A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
38 views

When using RDP to log into a remote domain do my local domain logon scripts apply?

I've been asked to set up a user on our network with RDP access to a RDS server on a remote domain. We have set up the VPN just fine and the remote RDS server is reachable. The issue thus far is that ...
1
vote
1answer
89 views

Issues adding new DC to network after main DC broke down

What I try to do should be something simple but I made in ended up bad. We have a virtual network and virtual machine set up on Azure East Asia region datacenter originally. Then, we decided to move ...
1
vote
0answers
20 views

Active Directory Certificate Services Code signing Subject Empty

I'm contracted by a branch of a large multinational company to write some in-house software. I'm trying to push this software out to users using ClickOnce. To sign the application, I was issued a code ...
-1
votes
1answer
60 views

Get AD users who have not logged in the past x Days and are member of a specific group?

I'm sorry if this looks like a duplicate. Actually the same question has been asked under http://serverfault.com/questions/783399/get-a-list-of-users-who-are-domain-admins-and-have-not-logged-in-the-...
1
vote
2answers
115 views

Get a list of users who are Domain Admins and have not logged in the past 30 days?

How can I get a list of users from AD who are Domain Admins and have not logged in the past 30 days?
2
votes
1answer
30 views

Active Directory permissions dissapears

I have recently configured Active directory delegation and in one specific OU inherited permissions disappears from all users except one I have recently created for tests. Non of the users are a ...
0
votes
1answer
38 views

Need to regain trust with domain controller

Long-time Unix sysadmin, just getting started in the Windows world, here: I have a Windows 7 Enterprise machine. A recent system update must have gone pear-shaped, because now when I try to log in as ...
0
votes
0answers
22 views

Invalid CRL distribution points in certs after CA migration

I have recently migrated an Enterprise CA from a Windows Server 2003 box to a Windows Server 2012 R2 box using the Active Directory Certificate Services Migration Guide. The CA was running entirely ...
2
votes
0answers
38 views

Why can't I see the file version of files in system32 remotely?

Here's the situation: I can RDP into a computer, go to C:\Windows\System32, and check file versions to my heart's content. Such as winlogon.exe, explorer.exe, etc. If I map the drive, and try to ...
1
vote
3answers
98 views

How to simulate a WORM environment w/Active Directory/NTFS

In NTFS/Active Directory, assume I have two drives mapped: H:\ I:\ Users can edit files in H:\, but not in I:\ . I want users to be able to, using a script, move their files to the I:\ drive unless ...
0
votes
0answers
20 views

A domain controller in Azure ends up public on the Internet with no firewall - is it compromised? [duplicate]

I'm helping a customer stand up an Azure environment and they decided to stand up a server (DC) on their own without asking for help. The only access method is supposed to be IPsec, but they forgot ...
1
vote
0answers
14 views

Active Directory tree domain not seen from forest DC

I have four Hyper-V virtual machines with Windows Server 2012 R2 and Active Directory set up. They are all in an Internal switch configuration and can communicate with each-other fine. AD1 is the ...
1
vote
0answers
56 views

How To Configure OpenSSH on a Windows Server 2008 to authenticate against Active Directory

I have installed OpenSSH 7.1 on a Windows server 2008R2 which also is an Active Directory Domain Controller. I need to login with SSH on this machine using credentials from Active Directory e.g., ...
0
votes
1answer
42 views

Why is it bad to deploy Remote Desktop Services on a domain controller?

I have an application on a VPS and I want to run it with RemoteApp instead of having to remote desktop into the server. Our VPS provider can sell us a pack of five RDS licenses to use which will be ...
0
votes
1answer
15 views

Domain ID Authentciation Timing

Window Server 2008 R2 is my Domain Controller i.e Active Directory I Need to find out when does Particular Domain ID has been used for authentication. I know that from 'Active Directory Users and ...
0
votes
1answer
22 views

How to deploy files using Group Policy

I wish to share a couple files to every computer on my domain. I know I need to use Group Policy, but I'm not really sure where to go from there. I am using Windows Server 2003 R2.
1
vote
0answers
23 views

Server 2008/2012 (R2) group policy scheduled task not applying

I am at wit's end and totally confused. The goal is to take group policies(one per day of a week) and set a scheduled task which will trigger a reboot on that day at a specific time. So I made them (...
1
vote
0answers
25 views

How to set if a computer in AD is assigned to a particular user?

