Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

1
vote
2answers
96 views

Is DNS included in the “Active Directory Domain Services”?

If someone tells me that the "Active Directory Domain Services" role is installed on a Windows server, does that mean that the DNS role is also installed? What software is part of the Active Directory ...
1
vote
1answer
48 views

win server 2008r2 network share error element not found

I have setup a Windows Server 2008R2 with DNS and AD. When I define a shared folder on the Server and connect to it via \domain.lan\folder I can see the content but if I try to change something in ...
0
votes
1answer
26 views

Group Policy: How to comment on each setting?

I am looking for a way to comment on each and every setting that can be made within a GPO. Unfortunately things like user logon scripts and security settings and some more can not be commented. Is ...
0
votes
2answers
190 views

Windows Server Manager Kerberos error 0x80090322

I have been frustrated with this issue for two days now so I finally decided to ask this on serverfault. I'm setting up a Windows lab environment. It has a Win2012R2 domain controller (srv001) and ...
3
votes
2answers
73 views

Powershell - Find users belonging to more than one AD group

I'm new to AD and Powershell so please forgive me if I use the wrong terminology. I have a series of 50+ Active Directory groups called "ABC-something". Every active user needs to belong to exactly ...
-2
votes
3answers
96 views

If my single domain controller is down, what happens? [closed]

I have comprehension question. Let us assume I have an ESXi environment about 20 running VMs. One of the 20VMs is the domain controller (DC01) as a single domain controller (no other sides are ...
0
votes
0answers
27 views

Active Directory Sites and Services - can subnets affect the applicability of GPOs?

This maybe a dump question. But I have a strange situation here. Two of my servers (Windows Server 2012 R2) do not apply any GPO that are linked to the respective OUs. Gpresult /H simply returns an ...
0
votes
1answer
73 views

Can browse sysvol but not netlogon with Samba 4.1.5-SerNet-RedHat-7.el6 on CentOS 6.5

I have three servers: a Win2003 box running as the first AD DC, a 64-bit CentOS 6.5 box running Samba 4.1.5 x64 in AD DC mode, and a 32-bit CentOS 6.5 box running the same version of everything but ...
-2
votes
1answer
26 views

Remove delete permission for active directory group in Microsoft 2008 Server R2

I've created a group in Active Directory and I would like to prevent all users in this group from being able to delete any files on the server. How would I go about doing this?
0
votes
1answer
36 views

sharepoint 2013 user profile sync permissions problems

I’m trying to stand up a new SharePoint 2013 farm. I've got an issue where we aren't syncing all of the user properties between sharepoint and AD, and it’s the email properties in particular that I’m ...
1
vote
2answers
49 views

Computer name description

we are in the process of migrating windows operating systems and to make future search easier in AD I'd like to put in more details into the description box in the computer name dialog. e.g. ...
3
votes
1answer
105 views

Hyper-V and AD --> recommendations for small site? [closed]

I have a dilemma about how to proceed with new AD / Hyper-V installation and would appreciate your views, experience and advice. Situation: we are a small company with single site (25 users) and few ...
3
votes
1answer
51 views

Domain Controller returns LDAP Referral for it's own domain

I have 2 domains, each with 2 Domain Controllers: company.local ad.company.com.au Both domains are in the same forest and have a bi-direction trust setup. We're migrating to the ad.company.com.au ...
5
votes
2answers
691 views

Is it generally acceptable to expose LDAP in read only mode to the Internet?

I need to support Mac clients who need to access a LDAP server to locate SMIME keys. Since the keys are already in AD, and it's easy for me to create a RODC or read only forest where I push the ...
1
vote
1answer
24 views

Can Active Directory issue a LDAP redirect to another LDAP server

I have several independent LDAP servers, controlled by different entities that allow anonymous access. I would like AD to tell an LDAP query to use a different server... like recursive DNS. Is ...
0
votes
1answer
34 views

Upgrade users to new domain controller

I currently have server 2003 as my domain controller. I am planning to upgrade this to 2012, though several articles and videos are available to migrate active directory domain controller from 2003 to ...
2
votes
2answers
111 views

DNS Search Order

I have 4 domain controllers in a Win2008 AD domain. All 4 DCs are in my main site and are running the DNS services. Does the logonserver of a client determine the DNS server it will query first? Or, ...
4
votes
3answers
438 views

In Active Directory, what is the relation between IP, MAC, and OS?

