A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

-1
votes
1answer
33 views

Clone VM connected to domain with CRM 2011 on Windows 2008 R2 SP1 [closed]

After copying VM with CRM 2011 I've changed server name, performed actions in this article: ...
5
votes
2answers
401 views

Reverse DNS records not registered when using DHCP

I've stumbled upon a strange behaviour with Windows machines, which seems to be fairly consistent between all Windows versions from Vista/2008 to 8.1/2012 R2; it doesn't happen instead when using ...
1
vote
1answer
24 views

How can I quickly check number of groups in my domain?

Probably this is simplistic question but it seems that off the top of my head I have no idea how to do this. How can I get number of groups in my domain? In all domains within the forest? What is the ...
1
vote
0answers
34 views

How to Two-way Trust between Samba3 and AD

I'm studying Two-way Trust between Samba3 and Windows 2008 R2 AD Domain. I'm using debian 7.6.0 and Samba 3.6.6 Firts, please look my Topology. http://blog.naver.com/hjk4637/220156608223 I have AD ...
4
votes
1answer
1k views

Java 8 Update 25 Install Via GPO Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using Group Policy. When attempting to add the jre1.8.0_25.msi package in the GPO at Computer ...
2
votes
1answer
32 views

Active Directory remove user from GroupA if member of GroupB

In Active Directory, how do I efficiently remove all users from GroupA who are members of GroupB? Basically I want to subtract B from A. Have now: AAA BBB --- --- Alice Alice ...
4
votes
1answer
61 views

What is MS-Membership Transitive.LDF?

When installing ad-lds, you have the option to import several LDF files. Some of them are described here: http://technet.microsoft.com/en-us/library/cc771943.aspx. Can anyone tell me what the ...
1
vote
1answer
32 views

How to set up an authentication system to authenticate users against an existing SQL Server database

I have a pre-existing SQL Server database with login information (user names, password hashes) for thousands of users maintained by an ASP.NET website. I would like to provide an authentication ...
0
votes
1answer
52 views

libnss-ldap getent passwd - AD replies correctly but output shows local /etc/passwd

I am trying to configure libnss-ldap to provide AD authentication to my Linux Debian servers. This is working fine if user exists locally, I want to make it work for Domain users. Here is my ...
0
votes
1answer
35 views

Debian Active Directory to LDAP migration

These days I am working on LDAP and Active Directory migration. I want to migrate to LDAP but I cannot get passwords from Active Directory. I want to seemlesly migrate to LDAP, and I want a solution ...
2
votes
1answer
78 views

dsadd run from batch file fails with “The specified account already exists” when there is no existing account with the same dn

I am programmatically creating thousands of test users from a txt file containing First Name, Last Name, Username, and Password using the following command (saved as a batch file, run in cmd, modified ...
0
votes
1answer
31 views

Amazon Zocalo with Active Directory - can't login

I just setup a Zocalo site for my company using the active directory connect option. The Domain Controller we are connecting to is in an AWS VPC. I setup the zocalo site fine and it says active, but ...
0
votes
0answers
60 views

AD Authentication with SAMBA, Winbind and SSS

I'm having trouble authentication with AD to a SAMBA share on a linux server. Authentication appears to be working, but only halfway... [root@myserver ~]# wbinfo -a my_ad_user%password123 ...
0
votes
1answer
21 views

How can I know where and how a security group is triggering a logon script for some users?

The organization I work for has implemented application access and scripts via Security Groups. This is, if a person needs to access some applications or have a script run when he logs on, we add ...
2
votes
1answer
30 views

Missing DomainControllers in Active Directory Object

We are setting up a new network environment that will have two domain controllers and ran into an issue with Windows not recognizing the existing domain controllers (DC-01 and DC-02) as Domain ...
8
votes
2answers
273 views

Outline the quirks of Windows Small Business Servers (SBS)

I'm not much of a Microsoft administrator. However, I do work extensively with new and existing Microsoft Exchange deployments. That's just how the career-arc went. I'm working with a small customer ...
0
votes
0answers
18 views

Builtin group membership not updating on client machines

I have a small active directory setup which is semi-live (i.e. being used by only a few of the computers in the network), however when i try adding members to the builtin groups, and more specifically ...
-2
votes
1answer
40 views

Scripting command that can be executed on Macs to generate/remove (NOT SIMPLY BIND/UNBIND) those Macs as computer objects in Active Directory?

