A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
151 views

The user name or password is incorrect error while joining Windows domain

I am trying to add an second domain controller (DC) to my domain. The server is running Windows Server 2012 R2. After getting the error when promoting it to an domain controller I tried uninstalling ...
0
votes
0answers
26 views

PHPPGAdmin on Windows - authenticate users against Active Directory

I installed PHP, Apache 2.4, and PostgreSQL 9.4.1 on Windows machine which belongs to Windows domain. My pg_hba.conf: hostnossl all postgres 127.0.0.1/32 md5 hostnossl all all ...
1
vote
0answers
18 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
2
votes
5answers
108 views

Pursuit of True Active Directory Integration

Before you laugh at me and say, "If you want Active Directory, use Windows" or tell me to use Google, hear me out. My company relies very heavily on AD. Nay, we are married to it at this point, and ...
-4
votes
2answers
58 views

Possible to name a computer the same as a domain?

If I have a domain called "HOUSE" with user "JOHN", would it be possible to rename a PC to "HOUSE" with a local user called "JOHN"? So both would then be HOUSE\JOHN. Edit: I should add, the PC is on ...
0
votes
0answers
35 views

Redirect DNS-Queries in Samba4 AD of local domain

I am running an Ubuntu 14.04 Samba4 AD Server and I control my networks DNS via a different server. I am using the samba version served by ubuntu which is 4.1.6. Is it possible to configure the ...
2
votes
1answer
106 views

Joining 150 computers to Active Directory

I am a junior system IT administrator. We have Windows server 2008 R2 standard and 150 computers with Windows 7 professional (32 bit). We have installed an Active Directory domain on the server and we ...
1
vote
1answer
106 views

Is there a way to force permissions to update when removing user from admins?

I'm in an Active Directory domain, remoted into a Server in which my domain account is in the Administrators group. Someone else removes me from that Administrators Group while I'm still logged in. ...
0
votes
2answers
53 views

Migrating Windows Server 2003 Active-Directory to Windows Server 2008

I would like to migrate a Windows Server 2003 to Windows Server 2008. I installed Active-Directory on the Windows Server 2003. During the installation of Active-Directory on my Windows Server 2008, ...
1
vote
0answers
13 views

Give a user permission to insert and remove computer from windows domain

I want to give a specific domain user in my domain the permission to add/remove computers in the domain. How do I do that? and more important, does anyone know what is the permission name that I need ...
0
votes
0answers
26 views

Can OS X Server Wiki show Active Directory Files?

I have active directory (2008R2) and an OS X Server (Yosemite) setup. OSX Server recognises the Active Directory and when I SSH into it with an AD account I am able to see my home folder. Now my aim ...
1
vote
1answer
54 views

Ubuntu 14.04 Active Directory auth fails after static ip config

I'm having 6 Ubuntu 14.04 servers that are joined to active directory (2003 domain functional level 2008r2 schema) All of the servers work's fine when network interface is configured to use DHCP. But ...
0
votes
0answers
32 views

How to fix multiple reboot issue after joining domain?

I'm seeing that after joining machines to a specific ADA domain that the computers require you to reboot twice. Not to join domain but for any reboot ever. This only happens after it has joined ...
-4
votes
1answer
42 views

How to apply Default wallpaper to clients in Active Directory [closed]

I have one Dell poweredge 1850 server running on server 2012. I installed ADDS and Make one OU in it then i make users (approx 20) and then move all users to OU. But know when i tried to manage the ...
0
votes
1answer
33 views

Sync DNS zones on a Standalone DNS server from a AD integrated zone

I need to install DNS services on a Server [which is a part of a domain but not a Domain Controller]. I have around 12 Domain Controllers which have DNS roles installed on them and they have around 25 ...
3
votes
1answer
109 views

Windows DirectAccess - Server 2012 R2, Windows 8.1 Client, “No SAs match the specified criteria”

I put this question on SuperUser, but judging from the lack of response I think I picked the wrong place, so I'm cross-posting here. I'm trying to get DA set up and it is being a major pain. I have ...
0
votes
0answers
26 views

How do I trade an OAuth token for a Fedauth token with Azure AD?

