Tagged Questions

A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
47 views

Best way to restore a domain controller in windows server 2003 environment

We have 2 domain controllers, the primary DC is down and It cannot login to windows due to an error: “Security Accounts Manager initialization failed because of the following error: Directory ...
1
vote
1answer
90 views

Apache kerberos authentication to Active Directory not happening. (Is KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN related?)

My goal is to have Apache authenticate authenticate against AD, without prompting for a username and password, using Kerberos. It currently always shows "401 Unauthorized", and appears to be not ...
0
votes
1answer
7 views

Can the objectGUID be specified on creation or changed afterward?

Our system links users in an LDAP store to users in a SQL database. The database has been around longer than the LDAP store though, and we'd like to bring pre-existing users from the database into ...
0
votes
0answers
21 views

Using DSCONFIGAD to bind computer objects to a specific OU using a FQ LDAP DN

The DSCONFIGAD utility for OS X has a -OU parameter that allows one to generate and bind computer objects to a specified -OU via a FQ LDAP DN argument. This is taken directly from Apple's DSCONFIGAD ...
1
vote
2answers
44 views

Active Directory user rights

I'm currently working on a ASP MVC Website solution that I retrieved from a predecessor, and I had to create an active directory machine to support the login implementation using it. Upon a user's ...
0
votes
0answers
16 views

LDAP proxy to inject temporary Gerrit users

We are going to use Gerrit as our production Git server and code review tool and we'd like to use Active Directory to manage the server access. Gerrit however supports only one authentication method ...
2
votes
1answer
44 views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
0
votes
0answers
10 views

SVN server - User test.user1 not found: /SVN/testrepo

My subversion SVN is causing recently lots of troubles and I can't access any repository with the newly created AD account. Let me explain briefly how everything works or it used work. My SVN ...
0
votes
1answer
55 views

Windows Server Network Shares - Non-domain users have access

I have a server with Windows Server 2012 R2. I have a drive that I want to share with the "Domain Users" group. I have set that drive to share only with that group. From a different computer that is ...
1
vote
1answer
28 views

What do I need to ldapsearch AD?

I'm attempting to test LDAP for Moodle auth, by using LDAP search. When I run $ ldapsearch -H ldaps://totally.legit.hostname "(uid=jldugger)" -b dc=example,dc=org memberOf I get back: ...
0
votes
1answer
44 views

Linux Authentication by Active Directory without joining to domain

I have a Win 2008 AD based network. I want to setup a few boxes with dual boot Win/Linux. How can I achieve to authenticate the users with existing AD in Linux? All solutions - I have found yet - ...
1
vote
2answers
87 views

Desktop Wallpaper through group policy for Windows 8 client

I Have Windows 2008R2 server with active directory. All client systems are Windows 8/8.1 Pro. I need to push corporate wallpaper through AD GPO on client system, I have created a shared folder on ...
-1
votes
1answer
13 views

Set a GPO on all users from a trusted Forest

How do I set a GPO (such as desktop background) to work on users from Forest A when they connect to Computers on Forest B. There is a bidirectional Forest Trust between the two Forests.
3
votes
2answers
168 views

How do I make it as if I've never logged into a workstation with a Domain AD user profile?

I've been working on setting up OneDrive for Business with automatic syncing and folder redirection. I got everything working, but there were some issues along the way. In dealing with those issues ...
0
votes
0answers
22 views

Create active AD user with samba net rpc user add command

I have a mixed Windows and Linux Environment. I want to create new Active Directory users with Samba tools. This command will create a new AD user, but they aren't active: net rpc user add ...
0
votes
0answers
32 views

How can I resolve element not found in AD CA?