I have searched the stacks fairly thoroughly to find a scripting language-based command that can help me develop a script to be executed on Macs capable of actually generating (NOT SIMPLY BINDING) ...
8
votes
2answers
321 views

How do I block inheritance/application of a single GPO?

Due to the workload generated by recent ransomware outbreaks (Cryptolocker/Cryptowall/etc.), I was recently tasked with implementing Software Restriction policies to block program execution from ...
4
votes
1answer
58 views

How to determine domain controller used for authentication

I run several web sites using IIS on both Windows Server 2003 and Windows Server 2008. These web sites use windows authentication with only the NTLM option specified (no Kerberos). These servers are ...
0
votes
0answers
22 views

Domain controller not allowing me to connect to it over IPSec tunnel

I'm trying to connect a Windows 7 computer to a domain controller over an IPSec tunnel. The tunnel has formed and the network is accessible. I have set the IPSec connection to use the windows domain ...
3
votes
1answer
116 views

Remotely determine how long a user has been idle

How do I determine how long it's been since a user with files opened on my server has been actively using their workstation in a Windows Active Directory environment (XP, 7, 8 clients and Server 2008, ...
0
votes
1answer
48 views

How do I make browser shortcuts w/custom proxy settings available on user desktops?

In our environment, we have about 30 testers (website testers) located at different physical locations. However, they all log on to the same AD. As it is now, their MSIE is configured to access the ...
-1
votes
1answer
81 views

Setup Domain Controller and Active Directory on Amazon EC2 as Primary AD [closed]

I am planning to deploy an Active Directory and Domain Controller on AWS for my company. It will primarily be used for these: User Authorization (Login/Logoff Process) File Sharing / Management ...
4
votes
1answer
389 views

Exchange 2013 Setup fails - Couldn't find the Enterprise Organization container

I'm working on an Exchange 2013 CU6 installation at a site whose AD was comprised of two Windows 2003 domain controllers (in an odd HA cluster configuration). New Windows 2012 R2 DCs have been ...
0
votes
0answers
23 views

Lync 2010 - Search Returns “Presence Unknown” for E-mail Address

I've inherited Lync infrastructure and my knowledge of the product is limited. This issue appears to affect only one account. Searching for the specific account on a Lync 2010 client returns ...
1
vote
1answer
49 views

Adding a new Exchange 2013 mailbox from Powershell error

I am trying to add a new mailbox via the Powershell and I get the following error: #New-ADUser -Name AreallyTest -SamAccountName AreallyTest -AccountPassword (ConvertTo-SecureString Password1234 ...
3
votes
1answer
117 views

Better to share File Services role with Active Directory DC role OR with the RDS Terminal Server role?

We are a small business setting up a new server... budget is limited of course. I have ~500GB of data to share that needs to be stored locally on the single server we have. Host Server: Dell ...
1
vote
2answers
66 views

relationship between user and computer

I have been using Get-ADUser and Get-ADComputer a few times to help troubleshoot problems in the system. I have seen a few ways of identifying which user is logged on a specific machine through ...
1
vote
2answers
75 views

active directory structure and replication for dummies

I have to install an Active Directory environment for our company and it would be the first from scratch installation one for me, so I have questions, basically about the structure. First some ...
-1
votes
1answer
31 views

Duplicate computer name but one of them with SID

I have seen duplicate computer name in AD. e.g. One PC was call 456 and the other called 456 cnf:850255521 Why they are two same PC name, I have ask everyone but know one knows why. Can someone ...
0
votes
0answers
14 views

SQL Client failing SSL certificate encryption under a AD Domain

I have a client machine (web server) that is attempting to connect to a SQL server. The SQL server is 2008 and has the force encryption flag turned on. Both servers are joined to the domain. The ...
1
vote
1answer
62 views

My Active Directory replication settings don't look right

I have recently added a new site to my Active Directory domain (single forest, single domain). I have mapped subnets to the sites, and added one DC to the new site with our remaining 4 on the original ...
4
votes
2answers
57 views

