Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

0
votes
1answer
47 views

what happens to the local users and groups when promoting a server to a domain controller? [duplicate]

What happens to the local users and groups when promoting a domain member to a domain controller? I have a Windows Server 2008 that I have made to a domain controller by installing AD DS, but it was ...
1
vote
2answers
80 views

Password Changes and Exchange Activesync AD lockouts

Not sure how others are doing this but the main issue we are having arises when a user changes their password on a PC. When they change it the ActiveSync on the phone does not update automatically. It ...
2
votes
1answer
39 views

How do I set “CustomAttribute6” for a regular AD user?

I'm trying to set AD attribute 6 in Powershell to update a user who has no mailbox, and isn't an exchange contact; and is only an AD user ObjectClass : user The command I'm using is: get-adobject ...
2
votes
3answers
32 views

How do I assess the capacity of my link for Active Directory needs?

I'm working for a company that has a head office and some remote sites. We have an Active Directory server in the head office and we now want all of the users in the remote sites to join and work on ...
2
votes
1answer
30 views

Testing for Active Directory Schema modification (not upgrade)

I am trying to test a schema modification. That is i need to add one of the attributes to global catalog by modifying schema , initially in a lab which is exact replica.My questions are below; -> ...
2
votes
2answers
96 views

Windows Server 2012 Migration (DNS/AD DS Standard Eval to Essentials OEM) P2V -> Do I need a Secondary Domain Controller during migration?

This is my first post on this exchange (although not my first on stack exchange), so please have patience. I am a 3rd year student intern, and I have been tasked with virtualizing the server systems ...
0
votes
1answer
40 views

Migrating SBS 2003 to 2012 standard

My company is currently trying to migrate a Windows Small Business Server 2003 to Windows Server 2012. We know the general procedure, but we want to make sure we aren't going to mess anything up ...
3
votes
1answer
68 views

windows 2008 always keep local dns in first

I have a windows 2008 system and it always keep ::1 in first of the dns setting. I can see the following in "ipconfig /all": DNS Servers . . . . . . . . . . . . : ::1 ...
1
vote
1answer
44 views

gpupdate failing when using Samba 4 AD DC

I have a Samba 4 AD domain running with 2 DCs on Centos 6.5, with a named DNS backend. I have multiple Windows 7 machines joined to this domain, which is fine. However, I can't get GPOs to apply. ...
1
vote
1answer
385 views

Authenticating Active Directory Users to Mac OS X Mavericks Server L2TP VPN Service

We have a Windows Server 2012 Active Directory Infrastructure that consists of two domain controllers. Bound to the Active Directory Domain is a Mac OS X Mavericks Server 10.9.3. The server runs ...
2
votes
2answers
123 views

How can I set an arbitrary (non default) attribute for an AD user or AD Contact?

I have AD Users, or contacts that are not Exchange Mailbox users, or contacts. I also have a SSO system (Ping Identity... technology similar to Microsoft ADFS), where it leverages the AD Schema ...
-1
votes
1answer
34 views

Accessing objects across domain

lets say i have 2 domains say t1.com and t2.com I have a client in t1.com. I need to access objects in t2.com. for e.g. i need to access an user named test in t2.com. At the same time i have an ...
-3
votes
3answers
46 views

Remove attributes from AD schema?

Can we edit a scheme in Active Directory? Scheme cannot be deleted. But is there any possibility of editing? For e.g. If the user object schema has 30 attributes, but i need only 10 attributes in ...
0
votes
1answer
24 views

RODC password replication and A/D sites and subnets

I work at a school district with about 30 school sites. Windows 2008 A/D setup - all central at the district office. In A/D, all is under one site, and no subnets defined. One A/D forest and only one ...
-2
votes
1answer
30 views

Can a site contain domain controllers from multiple domains?

