Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

3
votes
1answer
81 views

SID in AD - SID from psgetsid?

Wondering if anyone can shed some light on some SID confusion. Currently having an issue with some policy applying to a few machines that were all based off the same image. One of our admins, ran ...
0
votes
0answers
37 views

Active Directory Root Permissions

We currently have way too many users in our Domain Admins group so I'm working on redesigning our active directory structure and I'm looking at the current permissions and looking at the root our our ...
0
votes
1answer
48 views

External DNS takes a long time to resolve for AD computers

On our AD domain, end users desktops take a long time to resolve DNS from outside our company. Internally everything works fine. The desktops are pointing pointing to 192.168.2.4 and .6. Those are ...
0
votes
0answers
14 views

Enabling constrained delegation on DC computer account

Is it necessary to have constrained delegation enabled on Microsoft AD domain controller computer account? If yes then why and what are consequences of disabling it? I'm mainly interested in current ...
0
votes
0answers
20 views

OpenVPN Radiusplugin AD and the user restriction

Im using FreeRadius which is using Samba4 (AD DC) as the user/password provider. OpenVPN is using Radiusplugin, which use that FreeRadius Server for authentication. This solution work great, but I ...
1
vote
2answers
108 views

Getting list of users indirectly members of an AD group through LDAP

I'm having a bit of a problem with LDAP search that should specify whether a user is a member of a given AD group or not (recursively). Basically, what I'm doing is issue a LDAP search with the ...
1
vote
2answers
61 views

Can Microsoft accounts be created and managed via Active Directory / API?

We are in the process of shifting over to Google (Apps) for Work. One of the cool things that this provides is 'Google Apps Directory Sync' https://support.google.com/a/answer/106368?hl=en which ...
2
votes
1answer
32 views

Branch office printers listed in directory

About a month ago we added a branch office site to our corporate domain via site-to-site VPN. A domain controller was set up at the remote site to manage logons and printers for about 10-12 employees. ...
1
vote
0answers
20 views

gpo ie user force update

We use two 2008 Domain-Controllers and one 2012 DC In a gpo we set the proxy for IE-11 per user. eg: X use proxy, server: proxyserver, port: 3131 This gpo is not mandatory, so users could change ...
0
votes
1answer
13 views

Drive Maps via Group Policy - Overlapping Policies

((NOTE: We are on Windows 8.1 with a 2008R2 domain)) We have decided to move away from mapping drives via a log in script and attempting to do it via Group Policy. I have personally been doing this ...
0
votes
1answer
30 views

Permissions for SCCM Service Account

Does anyone know what is the least privileged Active Directory security group needed for the MS-SCCM 2012 service account to do software updates via Configuration Manager? ConfigMgr runs fine with ...
0
votes
2answers
54 views

Software installation on computers in a domain environment [closed]

The network I am working on is extremely small, my client only have 2 desktops which are in a domain setup being managed by a Windows Server 2012 machine with active directory. My client has a ...
-1
votes
2answers
68 views

Windows domain + Linux Domain on One Network

Currently our network is all tied to Active Directory with both Windows and Linux workstations/servers. We would like to implement a Free IPA server that synchronizes authentication between a Linux ...
0
votes
2answers
62 views

Part-time AD server

I'm trying to understand how current Win 7/8 machines behave when they lose access to their domain controller and if it's possible to have machines be part of a domain if domain exists only part time ...
0
votes
0answers
30 views

Mac maverick binded to AD

I got a mac laptop binded to AD successfully. Logged in with a domain user and it created a mobile account. The user used it for a day then rebooted and find that they can't login anymore. I logged in ...
0
votes
1answer
54 views

Domain Controller does not have a computer account for this workstation trust relationship

We've had an ongoing issue for a while and I'm here on a Saturday to try and figure it out, and I think I've found the problem, just not the cause... For a few months our second domain controller has ...
0
votes
0answers
49 views

Unable to add Exchange mailbox for user in domain trust environment

We have a domain trust set up between two domains (DomainA, DomainB), and when attempting to add an Outlook mailbox that resides in DomainA for a user that belongs to DomainB - it fails. However the ...
0
votes
0answers
10 views