I have one machine on which I want to run 2 different OSs, dual boot between Windows Server 2008R2 and 2012R2 (or others). I want to keep the same computer name, the same IP address, and the same MAC ...
2
votes
1answer
292 views

When does password expire when unchecking “Password never expires”

On a Windows Server 2008 R2 AD, if you uncheck the account option "Password never expires" on a User Account, does the password expire instantly, or does it get set to the period defined in the ...
1
vote
1answer
43 views

windows security log - failure reason startswith %%

Please help - do You have the list with descriptions of failure reasons eg. %%2313, %%2307... I've researched Net and nothing.. :( Mainly I see it in ID 4625 in Windows security logs. On ...
2
votes
1answer
318 views

What's the downtime limit of a domain controller (DC)?

On my VMware ESXi environment there are 10 VMs running. One of the VMs is the domain controller (Windows Server 2008 R2). The other VMs are configured with a static DHCP and DNS IP address in their ...
-1
votes
1answer
48 views

What would have been the correct Setup for a server that died? [closed]

I work at a real estate office that has 30 work stations. The IT guy who cant be reached when you really need him had setup Active Directory with a file server for the stations. About 3 days ago the ...
-1
votes
1answer
77 views

DNS Record - CHange Current Owenership using Powershell

In DNS I have some computers in the list where the current owner no longer exist so you see the sid info as the Current Owner. I like to change this to the machine_name$. Anyone know how to do this ...
-1
votes
1answer
82 views

Change Active Directory DNS replication from Domain level to Forest

Currently I have an active directory running on windows server 2008 with integrated DNS. The DNS Zone files are set to be replicated Domain wide for one of our domains. I want to change it to being ...
3
votes
2answers
76 views

Windows Active Directory Bitlocker deployment

I am experimenting with bitlocker deployment via AD at work. Have googled all over the internet, but the most useful reference seems to be: ...
3
votes
2answers
397 views

What is the origin and / or standardness of the term “bang account”?

I keep hearing "bang account" at my company and, through context, figured it out to mean an account with elevated privileges. I believe this is particularly the case with Active Directory accounts, ...
2
votes
1answer
48 views

Is this USN Rollback?

I have 6 Windows 2008 R2 Domain Controllers, all GCs, across multiple locations (2+2+2). On my main site I have a clone of one of our DCs done a few month ago, usually totally isolated from the ...
2
votes
2answers
29 views

Global Catalog position in a multi site Active Directory single domain on Windows 2003

I've inherited a Windows 2003 active directory single domain spread across multiple site locations. I'm checking configuration because previous admin left without leaving any information about his ...
1
vote
0answers
24 views

EFS file access problems

in my organization, i have a deadline to deploy EFS using AD CS, and i am working with a single windows server 2003 box, which is the Root CA, and is the same server responsible to certificate ...
0
votes
1answer
53 views

Authentication failed user not found in active directory

Having this problem with subversion edge integration with Active Directory and I'm not sure whether it's setting issue or something else. Here is my setting for AD Authentication. LDAP ...
1
vote
0answers
25 views

How Does an Exchange Alternative Service Account Credential work?

I recently had to assist with setting up an Exchange Alternative Service Account (ASA) credential on an Exchange CAS array. We did get the ASA working properly however I have some questions about how ...
-1
votes
1answer
43 views

How do I create a read only user for LDAP queries in Microsoft Active Directory?

