A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
525 views

Control panel items access for active directory users

Active directory group policy have options to disable different things. My question is that how can i enable control panel items for certain users i.e. printer access / date time properties access. ...
0
votes
1answer
1k views

Is it possible to switch to Kerberos only Windows domain

Is it possible to configure both Windows servers and workstations (Windows 7) to use only Kerberos for authentication and not use NTLM for authentication within the Domain? I was told that Kerberos ...
0
votes
1answer
1k views

Adding a user in Active Directory using dsadd

Here's a screenshot of my topology: I'd like to use the dsadd command to add a user to Mercotel A> Administracion> Usuarios OU, but I can't figure out the syntax for nested OU's. What would the ...
0
votes
2answers
7k views

Local user accounts have disappeared after installing Active Directory and running dcpromo

I'm kinda newbie in this Windows 2008 Server R2 configuration stuff, so I would appreciate any help regards the issue I'm facing. After a Windows 2008 Server R2 clean install I created a couple of ...
0
votes
3answers
5k views

TFS 2010 - Adding users to a Team Project

Tried searching the archives, but nothing showed up and now I'm totally messed up in my head. I'm running my own little domain setup on a virtual server: Server 1, PDC, Exchange Server 2, SQL ...
0
votes
3answers
13k views

accessing workgroup computer (without manually creating user accounts)

The (common) question: How can one access network share on workgroup computer? usually has the (common) answer: One should add ("the same") local account with the same username and password on ...
-1
votes
1answer
246 views

Purpose of primary group [closed]

Why do we need a primary group for users? Why is it mandatory to the users to have a primary group?
-1
votes
2answers
757 views

how to deal with users who have locked their desktop while resetting password with must change password on next logon bit ON [closed]

If a user has locked his desktop, and asks for reset password. If mustchangepassword is enabled, the user cannot unlock his computer. This is the error message he gets: 'Your password has expired. ...
-1
votes
3answers
1k views

how to share the same domain machine account with multi-boot workgroup Windows setup?

Having read in http://support.microsoft.com/kb/154501/EN-US/ (How to disable automatic machine account password changes): "You have two separate installations of Windows NT or Windows 2000 on ...
51
votes
8answers
314k views

Command line to list users in a Windows Active Directory group?

Is there a command line way to list all the users in a particular Active Directory group? I can see who is in the group by going to Manage Computer --> Local User / Groups --> Groups and double ...
76
votes
16answers
8k views

How do I protect my company from my IT guy? [closed]

I'm going to hire an IT guy to help manage my office's computers and network. We're a small shop, so he'll be the only one doing IT. Of course, I'll interview carefully, check references, and run a ...
16
votes
1answer
21k views
41
votes
5answers
87k views

Find name of Active Directory domain controller

How can I find out the name/IP address of the AD domain controller on my network?
19
votes
1answer
4k views

Authenticating OpenBSD against Active Directory

Edit: Reformatted this as Q&A. If anyone can change this from Community Wiki to a typical question, that's probably more appropriate as well. How can I authenticate OpenBSD against Active ...
22
votes
12answers
24k views

Active Directory: delete vs. disable departed employees

When an employee leaves your organization, do you delete or disable their Active Directory account? Our SOP is to disable, export/purge the Exchange mailbox, and then after "some time" has elapsed ...
7
votes
1answer
3k views

Best practice for authenticating DMZ against AD in LAN

We have few customer facing servers in DMZ that also have user accounts , all accounts are in shadow password file. I am trying to consolidate user logons and thinking about letting LAN users to ...
13
votes
7answers
47k views

Powershell: How do I query pwdLastSet and have it make sense?

I need to get the last password change for a group of account in an Active Directory security group, and I feel like this is something PowerShell should be good at. Right now, I'm already stuck at ...
13
votes
7answers
9k views

Google Apps, AD and SSO

We're a small shop running Google Apps (Enterprise) for our email needs. Love it. Internally, we're using Windows AD (2003). No complaints there either. I'd like to get some method of SSO going ...
5
votes
14answers
56k views

Can I get all active directory passwords in clear text using reversible encryption?

