A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
169 views

Group Policy Objects stopped applying to most security groups [duplicate]

I have a Server 2008 R2 Domain with quite a few Group Policy Objects that should be applied to various OUs and security groups (Using security filtering). I got reports from users that they were ...
0
votes
0answers
31 views

“Password is incorrect” when link between primary and secondary domain controller downs

I have Single Forest and Single Domain with 4 sites on which I have Places Min 2 domain controllers , On One site name as HADEED , When the Replication link/Domain Controller Links Down the user at ...
0
votes
2answers
74 views

How can I propagate IIS settings across multiple servers in AD?

I have an active domain with about 20 machines, each running some applications we have setup. We need to set up IIS on these machines to serve files that some of these applications are outputting. ...
1
vote
0answers
15 views

Easier method of setting up Winbind auth in LMDE?

Some GNU/Linux distros (CentOS comes to mind) have a neat Authentication Config tool, in which you may specify which auth methods (files, NIS, Winbind etc) to use. You specify the needed parameters (e....
1
vote
1answer
84 views

User groups without Active Directory

Is it possible for Windows Server 2003 R2 to configure several user groups with different setups without using Active Directory? The admin has turned it off for 'security reasons'. Which setups I ...
0
votes
0answers
11 views

Is it possible to create this directory structure in AD LDS?

A customer is determined to have a directory structure like this: cn=lab1,ou=HHH, l=London, C=GB, OU=ACME Research,O=ACME Is this possible in AD LDS? How would I go about creating it? Currently ...
0
votes
2answers
37 views

Does GPO Security Filtering need to match ANY or ALL rules in the Filter?

my main question is this: Is the security filtering for a GPO calculated using AND logic or with OR logic to apply the filters? Here is the context of my situation for a background on why I am ...
1
vote
1answer
28 views

Total Number of Certificates issued / revoked

Currently using Active Directory Certificate Services. Is it possible to find out the total number of certificates that have been published and revoked up till today, and if so how do I do it?
0
votes
1answer
92 views

negative WMI-Filter for security filtering in GPO

I need to create a group policy object (GPO) that will disable printer redirection for all computers except certain servers. I considered making a security group and adding all the computers except ...
1
vote
1answer
38 views

Granting a user permissions to PS Remote without allowing RDP

Is there a way I can grant a user the ability to use Invoke-Command in PowerShell remotely without giving them RDP Access to the server?
1
vote
1answer
31 views

FreeIPA and AD password synchronisation

I am attempting to integrate FreeIPA with Active Directory to provide single-sign-on for Windows and Linux users by following this guide. I have successfully created the 'winsync' agreement and ...
1
vote
2answers
148 views

AD Synchronization/Replication issue between 2 sites having Window Server 2008 R2 as OS

We have AD forest having Root Domain (Main office, HQ) & 4 child domain. Out of which 1 child domain is having 2 sites. AD Directory services are running on 2008 R2. All sites AD Directory ...
2
votes
1answer
29 views

why use an Active Directory multi-tree design?

I get asked the same question a lot. Why use multi-tree forests when designing Active Directory? I know that the two trees will belong to different namespaces and that they will share Scheme/...
2
votes
0answers
29 views

Internal EV SSL From A Windows Server 2012 R2 Root CA Shows Up As A Normal Certificate

I am trying to setup an internal ev ssl server for all of my internal applications giving ie the little green bar and chrome displaying my company name. It works fine in IE displaying the green bar as ...
0
votes
1answer
41 views

Active Directory multi-tree, single forest DNS configuration

So, I have a multi-tree single forest that contains 2 tree domains called simpson.local (forest root) flanders.local Now both domains have full trust and both domains use Active Directory-...
0
votes
1answer
53 views

Anyway to limit IP Access for Certain Users?

