A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
2answers
51 views

Command to check trust relation between 2 domains

Good Day, Do we have any command where we can check the trust relationship between 2 domains. Example : lets consider there is a domains called xyz.1.com and abc.1.com how can we know whether there ...
0
votes
0answers
13 views

Cleaning Up ForeignSecurityyPrincipals OU in AD

I'm in the final stages of cleaning up an AD that was essentially unmaintained for the better portion of a decade and I'm unsure about what can safely be deleted from the ForeignSecurityPrincipals OU'...
0
votes
1answer
43 views

Logon failure: the user has not been granted the requested logon type at this computer

I have Windows Server 2012 R2 system with Active Directory installed on it and using this computer for local development (Microsoft SharePoint). What i wanted to do is to open the local Internet ...
0
votes
0answers
32 views

Windows Server Sync?

Looking to see if anyone has knowledge in this. Currently I am trying to set up 2 windows 2012 servers, to synchronize the files in C:\Company\Record of each machine. For example. Machine A makes 06-...
0
votes
1answer
26 views

Easy recovery of active directory with NTDS and SYSVOL folders? (DSRM PW known!)

I have backups of the active directory NTDS and SYSVOL folders. And I know the DSRM password of the active directory. But if I search on Microsoft help for recovering a active directory I only found ...
0
votes
2answers
38 views

Steps for troubleshooting Windows ADFS issue

Yesterday I posted a specific question about an error I'm getting in ADFS that has me stumped. Because I have very limited experience troubleshooting windows based products, I think advice on how to ...
0
votes
0answers
28 views

Sites & Services - Created new site links - existing automatically generating connections not updating

We have 4 AD sites. Sites 3 and 4 cannot talk to each other and need to talk to site 1 and 2 for AD replication. As the previous admin didn't create any site links in AD - Site 3 and 4 assumed they ...
0
votes
0answers
51 views

Authenticating any Linux distro with Tacacs and Active Directory

I have a set-up in my organisation where in, login to all network devices (Cisco, Juniper & ....) are authenticated using Windows AD and Cisco tacacs server. User's are pushed into AD via separate ...
0
votes
0answers
12 views

How can I create a self-signed certificate for a SharePoint app?

We have a SharePoint Server in a farm with SQL Server and Active Directory Server. We are trying to create a self-signed certificate for use in a SP App. The farm is hosted on CloudShare and we are ...
2
votes
1answer
29 views

What version(s) of SSL/TLS does Active Directory support?

I'm running a pair of 2012R2 RODCs behind a load balancer for authentication for certain applications (mostly on Linux). LDP.exe works fine for lookups, but we're having an issue with Postgres where ...
0
votes
1answer
90 views

ADFS error duing SAML Service Provider Login

I have a Spring SAML Project that has been under development for about a month. I've integrated with ADFS and everything has been working well. I'm getting an intermittent error that is becoming ...
-1
votes
0answers
37 views

Linux, Kerberos Auth, and LogonWorkstations AD Attribute

When using Kerb Auth on Linux, with a Server 2008 AD Domain for authentication, and nsswitch set to files then ldap: If an ldap user tries to ssh to a server, and they are a member of a group which ...
3
votes
0answers
51 views

How to find when the password for my Active Directory user account will expire? [closed]

I will be out of office next two weeks. May I check from my domain member workstation when exactly the password for my Active Directory user account will expire. I use Windows 8.1. My user don't have ...
0
votes
0answers
18 views

GPO - scripts not started using FQDN but UNC works

Assumptions: AD domain is called SAMDOM, FQDN for the domain is SAMDOM.EXAMPLE.COM. There is only one domain controller and it's called DC1. So, the FQDN for DC1 is DC1.SAMDOM.EXAMPLE.COM If I ...
0
votes
2answers
65 views

Password policy in Active Directory - inactivation of complexity without effect

In my Samba Active Directory Domain, I want to allow passwords that are long (passphrase) and based only on small caps and special characters, i.e. no requirement for large caps and numbers. In ...
6
votes
1answer
54 views

Restructure Active Directory Forest Root Domain

We have a forest root domain of legacy_domain.loc, and another domain modern_domain.loc which exists in a structure similar to: legacy_domain.loc ----- modern_domain.loc | ...
1
vote
2answers
40 views

Deploy same user Outlook 2010 with group policy

I work in an organization where we're planning to implement personal AD-accounts for all our users. So far I've overcome a number of challenges while running this implementation. But now I came upon ...
0
votes
0answers
15 views

Using biometric authentication with rdesktop to Windows machine?

