Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

19
votes
1answer
4k views

Authenticating OpenBSD against Active Directory

Edit: Reformatted this as Q&A. If anyone can change this from Community Wiki to a typical question, that's probably more appropriate as well. How can I authenticate OpenBSD against Active ...
22
votes
12answers
20k views

Active Directory: delete vs. disable departed employees

When an employee leaves your organization, do you delete or disable their Active Directory account? Our SOP is to disable, export/purge the Exchange mailbox, and then after "some time" has elapsed ...
7
votes
1answer
2k views

Best practice for authenticating DMZ against AD in LAN

We have few customer facing servers in DMZ that also have user accounts , all accounts are in shadow password file. I am trying to consolidate user logons and thinking about letting LAN users to ...
13
votes
7answers
44k views

Powershell: How do I query pwdLastSet and have it make sense?

I need to get the last password change for a group of account in an Active Directory security group, and I feel like this is something PowerShell should be good at. Right now, I'm already stuck at ...
13
votes
7answers
9k views

Google Apps, AD and SSO

We're a small shop running Google Apps (Enterprise) for our email needs. Love it. Internally, we're using Windows AD (2003). No complaints there either. I'd like to get some method of SSO going ...
5
votes
14answers
50k views

Can I get all active directory passwords in clear text using reversible encryption?

EDIT: Can anybody actually answer the question? Thanks, I don't need no audit trail, I WILL know all the passwords and users can't change them and I will continue to do so. This is not for hacking! ...
3
votes
1answer
4k views

Login user picture on domain

How can I change the "user picture" for each indivudal user that is displayed during the logon for Windows Vista, 7, 2008, 2008R2 machines throughout a domain?
3
votes
5answers
9k views

How to use Active Directory to authenticate linux users

What are the best-practices for using Active Directory to authenticate users on linux (Debian) boxes? The way I would like it to work would be to add AD users to a group - say linux administrators or ...
13
votes
6answers
8k views

Move Active Directory from 2003 to 2008

Im not a expert admin in Active Directory so I'm in need of some help. At my work, we have bought a new server with the 2008 server OS. And the old AD domain controller is run on a 2003 server. The ...
5
votes
8answers
2k views

What would it take to get an Active Directory like system in a Linux environment?

I know there isn't anything standard like Active Directory in the Linux world, but I'm assuming there's some way (or multiple ways) to implement a similar type of system. What options are out there? ...
5
votes
3answers
5k views

Active Directory in a DMZ

What is the best way to manage user accounts for Windows servers in a DMZ? We are expanding our web presence and adding several IIS servers to our DMZ. I would prefer not to manage a bunch of local ...
7
votes
2answers
7k views

Authenticating Apache HTTPd against multiple LDAP servers with expired accounts

We're using mod_authnz_ldap and mod_authn_alias in Apache 2.2.9 (as shipped in Debian 5.0, 2.2.9-10+lenny7) to authenticate against multiple Active Directory domains for hosting a Subversion ...
6
votes
3answers
2k views

Add last user logged in into AD Users and Computers description field

The last place I worked had AD setup in a way that in the Description field of each computer account in the AD users and computers console, it would say who logged in last and when. How do you set it ...
5
votes
1answer
3k views

What needs to be done/added on Apple MacBook Air in order to join domain and be managed?

We are a fully windows active directory company. I now have a MacBook Air (first in company) - that needs to be connected. What are the things I need to install/set in order for me to be able to ...
3
votes
3answers
10k views

Configuring OpenLDAP as a Active Directory Proxy

We try to set up an Active Directory server for company-wide authentication. Some of the servers that should authenticate against the AD are placed in a DMZ, so we thought of using a LDAP-server as ...
3
votes
1answer
1k views

Single Sign On for intranet with Apache and Linux MIT Kerberos

EDIT: SOLVED! See my answer below. Greetings, I am looking for a way to do a single sign on to an intranet in the following manner: A Linux user logs on via a graphical frontend (for example, ...
3
votes
2answers
1k views

active directory + squid planning for a large network with over than 7000 users

We have about 1600 active nodes and 6000 students in our network and we have a great Cisco backbone, we have 8 faculties (they have sites and wireless access points) and 10 centers like hospital. We ...
1
vote
3answers
2k views

Integration of Active Directory, Squid and traffic shaper (like MikroTik)

We have a large network in our university with about 10000 users. We have an AD and wants to use a Squid server for caching and NTLM authentication. We have 40 Mbit/s Internet too, we are going to ...
11
votes
4answers
828 views

Has anyone ever used SMTP site links?

