A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

3
votes
0answers
85 views

How to configure Windows to trust a network share using a GPO?

I keep getting the following warning whenever I try to open a share from my DFS. How can I configure Windows (10 in this case) to trust anything under the root of my DFS via GP? It seems odd that ...
0
votes
1answer
23 views

Cannot login anywhere on domain: Profile cannot be loaded

I'm having this issue with one of our users. This is a roaming profile, and I've tried logging in on a few machines, but we're still getting the same error. I did go through cleaning folders and the ...
0
votes
1answer
70 views

Bulk converting AD groupscope from domain local to universal

I have been testing the following command to convert individual "global groups" to "universal", it works fine. dsmod group <GroupDN> -scope {L|G|U} However, is there a way to convert a whole ...
0
votes
0answers
27 views

google chrome group policy locale

We currently have Google chrome deployed in the enterprise. We have an internal website that retrieves data from a database and people using chrome noticed the date and time format was in the US ...
5
votes
1answer
130 views

Get-ADGroupMember $Group fails when $Group contains principals from other domains

I've noticed that when I use Powershell to get the group membership of an Active Directory domain security group, the Powershell cmdlet Get-ADGroupMember $Group fails with the error message: PS ...
1
vote
2answers
51 views

RPC Server is unavailable while trying to promote a domain controller. Open firewall

So I've been scratching my head around this problem for a few days now. This is a quick schema of our infrastructure : Our Primary Domain Controller is running in an hypervisor, in our datacenter. ...
1
vote
0answers
53 views

Is it possible to use Active directory without a trust relationship for FreeIPA passwords?

I am looking to integrate FreeIPA with an Active Directory environment that I do not have full control over and most likely will not be able to get a trust relationship setup with my FreeIPA install. ...
1
vote
1answer
84 views

Check If A Service Account Has Logon Interactive Privileges

I want to loop over all my domain service accounts and make sure that people can't log on the server using that account. How can I check if a service account has interactive logon privileges and/or ...
1
vote
1answer
233 views

how to create a folder on desktop everytime a new user is created?

How can I configure the system so that whenever I create a new user, and automatically available on her/his desktop a directory called "project"?. Is there something related to C:\Users\Default??
10
votes
1answer
96 views

How many FSMO roles are there?

I've always understood that there are five FSMO roles, but sometimes I see something that says there are seven. How many are there, really?
4
votes
2answers
69 views

every 5th AD query is very slow, why?

I’m binding a FreeNAS box to AD for student logins to SMB mounts. That all works fine. I have a bash script that runs on the FreeNAS to build an index.html page pointing to a subdirectory of each ...
2
votes
1answer
38 views

Manually (re-)create Active Directory schema objects msExchRecipientDisplayType and msExchRecipientTypeDetails from Exchange on Samba AD

Somehow, my Active Directory has "lost" (at least) 2 objects from the schema. msExchRecipientDisplayType and msExchRecipientTypeDetails are what I need to recreate. I believe they were lost, because ...
0
votes
1answer
24 views

Windows security event log showing lot of firewall rule changed alert

n my server i am getting lot of event id 4946. A change has been made to Windows Firewall exception list. A rule was added. i am getting this alert every day. can you help me to reslove this. ...
1
vote
1answer
159 views

OmniOS r151018 file server visible in samba4 Active Directory but not in Windows Network Neighborhood

I have a test setup containing: 3 AD domain controllers (set up to replicate between them), all running Samba 4.3 on Univention Corporate Server 4.1 1 Windows 7 SP1 client joined to the domain 1 ...
0
votes
0answers
13 views

Windows 7 delete fingerprint from profile

I'm facing the following situation: I have a computer, joined to an AD with roaming profiles and with fingerprint logon enabled. A problem with a user profile had me delete the said profile and ...
0
votes
1answer
45 views

Group Policy Object not applied to client computer

I am taking over our entire Microsoft based management, this includes our AD servers, GPOs, etc. So with that being said, I don't know everything about how this setup is configured. However, I have ...
0
votes
0answers
51 views

Trying to add user to Active Directory via ldapadd using the admin user fails with INSUFF_ACCESS_RIGHTS