I'm using rdesktop to access windows servers/clients from a linux machine. I can setup biometric access with AD for these windows clients, but is it possible to rdesktop to a windows box and use a ...
0
votes
1answer
34 views

gpupdate works for user fails on computer error 1006

I have a machine on my network that refuses to sync our Gpupdate. I am getting error code 1006 error code 49 which points to bad credentials but I am using the same user that I would on any other ...
2
votes
0answers
29 views

Server 2012 replication error

I have 2 Windows 2012 DCs (DC1 and DC2). From DC2 replication works while from DC1 I keep getting the error "replication error rpc server is unavailable. I'm attempting to do this from Active ...
0
votes
0answers
50 views

net computer returns “Access is denied” for admin user

While logged into my domain controller (Win2k12r2) as the admin account, whenever I try to delete a computer using the command net computer \\NAME /DEL I'm always hit with the error: System error 5 ...
-3
votes
1answer
46 views

How many members can be added to a group in AD?

How many members can be added to a Security group in AD ? Nesting or members .The total count that a group can hold the AD users.
0
votes
1answer
33 views

How to add an AD user the right to administer groups in AD

I search google without luck. Basically I need to enable to 4 users to our domain do add and remove members to some of the AD groups. But only that, they must not have any other right. I know it ...
0
votes
0answers
88 views

Work folders and domain guest

I have setup Workfolders on my Windows Server 2012 R2. This is all working fine, however I want to be able to use my domain guest user on my domain computers. This is not possible according to this ...
0
votes
2answers
28 views

Targeted GPO deployments from Samba (4) DC

I've seem to be stuck. I come from a mostly POSIX background, & thrown into the deep-end on this one, so learning as I go along - so not sure if there's no solution, or if it's my own Dunning-...
-1
votes
0answers
75 views

Small office - shutting down server - moving DNS/DHCP to router

I am taking down a Windows 2003 Server which runs AD as well as manages DNS and DHCP for the office. There is one desktop and a handfull of laptops on the network. Router is a Netopia Firewall Router. ...
0
votes
1answer
30 views

Distribution List with Groups

I am running Exchange 2010. Within AD I have the following: BranchManager <- this is an OU Branch1 <- this is a universal security group containing a name Branch2 <- this is a universal ...
0
votes
0answers
44 views

How to remove a lingering object in a child domain that is from a totally DIFFERENT child domain

Replication is broken in one our child domains and it seems to be caused by a lingering object that is from an entirely different child domain Source domain controller: 031df1e9-aa10-4ccb-b5fb-...
4
votes
0answers
54 views

Q: RHEL, SSSD, Active Directory

Good afternoon folks. I've been perusing various posts already about getting linux systems to authenticate using AD, but haven't seen anything approaching what I'm beating my head against. There's a ...
0
votes
1answer
27 views

Certificate Not showing on the Web console

On a Windows 2008 R2, with an AD level of Windows 2008 R2 We need to create a cert to allow user/admin to enroll via the Web service page (https://CA/certsrv/) On CA, right-click Certificate template ...
0
votes
1answer
107 views

Which active directory group contains all users in a domain?

I want to grant permissions to all of the users in a specific domain. Let's say I have a domain called ACME. I tried to use "ACME\Users" but I received an error stating "The user or group name 'ACME\...
0
votes
1answer
74 views

Is it possible to have abbreviated subdomains on an intranet

I don't know a lot about DNS. So I am wondering if the following is possible: We would like to have subomains that we internally can refer to without the last part of the domain. Example: We have ...
1
vote
0answers
37 views

PBIS new user login — need to login with an existing user before

I have a weird problem with PBIS. I have an Ubuntu 16.04 laptop that has to connect to the local AD, allowing people already in the AD to perform their login. When a user that never used the laptop ...
0
votes
0answers
56 views

Use Windows RSAT DHCP Server MMC SnapIn with Linux Samba 4 AD to manage dnsmasq/isc-dhcpd

This particular Active Directory installation uses a Samba 4 Domain Controller Forest running on up2date (05-2016) Debian Linux Jessie VMs. Remote Server Administration Tools (RSAT) are used from ...
0
votes
0answers
17 views

How can I set up Linux roaming homes using csync and Samba?

