A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
66 views

PC's think its on a domain

We have a Windows Server 2012 R2 setup here - Its setup with Active Directory & Exchange and is also a Domain Controller: We have 3 machines that are also on this domain, a Windows 7, 8.1 & ...
0
votes
0answers
4 views

Lightswitch App AD authentication over SSL VPN

I have a lightswitch App (desktop app for windows) which authentications with AD against their logged in account, so the user doesn't need to log in again. This works great in the office but over the ...
0
votes
1answer
34 views

Change passwords for schedule Tasks Daily

I need to schedule a health check script on a particular domain controller , have the service account, everything works. Unfortunately due to firewalls, this script can only be run on a DC, which ...
2
votes
1answer
90 views

instanceType attribute in Active Directory

I need to change the instanceType attribute of a service account. If I try to change it from Active Directory Users and Computers console it's greyed out and if I try to change it via powershell with ...
3
votes
1answer
59 views

PDC is dead, others are not replicating what should I do first?

I have a windows domain that had a Primary Domain controller that Died (Was a VM with snapshots and the host died). My secondary DC is a physical machine running Server 2008 x32 that really needs to ...
1
vote
0answers
27 views

Samba4 DC cannot enable TLS encryption

I've created my SSL certificate through an intermediate and have attached the certificate, key and (chain) CA to the Samba4 config under [General]. Upon restarting Samba though, the LDAP server is no ...
-1
votes
1answer
7 views

Unable to set ADS security on Samba DC

I've been trying to set my security as ADS for my Samba DC. Unfortunately, whenever I do, the LDAP server can no longer be found using net ads info. Below is my current smb.conf. [global] workgroup = ...
3
votes
1answer
82 views

Can't install Active Directory Management Gateway Service on Windows Server 2003 DC because hotfix 969166 is missing

I need to install the Active Directory Management Gateway Service on two Windows Server 2003 domain controllers, in order to be able to use the Active Directory PowerShell module on other computers in ...
0
votes
1answer
11 views

Different shell for SSH login on specific machines

I have Active Directory users with no local accounts, so they cannot use chsh. They can login to multiple different types of server and most of the time /bin/bash is the correct shell, or at least for ...
0
votes
0answers
10 views

PBIS 8.2 returning incomplete memberships in active directory groups

We are running Power Broker (PBIS) 8.2 on Ubuntu 14.04. A couple of months ago we noticed that active directory group memberships were incomplete. Some users could login while others could not. ...
0
votes
1answer
18 views

Is it safe to delete MyBusiness OU after migration away from SBS?

Back last year we migrated to a number of Windows Server 2012 servers from SBS. Is it safe to delete the MyBusiness OU that was part of our old SBS setup? Example contents of Security Group within ...
1
vote
0answers
98 views

Windows - Kerberos SSO from outside the domain

I've tried to figure it out myself, but to no avail. Google offers many tutorials but I couldn't find any for the below case. We have an external cooperating employee with VPN access to our LAN and ...
0
votes
0answers
23 views

LDAP connection string issue

Sir! please help I have a connection string extracted like this /o=First/ou=Exchange Administrative Group (EDABMHF23SPDLT)/cn=Recipients/cn=852edeadbeef354a4c8000ebaae09fdd01-Robert It doesn't ...
1
vote
1answer
13 views

Incorrect Single Sign On Url - Cant Update

I'm having an issue. I've set up a third party SSO with my office365 account. The third party SSO authenticates with my on-premesis Active Directory. The only difference between using an ADFS on ...
1
vote
2answers
46 views

How to get Ad Domain name in my forest

I have a big forest with many AD Domain, and frequently add new domains. I need a list of these Ad Domain to query each DC.
0
votes
1answer
41 views

Want to expose AD over IIS in Windows server 2012

Is there any way or new technology introduced in Windows Server 2012 to expose Active Directory Services hosted on IIS?
-2
votes
1answer
37 views

Active Directory/Exchange list users and mobile numbers

How can I use Active Directory Powershell or Exchange Management Shell to list all users and they're mobile numbers?
0
votes
0answers
28 views

Not Updating Group Policy Changes

I have been working on updating my companies group policies and I have run into a problem with the user policy not applying correctly. Previously the old policy had a folder redirect for the desktop ...
-2
votes
4answers
211 views

How to check which domains and groups I belong to?