This is the ldif file I'm trying add: DN: CN=John_Smith,CN=Users,DC=ad,DC=example,DC=net objectClass: user CN: John_Smith sn: John givenName: Smith displayName: John_Smith sAMAccountName: jsmith ...
1
vote
2answers
80 views

Add AD entries using ldapadd failing with “unwilling to perform”

I'm trying to add entries to an Active Directory using ldapadd. Here's my ldif file: DN: CN=John_Smith,CN=Users,DC=ad,DC=example,DC=net objectClass: user CN: John_Smith sn: John givenName: Smith ...
0
votes
1answer
29 views

Restrict Group Membership for users not from particular OU

I need to configure two type of users that can administer AD users and security groups: Type 1 - Can only create users within particular OU. Type 2 - Can only change group membership of users ...
4
votes
1answer
140 views

Suggestions For IT Staff Delegation

looking for some suggestions or tips on how to setup our IT admins with delegation and server access. I started at a new organization and saw that every IT staff member is a domain admin. Looks like ...
1
vote
0answers
28 views

How to find out why joining a NAS to AD running on Samba 4.4 / Debian fails?

I am currently trying to join a Seagat Black Armor 220 NAS to my Active Directory Domain (2008_R2) controlled by Samba 4.4 running on Debian Jessie. But this will fail all the time giving me the ...
1
vote
2answers
52 views

Recover deleted mailbox and user- no AD recycle bin

I deleted a users mailbox in the ECP- AD user was of course also deleted. The recycle bin is not enabled. Is the only way to recover the user and mailbox with an authoritative restore?
1
vote
2answers
75 views

Setup Domain Trust fictitious domains on dynamic IP's with Windows Server 2008 R2

Have a customer with two separate offices / companies, eg: domainone.local (Windows Server 2008 R2) domaintwo.pvt (Windows Server 2008) Each office has a dynamic IP when connecting to the internet. ...
2
votes
0answers
61 views

Group Policy - Not automatically running on all machines

We are facing an issue on one of our domains where machines are not all running group policy refreshes at its default interval. I am not seeing the 1501 events logged in the system log, I occasionally ...
3
votes
2answers
128 views

creating an SPN from a linux build server

I'm setting up a process which would automatically create the SPNs for newly exposed service URLs. I am aware of how to create an SPN with Windows using the setspn -A command with the right ...
3
votes
0answers
96 views

Questions about ktpass/kerberos with Active Directory

I got a few questions about Kerberos with Active Directory, specifically about the ktpass tool. The example AD I'm using (everything is on 2012R2 level): Active Directory Domain Name: ...
1
vote
2answers
205 views

Configure same Internet Explorer zone mappings with and without ESC via GPO

Our Active Directory domain consisting of Windows Server 2012 R2 servers and Windows 7 workstations configures Internet Explorer security zones using this Group Policy setting: Computer ...
1
vote
3answers
90 views

Secure Administration AD Domain

I have a project to securize my Active Directory infrastructure. To do that, one of my colleague told me about the possibility to create another AD domain in the forrest just for administration. That ...
0
votes
2answers
67 views

Export Active Directory Users as *.contact

Is there a way to export AD Users to a *.contact file? (each contact = 1 file)
2
votes
1answer
68 views

AD Server 2012 - Make an admin account that can only add new users

I have been looking all over the web trying to find an answer but no luck. Does anybody know, if it's possible, how to make an admin account, that ONLY have access to add in new users to the Active ...
0
votes
2answers
114 views

How do you reset the default “IP Security Policies on Active Directory” back to their factory settings?

How do you reset the default "IP Security Policies on Active Directory" back to their factory settings?
1
vote
1answer
220 views

How to get ADDSDeployment module on Windows Server 2008 R2 SP1

I wonder to use AD DS Demployment CMDLets (Install-ADDSDomain, etc.) on Windows Server 2008 R2 SP1. I have installed AD-Domain-Services feature and in the list of available modules (Get-Module ...
0
votes
1answer
17 views

New site is not listed when adding new domain controller

I inherited this network and I'm trying to figure out what I am missing. I created a new site in Chicago and I want to add a domain controller to it but the new site is not listed when I go to ...
1
vote
1answer
37 views

Can Active Directory Lightweight Directory Services corrupt or interfere with a (non-light) Active Directory installation on the same network?

