A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
29 views

Powershell and dsget do not return full results when querying group membership

I'm trying to get information about group membership of certain users. Ultimately I want to automate this in some way but I'm having difficulty extracting the information at all. The problem is that ...
0
votes
0answers
19 views

AWS Directory Service compatibility with XenApp / XenDesktop

I have a question regarding AWS Directory Service compatibility with Citrix XenApp / XenDesktop. I am about to deploy a Citrix XenApp environment in AWS. A requirement for XenApp is a working Active ...
0
votes
1answer
44 views

Powershell AD Group creation script

I am making an AD Group creation script New-ADGroup -Name "CS-WS-PROD-Admin" -GroupCategory Security -GroupScope Global -Path "$OU" -Description "Admin Rights on PROD" -ManagedBy CS-WS-SAR-ADMINS ...
1
vote
1answer
49 views

How to fallback to out-of-site login server - ActiveDirectory

I pretty much spend all of my time on Linux\Networking however I am trying to set up a multi-site AD configuration. There is no root site or anything like that, I simply have two DCs in SiteA and one ...
0
votes
0answers
37 views

machine in domain is not accepting domain credentials

I have added a windows server 2008 (Virtual machine) into a domain. 1. The newly added machine properties shows the system name as systemname.domainname 2. The AD is listing the newly added machine ...
5
votes
3answers
225 views

In a Windows PKI, what is a Workstation Authentication CA Template used for? What happens if it expires?

Many workstations have an expiring computer certificate that was issued using the Workstation Authentication CA template. The CA of this template expires in 2 days. I've deployed a new CA, with an ...
6
votes
2answers
68 views

Is it possible for a schema change to not replicate, and a object that uses that schema arrive at a DC?

I'm trying to understand the risk of updating the schema of a very large AD forest, where the schema has not been on every DC, and then an object that uses that schema object is replicated An example ...
-3
votes
2answers
53 views

BYOD - AD Authentication Issues [closed]

I am a guy who brings his "own rig" to work. In this new gig I have to run some apps as a domain user provided. I shift + "right click" -> run as a different user and insert the domain credentials, ...
2
votes
2answers
76 views

Restrict access to active directory attributes from a particular computer?

I know that some attributes in AD are classified as personal information and some are classified as public information (see the "property set" column here - ...
0
votes
1answer
27 views

Official name for AD/LDAP targets

Say I have an AD user called flimflam that is "located" at OU=System, DC=fizzbuzz, DC=myorg, DC=com: What is the technical/appropriate verbiage for OU=System, DC=fizzbuzz, DC=myorg, DC=com? Location? ...
0
votes
1answer
48 views

find given subnet is overlapping in Active Directory subnet

i am looking for vb / power shell script. i need to check given subnet is overlapping with AD subnet or not. For eg. if i gave input as 192.168.2.0/24 subnet the script need to check this subnet is ...
0
votes
1answer
54 views

cloned windows 2003 Domain Controller wont let me add windows 2012 as member

I did a P2V of my Windows 2003 Domain Controller. I'm trying to add a Windows Server 2012 VM (Computer name: SQL-SERVER) as a member of the domain but I can't. I can ping to both VMs. I can do a ...
2
votes
0answers
76 views

cifs Required Key Not Available

I have joined to a zentyal domain (AD Domain) using PowerBroker IS and I want it to mount my remote home directories when a remote user logs in. this is the config for PBIS: AllowDeleteTo "" ...
0
votes
1answer
72 views

Fix unknown sid security groups

I have the following situation: my security groups of the active directory I'm belonging to are not shown anymore in a "friendly name", but I have just the SID. When I run whoami /groups I see a list ...
1
vote
1answer
27 views

When an Active Directory User Logs in to Local Windows 2012 Server Launch a Virtual Machine; Possible?

I won't get into the reasons why this needs to happen, however, is this possible. I have a Windows Server 2012 R2 box that needs to be used as a daily driver for a few of a clients employees. Ideal ...
1
vote
0answers
53 views

LSA SID cache keeps old entry for renamed domain user - why?