I had to move our AD CA from server 2008 32bit to server 2008r2 64bit, both domain controllers too! I now know this was BAD. Is there any way to resolve the "Element not found" in AD CA? Or do I ...
0
votes
1answer
30 views

Limit LDAP request to AD

Is there a way to limit requests from a specific user to the AD such that he can only ask if a username or an email address exists or not? The user should not be able to request other data from the ...
2
votes
1answer
87 views

Is it possible a remote active directory authentication from local without VPN

Can we authenticate to a remotely hosted DC from local machines without VPN connection to the server. Server have Public IP & Local machines are using NAT. Currently there is no any other ...
1
vote
2answers
29 views

ADFS Metadata with Active Directory Attributes

Using ADFS on Windows 2012 R2. I have created a Relaying Party Trust that has a claim rule defined that maps a Active Directory Attribute to a named attribute in the vendors system. When I view the ...
0
votes
1answer
32 views

My GPO only runs the first time it is linked to the OU

I am attempting to distribute a .msi file via GPO to Win7 machines from a Server 2008 R2 network. I am getting a funny result. The first time I link the GPO to a OU the program loads. I uninstall ...
2
votes
1answer
166 views

AD IT Helper Permissions

My apologies if this has been asked before. If I knew the proper search terms then google would be more effective. I would like to add a user that can join computers to the domain, Install software ...
1
vote
3answers
59 views

Active directory HyperV VM to VMware

we just copied an active directory VM from an Hyper-V VM to a VMware one. This Hyper-v VM is our second active directory server (the first one is a physical server). We used Symantec Backup Exec to ...
0
votes
1answer
27 views

Windows profile is deleted when user does not log in for several days

We use a Windows Server 2008 R2 Active Directory network with Windows 7 Professional clients. After logging in a profile gets created on the computer as normal with all the usual settings, such as the ...
1
vote
2answers
65 views

Newly promoted domain controller showing many errors but dcpromo didn't complain?

I have a domain separated into four sites. In one of my remote sites, I have promoted a new DC and will be decommissioning the existing DC in a few weeks. I didn't receive any errors when I did the ...
-1
votes
0answers
19 views

Unable to change the encryption type for Kerberos

I have logged in as Administrator to change the encryption type on Windows Server 2008 R2. The Security options are disabled and the security setting is currently set to DES_CBC_CRC. Need to select ...
1
vote
1answer
81 views

How Do I Connect to Active Directory Server Behind a Firewall

I'm having trouble getting LDAP queries to reach my Active Directory running on Windows Server 2012 R2 behind a Cisco PIX 506E firewall. My goal is to create a SSO environment for some applications ...
0
votes
0answers
16 views

Cannot add Domain Users to SQLServer security

I installed a win2008 server (WSQL) Its has successfully joined another Win2008 server which is the domain controller. Now back to WSQL machine, I connect it to the domain... And I install ...
3
votes
1answer
39 views

New-ADUser ADException NotSpecified

I am receiving an error when I run this powershell command to add a new user: PS > New-ADUser -Name "user1" -GivenName "test" -Surname "User" -Path "ou=Users" The error returned when run is: ...
4
votes
3answers
119 views

AD does not unlock account - even after the Lockout duration is expired

I'm facing a strange problem - domain user accounts are not being unlocked. These are the Account Lockout Policy settings: Lockout duration: 30 minutes Account lockout treshold: 10 invalid logon ...
4
votes
1answer
44 views

Forcibly Split 2003 Active Directory Domain

I am currently trying to find the most efficient way to split a single domain into two, distinct, fully functional domains. We have two sites, and several DCs. The sites, Site A, and Site B, are ...
0
votes
0answers
27 views

Apache Webserver: Map ClientCertificate to Active Directory

Using Apache Webserver 2.4 and mod_ssl and mod_authzn_ldap I'm trying to Authenticate the user by a ClientCertificate (PKI smartcard) Authorize the user by membership of certain Active Directory ...
3
votes
1answer
50 views

Group Policy Files - Active Directory

I am having a whole lot of trouble getting some files distributed across the network. My settings are: Action: Replace Source: \\[fqdn]\Repo\sqljdbcl.jar Destination: ...
-1
votes
1answer
31 views

Clone VM connected to domain with CRM 2011 on Windows 2008 R2 SP1 [closed]

After copying VM with CRM 2011 I've changed server name, performed actions in this article: ...
5
votes
2answers
327 views

Reverse DNS records not registered when using DHCP

I've stumbled upon a strange behaviour with Windows machines, which seems to be fairly consistent between all Windows versions from Vista/2008 to 8.1/2012 R2; it doesn't happen instead when using ...
1
vote
1answer
24 views

How can I quickly check number of groups in my domain?

