A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

2
votes
2answers
62 views

Pull Office 365 Users to Active Directory

I am currently working with an existing Office 365 subscription that needs to have a new instance of Windows Server 2012 R2 in Azure manage the users through Active Directory. The server 2012 VM is ...
1
vote
2answers
16 views

Are certificates from all Active Directory domain controllers needed on client for LDAPS?

I am setting up LDAPS on our AD servers to encrypt ldap authentication between the domain and a web server using an internal CA cert. The AD servers and web server are on one side of the firewall but ...
3
votes
4answers
169 views

How can I view information for domain groups from the command line with just core Windows utilities?

I'm familiar with using the NET commands to get information for local users and groups in most scenarios. However, I'm running into a problem using it to get information for domain groups with long ...
0
votes
1answer
45 views

Samba 4 and computer account

I have Samba4 machine, vitch is connected to Active Direcotry. Samba4 have shares with software. Domain computers can't access it. What I need to do to grain access? I have tryed : ...
1
vote
1answer
78 views

ldap/AD proxy: Unable to bind using sAMAccountName, but last name and first name is able to bind

I am attempting to set up a pass-through proxy to Active Directory, using ldap on Debian Wheezy. The slapd.conf file is below. I can bind just find by using lastname, first name: ldapsearch -x -h ...
4
votes
2answers
95 views

Adding an Active Directory to a computer-local group - which scope to choose?

I am aware of the "AGDLP" rule of thumb when it comes to group nesting inside an AD strcture. But now I am wondering if there are any best practises when it comes to adding Active Directory groups to ...
0
votes
0answers
70 views

LDAP query to obtain distinguished name of a list of users

Hi im working on a migration process on which we are migrating users from one server to another domain controller. Right now I have a list of users I migrated, but I also got another of them I didnt. ...
-1
votes
1answer
59 views

BSOD on windows server 2008 R2 reason Srv2.sys Driver_IRQL_not_Less_or_Equal [closed]

I have a issue that i have been facing with my windows server 2008 R2 (ADC Server) Additional Domain Controller (Roles Installed AD,DNS). It suddenly gives a BSOD i did analyse the dump and found out ...
2
votes
1answer
71 views

Remote Desktop to local PC

In our organization we have a control that watches users who use high privilege Active Directory accounts to RDP into any server or workstation on our network. I recently enabled this control which ...
0
votes
0answers
40 views

Events ID 4013 For DNS and 1844 for Active Directory

I have newly registered a virtual private server (windows 2008 R2). My problem is when i install an Active Directory and DNS Roles, it raises events 4013 for DNS and 1844 for Active Directory. What ...
0
votes
1answer
34 views

Best OS to rename Windows Domain

I have a Windows Server 2003 with a domain name of: test.testdomain.com I want to replace this DC with a new 2012r2 but want to know if I should rename the domain first and then promote a new domain ...
1
vote
1answer
35 views

Querying for Disabled AD Users in PowerShell

When running a query such as Get-ADUser -Filter * | select DistinguishedName, Enabled the Enabled column has a lot of null values (I was expecting true or false only). Why is this? Is there a ...
1
vote
1answer
52 views

Domain controller not appearing in DNS on any server but itself?

I have a site with a DC I want to decommission, and a relatively new one (promo'd within the last two weeks). I'm having trouble demoting the old server, and in the process of trying to figure out ...
8
votes
2answers
433 views

Domain computer cannot resolve internal hostnames, but nslookup can

I have a Windows 7 computer on my domain that is behaving oddly. It is possible to ping www.google.com It can ping internal hosts using their IP address It can ping the local Domain Controller/DNS ...
0
votes
1answer
55 views

Active Directory inheritance not working as expected

The question So, I have setup a new domain with two DC's. I'm trying to remove the Authenticated Users group from the one of the OU's and that works fine, however child objects do not update (they ...
0
votes
1answer
46 views

Migration from server 2k3 to 2k12r2 [closed]

I recentely joined as System administrator. And I have to migrate server 2003 from 2012R2. What precations should be taken for this? And how to complete this process? Please guide stepwise as I m d ...
0
votes
1answer
58 views