We have computers that are renamed every time a new employee shows up. This causes a lot of work unnecessary work for the IT department. Now while it isn't always true 100% of the time that each ...
0
votes
1answer
55 views

Seizing a domain from dead primary domain controller

My old Primary Domain Controller died after a series of power problems. I tried to follow this set of instructions http://kpytko.pl/active-directory-domain-services/seizing-fsmo-roles/ to get another ...
0
votes
1answer
31 views

Query AD for users with create users access rights

My company has requested a list with all the users and groups from AD that have access rights to create users and in which OU's they have these rights. Is there a way to get a complete list via ...
0
votes
0answers
11 views

Sync data between AD DS and AD LDS with differing schema

first off I have only recently been introduced to this world so forgive me if I trip up a bit :) From what I have read about replicating/synchronizing between AD and LDS it tends to disagree when the ...
1
vote
2answers
48 views

Get-ADUser over multiple OUs and filter results

This script is supposed to grab users from several OUs and assign the users to one variable, then it takes the users from that variable and filters through each one based on last logon dates over 30 ...
1
vote
2answers
27 views

Can a Unix host obtain Kerberos keytabs for another host from Active Directory?

We use Puppet to configure our servers, but creating Kerberos keytabs for them is currently a manual process. We would like the Kerberos keytabs of the Unix machines to be automatically generated, ...
-1
votes
2answers
37 views

Preload user profile from a domain to expedite first log in

We have a few new and not-so-new computers that will soon be used by a large number of new people. From what I've seen, even the new ones take a long time to set up the profile when the user logs in ...
0
votes
2answers
50 views

Command to check trust relation between 2 domains

Good Day, Do we have any command where we can check the trust relationship between 2 domains. Example : lets consider there is a domains called xyz.1.com and abc.1.com how can we know whether there ...
0
votes
0answers
13 views

Cleaning Up ForeignSecurityyPrincipals OU in AD

I'm in the final stages of cleaning up an AD that was essentially unmaintained for the better portion of a decade and I'm unsure about what can safely be deleted from the ForeignSecurityPrincipals OU'...
0
votes
1answer
40 views

Logon failure: the user has not been granted the requested logon type at this computer

I have Windows Server 2012 R2 system with Active Directory installed on it and using this computer for local development (Microsoft SharePoint). What i wanted to do is to open the local Internet ...
0
votes
0answers
27 views

Windows Server Sync?

Looking to see if anyone has knowledge in this. Currently I am trying to set up 2 windows 2012 servers, to synchronize the files in C:\Company\Record of each machine. For example. Machine A makes 06-...
-1
votes
1answer
31 views

Printer in Print Management (Windows Server 2012 R2) print anonymous [on hold]

I've set up a home lab and one of the servers is a Windows Server 2012 R2. I've created a shared folder and added a Brother printer driver to it. Is there any way I can access this printer without ...
0
votes
1answer
24 views

Easy recovery of active directory with NTDS and SYSVOL folders? (DSRM PW known!)

I have backups of the active directory NTDS and SYSVOL folders. And I know the DSRM password of the active directory. But if I search on Microsoft help for recovering a active directory I only found ...
0
votes
2answers
37 views

Steps for troubleshooting Windows ADFS issue

Yesterday I posted a specific question about an error I'm getting in ADFS that has me stumped. Because I have very limited experience troubleshooting windows based products, I think advice on how to ...
0
votes
0answers
27 views

Sites & Services - Created new site links - existing automatically generating connections not updating

We have 4 AD sites. Sites 3 and 4 cannot talk to each other and need to talk to site 1 and 2 for AD replication. As the previous admin didn't create any site links in AD - Site 3 and 4 assumed they ...
0
votes
0answers
48 views

Authenticating any Linux distro with Tacacs and Active Directory

I have a set-up in my organisation where in, login to all network devices (Cisco, Juniper & ....) are authenticated using Windows AD and Cisco tacacs server. User's are pushed into AD via separate ...
0
votes
0answers
11 views

How can I create a self-signed certificate for a SharePoint app?