Probably this is simplistic question but it seems that off the top of my head I have no idea how to do this. How can I get number of groups in my domain? In all domains within the forest? What is the ...
1
vote
0answers
27 views

How to Two-way Trust between Samba3 and AD

I'm studying Two-way Trust between Samba3 and Windows 2008 R2 AD Domain. I'm using debian 7.6.0 and Samba 3.6.6 Firts, please look my Topology. http://blog.naver.com/hjk4637/220156608223 I have AD ...
4
votes
1answer
1k views

Java 8 Update 25 Install Via GPO Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using Group Policy. When attempting to add the jre1.8.0_25.msi package in the GPO at Computer ...
2
votes
1answer
31 views

Active Directory remove user from GroupA if member of GroupB

In Active Directory, how do I efficiently remove all users from GroupA who are members of GroupB? Basically I want to subtract B from A. Have now: AAA BBB --- --- Alice Alice ...
4
votes
1answer
60 views

What is MS-Membership Transitive.LDF?

When installing ad-lds, you have the option to import several LDF files. Some of them are described here: http://technet.microsoft.com/en-us/library/cc771943.aspx. Can anyone tell me what the ...
1
vote
1answer
32 views

How to set up an authentication system to authenticate users against an existing SQL Server database

I have a pre-existing SQL Server database with login information (user names, password hashes) for thousands of users maintained by an ASP.NET website. I would like to provide an authentication ...
0
votes
1answer
45 views

libnss-ldap getent passwd - AD replies correctly but output shows local /etc/passwd

I am trying to configure libnss-ldap to provide AD authentication to my Linux Debian servers. This is working fine if user exists locally, I want to make it work for Domain users. Here is my ...
0
votes
1answer
30 views

Debian Active Directory to LDAP migration

These days I am working on LDAP and Active Directory migration. I want to migrate to LDAP but I cannot get passwords from Active Directory. I want to seemlesly migrate to LDAP, and I want a solution ...
2
votes
1answer
67 views

dsadd run from batch file fails with “The specified account already exists” when there is no existing account with the same dn

I am programmatically creating thousands of test users from a txt file containing First Name, Last Name, Username, and Password using the following command (saved as a batch file, run in cmd, modified ...
0
votes
1answer
30 views

Amazon Zocalo with Active Directory - can't login

I just setup a Zocalo site for my company using the active directory connect option. The Domain Controller we are connecting to is in an AWS VPC. I setup the zocalo site fine and it says active, but ...
0
votes
0answers
52 views

AD Authentication with SAMBA, Winbind and SSS

I'm having trouble authentication with AD to a SAMBA share on a linux server. Authentication appears to be working, but only halfway... [root@myserver ~]# wbinfo -a my_ad_user%password123 ...
0
votes
1answer
21 views

How can I know where and how a security group is triggering a logon script for some users?

The organization I work for has implemented application access and scripts via Security Groups. This is, if a person needs to access some applications or have a script run when he logs on, we add ...
2
votes
1answer
30 views

Missing DomainControllers in Active Directory Object

We are setting up a new network environment that will have two domain controllers and ran into an issue with Windows not recognizing the existing domain controllers (DC-01 and DC-02) as Domain ...
8
votes
2answers
264 views

Outline the quirks of Windows Small Business Servers (SBS)

I'm not much of a Microsoft administrator. However, I do work extensively with new and existing Microsoft Exchange deployments. That's just how the career-arc went. I'm working with a small customer ...
0
votes
0answers
16 views

Builtin group membership not updating on client machines

I have a small active directory setup which is semi-live (i.e. being used by only a few of the computers in the network), however when i try adding members to the builtin groups, and more specifically ...
-2
votes
1answer
40 views

Scripting command that can be executed on Macs to generate/remove (NOT SIMPLY BIND/UNBIND) those Macs as computer objects in Active Directory?

I have searched the stacks fairly thoroughly to find a scripting language-based command that can help me develop a script to be executed on Macs capable of actually generating (NOT SIMPLY BINDING) ...