I have a Ubuntu 14.04 server with Samba (AD Domain Controller), and some Ubuntu 14.04 client with GNOME. I want to configure these clients like Windows workstations: the AD users can login with their ...
0
votes
0answers
29 views

LDAP modify doesn't change anything

Got an issue with Active Directory LDAP and setting passwords. I'm connected through the LDAPS protocol to my AD server, and binding is successful. When attempting to set a user password, no error is ...
0
votes
1answer
20 views

edgetransport.exe causes heavy read/ write access on hard disk

I'm running a Windows SBS 2011 Server. The problem is the edgetransport.exe process, which causes heavy traffic on the hard disk. I can't locate the error. I changed the disks and hope the problem ...
1
vote
1answer
71 views

sAMAccountName requires DOMAIN\ to authenticate

I am trying to ingtegrate SLES with Windows Active directory server for authentication purposes. We need to use sAMAccountName as login name but its unable to bind if we didn't give DOMAIN/...
2
votes
1answer
64 views

Internal network DNS can't be configed to route domain.com to www.domain.com? [duplicate]

We host a domain on the internet that is accessible outside of our internal network using domain.com or www.domain.com, but is our actual internal network domain as well, but the external website is ...
2
votes
1answer
66 views

Guidelines and Best Practice: Prep to Temporarily Shutting Down an Active Directory Domain Controller

1 AD domain. 3 total Domain controllers, all on 2008 R2 The primary DC (with FSMO roles) is being moved to a new office and it will be offline for a maximum of 3 days. This DC also serves DNS but ...
0
votes
0answers
35 views

Delegating authentication in Windows AD domain

In a Windows AD domain, when the client (user) authenticates against the Domain Controller, is it possible to delegate the authentication to another LDAP/RADIUS server? We have a ton of services in ...
0
votes
0answers
23 views

AD, Service Account, SQL Server DNS Issue

I have very very little experience with network admin and AD, so excuse my ignorance.. I am intermittently getting this error in a Windows Service and website running in IIS (both on the same Server ...
0
votes
2answers
42 views

Changing other user password from command line

I'm in an AD domain and I want to change someone's password (which is expired but I think it is irrelevant). I'm not a AD admin so net user <username> * /domain does not work. I can change it ...
0
votes
1answer
35 views

How to force an authoritative and non-authoritative synchronization for DFSR-replicated SYSVOL

I Got the answer that:- In the ADSIEDIT.MSC tool modify the following distinguished name (DN) value and attribute on each of the domain controllers that you want to make non-authoritative: CN=SYSVOL ...
-2
votes
2answers
172 views

What does “Administrator” have that allows them to RDP into a server?

I am trying to setup an Active Directory so that "Domain Users" can via RDP. If I assign the role "Domain Admin" to the user, they can login via RDP no problem but when I follow many tutorials (this ...
0
votes
0answers
39 views

Active Directory users on Multiple Domains

Hope someone can help me. I have a task to create a new active directory domain - which i have no issues doing. However those guys would like to get users from an particular OU from an corporate ...
1
vote
2answers
115 views

Allow remote desktop service to dc from specified computers

I'm planning an architecture of secure terminals only to access DC's. So i have 2 computers which are secure and if i want to connect to the dc's i will have to log into those computers So what i ...
-1
votes
1answer
44 views

How should I manage my cloud-hosted virtual networks/machines?

I am currently hosting multiple production projects in Microsoft Azure. Each project is configured with a separate virtual network with two Windows VMs to act as web servers, and one server to act as ...
0
votes
2answers
172 views

Virtual Machine with Two NIC's Losing Internet

Please Forgive my newbieness... I'm just a developer trying to learn a little of the hardware side. I've tried to look this question up but all results produce VMWare which I am not using. I've ...
0
votes
0answers
50 views

Outlook connectivity issues

It is Exchange 2013 environment with outlook 2016. Some computers are in domain some are not. Computers out of domain work just fine, but those in domain have this problem once a day at random time: ...