I am trying to access a resource that's secured with Azure Active Directory. I can see from the HTTP traffic that my browser uses a Fedauth token when accessing the resource, but I need to access this ...
1
vote
1answer
53 views

Windows computer not recognizing membership in active directory group

In my active directory setup (Windows Server 2012r2 acting as domain control), I have a group called "TestComputers". I have a domain computer called "Computer1" that is a member of this group. On ...
4
votes
1answer
36 views

At which point becomes a changed computer group membership active?

When adding a computer object to an AD group, at which point in time does the group membership become active? Is there some kind of kerberos refresh interval (similar to group policy refresh)? I ...
2
votes
0answers
72 views

Error getting the list of sites from the target environment: An invalid dn syntax has been specified

Trying to add another (second) Domain Controller to an existing Domain. In the second step of "Active Directory Domain Services Configuration Wizard" getting the following error: Error getting the ...
2
votes
1answer
21 views

Remove printers from directory that were on an old server

I had a standalone Windows 2012 box that was acting as the printer server in my domain. Since then I've removed it and moved printer hosting elsewhere. However, when I open up the directory (through ...
2
votes
2answers
106 views

Windows Hosts DNS query for _ldap._tcp.domaincontroller, is this normal?

To make this easier to wrap my head around, here's what I'm using in my examples: deecee = my domain controller dctoo = another domain controller internal.foo.bar = the full DNSDomainName of ...
0
votes
0answers
24 views

Restrict Access to Domain Admin/Admin Group for all

We have a pretty old setup which was managed by our client. They could manage anymore and they have outsourced the entire Datacentre to us. Everything is messed up right now. Nothing in place ...
0
votes
0answers
60 views

Samba 4 Domain Join Command Fails

Have been attempting to get a test server connected to our AD (Win2k12R2) but when trying to do a domain join I get this error. it@testdom:~$ sudo samba-tool domain join xxx.com DC -Uadministrator ...
0
votes
0answers
15 views

When using an “Internal Relay Domain” as an Accepted Domain, what email addresses must be synched?

There are a number of SMTP addresses associated with a user in Exchange SMTP, X500, X400, etc. In addition there is a LegacyDN. Some of these email addresses are stored in the NK2 files and also in ...
0
votes
0answers
25 views

Auto-Purge AD Machines

I have a group of machines in a multi-domain multi-site forest. I am removing machines from Site-A/Domain-A and joining them to Site-B/Domain-B. Both domains span both sites and the inter-site ...
0
votes
0answers
29 views

Establish FAST encrypted channel between linux client and windows server

I am trying to setup windows server for FAST encrypted channel support to test OTP pre authentication in kerberos. I have already tested on linux machine by deploying KDC using krb5-1.12.1 source ...
0
votes
0answers
45 views

Active Directory Copy User and his password on another domain (and forest)

Is there a way (PowerShell would be nice) to copy a user (I need sAMAccountName) and his password, from one domainA (forestA) to domainB (forestB). All Active Directory servers are on LAN and this is ...
1
vote
1answer
29 views

Different account lockout policies for different users

I have few Organizational Units within Active Directory server, like below: OU1: user1 user2 OU2: user3 user4 My goal is to configure Account Lockout Policy in different way for two existing ...
3
votes
1answer
40 views

How to find all GPOs in a domain that define password policies?

We have a bunch of GPOs that have grown organically over time. I assume that many of them are defining password policies. I am aware of the fact that it only can be set once in a domain (besides PSOs ...
1
vote
1answer
70 views

Problems with Windows Domain

I have a problem in a Windows Domain. About the creation of this domain i can not tell very much - i got this job last month, without propper handover due to illness of the main admin. What i know is ...
0
votes
0answers
34 views

Difference in File System Security group policy between Windows 7 and 8 clients

I have an unexplained difference of behaviour between a Windows 7 client and a Windows 8 client. I have the following files: C:\testdir\allow_domainusers.txt C:\testdir\allow_everyone.txt ...
2
votes
1answer
360 views

Get-ADUser -Properties MemberOf returns nothing

Something that is kind of weird that I haven't ran into before. We just did a domain migration and so now when I run a Get-ADUser {username} -Properties MemberOf against a standard user the MemberOf ...
0
votes
2answers
52 views

GPO not applying to Clients

I am having issues applying the below GPOs to clients. Computer Configuration \ Policies \ Administrative Templates \ System \ Remote assistance \ "Offer Remote Assistance" Computer Configuration \ ...
0
votes
0answers
44 views

Dead Exchange 2010 organisation move to clean Exchange 2013

The previous two Exchange servers in my client's Exchange Organisation have not been removed but are essentially dead and the company doesn't have a recent backup of the exchange data (not setup in ...
-6
votes
2answers
57 views

What is the maximum number of administrator accounts that can be created in a Windows Active Directory domain?