EDIT: Can anybody actually answer the question? Thanks, I don't need no audit trail, I WILL know all the passwords and users can't change them and I will continue to do so. This is not for hacking! ...
29
votes
8answers
6k views

Should I expose my Active Directory to the public Internet for remote users?

I have a client whose workforce is comprised entirely of remote employees using a mix of Apple and Windows 7 PCs/laptops. The users don't authenticate against a domain at the moment, but the ...
3
votes
1answer
5k views

Login user picture on domain

How can I change the "user picture" for each indivudal user that is displayed during the logon for Windows Vista, 7, 2008, 2008R2 machines throughout a domain?
3
votes
5answers
10k views

How to use Active Directory to authenticate linux users

What are the best-practices for using Active Directory to authenticate users on linux (Debian) boxes? The way I would like it to work would be to add AD users to a group - say linux administrators or ...
13
votes
6answers
8k views

Move Active Directory from 2003 to 2008

Im not a expert admin in Active Directory so I'm in need of some help. At my work, we have bought a new server with the 2008 server OS. And the old AD domain controller is run on a 2003 server. The ...
5
votes
8answers
2k views

What would it take to get an Active Directory like system in a Linux environment?

I know there isn't anything standard like Active Directory in the Linux world, but I'm assuming there's some way (or multiple ways) to implement a similar type of system. What options are out there? ...
5
votes
3answers
5k views

Active Directory in a DMZ

What is the best way to manage user accounts for Windows servers in a DMZ? We are expanding our web presence and adding several IIS servers to our DMZ. I would prefer not to manage a bunch of local ...
4
votes
7answers
30k views

How can I quickly create 100 users on my Active Directory for testing purposes?

I'd like to create 100 users just for test purposes of my Exchange Server. Is there a way to batch do this using random names, etc?
15
votes
3answers
8k views

Force authenticated user immediate logoff (emergency case)

In Active Directory if you want to prevent a user from logging in you can either disable their account or simply reset their password. However, if you have a user who is already logged in to a ...
7
votes
2answers
9k views

Authenticating Apache HTTPd against multiple LDAP servers with expired accounts

We're using mod_authnz_ldap and mod_authn_alias in Apache 2.2.9 (as shipped in Debian 5.0, 2.2.9-10+lenny7) to authenticate against multiple Active Directory domains for hosting a Subversion ...
6
votes
1answer
4k views

What needs to be done/added on Apple MacBook Air in order to join domain and be managed?

We are a fully windows active directory company. I now have a MacBook Air (first in company) - that needs to be connected. What are the things I need to install/set in order for me to be able to ...
6
votes
3answers
2k views

Add last user logged in into AD Users and Computers description field

The last place I worked had AD setup in a way that in the Description field of each computer account in the AD users and computers console, it would say who logged in last and when. How do you set it ...
4
votes
2answers
7k views

Migrate user profiles to new Active Directory Accounts

I have a few users in a very old workgroup that log directly into their local machines (Windows XP Pro). This week they're finally moving to active directory and will need to log into domain accounts ...
3
votes
3answers
11k views

Configuring OpenLDAP as a Active Directory Proxy

We try to set up an Active Directory server for company-wide authentication. Some of the servers that should authenticate against the AD are placed in a DMZ, so we thought of using a LDAP-server as ...
3
votes
1answer
2k views

Single Sign On for intranet with Apache and Linux MIT Kerberos

EDIT: SOLVED! See my answer below. Greetings, I am looking for a way to do a single sign on to an intranet in the following manner: A Linux user logs on via a graphical frontend (for example, ...
3
votes
2answers
1k views

active directory + squid planning for a large network with over than 7000 users

We have about 1600 active nodes and 6000 students in our network and we have a great Cisco backbone, we have 8 faculties (they have sites and wireless access points) and 10 centers like hospital. We ...
1
vote
3answers
2k views

Integration of Active Directory, Squid and traffic shaper (like MikroTik)

We have a large network in our university with about 10000 users. We have an AD and wants to use a Squid server for caching and NTLM authentication. We have 40 Mbit/s Internet too, we are going to ...
10
votes
3answers
1k views

Deploying Printers via GPO/GPP - is there a programmatic option?