Auto forward email for mail system use Postfix + Dovecot authenticate against Active Directory

I have a mail server with postfix + dovecot lookup to Active Directory for user authenticaiton and mailbox and deliver mail to virtual mailbox (dovecot) User authentication for IMAP/POP are working ...
1
vote
0answers
179 views

pfSense: Captive portal auth via Active Directory (2003)

I'm trying to set up a new firewall server. We chose pfSense and it's working nicely so far. We managed to our Windows Server 2003 Active Directory as a user Authentication Server (System -> User ...
0
votes
1answer
43 views

Windows server private shared folders

What is the best practice for sharing private home folders with the users (Windows Fileserver with AD)? I was asked this question today after someone watched this video, and it got me thinking.. ...
1
vote
1answer
54 views

is active directory only for your employees [closed]

I've always thought of active directory as being a directory of employees, but is there any reason it cant be used as a directory of customers as well?
0
votes
1answer
59 views

Best way to restore a domain controller in windows server 2003 environment

We have 2 domain controllers, the primary DC is down and It cannot login to windows due to an error: “Security Accounts Manager initialization failed because of the following error: Directory ...
1
vote
1answer
322 views

Apache kerberos authentication to Active Directory not happening. (Is KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN related?)

My goal is to have Apache authenticate authenticate against AD, without prompting for a username and password, using Kerberos. It currently always shows "401 Unauthorized", and appears to be not ...
0
votes
1answer
9 views

Can the objectGUID be specified on creation or changed afterward?

Our system links users in an LDAP store to users in a SQL database. The database has been around longer than the LDAP store though, and we'd like to bring pre-existing users from the database into ...
0
votes
0answers
34 views

Using DSCONFIGAD to bind computer objects to a specific OU using a FQ LDAP DN

The DSCONFIGAD utility for OS X has a -OU parameter that allows one to generate and bind computer objects to a specified -OU via a FQ LDAP DN argument. This is taken directly from Apple's DSCONFIGAD ...
1
vote
2answers
79 views

Active Directory user rights

I'm currently working on a ASP MVC Website solution that I retrieved from a predecessor, and I had to create an active directory machine to support the login implementation using it. Upon a user's ...
2
votes
1answer
101 views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
0
votes
0answers
11 views

SVN server - User test.user1 not found: /SVN/testrepo

My subversion SVN is causing recently lots of troubles and I can't access any repository with the newly created AD account. Let me explain briefly how everything works or it used work. My SVN ...
0
votes
1answer
134 views

Windows Server Network Shares - Non-domain users have access

I have a server with Windows Server 2012 R2. I have a drive that I want to share with the "Domain Users" group. I have set that drive to share only with that group. From a different computer that is ...
1
vote
1answer
31 views

What do I need to ldapsearch AD?

I'm attempting to test LDAP for Moodle auth, by using LDAP search. When I run $ ldapsearch -H ldaps://totally.legit.hostname "(uid=jldugger)" -b dc=example,dc=org memberOf I get back: ...
0
votes
1answer
70 views

Linux Authentication by Active Directory without joining to domain

I have a Win 2008 AD based network. I want to setup a few boxes with dual boot Win/Linux. How can I achieve to authenticate the users with existing AD in Linux? All solutions - I have found yet - ...
2
votes
2answers
294 views

Desktop Wallpaper through group policy for Windows 8 client

I Have Windows 2008R2 server with active directory. All client systems are Windows 8/8.1 Pro. I need to push corporate wallpaper through AD GPO on client system, I have created a shared folder on ...
-1
votes
1answer
18 views

Set a GPO on all users from a trusted Forest

How do I set a GPO (such as desktop background) to work on users from Forest A when they connect to Computers on Forest B. There is a bidirectional Forest Trust between the two Forests.
3
votes
2answers
173 views

How do I make it as if I've never logged into a workstation with a Domain AD user profile?

I've been working on setting up OneDrive for Business with automatic syncing and folder redirection. I got everything working, but there were some issues along the way. In dealing with those issues ...
0
votes
0answers
52 views

Create active AD user with samba net rpc user add command

I have a mixed Windows and Linux Environment. I want to create new Active Directory users with Samba tools. This command will create a new AD user, but they aren't active: net rpc user add ...
0
votes
0answers
54 views

How can I resolve element not found in AD CA?