I'm a programmer with a limited understanding of Active Directory. I once asked the IT manager if I could install Active Directory on my development computer and he told me definitely not as it would ...
3
votes
3answers
370 views

Domain Controller on Hyper-V-Failover-Cluster: Chicken and Egg?

I am designing a solution to move users to Office 365 / RemoteApp With a Dirsync connection back into the on site AD servers to handle local logins / local file server. The plan is to have two ...
1
vote
0answers
37 views

Active directory user password change by ldap client

I have written a LDAP client program in C. With that I am trying to authenticate against Active Directory. I have created some users in active directory and trying authenticate with my LDAP client. ...
0
votes
0answers
11 views

Event Forwarding

I am taking the MCITP 70-685 Windows 7 Enterprise Desktop Support Technician and am trying to set up Event Forwarding. My setup (As I need three separate OS' which I'm running on two computers) is ...
0
votes
0answers
26 views

Kerberos-based SSH login requires local user account

I've recently set up a linux system (Debian-Jesse) which has joined an MS-Based Kerberos domain and been set up to allow Kerberos-based authentication for remote access. The only issue is, ...
0
votes
1answer
51 views

Correctly remove exchange server

We have an intranet domain where an Exchange 2013 was installed for testing purposes. This is no more used and can be deactivated. Now I need to format the server where Exchange was installed. I'd ...
-2
votes
1answer
96 views

Can't log in to the DC remotely as Admin

I need some assistance ASAP my old IT Manager who got fire mess up our DC. Now I can' login to DC remotely as Administrator. Non of the 5 Windows servers that I have. This is the error message " To ...
1
vote
1answer
77 views

Windows Server 2012 - Domain Admin: Can't change printer ports

I'm a domain admin of my network and some of the printer settings don't allow me to change. I'd have to logon to the local admin to be able to change printer settings. Can this be enabled for domain ...
0
votes
1answer
101 views

Creating active directory users with powershell - the mapped home folder is not mapping until edited

I'm creating active directory users in bulk from a .csv using powershell. Each user has their profile home folder path mapped to a drive letter. The script runs through fine, users are created and ...
0
votes
1answer
106 views

Windows Server 2012 R2 Primary Domain Controller locks old computername

Before updating to 2012, old DC-name was: SERVER1 Now Primary-DC name is: SERVER2 SERVER1 was added to computer as DNS-CNAME-alias Then we installed secondary DC: SERVER3 and tried switch ...
-1
votes
1answer
69 views

How to create or change unmanaged computer account to managed computer account in Server 2012R2

My DC Server use Windows Server 2012R2. I want to use Windows Deployment Service but I don't see any computer account in active directory prestaged devices. From this Ref, I must change computer ...
0
votes
1answer
18 views

Configure IIS to use Active Directory authentication

I have hosted a website on a server within the Enterprise network. The website needs to be accessible from machines(PC/Mac) in the network as well as from devices like tablets outside the ...
-1
votes
1answer
88 views

Samba file server as domain member: error when joining domain

I would like to set up samba 4 to share a local directory, so that domain users are allowed to mount the directory. I don't want domain users to be able to log in the linux machine, they should only ...
0
votes
0answers
30 views

Configure Azure AD Connect

I'm trying to set up an domain in Azure AD Connect on a Workgroup computer. The challenge that we have is, we have a dedicated domain controller for the purpose of Azure AD Connect and the other ...
2
votes
1answer
44 views

Centralize the update of Internet Root Certificates

I would like the client machines in my organization to update the Root Certificates from a centralized location INSIDE the organization. This used to work with WSUS, but Microsoft left this way aside ...
1
vote
0answers
17 views

OU Search base in LDAP AD integration using CUCM

If i dont define an OU when creating user search bases in LDAP will it use the whole domain instead of a specific OU?
0
votes
1answer
36 views

Importing Bulk Users from .csv file leads to user logon name and domain being blank

I have the following issue when adding bulk users through a .csv file: the user logon name and the domain are blank, however the user logon name (Pre windows 2003) is showing ok. Because of this, I am ...