Password expiration in SQL/ODBC before AD

I have a script that emails users that their password expires in X days. Today a user got an alert that her password expires in 8 days. She was having problems with Excel and Access databases that ...
0
votes
3answers
56 views

GPResults say my GPOs are not applied because they are “empty”

I am trying to apply several policies to my domain (running on Windows 2008 R2). Below is a sample of how I have structured my OUs. Test OU {Computer based policy} {User Based Policy} OU Users ...
0
votes
1answer
52 views

Get login name using email address with Powershell

I need a powershell script, to get login names using the e-mail address. i am having a note with e-mail address of some users. I want to get login IDs and account information of the users in the ...
3
votes
2answers
198 views

Must create PowerShell script to change Password Expiry and Date to change next password

I've been tasked with creating a script that reads in a file a list of Active Directory user IDs and then clears the flag for Password Never Expires. In addition, my security officer doesn't want the ...
1
vote
0answers
61 views

Samba4 sysvol replication error

Production environment: 4 DCs (windows server 2003) and near 150 workstations. Intention: migration to Samba4 First, I've added 5th DC (CentOS 6.5, Samba 4.1.11-9.el6.x86_64 from SerNet repository). ...
-1
votes
1answer
37 views

The Name Limit for the Local Computer Network Adapter Was Exceeded

I am facing issue with my windows server 2008r2 sp1 that every two or three days later i am unable to access active directory tools,symantec endpoint protection manager and stop file and printing ...
0
votes
2answers
61 views

How can I manage remote site printers?

Please bear with me, my server and networking knowledge is not amazing. The company that I work for has a central 'Head Office'. This is where our server room is located. We have a bunch of Windows ...
1
vote
3answers
89 views

New-ADUser -Name Length too long

I need to add about 500 users to an OU in AD I have scripted out everything I need, however, it gives the error: the name provided is not a properly formed Here is the script New-ADUser -Name ...
2
votes
2answers
286 views

When should another AD domain be created purely to reduce replication traffic

I'm going over some hypothetical AD design scenarios for learning purposes. Lets say I have one domain and two physical locations, sites and DCs. The sites are connected via a limited bandwidth WAN ...
0
votes
0answers
71 views

Root and child domain authentication through one LDAP path

I have a webapp and in the web.config file, there is an LDAP path to allow AD token lookup for users to login. The app also requires users to be in a specific group to login. In my case red\appadmins ...
1
vote
1answer
36 views

How to make Group Policy to the same User Group at different Computer Groups? (VDI)

I made two Organizational Unit in my domain Thin Clients (there are the physical computer objects) Virtual Clients (there are the virtual computer objects) And I have the default Users (there ...
0
votes
0answers
44 views

Getting “Unknown username or bad password” error when trying to authenticate over a validating trust

I was trying to migrate users with ADMT, and then I faced the following issues: First of all, when I input the domain name in the appropriate field, ADMT does not automatically populate the Domain ...
1
vote
1answer
49 views

Openvpn authenticating to multiple AD domains

I've a site with openvpn server on linux authenticating users against Active Directory (domain A) everything working fine. Now company has a different AD domain (B) with "Trust" setuped to original ...
0
votes
2answers
41 views

How to manage third-party issued certificates in a Windows environment with Active Directory Certificate Services

I have a wildcard SSL certificate (*.ourdomain.com) + chain of trust that was issued from a public third-party CA that I have deployed on to all of our Windows servers in the domain. But our ...
1
vote
3answers
92 views

24 hour expiration of first password

EDIT** I'm thinking of running a scheduled task at the end of every workday to retrieve all accounts who have never logged on and disabling their accounts. Please excuse any syntax errors. I may very ...
0
votes
1answer
18 views

IIS Custom AD account for app pool and 500 for most static content

I just tried this morning to switch an old ASP.NET site's app pool to one that use an AD account for SQL access, upon doing so most of the static content on the site was unavailable (i.e. some images ...
-1
votes
1answer
50 views

Best practice for organisation wide user management [closed]