This is pertaining to Windows 7 and Windows Server 2008 R2, but probably may apply to other versions. Question 1: How to find out preferably from CLI all the domains a user belongs to (it is probably ...
0
votes
2answers
29 views

Sharing folders and clients AD no take changes

I have the following problem. In my company I have installed a DNS server + AD in WS2008 R2. The problem I have is that by sharing a folder for a group when I add or remove users from the group, ...
0
votes
1answer
37 views

How does Windows find/discover the Domain Controller when you log in?

How does Windows find/discover the Domain Controller when you log in? I've added a new DC to my domain as a backup, but I'm not sure how the computers will know to look for it, as I don't quite ...
2
votes
1answer
51 views

Left domain, rejoined, now domain admin permissions are broken

The title pretty much says it all... The domain is on a guest VM (Essentials 2012 R2), to which I joined the Hyper-V 2012 R2 host. For reasons not appropriate for discussion here, recently I briefly ...
2
votes
2answers
62 views

Outsourcing Recursive DNS in a Windows Domain Environment

We've been considering utilizing a third-party recursive DNS provider like OpenDNS (or anyone) to provide a layer of antiphishing and DNSSEC validation (without having to implement those features ...
0
votes
1answer
29 views

Any user on this computer - no mapped drives work and GPO fails

Active Directory and DNS Server is my Win 2008 R2 STD server named "server" All clients are Win 7 Pro x64 and in the domain I have one GPO setup for folder redirection of My Documents, Downloads, ...
0
votes
1answer
29 views

Sync AD DSRM password to a user account

I can't seem to get the below task scheduler job to work properly in a test domain lab of 2 DCs, 1 win2012 R2 and 1 win2008 R2 DC. Syncing to my 'dsrmuser' user by manually running ntdsutil does work. ...
0
votes
1answer
23 views

Client to Site VPN Active Directory Sync

Hard question to word, but here it goes. I have a client with a W2k12 essentials Domain Controller that needs to replicate offsite. We have purchased another 2k12 server to mirror AD, which I've ...
1
vote
1answer
67 views

Is LDAP used by Active Directory for anything if I only use Kerberos for authentication?

In my windows only domain, Kerberos is used for all authentication. The domain controllers I understand replicate & authenticate using RPC. Is LDAP used for anything else? Should I close the ...
0
votes
1answer
46 views

Direct server to server traffic via LAN

This may seem like a dumb question... or it may well be a dumb question (lol)... but its something I have never had to deal with and know little about. I have 15 physical servers in a datacenter, ...
1
vote
0answers
32 views

How to add principals to a keytab when using realmd on CentOS

I joined a server to a MS Active Directory using realmd/sssd. I installed apache with mod_auth_kerb and created a keytab on a windows server. But, I need to add more SPNs to the keytab. I have tried ...
0
votes
0answers
22 views

OpenLDAP proxy gone for good

I recently had to troubleshoot a Windows AD issue. Users suddenly lost access to shared folders and network drives. After some research I discovered that there was a Linux CentOS machine that crashed ...
2
votes
1answer
30 views

Shares suddenly not working

We are running a Windows Server 2012 domain controller in a small LAN with mixed XP SP2 and Windows 7 workstations. According to users everything was working right until some days ago. Now they can't ...
1
vote
2answers
68 views

Cannot access network share from only one PC

It's a strange problem. I'm very confused. In my Test Lab, I have configured NetApp virtual storage appliance and configured shares. This NetApp appliance is connected to domain and any domain user ...
0
votes
1answer
50 views

validate domain trust command, netdom trust /verify doesn't work

I have an external trust with my Active Directory domain. I want to validate the trust from a command so that I can do it remotely and don't have to open Remote Desktop and navigate to the AD domains ...
2
votes
1answer
30 views

SSH, Kerberos, AD: how / where to config /etc/pam.d/password-auth?