I am currently tasked with allowing Vendors onto our process network. The issue is I need to make it so each vendor is only able to connect to PLCs on their own machines "each PLC has its own IP". Is ...
1
vote
2answers
124 views

SSSD Kerberos AD Centos troubleshooting

I followed the Configuration 3 from the RedHat AD integration (https://access.redhat.com/sites/default/files/attachments/rhel-ad-integration-deployment-guidelines-v1.5.pdf); but I am stuck. I am on ...
1
vote
1answer
32 views

RunAs netonly with credentials saved

I can start a process with runas /netonly and runas /savecred but I can't use both the flags at the same time. Is there a way to run a process as a different user remotely without having to type the ...
14
votes
1answer
2k views

GPOs fail to apply; reason: Inaccessible, Empty, or Disabled; Server 2012 R2 and Windows 10

I have a Windows Server 2012 R2 Domain. Yesterday, a computer’s (running Windows 10 Pro) network drive stopped working. After further investigation (gpresult /h) it appears ALL group policy objects ...
2
votes
1answer
187 views

how to fix remote desktop access in Windows Server 2012 R2

Kind of an embarrassing question but... One day I was playing around with GPOs to try and grant local Administrator access to a specific User group for a specific Client computer. Somehow, I messed ...
2
votes
1answer
46 views

Recover GPO Rights

I messed up at work today, and I've accidentally denied a group (I don't know which one) from read-level permissions. I went to work on delegation for a user for a GPO, and I must have accidentally ...
2
votes
1answer
25 views

Exchenge 2010 server is not finding GC server in the domain

Exchenge 2010 server is not finding GC server in the domain even the domain controler . All Domain controllers are Windows Server 2012 Std. In the atest.local forest I have 3 DC and all 3 are GC: PS ...
3
votes
1answer
61 views

The password on this account cannot be changed at this time?

A user in my company forgot his password and I had to reset it to a temporary one. I checked the box that says "User Must Change Password at Next Logon". When he logged on and entered the temporary ...
0
votes
0answers
14 views

“Office” field in Outlook 2010 Contact Card

I'm working on updating our active directory information and I'm trying to find the AD field which populates the "Office" contact card field (example). I've updated the "Office" field in Active ...
1
vote
1answer
21 views

FreeIPA AD Trust based Integration using SunLDAP to store Policies

If we want to use the FreeIPA Active Directory Trust Integration Option, can we use an existing implementation of SunLDAP to store the Policies (e.g. sudo, hbac etc.) Essentially we don't to create ...
-1
votes
1answer
62 views

Windows server 2008- domain conflict

I was running a windows server 2008 R2 with active directory setup for all the other workstations, which was all setup by someone else before me. The issue is that the server OS got corrupted a few ...
0
votes
1answer
49 views

DC3 doesn't replicate with newly added DC1

[DC 1 - LOTUS] [DC 2 - IRIS] [DC 3 - FLORA] The picture above shows my domain network connection. My original DC1 was PYRUS, due to some reasons, it is dead and be replaced by LOTUS. I Seize all ...
2
votes
1answer
45 views

Auditing Registry events through AD

I want to audit registry related events (modify key delete key etc) , so i enabled it via group policy and setup a "Global Object Access Auditing" for auditing on "Authenticated Users". Unfortunately ...
1
vote
1answer
105 views

WMI “Access Denied” to Read Only Domain Controller

From a management machine using wbemtest, we are able to successfully connect to a remote Read-Only Domain Controller that is running Windows Server 2012 R2 Datacenter with a user who is a member of ...
0
votes
2answers
62 views

Can Foreman register a new host with Active Directory?

We use Foreman and Puppet to manage our Unix systems here, but the Kerberos infrastructure is implemented over Active Directory (because Exchange). Registering the newly bootsrapped hosts with AD is ...
0
votes
1answer
29 views

Impact on application after workstation join Active Directory?

I want to migration a mix of 20+ workgroup Windows OS (7, 8 and 10, home & pro version) machines to Active Directory and would need to find out impact to the user & preparation; example ...
0
votes
1answer
60 views

When using RDP to log into a remote domain do my local domain logon scripts apply?

I've been asked to set up a user on our network with RDP access to a RDS server on a remote domain. We have set up the VPN just fine and the remote RDS server is reachable. The issue thus far is that ...
1
vote
1answer
93 views

Issues adding new DC to network after main DC broke down

What I try to do should be something simple but I made in ended up bad. We have a virtual network and virtual machine set up on Azure East Asia region datacenter originally. Then, we decided to move ...
1
vote
0answers
22 views

Active Directory Certificate Services Code signing Subject Empty

I'm contracted by a branch of a large multinational company to write some in-house software. I'm trying to push this software out to users using ClickOnce. To sign the application, I was issued a code ...
-1
votes
1answer
93 views

Get AD users who have not logged in the past x Days and are member of a specific group?

