Active Directory object

I've been trying to solve this mystery for a couple of days but I think I've reached a dead end. We have delegated user creation and administration to a group. This permissions are applied to a ...
0
votes
0answers
46 views

Authenticate Dovecot against Active Directory

I'm trying to authenticate Dovecot against a Microsoft Active Directory on a Windows 2008 R2 Domain Controller. Dovecot (Version 2.2.9) is running on Ubuntu 14.04 (3.13.0-30-generic). My Configs: ...
0
votes
0answers
42 views

Kerberos and SSH login

I've just configured a RHEL 7 for windows authentication (idmap_ad). Every check works but if i try to ssh with a domain user i get the error: Connection closed by ::1 Here follows the ssh log in ...
1
vote
2answers
54 views

AD Group and Distribution Group with O365

I have a O365 with Exchange, and a local AD. I want to manage distribution groups and distribution groups members via PS scripts (that will run by scheduled task), that look users' AD attributes ...
0
votes
1answer
37 views

Service can't access a shared folder while the same console app can (FileSystemWatcher object)

i wrote a windows service that should monitor a folder and do stuff as soon as a file is copied/moved/created inside that specific folder. My problem is that while I execute the program in a console ...
0
votes
2answers
47 views

specify LDAP Query

When I ping 140West-dc it returns: Pinging 140West-dc.bvncap.local And my LDAP Query is as follows: LDAP://dc=bvncap,dc=local Is there anyway to pass "140West-dc.bvncap.local" to LDAP query ...
0
votes
3answers
59 views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
3
votes
2answers
107 views

Share folder with realmd / sssd and AD integration

I've setup a CentOS 7 machine, and joined it to our AD via realmd through: yum install realmd samba-common oddjob oddjob-mkhomedir sssd realm join --user=myuser@mydomain.local mydomain.local After ...
0
votes
0answers
50 views

Moving a group of students to another group and changing memberships after moved? [closed]

I'm a powershell noobie and need some help developing a script. I work for a school district and we current have our AD setup as *.*(server name) -> District -> *, , ...(school names by initials). ...
2
votes
1answer
63 views

Minimum permissions to send email through c#

In an web site, i've developed a function to send email (i.e. connect to exchange). I need to use a special user that in Active Directory has the permission to send mass email. On the other hand, this ...
-1
votes
1answer
44 views

Which attribute in Active Directory is used to store 'Outlook Anywhere' details?

I'm using Active Directory and Exchange 2010. I want to know which LDAP attribute in Active Directory will be affected if I enable or disable 'Outlook Anywhere' feature.
0
votes
2answers
39 views

Domain users in relation to local machine's settings

The lack of terminology's knowledge make's it difficult to find an answer with search engines for the following issue. Please excuse me. The problem is as follows: In a local windows network ...
2
votes
1answer
56 views

Search AD for empty sAMAccountName & userPrincipalName

I'm in the process of implementing a User privilege management solution and it needs to audit all users within our AD. It's currently falling over due to an account which has two blank attributes: ...
2
votes
2answers
250 views

Remove 'dead' server from Active Directory

My SQL server has catastrophically failed. Is it possible to remove its entry in the Active Directory completely so that another server can be added with the same name and IP address? If so, could you ...
0
votes
1answer
54 views

Windows 2008 r2 not using default security groups (ie Domain Admin) prevented from changing own password

Apologies if I did not find a question similar to mine but i have searched honest! Firstly we have undertaken a no default group approach to our security on active directory. This has been very ...
0
votes
1answer
51 views

Active Directory DNS probelm

I have following scenario. Windows 2008 R2 base Active Directory DC (DC1), which is hosting DNS+ DHCP too. (previously it was on windows 2003 32bit, i migrated it last year on 2008 r2 64bit). Also ...
4
votes
2answers
222 views

How to check if an AD username is already used

Thank you in advance for your help. I found something related at the following link but was unable to find the solution I was looking for through here. Check existance of domain accounts with ...
2
votes
1answer
31 views

New NTDS connections on a site: Need order of operations for local and remote sites

I have two AD sites: Hub and Spoke. ISTG is turned off for both of them, and a new DC is being placed in to the site with no ISTG enabled. What is the correct order of operations to set up manual ...
-2
votes
2answers
38 views

Active Directory. Two questions. Purpose of permissions and program to test AD [closed]

I'm new to AD and I'm learning with some books. I have two questions, being the first question the most important. 1) I have created an users OU under my DC. I created some test users. I can assign ...
3
votes
0answers
49 views

My two-way trust with selective auth seems to behave opposite to a one-way trust

I'm not sure why I'm the only one running into this, I think it's a larger problem with Server 2012 and RDS protocols... With 2008 machines, you can use utilize a one way trust to authenticate across ...
4
votes
2answers
180 views

If I join esxi to an Active Directory domain, how does it choose which DC to authenticate to?

I'm familiar to vSphere and large installations, and not at all familiar with the free products. Topology & configuration We have some branch offices that use ESXi and have a DC resident on ...