A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

3
votes
2answers
108 views

Are SPNs specific to Windows and Active Directory?

Are Service Principle Names specific to Active Directory on Windows? Or do they exist in Linux OpenLDAP / Kerberos KDC servers too?
0
votes
1answer
111 views

Groupmapping does not work for AD groups

We have an ActiveDirectory where we get our users from. So authentication on the linux machine works over pam. We managed this part to work so far, but we need all users to be part of the local group ...
3
votes
2answers
76 views

Active Directory User Attribute List

I'm trying to find a list of Active Directory User Attributes that I can use for customization without having to extend the schema. We are using 2008R2 functional level. I exported a list with ...
0
votes
2answers
44 views

Windows server 2008 active directory user profile

I just wanted to ask about profile migration. There is Windows 2008 r2 server and people are working connected to this server through RDP. One user was deleted from active directory a long time ago ...
-1
votes
0answers
85 views

How do I migrate V2 roaming user profiles to V5 on Active Directory?

We recently switched from Windows 7 to Windows 10 clients, now I want to migrate the .V2 profiles to .V5. The USMT seems to work only for local accounts. It seems wrong to me to just copy/rename the ...
0
votes
0answers
40 views

Logging in after an Acronis Restore on Server 2003 with “Windows Cannot Connect to Domain…” msg

We have two machines both running Windows Server 2003. The AD Machine is the Active Directory. The CTX Machine is our Citrix File Server (this has a RAID Array). Recently we had a RAID problem and ...
0
votes
0answers
19 views

SRP whitelist allow java update

When I run latest java offline installer from allowed location, for example C:\UNRESTRICTED_INSTALLATION_DIR\ it is exctracted to user's AppData temp folder and then just stops. No app blocked by ...
2
votes
2answers
52 views

Is it possible to set up a web server on the same domain used by Active Directory? [duplicate]

I'm a web developer at a large-ish organization and our web site is hosted by our IT department. Our website will not load without the "www" subdomain in front of it and IT says that it's because ...
1
vote
3answers
64 views

roaming profiles for remote users [closed]

Is it possible to have roaming profiles for remote users? We have a number of people who work on different sites, and I want them to be able to share laptops. A lot of my research concludes that I ...
2
votes
1answer
70 views

Server Migrations

We are looking to relocate our office location to other location. Right now we have TWO 2008R2 servers. One is PDC & second is ADC. During office relocation process we can't shift everyone in one ...
2
votes
1answer
55 views

Change SQL Server user SID

I have SQL Server 2012 and I am using domain users (from Active Directory). By mistake users were deleted from AD, created new with identical logins and passwords (but with different SIDs), deleted ...
3
votes
1answer
88 views

RHEL 7.2: using realm to join AD domain

I have a fresh install of RHEL 7.2 server, and I'd like to join it to an AD domain. I have pre-staged the computer name in AD, and here's what happens when I follow the instructions in the Red Hat ...
0
votes
1answer
25 views

How to find active directory group status

I can find the status of active directory user using the below code. var response = (SearchResponse)ldapConnection.SendRequest(userReq); var result = response.Entries[0]; Convert.ToBoolean( ...
0
votes
1answer
41 views

Import sample Active Directory into LDAP [closed]

For development purposes so I can query and test a C# LDAP integration, I have set up an Active Directory Lightweight Directory Services (AD LDS) instance on my Windows 10 box. I need to populate ...
0
votes
0answers
32 views

AWS EC2 - Clone Windows Server Machines That Are Domain Joined

Firstly, I am using these as a base guide: http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ami-create-standard.html http://reduktor.net/2014/09/autoscale-ec2-instances-ad-aws/ Secondly, our ...
4
votes
0answers
45 views

GPO Settings on HKLM\Software\Classes Registry Keys [closed]

We are beginning to deploy a couple of Windows 10 systems into our environment for application compatibility testing. Currently, we are Windows 7 x64 across the board. We've begun noticing recently on ...
-4
votes
2answers
64 views

“Hide” an Active Directory domain in an open network [closed]

