Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

0
votes
0answers
205 views

Why does my XP client try to join a domain with the pre-windows 2000 domain name?

I do not have problems with any other clients (Win 7 Pro). But sometimes I have an XP SP3 client that will not join the domain. The reason is because it is looking for the pre-Windows 2000 domain ...
0
votes
1answer
100 views

Trying to retrieve an error from addding a computer to AD using Powershell

I'm trying to figure out how to retrieve an error from adding a already there computer in Active Directory. Here's the script that I'm using to add my machine in my domain. Add-Computer -DomainName ...
0
votes
1answer
24 views

How can i go ahead to configure two subnetted networks to apache so as to create two lone networks that are connected via switch?

I want to connect 15 systems to a server so that they do not communicate among themselves directly but do so via server, how should i go ahead? i need to allot say 5 systesm to HR people and 5 other ...
-1
votes
1answer
166 views

Purpose of primary group [closed]

Why do we need a primary group for users? Why is it mandatory to the users to have a primary group?
3
votes
2answers
72 views

AD Users outside the building

I've never had a customer ask me this, but they keep insisting if they have Active Directory and a Domain, that mobile[road warriors] users will not be able to login to their laptops if they are at ...
-2
votes
1answer
383 views

When creating user accounts using C#, UPN logon doesn't work while sAMAccountName works

I have created accounts with C# on 2008 R2 which have a sAMAccountName and a user principal name. I can log on with the sAMAccountName (or explicitly DOMAIN\sAMAccountName), but not with the UPN. ...
3
votes
2answers
273 views

Changing Active Directory Password Setting “Reversible Encryption” Effect on existing accounts

There is a setting in active directory password to turn on or off "reversible encryption". Currently I have this feature turned on, and I am planning to turn it off. What effect will this have on the ...
-1
votes
2answers
432 views

How to allow users to login on offline active directory

how can i setup my Active directory running on windows 2008R2 server that allows my client computers to be able to connect even if Active directory server is not available?
1
vote
1answer
71 views

Definitions of Active, Idle, and Disconnected Sessions in regards to Active Directory

We have a couple of users that continue to get locked out. Currently sessions never end unless a user actually locked out (from my understanding). What are the "definitions" of the different session ...
1
vote
1answer
833 views

Why can't I change passwords using the ldifde tool?

I'm trying to change user passwords using ldifde tool with the following commmand: ldifde -i -h -f .\password.ldf -J ./ Here is one of the entries that are in the password.ldf file: dn: ...
-2
votes
2answers
139 views

Can a 2 year old snapshot help recover a failed domain controller?

We have a 2003R2 DC VN that has a non functional AD. There is no System State Backup, but we do have a 2 year old copy of the VM. Can the copy be used in any way to restore the existing server?
12
votes
2answers
290 views

What is the industry standard method for administering the change of the local administrator password for all machines on a domain?

Although there appears to be three available options, one of which is actually secure, there seems to be only two available choices that will be able to impact machines that are not powered on at the ...
0
votes
1answer
129 views

Installing a software through group policy

I want to install a software through group policy to the users in a particular OU. I have production OU. I have 4 users in that OU I have to apply group policy in such a way that a software should be ...
0
votes
1answer
60 views

How do I stop Group Policy applied to an OU from being inherited by a Sub OUs?

I have an OU "Check" and another OU "subCheck". I am applying Group policy to the Check *OU*. It should not affect the sub OU. What can I do to accomplish this? I tried to disable the inherited from ...
4
votes
1answer
221 views

How do I use long names to refer to Group Managed Service Accounts (gMSA)?

Commonly domain user accounts are used as service accounts. With domain user accounts, the username can easily be as long as 64 characters as long as the User Principal Name (UPN) is used to refer to ...
1
vote
1answer
1k views

How to make IIS 7 application pool run under an AD account?