I have seen 4 to 5 Administrator accounts in a domain. What is the upper limit on the number of administrator user accounts can be created in a domain?
7
votes
1answer
304 views

linux 802.1x on a windows wired network

I'm looking to use my linux workstation on our company network, but i've been running into a few issues, specifically 802.1x i believe. I'm root on my machine and a windows domain admin so i should ...
3
votes
2answers
57 views

Workstations hang on “Change Password” after expired Password

For one of our customers we have configered a maximum password age of 90 days. If those 90 days are over, the users are forced on logon to change their password. This worked fine for the past 9 ...
0
votes
0answers
15 views

How can i manage multiple domain with samba?

We set up our new domain controller running with Samba4 a couple of month ago (About twenty clients) Our organization change quit a bit, and a new structure manage our company. I need hits about ...
2
votes
2answers
76 views

The requested operation requires elevation

We have about 15 PCs on our network. I can make changes to all the PCs except one. I keep getting the message "The requested operation requires elevation". When I try to run a program as an admin, ...
3
votes
0answers
71 views

AD Replica DC Promotion Stall

I recently inherited infrastructure duties for a small startup I am working with. My traditional role has been development, so bear with me... I was hoping to start off on the right foot, and get ...
1
vote
1answer
44 views

Fileserver cannot find any DC's for trusted domain

The problem Due to a merger in our organisation, we are migrating to a new common Active Directory domain. Our old legacy domain and the new domain have a two-way trust between them. We have two ...
2
votes
1answer
95 views

How to programmatically logout idle users on Windows Server 2012 R2?

I've searched a lot but couldn't find a direct solution. Can anyone tell me how to logoff idle users from a remote desktop connection to a Windows Server 2012 server after a period of time? These are ...
1
vote
1answer
44 views

Backing Up User home Folders in an Active Directory

Our Domain is currently Set up with a Server 2012 domain controller. We have Home profiles enabled, which is annoying because it grants the User and only the user access to their files. We need to ...
0
votes
1answer
52 views

How can I manually initiate the creation of a home folder for an AD user in Windows?

I have an AD environment with Windows 2008R2 Server where a few Windows 7 machines use FolderRedirection . Sometimes I need to re-initiate the homefolder creation process, but the only way I've found ...
0
votes
0answers
41 views

SSPI trying to authenticate local user against domain

Our domain controller's event log is being flooded with EventID 4625 errors, "An account failed to log on." Here are some of the details from the event: Logon Type: 3 (Network) Account For Which ...
0
votes
1answer
25 views

Is ObjectSID a feature of Active Directory or is it a standard feature of all directories?

Is ObjectSID a feature of Active Directory or is it a standard feature of all directories? Is there an Object Class that provides ObjectSID which can be used in other directory services such as ...
1
vote
2answers
72 views

Linux Authentication with Windows 2012R2 Server (Deprecated IMU role)

I've been looking around the web trying to find a way to authenticate users on Linux with a Domain User account on a Windows 2012R2 Server. The way I've done this in the past is using the "Identity ...
0
votes
0answers
54 views

Samba DLC and Windows 7 Clients. Random drop of connection. Kerberos?

I have a Samba (Version 4.1.6-Ubuntu) DLC (Server role: ROLE_ACTIVE_DIRECTORY_DC) on an Ubuntu Server (Ubuntu 14.04.1 LTS) Several Windows 7 Professional Clients are connected every day and usually ...
2
votes
2answers
78 views

Demoting a server in a domain with Windows 2012 and 2008 servers

We have a domain with more DC's than necessary. Each server added to domain has become a DC. We would like to demote a few servers. For lack of a better word our main server is a Windows 2012 R2 ...