I would like to have a stand-alone Active Directory deployment within an open network in a way that it isn't visible as a logon option or a workgroup to other, non-joined computers. The plan so far ...
-1
votes
1answer
18 views

EventLog “Access Denied” after installing an additional DC in a 2012 environment

After promoting a new DC into an existing domain, Eventviewer shows the following: I might as well mention that the Installation itself did not experience any issues When looking at the ...
0
votes
1answer
62 views

AD automation setting home drive and logon script

I was able to set home drive and and logon script for each user but the problem is it doesn't creates home folder something looks wrong with get-aduser -filter * foreach {New-Item -ItemType Directory ...
-7
votes
1answer
31 views

If my server PDC Emulater is down then how to re up PDC again functioning? [closed]

My pdc emulater is down so plz guide me how to bring up pdc and it working fine. This question also asking many time from interviewer. so plz guide me all total way to solve this.
8
votes
2answers
129 views

Best Way to Track Brute-Force Username Enumeration / Failed Username Attempts AD

We have a Windows Server which has an application that resides on it, which uses domain credentials on login to the application. During a recent pen test, the testers were able to use the application ...
0
votes
1answer
19 views

ADUC object keeps returning

Within ADUC after turning on View -> "Advanced Features" and "Users [...] as containers" and clicking on a user, the right pane shows the users' objects. I am trying to delete one called "OTS ...
1
vote
1answer
22 views

Using group managed service accounts on OS version < Windows 2012

Trying to leverage benefit of Group-Managed Service Accounts (gMSA) but have a mixed environment. My guide was this blog post: ...
1
vote
1answer
49 views

Caspol deploy Group Policy

I have an application running on the network that uses a .net component that requires a CASPOL policy to be applied. The client machines are locked down and local users are not administrators. What is ...
1
vote
4answers
76 views

Will cached domain credentials stay working if machine never re-connects to domain?

I have researched this thoroughly, and cannot find the answer I am looking for. A company I recently left is going through a bankruptcy. They have already auctioned off most the IT equipment, ...
0
votes
1answer
32 views

Is it normal for Outlook to take 2 weeks or more to grab AD thumbnailPhoto?

I've been updating user images in AD over the last few weeks. For most users, that thumbnailPhoto attribute is pulled and viewed in Outlook correctly anywhere from an hour or so to 3 days after ...
0
votes
1answer
40 views

Safe to demote & rebuild AD replica running exchange?

We have two Windows 2008 r2 servers. One is located in house which runs all domain logins, resources, file sharing etc. The second server is a AD replica which is remotely hosted at our Datacenter ...
0
votes
1answer
20 views

How do I make a Query Based DL for Office 365 users?

I am migrating users to Office 365 and have some QBDLs for access control that reference on premise Exchange Servers. What is the correct way to reference a migrated account in a Query Based DL?
0
votes
0answers
9 views

SSPI Context not generated

I have migrated a SQL server from another server box that was decommissioned.They have the same name and also same IP address. I am however getting SSPI context error when I connect from an ...
0
votes
1answer
30 views

Apache not finding the kerberos principal in keytab file

Virtual host has been configured with these options; AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate On KrbMethodK5Passwd Off KrbAuthRealms EXAMPLE.COM KrbAuthoritative On ...
2
votes
1answer
143 views

w32time in domain polling from wrong Domain Controller

From the MS Documentation I can see that computers in a domain should get their time from the PDC domain controller, and if done right the PDC should get it's time from an external source. In my ...
0
votes
0answers
40 views

2 different gpo to set different setings to same registry key

Which of the GPO will take precedence? I have two policies now applied in my domain. One has a higher link than the other but the precedence ain't working as expected. Only the registry keys of one ...
3
votes
0answers
85 views

Active Directory + Google Authenticator - Native support in Windows Server? [closed]

Use Case: 2FA to log in to Active Directory (such as logging into a corporate desktop computer that is on AD) Desired Solution: Google Authenticator, because it is RFC based, and widely used for ...
2
votes
1answer
50 views

FQDN Domain Name

In Active Directory, I have a domain (dc=ABC,dc=DEF). I expect the domain to be ABC.DEF However, if I use the command nltest /dsgetdc:ABC Sometimes I get ERROR_NO_SUCH_DOMAIN (the expected ...
0
votes
1answer
26 views