I have a CentOS 6 machine here and want to give SSH access for users from another forest, which is trusted. I got a temporary workaround, which is: 1) change content in /etc/pam.d/vncserver to auth ...
-1
votes
1answer
28 views

how to export AD user list from non domain system

I want to export AD user list but my system in not in that Domain. I do have Admin permission. its 2008 AD. I know we can pull the list using dsquery / dsget or get-ADuser but all works when we are ...
1
vote
2answers
35 views

Creating valid mail enabled contacts without using Exchange specific cmdlets

I have written a powershell script to routinely process and import a large (over 70k) amount of contacts into an Exchange environment. The script works fine but I would like to speed it up if ...
-4
votes
2answers
236 views

Modifying bulk user account attributes in AD

We created around 1,000 users but the first name, last name, display name, and logon name are all in uppercase. Now we are having a hard time changing all of these manually. Is there a way to we can ...
3
votes
2answers
193 views

Alert for Domain Admin logon

I'm looking for a way to send out an email alert for when a member of the "Domain Admins" group logs on. We are running Server 2012 R2, is there anything built into Windows Server that can do this?
1
vote
1answer
32 views

Mapped drives aren't syncing on workstations

It seems like a few workstations on our network aren't syncing with the mapped drives, pretty randomly, so for example, different users on the same computer would see different files on the mapped ...
0
votes
1answer
134 views

Find out the name of all the servers a paticular account has logged or has a disconnected session on it

Hi We have around 400+ of servers and one domain + 3 sub domains, Whenever we change a password [Security reasons] the accounts keeps getting locked out as soon as we unlock it. So is there a way we ...
0
votes
1answer
21 views

how to join a local user to a domain controller?

IS there any possible that the local user of a pc join to a domain controller? I have some user who have a lot of setting in the local user account and don't want to set them again? thanks for your ...
3
votes
1answer
43 views

Rabbitmq Won't Talk to Active Directory

I have a rabbitmq server that I need to hook up to AD. Configuration is set using puppet rabbitmq module, with some minor manual changes (log level): % This file managed by Puppet % Template Path: ...
1
vote
0answers
16 views

Mapped network drive not syncing

One computer in the network doesn't seem to sync a network mapped drive. It's part of a domain where computers seem to sync. Not sure how to change it. (users can't see sync folder option) Help !
1
vote
2answers
37 views

How do you join employees in remote locations to Active Directory?

We have geographically distributed employees Across India. Most of the employees join in remote location and they rarely have to travel to regional offices. e.g. employees in Goa would rarely need to ...
2
votes
1answer
28 views

Active Directory group membership timestamp

I am trying to find a timestamp for when a Machine Object was added to an active directory group. I know the object doesn't change it's "last modified" date when added to a group because it is the ...
2
votes
0answers
48 views

Giving users of an OU permission to enable and disable users of their own OU

I want users of an OU to have access to enable and disable user accounts in their own OU. I believe in order to do this I need to grant the Read and Write userAccountControl property to the SELF ...
0
votes
0answers
26 views

Windows Server 2012 Essentials to Standard upgrade

I've got a client with a 2012r2 Essentials server and we want to upgrade it to windows server 2012 r2 standard. Is it just a case of swapping the S/N and it'll then be standard? Also, they don't use ...
3
votes
2answers
33 views

sssd active directory username same as local user

Hi have a Ubuntu box setup to login to AD. I can login to AD using usernames that do not match local usernames however I have a local username that also exists in AD and I want to be able to login to ...
0
votes
1answer
24 views

Windows - do not require password (GPO)

I'm setting up a small Active Directory installation for a company where they gave me the following requirement: While users should enter a password to logon in the morning, it is not required that ...
1
vote
1answer
57 views

AD / SYSVOL Version Mismatch on Default Domain Policy

I've created two test VMs in VMWare, both Server 2012 R2 Standard. One was promoted to a DC, with the domain name being test2.local. I modified the DNS record on the other server, and joined it to the ...