I have an internal company web application that needs read permissions on certain folders in our LAN. The permissions on these folders are controlled by our Active Directory server. Since by default ...
0
votes
1answer
44 views

How to monitor when a server cannot reach domain controller

We had a situation today when our infrastructure team demoted a domain controller. For some reason our database server (Sql Server) could no longer access any of the remaining domain controllers. All ...
2
votes
1answer
86 views

Getting started with active directory and cloud services

I am the 'IT guy' for a company that is rapidly growing and about to reach 100 employees. While my primary job is backend development for our websites and services; I am also tasked with setting up ...
1
vote
2answers
342 views

Is there a way to restore or re-link an active directory user with a local cached version of the user from a corrupted domain?

I used to run an Active Directory installation. The AD server had died a few years back and I'd just been running on cached credentials since I didn't have hardware available to rebuild on and hadn't ...
3
votes
3answers
263 views

Active Directory delegation best practices

I am in the process of delegating some Active Directory tasks to a group of users. These users do not have domain administration rights and will only perform tasks such as creating/disabling accounts ...
2
votes
1answer
358 views

How do I manually demote a Domain Controller that is past the tombstone lifetime when I cannot log into it?

I have two domain controllers. One is failing replication. It has past tombstone expiration, so I have read it must be demoted and re-promoted. I cannot log in to this server anymore, because of ...
0
votes
1answer
437 views

House roaming profiles on realm trusted samba server?

Raison D'être I am attempting, so far unsuccessfully, to house roaming profiles for an Active Directory domain on a realm trusted Ubuntu 12.04LTS ZFS-on-Linux file server. The end goal is to have an ...
1
vote
3answers
2k views

How to unlock account across all sites immediately

We recently implmented a way to allow users to unlock accounts themselves after too many invalid password attempts. It is working great, but we are having an issue with replicating account unlocks ...
0
votes
1answer
63 views

Add 2008 R2 Secondary DC to 2003 Domain

I'm having a hard time finding just a step-by-step solution here. I want to add a 2008 R2 server to an existing 2003 run domain. I want the 2008 server to allow for AD authentication logon incase the ...
0
votes
1answer
323 views

GPO grant user permissions to install allowed software

I would like to grant users using GPO to self manage and install selected software (flash, skype, Java) but not granting users admin rights. I've looked up software restriction policies, is it the ...
0
votes
1answer
78 views

Exchange 2003 smtp collector delivery restriction

In a Exchange 2003 the SMTP collector has the 'Delivery Restriction' configurated to deny for all except for who is in a security group mail-enabled (called 'InternetMail'). There are user ...
1
vote
0answers
44 views

Preventing Python as a gateway to CMD for Standard Users

Someone has hacked our system - using Python as a gateway to open command prompt as an admin - and the hacker shuts down computers remotely using shutdown /i. How can we prevent this using Group ...
1
vote
1answer
1k views

What is a difference between a member of “Users” group and not a member of any group on Windows?

What is a difference between a member of "Users" group and not a member of any group on Windows Domain? I searched and just didn't find anything relevant at all.
1
vote
1answer
140 views

One-Way ActiveDirectory to Open LDAP push sync

I know that syncing AD and OpenLDAP is a common problem but after a few hours of googling and reading posts like this and that I am still unsure if there is a good (in a sense of convinient and safe) ...
0
votes
0answers
65 views

How to restrict UID range in AD Identity Management for UNIX

I want to enable AD (win 2008 R2) users on a linux box. The problem is that there are also local users (for historical reasons). Now I want to make sure that there is no clash in UIDs (or at least ...
-2
votes
1answer
195 views

Small network: any disadvantages to downgrading to local accounts with mapped drives only?

We have an Active Directory network with < 20 XP clients and one 2k3 server running in 2000 forest mode. On a zero budget, I'm trying to avoid more MS license dollars going out the door than I ...
1
vote
1answer
80 views

Restricting particular OUs from accessing Active Directory folder

I know how to restrict individual users from accessing/reading OUs or folders in Active Directory. This page provides a good guide on how to do this. But how can one bar the users of an entire OU, ...
0
votes
1answer
141 views

Linux as AD DC or use with 2012 Essentials [closed]

We have a network of XP machines, with a 2003 Standard DC running in 2000 mode. We really only need Windows for an app that uses SQL Server. Is it feasible to get a Linux or BSD server going as an ...
2
votes
1answer
720 views