OpenLDAP proxy AD showing empty tree

I'm using OpenLDAP (in a docker container) mainly for two purposes: 1.) Having a local tree which actually stores my technical users. 2.) Proxy specific queries to my corporate active directory just ...
-1
votes
1answer
24 views

Exchange server 2010 setup exits after copying setup files

I have a Windows 2008 R2 server which I have demoted from a domain controller because I wanted it to be part of another domain, which was looked after by another domain controller. I did this and then ...
0
votes
1answer
35 views

Removal of a non existent exchange server

I have come into the position of administering a network where there was once an exchange server, and that server is no more. The company has migrated to office 365 cloud based, and there has been no ...
1
vote
1answer
87 views

Issue with GPOs for home folder creation and drive maps

I am following a guide I've seen recommended on here for setting up home folders and drive maps for users and I am running into an issue despite the fact that I set it up exactly as illustrated here: ...
6
votes
2answers
446 views

Active Directory + Google Authenticator - AD FS, or how?

(Edited to match the understanding of the answer-writers -- New, fresh, clean question posted here: Active Directory + Google Authenticator - Native support in Windows Server?) Research Done So Far ...
0
votes
0answers
12 views

Set up trust on the external forest from the external forest

At one point in the document linked below it says "Set up trust on the external forest from the external forest" Inbound ports :N/A Outbound ports :LDAP (389 UDP and TCP)Microsoft SMB (445 ...
0
votes
0answers
35 views

Syncronise only one container between Active Directory

I have a Microsoft Exchange server off-site and a file server on-site (with their own separate AD environment). I want to synchronise AD so that new users and password changes are reflected on both ...
3
votes
1answer
35 views

How to automate RFC2307 attributes in Active Directory?

How do you automate the population and management of RFC2307 attributes in Active Directory in a scalable and reliable manner now that SFU and IdMU is considered deprecated by Microsoft and won't be ...
0
votes
0answers
31 views

SSO, Kerberos, multiple domains, multiple Linux servers

I have successfully implemented SSO for one production application running on Centos 6 + apache 2.2. connecting to Windows 2008 AD server. Users are coming from 2 different domains: a.com and b.net, ...
1
vote
1answer
64 views

Limited Permissions to a domain user on AD Server

How to assign permissions to a domanin user such that he can only change active directry users password & he can be able to join or remove Client computers to the domain. He should have admin ...
0
votes
1answer
92 views

Fine grained password policy with msDS-MaximumPasswordAge set to 2 days asks for reset immediately

A fine grained password policy with msDS-MaximumPasswordAge set to 2 days asks for reset immediately on Server 2008R2. After I apply the policy, in the next automatic gpupdate, the machine starts ...
-4
votes
1answer
51 views

How to create an Internet facing Domain Controller Without VPN

I am extremely new to this. I am trying to create a domain controller that could be contacted via Internet. In clear words, I am trying to create a Windows Server 2012 R2 domain controller with ...
-1
votes
1answer
53 views

Clients looking for GPO login script on my personal computer instead of doing it on the DC?

This is kinda weird. I have the Group Policy Management console installed on my Windows 7 workstation and I configure policies from there. Sometimes I do it directly on a domain controller, but most ...
1
vote
1answer
31 views

Is this LDAP filter valid syntax?

I'm configuring AD authentication for a product that wants to query AD for groups. This query is finding nothing and the vendor has provided this ...
2
votes
1answer
36 views

Assign to ASP.NET identity to AD group for accessing remote SQL Server

I have an ASP.NET 4.0 (IIS 7.5) application running on a server(Window Server 2008 R2 Standard), named WEBSERV, and a SQL Server (2008) database on another server, named DATASERV. The SQL Server has a ...
0
votes
0answers
31 views

Windows XP Network Drive Error 1351

my scenario: 20 Windows (XP/7) Clients one XP file server two Linux (Suse 9,10) Samba File servers new Samba Domain Controller (Zentyal) So, the Client PCs all were in a workgroup "blabla", where ...