For reasons beyond my control, I've been tasked with setting up GPO/GPPs to deploy our 100+ printers to our 1000+ clients. The good news is that we have over a dozen sites, and for the most part, I'm ...
10
votes
2answers
11k views

Windows Appending Domain Suffix To All Lookups

I have a reoccurring DNS problem that has been plaguing our users occasionally causing their laptops to appended our companies domain to the end of all DNS queries. The problem only occurs when users ...
7
votes
1answer
180 views

How do I remotely issue a CLI command to thousands of Windows domain computers at once?

I need to issue a CLI command (cmd.exe or PowerShell) to all of the thousands of computers on my domain. For obvious reasons, this is not going to involve doing the task manually, or physically ...
7
votes
5answers
4k views

Debian 6.0 AD integration

Despite multiple questions already about this, e.g. Linux on Windows AD Domain I'd like to know how to get Debian 6.0 Squeeze integrated with AD using open source or otherwise free of charge for ...
6
votes
2answers
1k views

Use Google Apps/Cloud Services as a Domain Controller Replacement

This is a Canonical Question about Cloud Services replacing Active Directory. Is it possible to use Google Apps or another Cloud Service as a replacement for a Windows Domain Controller ...
6
votes
1answer
1k views

Active directory with duplicate machine SIDs

I have a number of machines running Win2k3 and 2k8R2 that I would like to join to a domain. All the machines have been imaged from the same image, without using sysprep or anything similar. This ...
6
votes
3answers
3k views

Mounting Linux user home directories on CIFS server

I was wondering about peoples experiences with mounting users home directories from an Active Directory authenticated CIFS server under Linux. Preferably the mount would be accomplished upon login ...
5
votes
6answers
18k views

How do I find new Active Directory accounts that have been made in the last 90 days?

How do i find new Active Directory accounts that have been made in the last 90 days? does anyone know who to do this? I can't figure it out. Thanks in advance.
4
votes
2answers
3k views

Active Directory Time Synchronisation - Time-Service Event ID 50

I have an Active Directory domain with two DCs. The first DC in the forest/domain is Server 2012, the second is 2008 R2. The first DC holds the PDC Emulator role. I sporadically receive a warning ...
4
votes
2answers
3k views

Running an Active Directory Primary Domain Controller as a virtual machine?

Should the Active Directory PDC always be a physical machine or would it be okay to run it in a VM? What are the implications/trade offs/gotchas? As a corollary to this, what about running a physical ...
3
votes
1answer
1k views

SSH from Windows to Linux with AD certificates

I have a Windows client machine connected to Active Directory and a Linux server also connected to Active Directory (through PAM w/ LDAP), and I want to be able to do password-less SSH from Windows to ...
3
votes
2answers
6k views

What firewall ports need to be open for Active Directory?

I want to run DFS replication between a couple of servers. It's my understanding that the servers need to be part of a domain for this. Being able to give people a username and password that works on ...
3
votes
4answers
15k views

Diagnosing why a Group Policy Object is inaccessible

I have a Windows Server 2003 domain. One of the Group Policy Objects appears as a linked item in an OU but all I can see if the Unique ID and that the Link Status is Enabled. There is a red minus icon ...
2
votes
2answers
1k views

Windows XP cant join Server 2008 Domain

I've setup a new Server 2008 box with a new domain. I've done all my testing with a Windows 7 laptop which is being deployed with the network. It joined the domain fine, and worked as expected. Now ...
2
votes
2answers
230 views

How to reduce our AD account creation and maintenance requests and work load

Where I work, almost 40% of our support requests are for account management tasks : Create new account and assign in groups Unlock an account Reset a password Change an account's groups following a ...