GPO shows as being applied but the settings were not implemented

I created a new GPO to change users IE favorites, previously I had 6 different GPOs to manage different favorites for different kinds of users and users in different locations, but recently my boss ...
1
vote
0answers
66 views

DNS record not added when server joins domain

I've brought up three Windows 2012 VMs inside of an OpenStack cloud. I configured the first one as a domain controller, named "dc" (domain: internal.lorinhochstein.org), and then I joined the other ...
2
votes
1answer
440 views

Outlook for Mac, Active Directory DNS and DDOS

Edit: This is not a question about DDOS, but a question about how to resolve a technical issue impacting only Mac clients of Outlook Anywhere. Problem and solution are are now known, but I cannot ...
0
votes
1answer
88 views

Windows Server 2012 Ess beside Server 2003 Std (DFL 2000) without domain migration (yet)

I have Server 2003 Standard (not R2!) running as the sole server on a network of XP clients, with the domain forest level at 2000. We want to put a second server on the network running a trial of ...
0
votes
1answer
38 views

Windows Active Directory Home Folders

Are Home Folders as configured in AD Users and Computers any different to simply creating a mapped drive through GPO Preferences to H:?
0
votes
1answer
121 views

Giving Active Directory users a common-shared home folder

I have an Active Directory running on windows server 2008 R2. Everytime a user logs on a Windows Computer it creates a home directory (C:/Users/$username). I want that all Active Directory users ...
1
vote
1answer
145 views

Can a Windows 2000 SP4 Domain Controller authenticate in a WIndows 2008 R2 Domain after I transfer FSMO from 2000 to 2008?

I upgraded my Windows 2000 domain functionality to 2008 R2. Made my 2008 R2 machines domain controllers. Replication is working. Eventually I will demote the 2000 servers. At the moment, the ...
3
votes
1answer
207 views

Permission to create GPOs

Is the sole reason of the Group Policy Creator Owner group just to dish out permissions to other users to create (and then modify only their own) GPOs in the domain? Is there another way to do this ...
0
votes
1answer
351 views

VLAN and Active Directory: complementary or substitute? [closed]

I recently encountered a network design that heavily implements VLANs but does not make use of a dedicated identity and access management system such as Active Directory or OpenLDAP. And yet another ...
2
votes
1answer
414 views

OpenStack, Windows 2012, DHCP and DNS

I'm trying to set up a Windows domain in virtual machines (VMs) instead inside of an OpenStack deployment. I've configured one of the VMs to be the domain controller (including DNS server), running ...
0
votes
1answer
56 views

DNS Load Balance for Static Website

This is more of a educational question in comparison to a production environment. I have an AD environment with two IIS servers hosting the identical website content. For arguements sake lets say it ...
0
votes
1answer
177 views

Samba/winbind to AD - the userid mapping

Guys I got issue with UID mapping from my AD. I got Centos 5.5 x64 box and AD witk 2k8 Windows Server. The problem is with username mapping. Example: getent passwd ...
4
votes
1answer
31 views

Domain security vs. Forest security

Is it true that the administrators of a domain "A" can reset a user's password in another domain "B" within the same Forest "out-of-the-box" ? I believe that it is not possible for a Domain ...
4
votes
1answer
83 views

Powershell script to import CSV to AD

In attempts to automate a few things, I've come across a stumbling block with an import script for AD. A part of the script contains: New-ADUser -Name $Name –GivenName $Person.givenName –Surname ...
0
votes
1answer
298 views

How to unblock exe-file and windows-help-chm-file on a mapped network drive using Windows Server 2008 Active Directory group policy?

We have a mapped drive M: in our Server 2008 R2 64 AD Domain. There is an important exe and a windows help file on the drive that all users need to access from there. How can I remove the security ...
0
votes
1answer
617 views

“The trust relationship between this workstation and the primary domain failed”

I mangage a Primary Domain Controller (Samba+LDAP) with 60PC. But 3-4 PC can't login to domain with error "The trust relationship between this workstation and the primary domain failed". 56-57 PC ...
0
votes
1answer
341 views

Linux, Microsoft Active Directory and Home folders

I have an AD running under Windows 2008 R2 and have several Ubuntu & Debian Servers. I have configured the linux login against the AD using Centrify Express, but now I have another problem: ...