A simple real-life question, inspired by a comment here: Active Directory has supported inter-site replication using SMTP instead of direct RPC since its first introduction in Windows 2000. But did ...
10
votes
4answers
455 views

Terminology for Windows domain

I am a system administrator in a Linux shop. We are in the initial steps of inheriting a Windows Domain. I have some terminology questions: The usernames are WORKPAC\johndoe. What is the bolded ...
10
votes
2answers
10k views

Windows Appending Domain Suffix To All Lookups

I have a reoccurring DNS problem that has been plaguing our users occasionally causing their laptops to appended our companies domain to the end of all DNS queries. The problem only occurs when users ...
7
votes
5answers
4k views

Debian 6.0 AD integration

Despite multiple questions already about this, e.g. Linux on Windows AD Domain I'd like to know how to get Debian 6.0 Squeeze integrated with AD using open source or otherwise free of charge for ...
6
votes
1answer
1k views

Active directory with duplicate machine SIDs

I have a number of machines running Win2k3 and 2k8R2 that I would like to join to a domain. All the machines have been imaged from the same image, without using sysprep or anything similar. This ...
6
votes
3answers
3k views

Mounting Linux user home directories on CIFS server

I was wondering about peoples experiences with mounting users home directories from an Active Directory authenticated CIFS server under Linux. Preferably the mount would be accomplished upon login ...
5
votes
2answers
1k views

Use Google Apps/Cloud Services as a Domain Controller Replacement

This is a Canonical Question about Cloud Services replacing Active Directory. Is it possible to use Google Apps or another Cloud Service as a replacement for a Windows Domain Controller ...
4
votes
2answers
3k views

Running an Active Directory Primary Domain Controller as a virtual machine?

Should the Active Directory PDC always be a physical machine or would it be okay to run it in a VM? What are the implications/trade offs/gotchas? As a corollary to this, what about running a physical ...
3
votes
2answers
5k views

What firewall ports need to be open for Active Directory?

I want to run DFS replication between a couple of servers. It's my understanding that the servers need to be part of a domain for this. Being able to give people a username and password that works on ...
3
votes
3answers
12k views

Diagnosing why a Group Policy Object is inaccessible

I have a Windows Server 2003 domain. One of the Group Policy Objects appears as a linked item in an OU but all I can see if the Unique ID and that the Link Status is Enabled. There is a red minus icon ...
3
votes
2answers
7k views

Migrate user profiles to new Active Directory Accounts

I have a few users in a very old workgroup that log directly into their local machines (Windows XP Pro). This week they're finally moving to active directory and will need to log into domain accounts ...
2
votes
1answer
868 views

SSH from Windows to Linux with AD certificates

I have a Windows client machine connected to Active Directory and a Linux server also connected to Active Directory (through PAM w/ LDAP), and I want to be able to do password-less SSH from Windows to ...
2
votes
2answers
1k views

Windows XP cant join Server 2008 Domain

I've setup a new Server 2008 box with a new domain. I've done all my testing with a Windows 7 laptop which is being deployed with the network. It joined the domain fine, and worked as expected. Now ...
2
votes
2answers
226 views

How to reduce our AD account creation and maintenance requests and work load

Where I work, almost 40% of our support requests are for account management tasks : Create new account and assign in groups Unlock an account Reset a password Change an account's groups following a ...
2
votes
3answers
743 views

Are there any tools to do change management with Active Directory / Group Policy?