We have a green fields environment (kinda) in which our Active Directory is currently the most canonical source of people information. As our organisation grows to 400+ employees we need a way to ...
0
votes
1answer
40 views

Intranet AD login for External Website

Is it possible to setup a website on the internet such that it does a Single Sign for people coming from intranet Active Directory logins? If this is possible, are there any products/tools which help ...
2
votes
0answers
91 views

Authentication Microsoft AD Users with RSA SecurID

I have an integration problem between RSA SecurID and Microsoft AD described in the picture below: 1.The user needs to connect to private network via VPN and authenticates to the Firewall via its ...
7
votes
1answer
166 views

How do I remotely issue a CLI command to thousands of Windows domain computers at once?

I need to issue a CLI command (cmd.exe or PowerShell) to all of the thousands of computers on my domain. For obvious reasons, this is not going to involve doing the task manually, or physically ...
1
vote
1answer
39 views

DFS slowly and using a lot write speed on sender member

I am transferring 400gb of multiple files trough 2 server whit 10gb connection inside one VLAN. When I had 2 servers that were not in production the transfer was very quick using 100% of 1gb ...
-2
votes
1answer
49 views

Server 2012 active directory first login [closed]

I'm beginner with Windows Server 2012 and Active Directory I've got installed Active Directory remotely on my server and after the installation is finished and system restarted now I can't login into ...
1
vote
1answer
72 views

Server 2008 R2 ADUC - Naming information cannot be located

I'm having a very hard time with Active Directory. Brand new server with a fresh install of Windows Server 2008 R2 - SP1; Everything was fine until it restarted after installing updates. When I try ...
1
vote
1answer
30 views

WIndows Server 2012 R2 + Windows 7 Ultimate CD Burn Rights

H have recently installed a ADDC in my office to manage users. I have actually setup roaming profiles and everything is great apart from one little issue... On the PCs standard users are unable to ...
1
vote
0answers
29 views

WMI request (Wbemtest), access is denied to domain computer

let me explain our setup first! We have 2 site location with Cyberoam CR50ING Firewall, IPSec between the 2 Subnet. Cyberoam firewall has an AD authentication with their software linked to the ...
6
votes
2answers
252 views

Does the sAMAccountName rename practice based on employment status makes sense?

Where I work there is a practice of adding a t_ prefix to all temporary employees logins (sAMAccountName). When someone switches from temp to perm or the the other way the prefix is add/removed. ...
10
votes
2answers
132 views

How to enable BitLocker with no prompts to the end user

I have configured BitLocker and TPM settings in Group Policy such that all the options are set and the recovery keys stored in Active Directory. All our machines are running Windows 7 with a standard ...
0
votes
2answers
38 views

Exchange 2013 & Active directory user details

I have a problem that is driving me nuts. We recently rolled out Exchange 2013 (coexisting with exchange 2007), and have a 2008R2 active directory. The problem we are facing is that when we change ...
0
votes
0answers
36 views

Configure the Routing and Remote Access Server for DirectAccess

I have 2 Windows Serer 2012 R2 DC machines. I am currently on my main which runs AD and has GUI. Number 2 is just server core and I want to setup Direct Access. However, I get this error when trying ...
3
votes
0answers
70 views

Cannot enable GSS-TSIG updates from Active Directory in BIND 9.10

I’m with a problem trying to enable GSS-TSIG with BIND 9.10. Before I start describing what I’ve done, I would like to say that I’ve already done this in in another domain without any problems. So I ...
0
votes
1answer
94 views

Querying for inactive users from a specific OU using powershell with the help of AD filter and LDAP filter

I am trying to get the list of all inactive members from a specific OU named inactive with the following queries: ...
0
votes
0answers
71 views

Network Drive Full Trust With Visual Studio 2010/2014

I'm managing 10 developer computers and I want to assign to each computer a Network Drive (Let's say X: drive) so the developer can map the TFS workspace to that drive. When the user tries to open ...
0
votes
2answers
43 views

prepare Active Directory for exchange 2010 [closed]

I am installing "Exchange Server 2010" on a "windows server 2012" system. As exchange installation prerequisites we have to prepare "Active Directory" but I already installed a Active Directory in ...