I had to move our AD CA from server 2008 32bit to server 2008r2 64bit, both domain controllers too! I now know this was BAD. Is there any way to resolve the "Element not found" in AD CA? Or do I ...
1
vote
1answer
36 views

Limit LDAP request to AD

Is there a way to limit requests from a specific user to the AD such that he can only ask if a username or an email address exists or not? The user should not be able to request other data from the ...
3
votes
1answer
106 views

Is it possible a remote active directory authentication from local without VPN

Can we authenticate to a remotely hosted DC from local machines without VPN connection to the server. Server have Public IP & Local machines are using NAT. Currently there is no any other ...
1
vote
2answers
36 views

ADFS Metadata with Active Directory Attributes

Using ADFS on Windows 2012 R2. I have created a Relaying Party Trust that has a claim rule defined that maps a Active Directory Attribute to a named attribute in the vendors system. When I view the ...
1
vote
1answer
37 views

My GPO only runs the first time it is linked to the OU

I am attempting to distribute a .msi file via GPO to Win7 machines from a Server 2008 R2 network. I am getting a funny result. The first time I link the GPO to a OU the program loads. I uninstall ...
3
votes
1answer
183 views

AD IT Helper Permissions

My apologies if this has been asked before. If I knew the proper search terms then google would be more effective. I would like to add a user that can join computers to the domain, Install software ...
1
vote
3answers
65 views

Active directory HyperV VM to VMware

we just copied an active directory VM from an Hyper-V VM to a VMware one. This Hyper-v VM is our second active directory server (the first one is a physical server). We used Symantec Backup Exec to ...
0
votes
1answer
29 views

Windows profile is deleted when user does not log in for several days

We use a Windows Server 2008 R2 Active Directory network with Windows 7 Professional clients. After logging in a profile gets created on the computer as normal with all the usual settings, such as the ...
1
vote
2answers
82 views

Newly promoted domain controller showing many errors but dcpromo didn't complain?

I have a domain separated into four sites. In one of my remote sites, I have promoted a new DC and will be decommissioning the existing DC in a few weeks. I didn't receive any errors when I did the ...
1
vote
1answer
121 views

How Do I Connect to Active Directory Server Behind a Firewall

I'm having trouble getting LDAP queries to reach my Active Directory running on Windows Server 2012 R2 behind a Cisco PIX 506E firewall. My goal is to create a SSO environment for some applications ...
0
votes
0answers
21 views

Cannot add Domain Users to SQLServer security

I installed a win2008 server (WSQL) Its has successfully joined another Win2008 server which is the domain controller. Now back to WSQL machine, I connect it to the domain... And I install ...
3
votes
1answer
67 views

New-ADUser ADException NotSpecified

I am receiving an error when I run this powershell command to add a new user: PS > New-ADUser -Name "user1" -GivenName "test" -Surname "User" -Path "ou=Users" The error returned when run is: ...
4
votes
3answers
161 views

AD does not unlock account - even after the Lockout duration is expired

I'm facing a strange problem - domain user accounts are not being unlocked. These are the Account Lockout Policy settings: Lockout duration: 30 minutes Account lockout treshold: 10 invalid logon ...
4
votes
1answer
44 views

Forcibly Split 2003 Active Directory Domain

I am currently trying to find the most efficient way to split a single domain into two, distinct, fully functional domains. We have two sites, and several DCs. The sites, Site A, and Site B, are ...
0
votes
0answers
37 views

Apache Webserver: Map ClientCertificate to Active Directory

Using Apache Webserver 2.4 and mod_ssl and mod_authzn_ldap I'm trying to Authenticate the user by a ClientCertificate (PKI smartcard) Authorize the user by membership of certain Active Directory ...
4
votes
1answer
65 views

Group Policy Files - Active Directory

I am having a whole lot of trouble getting some files distributed across the network. My settings are: Action: Replace Source: \\[fqdn]\Repo\sqljdbcl.jar Destination: ...