I have a question about LSA SID cache on a domain member server. Recently I run into the issue when some users after their name was changed in AD has difficulties accessing application I support, and ...
1
vote
1answer
79 views

Read Only Domain Controller not replicating after writable domain controller outage

I have a RO domain controller that replicates with a writable DC which is at another site. The other week the writable DC was out for about 2 days because of maintenance at that site. After this ...
2
votes
1answer
36 views

Retrieve “IP Phone” Attribute from AD for Exchange Disclaimer/Signature

I'm trying to build a company-wide signature in Exchange using the Transport Rules and Disclaimers. I'd like to include our Skype names as part of this signature. In ADAC, the closest field I could ...
0
votes
2answers
55 views

1. Adding printer share to file server 2. AD Account lock after changing password. WHY?

I have a mindbender that I am looking for help to solve. After changing my AD password my account keeps getting lock. I found the workstation that was sending the wrong password and locking me. The ...
5
votes
1answer
100 views

Child Domain Logons to Cross Forest Trust Domains

I have a cross forest trust between two Windows Server 2008 R2 domains/forests (domain and forest functional levels at Windows Server 2008 R2). Domains A and B are the forest root domains in their ...
5
votes
2answers
199 views

Active Directory Permissions: Delete vs Move

I want our help desk to be able to move user accounts but NOT delete them. Here is the summary of our current permissions set on the affected OU's (this DOES allow them to delete user accounts): ...
0
votes
2answers
63 views

SSSD Authentication to Windows Domain without @domain.com everywhere

We're trialling using a Ubuntu 14.04 desktop environment for a few of our developers and I've hooked the machines into the domain with SSSD. This has been working fine. However the system recognises ...
0
votes
0answers
4 views

How to differentiate between primary mailbox and archive mailbox in mapi while getting mailboxes using IExchangeManageStore::GetMailboxTable?

I'm using mapi to retrieve information about mailboxes in my organization. When I use IExchangeManageStore::GetMailboxTable method, it returns both primary mailboxes and archive mailboxes. How do I ...
3
votes
2answers
52 views

When does an ACCOUNTDISABLE value in userAccountControl *not* correspond to a disabled mailbox?

We are querying a number (dozens) of LDAP servers (mostly Active Directory, but not exclusively) to determine which mailboxes are active, for the purpose of a mail gateway/forwarding application. We ...
0
votes
0answers
43 views

Server 2012 LDAP signing - “Number of simple binds performed without SSL/TLS..”

Here is our log on event 8227: Number of simple binds performed without SSL/TLS: 88 Number of Negotiate/Kerberos/NTLM/Digest binds performed without signing: 0 I have set LDAP Interace Events ...
4
votes
0answers
66 views

Active Directory: Server 2008 and RHEL 5.10

Apologies if this is a re-post. I've been googling and researching the topic for over three weeks now and I've come up against the same problem over and over again and I haven't managed to get around ...
0
votes
1answer
97 views

Active Directory Domain Service started then stopped after dcpromo

I use Windows Server 2008 to install Active Directory follow this guide After a restart, I can only login to local account,not domain account due to the error No logon server are available! I check ...
6
votes
2answers
102 views

Setting up a Windows Domain in a O365-only company

My company is quite young and small, but since we're growing, we want to rollout some software deployment solution. We haven’t decided which one yet, but they usually need a Windows Domain, and we ...
2
votes
1answer
64 views

How can I use Azure Active Directory users as virtual machine users?

Is there a way to use users in an Azure Active Directory as users for an Azure Virtual Machine? Respectively, is there a way to create multiple user accounts for an Azure Virtual Machine?
0
votes
0answers
21 views

Active Directory - Windows Kerberos integration

I integrated ActiveDirectory in Windows Server with Kerberos in Ubuntu machine I am able to generate tickets for the ActiveDirectory users in Ubuntu's Kerberos using 'kinit' command. Now would like to ...
0
votes
1answer
30 views

Advice on how to convert a small, completely peer-to-peer network into a client/server type network?

I apologise in advance if I use the wrong terminology or have stupid ideas about the way things work. I am a newbie but I am really interested in learning and I hope that you may be able to help me. ...
0
votes
0answers
300 views

Name Resolution failure on the current domain controller

I'm using windows server 2008 R2. One day my server got issue with Group Policy. Here is the log in event log: The processing of Group Policy failed. Windows could not resolve the computer name. ...
3
votes
2answers
268 views

Migrate user accounts from Azure AD to on-premise AD?