We have a SharePoint Server in a farm with SQL Server and Active Directory Server. We are trying to create a self-signed certificate for use in a SP App. The farm is hosted on CloudShare and we are ...
2
votes
1answer
28 views

What version(s) of SSL/TLS does Active Directory support?

I'm running a pair of 2012R2 RODCs behind a load balancer for authentication for certain applications (mostly on Linux). LDP.exe works fine for lookups, but we're having an issue with Postgres where ...
0
votes
1answer
76 views

ADFS error duing SAML Service Provider Login

I have a Spring SAML Project that has been under development for about a month. I've integrated with ADFS and everything has been working well. I'm getting an intermittent error that is becoming ...
-1
votes
0answers
34 views

Linux, Kerberos Auth, and LogonWorkstations AD Attribute

When using Kerb Auth on Linux, with a Server 2008 AD Domain for authentication, and nsswitch set to files then ldap: If an ldap user tries to ssh to a server, and they are a member of a group which ...
3
votes
0answers
51 views

How to find when the password for my Active Directory user account will expire? [closed]

I will be out of office next two weeks. May I check from my domain member workstation when exactly the password for my Active Directory user account will expire. I use Windows 8.1. My user don't have ...
0
votes
0answers
14 views

GPO - scripts not started using FQDN but UNC works

Assumptions: AD domain is called SAMDOM, FQDN for the domain is SAMDOM.EXAMPLE.COM. There is only one domain controller and it's called DC1. So, the FQDN for DC1 is DC1.SAMDOM.EXAMPLE.COM If I ...
0
votes
2answers
61 views

Password policy in Active Directory - inactivation of complexity without effect

In my Samba Active Directory Domain, I want to allow passwords that are long (passphrase) and based only on small caps and special characters, i.e. no requirement for large caps and numbers. In ...
5
votes
0answers
42 views

Restructure Active Directory Forest Root Domain

We have a forest root domain of legacy_domain.loc, and another domain modern_domain.loc which exists in a structure similar to: legacy_domain.loc ----- modern_domain.loc | ...
1
vote
2answers
38 views

Deploy same user Outlook 2010 with group policy

I work in an organization where we're planning to implement personal AD-accounts for all our users. So far I've overcome a number of challenges while running this implementation. But now I came upon ...
0
votes
0answers
15 views

Using biometric authentication with rdesktop to Windows machine?

I'm using rdesktop to access windows servers/clients from a linux machine. I can setup biometric access with AD for these windows clients, but is it possible to rdesktop to a windows box and use a ...
0
votes
1answer
31 views

gpupdate works for user fails on computer error 1006

I have a machine on my network that refuses to sync our Gpupdate. I am getting error code 1006 error code 49 which points to bad credentials but I am using the same user that I would on any other ...
2
votes
0answers
28 views

Server 2012 replication error

I have 2 Windows 2012 DCs (DC1 and DC2). From DC2 replication works while from DC1 I keep getting the error "replication error rpc server is unavailable. I'm attempting to do this from Active ...
0
votes
0answers
43 views

net computer returns “Access is denied” for admin user

While logged into my domain controller (Win2k12r2) as the admin account, whenever I try to delete a computer using the command net computer \\NAME /DEL I'm always hit with the error: System error 5 ...
-3
votes
1answer
45 views

How many members can be added to a group in AD?

How many members can be added to a Security group in AD ? Nesting or members .The total count that a group can hold the AD users.
0
votes
1answer
33 views

How to add an AD user the right to administer groups in AD

I search google without luck. Basically I need to enable to 4 users to our domain do add and remove members to some of the AD groups. But only that, they must not have any other right. I know it ...
0
votes
0answers
85 views

Work folders and domain guest

I have setup Workfolders on my Windows Server 2012 R2. This is all working fine, however I want to be able to use my domain guest user on my domain computers. This is not possible according to this ...