I'm sorry if this looks like a duplicate. Actually the same question has been asked under http://serverfault.com/questions/783399/get-a-list-of-users-who-are-domain-admins-and-have-not-logged-in-the-...
1
vote
2answers
145 views

Get a list of users who are Domain Admins and have not logged in the past 30 days?

How can I get a list of users from AD who are Domain Admins and have not logged in the past 30 days?
3
votes
1answer
30 views

Active Directory permissions dissapears

I have recently configured Active directory delegation and in one specific OU inherited permissions disappears from all users except one I have recently created for tests. Non of the users are a ...
0
votes
1answer
42 views

Need to regain trust with domain controller

Long-time Unix sysadmin, just getting started in the Windows world, here: I have a Windows 7 Enterprise machine. A recent system update must have gone pear-shaped, because now when I try to log in as ...
0
votes
0answers
28 views

Invalid CRL distribution points in certs after CA migration

I have recently migrated an Enterprise CA from a Windows Server 2003 box to a Windows Server 2012 R2 box using the Active Directory Certificate Services Migration Guide. The CA was running entirely ...
2
votes
0answers
39 views

Why can't I see the file version of files in system32 remotely?

Here's the situation: I can RDP into a computer, go to C:\Windows\System32, and check file versions to my heart's content. Such as winlogon.exe, explorer.exe, etc. If I map the drive, and try to ...
1
vote
3answers
124 views

How to simulate a WORM environment w/Active Directory/NTFS

In NTFS/Active Directory, assume I have two drives mapped: H:\ I:\ Users can edit files in H:\, but not in I:\ . I want users to be able to, using a script, move their files to the I:\ drive unless ...
0
votes
0answers
21 views

A domain controller in Azure ends up public on the Internet with no firewall - is it compromised? [duplicate]

I'm helping a customer stand up an Azure environment and they decided to stand up a server (DC) on their own without asking for help. The only access method is supposed to be IPsec, but they forgot ...
1
vote
0answers
17 views

Active Directory tree domain not seen from forest DC

I have four Hyper-V virtual machines with Windows Server 2012 R2 and Active Directory set up. They are all in an Internal switch configuration and can communicate with each-other fine. AD1 is the ...
1
vote
0answers
104 views

How To Configure OpenSSH on a Windows Server 2008 to authenticate against Active Directory

I have installed OpenSSH 7.1 on a Windows server 2008R2 which also is an Active Directory Domain Controller. I need to login with SSH on this machine using credentials from Active Directory e.g., ...
0
votes
1answer
50 views

Why is it bad to deploy Remote Desktop Services on a domain controller?

I have an application on a VPS and I want to run it with RemoteApp instead of having to remote desktop into the server. Our VPS provider can sell us a pack of five RDS licenses to use which will be ...
0
votes
1answer
16 views

Domain ID Authentciation Timing

Window Server 2008 R2 is my Domain Controller i.e Active Directory I Need to find out when does Particular Domain ID has been used for authentication. I know that from 'Active Directory Users and ...
0
votes
1answer
24 views

How to deploy files using Group Policy

I wish to share a couple files to every computer on my domain. I know I need to use Group Policy, but I'm not really sure where to go from there. I am using Windows Server 2003 R2.
3
votes
1answer
51 views

Server 2008/2012 (R2) group policy scheduled task not applying

I am at wit's end and totally confused. The goal is to take group policies(one per day of a week) and set a scheduled task which will trigger a reboot on that day at a specific time. So I made them (...
1
vote
0answers
28 views

How to set if a computer in AD is assigned to a particular user?

We have computers that are renamed every time a new employee shows up. This causes a lot of work unnecessary work for the IT department. Now while it isn't always true 100% of the time that each ...
0
votes
1answer
59 views

Seizing a domain from dead primary domain controller

My old Primary Domain Controller died after a series of power problems. I tried to follow this set of instructions http://kpytko.pl/active-directory-domain-services/seizing-fsmo-roles/ to get another ...