I want to create a user that can query LDAP on my Windows 2008 R2 Active Directory. It only works with Domain Admins. I read the Account Operators group will also work. Both these have write ...
2
votes
1answer
51 views

Use Active Directory Administrative Center outside domain

I'm setting up a Active Directory lab environment on a Windows 8.1 laptop. I now have a Windows Server Core 2012 domain controller running inside a VM. I installed Server Manager for Windows 8.1 and ...
0
votes
0answers
55 views

samba4 ADS no logon servers

I setup a samba4 test server on Debian Wheezy using the packages from sernet. Basic configuration was not too complicated and it seems to have set up a running server. I can successfully kinit ...
2
votes
1answer
35 views

Active Directory DNS not resolving ANY queries

I'm experiencing some weird behaviour with our AD Dns resolver. Our Windows network uses the AD as it's DNS resolver, which then in turn resolves queries like Google.com and so on. All fine and dandy ...
4
votes
1answer
147 views

Active Directory on Server 2012 - Proper set up to change passwords via programming

This Question was previously on StackOverflow, as I thought it was a programming issue. It seems it is more of an issue with setting up Active Directory properly, so I moved it here. Ok, I've been ...
-1
votes
1answer
61 views

What can a domain controller do? [duplicate]

In short: I do not know where to start reading so that I can understand how to configure a DC. The long question: In the environment I work, we use an outdated domain controller and I have to create ...
2
votes
2answers
83 views

Incomplete results when querying Active Directory for group members in a situation with trust relationships

We are attempting to query Active Directory for a list of all machines that are members of a group, along with information like OperatingSystem attributes. We can't get results for every member of ...
0
votes
1answer
48 views

What is the difference between Windows Azure Active Directory Sync vs Office 365 sync

My client has half deployed instances of Windows Azure Active Directory, and Office 365 synchronization technologies. I have yet to unravel how much is overlapping, or what isn't. Based on my ...
0
votes
2answers
56 views

sssd: Is there a way to force a specific shell for some group members?

The context I'd like to restrict some AD users to a specific script, limiting what they can do on this particular machine. So, instead of connecting them with /bin/bash (for instance), I'd like to ...
0
votes
1answer
30 views

Group policy access with active directory

Under Active Directory (Win2008-R2), I want all "authenticated users" be able to access the "Add/Remove windows components" menu But where do I have to go in group policy to set this grant ? In ...
1
vote
0answers
24 views

LDAP Integration with the firewall

I am trying to integrate Sonicwall NSA2400 with AD so users can VPN with their domain credentials and able to change password if it expires. Do i need to install ADLS role and configure LDAP, or LDAP ...
1
vote
1answer
48 views

Apache authenticate against AD - some use DOMAIN\\username, others username

I have Request Tracker setup on a Ubuntu 12.04 server. It is configured to authenticate against active directory through winbind. Here's the relevant portion of the apache2 configuration: ...
0
votes
2answers
39 views

Can't login to LDAP with current Windows user

I'm trying to connect to AD server with various tools under Windows. If I provide my domain\username and password, I have no problems If I don't provide credentials, I do connect, but I have very ...
0
votes
1answer
56 views

Powershell - query non-standard group members in an OU?

I am looking to create a script which will only show users in an OU who are members of "non-standard" groups. For example, all users in the "Accounting" OU will be members of at least one group with ...
2
votes
2answers
36 views

LDAP Breaking when moving user

Since I've been working at this company we've had a very basic AD setup. Users go in the user CN and there is a few OUs for computers, like desktops and servers. Recently I've been planning a more ...
13
votes
5answers
1k views

Does it make sense to use Windows Active Directory in a small group of say less than six users/ computers?

For a (very) small company would using Windows server with AD be overkill - why not just use it as a file/ print server, administration server from which to access all machines on the network via ...
0
votes
1answer
49 views

Freenas and Active Directory

I'm trying to setup my Freenas server with Active Directory, it's connected fine and the following works: [root@storage01] /# wbinfo -t checking the trust secret for domain ISD via RPC calls ...
3
votes
2answers
239 views

Determine last time a computer powered up

Is there a way to determine by querying Active Directory when a computer was running? I want a quick way to exclude computers in the domain that have been off for (say) 7 days. The LastLogonTime ...
1
vote
1answer
56 views

Complex Group Policy Inheritance

I'm currently trying to design the OU and Group design for a new AD deployment. Firstly, taxonomy is hard. As a first guess attempt, we're trying to keep all User objects together in OU=Users, and ...