Joining a NetApp to a domain on a Read Only Domain Controller

I have an isolated network, into which I've built a vfiler. The point of this network is that it's a non routed 'test' network. However, there's a need for LDAP/Kerberos and CIFS access to the ...
0
votes
1answer
39 views

Remove PCs older than X days from Active Directory [duplicate]

I am trying to remove all of the older computers that AD stores that have not been active for 60 days. I just started working with AD recently and noticed that the AD has not had a proper cleanup in a ...
0
votes
1answer
124 views

Powershell script for specifically OU

Need help with hte following, a script that can export all members of a specifically OU with in that multiple security groups. Location of the OU is; OU=Security Groups,OU=Public ...
0
votes
0answers
20 views

Do kerberos constrained delegation with protocol transition on IIS to another IIS need my own application for very simple redirect

Please excuse me if its a very basic question but i'm totally lost on this as Im new to IIS and kerberos delegation but have understanding of auth protocols. Need you peoples help please as i have ...
0
votes
1answer
118 views

Powershell use Get-WinEvent with hashtable to query very specific time range

I'm trying to make a powershell script that essentially automates the account lockout tools. ideally I'll be able to get a fairly efficient query that can identify recently locked out accounts then ...
0
votes
1answer
60 views

Pre-Moving user files prior to folder redirection to new folder

I have folder redirection in place at the office I work for. The user files currently reside in a folder on my file server. I am in the process of reworking the GPO and AD structure to facilitate ...
2
votes
1answer
32 views

GPO's between domains with a trust relationship

Is it possible to apply a GPO from one domain to another domain with a trust relationship? We have a GPO that adds a management security group to the local admin group of domain joined computers. My ...
0
votes
0answers
28 views

Need set of event ids that occurs in event viewer during file creation event

I need the set of event ids that occur in the event viewer when I created a file in shared folders (auditing was enabled for the folder) in domain controllers. I know the fact that the event id 4656 ...
-2
votes
1answer
25 views

Active Directory Server how to be cautious [closed]

My company has provided us laptops. We used to use them normally but suddenly my company has announced they have installed Active directory server. We all have to shift to that server. The requirement ...
1
vote
0answers
40 views

Set SPN for all users in domain

I have a Windows 2008 R2 domain controller with more than 60 user accounts. Each time one of these users tries to connect to the DC authentication "falls back" to NTLM. Kerberos authentication fails ...
0
votes
0answers
15 views

SQL Reporting Denying Access to User After Move to New Group

We have a SQL Server 2008 server setup with reporting services so that users can log in and run certain reports. I have a user that was granted browse permissions to this as we had their initial ...
0
votes
1answer
41 views

Will a Windows server 2003 operate on a domain functional level 2012 domain?

I have found plenty of articles that address Server 2012 R2 on a functional level 2003 domain. What I haven't been able to find is anyone addressing weather or not a 2003 server would be fully ...
2
votes
1answer
108 views

Sysvol replication broken between Server 2008 R2 DCs

We recently added a second DC to our network at a different site. The DCs do not appear to have any difficulty communicating via the network, and AD objects (users, computers etc) are synchronising ...
3
votes
0answers
113 views

Import Powershell AD Module during MDT Task Sequence

I have written this short powershell script to rename a computer as part of an MDT task sequence: Import-Module ActiveDirectory $AdminUsername = 'domain.com\administrator' $AdminPassword = ...
1
vote
3answers
208 views

Active directory rename computer that has been disconnected

We named a new computer on the domain USER-2014. The computer was for someone who already had a computer on the domain called USER. We discontinued the old computer with name USER and are now looking ...
1
vote
0answers
56 views

Account Operators built in group and “User Cannot Change Password” property

I have a question about configuring of "User Cannot Change Password" property. Does default "Account Operators" domain group has ability to change this property? If not can it be delegated via AD ...
0
votes
0answers
19 views

How do I use simple_allow_groups with AD groups that have no GID in CENTOS 7

We just built a few test CentOS 7 boxes, and the configuration that we were using for 6.5 is not working for us. As best we can tell, it comes down to using simple_allow_groups and using AD groups ...