We seem to be having a lot of problems related to "forgetting some mundane detail" while managing our Group Policy settings in Active Directory, so I am curious as to whether there are any ...
1
vote
2answers
1k views

Convert local users to AD domain users Windows Server 2008 R2

I created a bunch of local accounts on machines at work before we had AD set up. Now I'd like to consolidate all the local accounts into domain accounts. For instance, I've got user "Fred Jones" on ...
1
vote
3answers
3k views

Auto-mounting a windows share on Linux AD login

I've managed to configure my test Ubuntu 10.04 Beta 2 Server VM to accept logins (via ssh) from users who have domain accounts in active directory via Kerberos, nsswitch.conf and PAM configurations. ...
9
votes
2answers
7k views

Running Windows domain on Amazon EC2

It is possible to run Windows Server 2003 instances on Amazon EC2. I was wondering is it possible for one or more of these machines to be a domain controller and the other machines you run to be a ...
8
votes
2answers
5k views

Domain rename with Exchange 2010

I have taken over all IT responsibilities for a company that is using Active Directory (2008 R2 native level) and Exchange 2010. I have come to find out that their internal Active Directory domain ...
7
votes
6answers
4k views

Active Directory OU design for <500 users, 4 locations

We are looking to add some logical structure to our (Win 2003) AD hierarchy. We have a single domain and around 500 users. All users and computers are currently organized into one OU. All security ...
7
votes
13answers
11k views

Windows: Can domain controllers also serve other functions?

This question was a discussion about whether Active Directory is necessary to run Terminal Services. But a chain of answers and comments (mostly by me) brought up a related question around Domain ...
6
votes
4answers
263 views

Using AD as a general purpose directory [closed]

Is there anyone using AD as a general purpose directory (meaning for uses other than domain authentication / authorisation and stuff) ?
6
votes
4answers
2k views

Unable to dcpromo new 2008 Server in 2000 domain

I'm trying to replace an old Windows 2000 domain controller with a new Windows 2008 Server. I have the Active Directory Domain Services role installed on the new server and joined it to the domain. ...
5
votes
5answers
6k views

OpenVPN with Active Directory integration

Is anyone successfully running OpenVPN with Active Directory integration? Are you using the openvpn.net or the openvpn.net/opensource version of OpenVPN? Any tips, tricks or gotchas or did it "just ...
5
votes
3answers
12k views

Primary Domain Controller slow?

I seem to be experiencing a problem with a virtualized Windows 2008 domain controller. We are running Hyper-V on a powerful server (dual quad core Nehalem Xeon, 48 GB of ram), and all of the VMs are ...
5
votes
2answers
1k views

Migrate local profiles to roaming profiles

What are "things to think about" and best practices to migrate a large number of users from using local profiles to roaming ones?
4
votes
5answers
15k views

How do I find new Active Directory accounts that have been made in the last 90 days?

How do i find new Active Directory accounts that have been made in the last 90 days? does anyone know who to do this? I can't figure it out. Thanks in advance.
4
votes
5answers
4k views

Central Authentication For Windows, Linux, Network Devices

I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
4
votes
2answers
2k views

Keep AD Group Synced in OpenLDAP with POSIX Account Augmentation

What's the most obvious way of achieving the following: The site has an working AD infrastructure and certain parts of the infrastructure are tightly coupled GNU/Linux machines where people from the ...
4
votes
6answers
38k views

How can I export all group policies to a easily-parseable format?

I need to dump all the Group Policies within Active Directory to review offline at a later date. Is there a way I can easily export all the Group Policies to text or some other easily-parseable ...
3
votes
1answer
603 views

Active Directory / DNS naming design, multiple sites, single domain,

The network I currently manage will shortly be expanding to cover two sites, and due to the organisation of the company, I have already determined that a site-to-site hardware VPN will be implemented ...
3
votes
2answers
122 views

How can I correlate a wall jack to a user/machine on the domain?

After reading Valve's new employee handbook, I was really interested in setting up a company map like they described on page 6: "The fact that everyone is always moving around within the company ...