My company uses Office 365 for Exchange, SharePoint, Lync etc. including the build-in user administration via Azure Active Directory. Now we want to switch to a local AD on a Windows Server. It shall ...
0
votes
1answer
56 views

Faulty DC preventing NTFRS replication

When adding a new DC (2012 R2) to a domain (2008) everything goes well except that it never advertises as DC. Doing a bit of diagnosis i found out that ntfrs replication never starts, consequently ...
1
vote
1answer
91 views

Main DC is no longer NTP or hold FSMOs

Good Afternoon, We two virtual DC and one local physical read only DC. When we moved our data center offsite with a warm backup site we p to v our DC’s and DC1 was the master schema. While ...
10
votes
1answer
202 views

Active Directory forest with same name as root DNS zone and browsing to site with same name

Related to this previous question of mine about why it's a bad idea to use the root domain name as your Active Directory forest's name... I have an employer, whom I will refer to as ITcluelessinc, ...
-1
votes
2answers
86 views

Simulate WAN / Route Between 2 Virtual networks (Vmware)

i am in the process of doing some Labs on VMWARE ESXI 5.5, i am currently testing replication between 2 AD sites, i have set up Site A containing 2 DC's and want to setup Site B Contains 2 DC's as ...
1
vote
1answer
49 views

Change Active Directory in Samba share server

I have the next scenenario: Legacy Windows 2k Server as PDC (Primary domain controller) called A Samba share server with some resources connected by winbind with A Clean Installation of Zentyal ...
0
votes
1answer
53 views

How to integrate Active Directory in VisualSVN Server

I'm using the VisualSVN Server Standard Edition. Is it possible to integrate Active Directory in VisualSVN Server with this version? If it's possible, how to do that? I researched a lot via google ...
2
votes
2answers
151 views

Putty Kerberos/GSSAPI authentication

I configured a few Linux servers to authenticate with Active Directory Kerberos using sssd on RHEL6. I also enabled GSSAPI authentication in hopes of passwordless logins. But I can't seem to get ...
3
votes
3answers
396 views

LDAP Query behind Get-ADUser commandlet

How can I view LDAP Query executed by Get-ADUser behind the scenes, ie. this command Get-ADUser -Filter * -Properties * | Where { $_.Enabled -eq $True } | Where { $_.PasswordNeverExpires -eq $False } ...
2
votes
1answer
176 views

openssl s_client ignoring custom root CA certificate in /usr/share/ca-certificates

I've set up an Active Directory server and configured LDAP-over-SSL, which works fine for machines on the domain, however because it's using certificates provisioned by AD's Certificate Services it ...
1
vote
1answer
195 views

AD cross forest trust logon workstations

Our business unit has been bought out by an external entity. We are running 2008 R2 AD, they are running 2012 AD, the domains are not joined or trusted. They have servers including domain ...
1
vote
1answer
58 views

Setup Windows Server Local DNS on WAN

I inherited a WAN with centrally hosted DNS,AD Servers. I have clients connecting to Application Servers hosted locally on site. Problem is when the WAN link goes down clients can't connect to ...
-1
votes
1answer
77 views

Find Computers Recently Joined to Active Directory

How can I find Computers recently joined to Active Directory? Edit: I've searched google for the title phrase, and have also searched here, but can find nothing specifically about filtering on when ...
4
votes
1answer
91 views

How to manage computers from another AD domain with Windows MMC?

I am currently managing computers distributed across 2 different AD domains. I shall call the 2 domains MEDIA and DATA. My workstation is a member of the MEDIA (192.168.10/24) domain, along with most ...
1
vote
1answer
72 views

Additional Keyboard settings from Active Directory

We have some users in our company who need to use additional Keybaords, in order to achieve this one of the other admins had written a VBS script which runs when users in a particular group log in to ...
1
vote
0answers
192 views

My domain controller/active directory server can't establish a connection with the global catalog [closed]

I have a Windows Server 2008 R2 running as my domain controller. It is responsible for Active Directory, DNS, and DHCP. It is the only DC in the forest. Active Directory reports errors every hour: ...
5
votes
1answer
110 views

“Get-AdComputer -filter” doesnt return anything when looking for Vista Clients

Why does Get-Computers -OperatingSystem "Windows VistaT Business" not return anything? It works perfectly for all the other OS types. Function Get-Computers { Param($OperatingSystem) ...
0
votes
1answer
45 views

Does Active Directory alone is not enough to secure hadoop?

I am trying to secure Hadoop environment installed in windows. So basically I started to analyse how to secure a Unix-based hadoop cluster. Have gone through various links related to Kerberos and ...