For e.g. I am creating a site with 2 clients and 1 DC in it. I am setting the subnet to cover these objects. So my site say SITE1 will have 2 clients and 1 DC. So when one of these clients tries to ...
1
vote
0answers
35 views

What's the Correct Way to Implement Certificates on an RDS Farm?

We currently deploying six terminal servers in a farm that will be accessed by thin clients running Windows Embedded. The idea behind the thin clients is to have a seamless single-sign on whereby as ...
1
vote
2answers
82 views

PowerShell - finding users who are Inactive AND not disabled

I wrote this cmdlet: Search-ADAccount -filter {(enabled -eq $true)} -Users Only -SearchBase "ou=FirstOU,dc=domain,dc=com" -AccountInactive -TimeSpan 30 But it outputs an error: Search-ADAccount : ...
3
votes
2answers
109 views

Why should I not run setspn.exe on the domain controller?

I found several references (see below) on blogs that the setspn.exe utility should be run from either a client or server machine in the domain, but not from the domain controller itself. ...
3
votes
1answer
208 views

PowerShell - Finding all of users' group memberships and kicking it out of them

as title says, I have to find all the groups that the user is a member of, and deleting its membership from all of them. I've tried this: get-adgroup -filter * | where {(Get-ADGroupMember $_ | ...
1
vote
2answers
172 views

PowerShell - Limit the search to only one OU

Ive got this cmdlet and I'd like to limit the results to only one OU: Get-ADUser -Filter {(Enabled -eq $false)} | ? { ($_.distinguishedname -notlike '*Disabled Users*') } Now Ive tried to use ...
3
votes
3answers
241 views

PowerShell script that should find disabled users that are not in a specific OU outputs users from that OU as well

Hey I've got this cmdlet here: Get-ADUser -filter {(distinguishedName -notlike "Disabled Users") -and (enabled -eq $false)} -searchBase "ou=FirstOU,dc=domain,dc=com" I've built it to find disabled ...
3
votes
1answer
56 views

what happens when a domain functional level is set lower than forest functional level?

For. e.g When a forest functional level is set to windows 2008, what happens if a domain functional level is set to windows 2003? My question is, why does the rule says domain FL should be >= forest ...
0
votes
1answer
23 views

Powershell waiting for more parameters when asking for all users from a specific OU?

I want to get all the users from OU "myusers" so I have this cmdlet right here: get-aduser -filter * -searchbase"ou=myusers,dc=domain,dc=com" But when Im running it, powershell prints a >> ...
0
votes
1answer
22 views

Simulate a DFS share for a user not on domain with a folder in path

I have a consultant whose computer is not on the domain and needs to access various network resources. Unfortunately while adding a computer to the domain is a difficult bureaucratic process (and ...
1
vote
1answer
69 views

LDAP over SSL with an EFI Fiery printer

I've got a printer with a Fiery running 8e Release 2. I can authenticate users against AD using the LDAP configuration, but I can only get it to work if I don't use SSL/TLS, and only if I use SIMPLE ...
0
votes
1answer
36 views

Do I need a User CAL for a record in AD if the user is not authenticating? [duplicate]

We are considering expanding our user provisioning to cover a large portion of the workforce that does not currently exist in AD. Our understanding is that any named user in AD requires a User CAL. ...
4
votes
2answers
58 views

Service Accounts LastLogonTimestamp

In an Active Directory domain, if I configure a Windows service on a domain member computer to start with an AD user account (aka "ye olde service account",) and the then the service stays running but ...
1
vote
1answer
59 views

Migrating Gmail to Office 365

I have been setting up Office 365 for my organization. We are currently using Gmail. I have synced our local Active Directory server w/ Office 365, as well as our domains. The problem I am having has ...
0
votes
1answer
64 views

Using LDAP/Active Directory with PIN based authentication

We'd like to integrate our service with LDAP, but because of hardware constraints, we're only allow 4 digit user ids and passwords. What would be the best practice for performing such an ...
0
votes
2answers
53 views

what happens when a DC fails? How can the clients identify DC failure? [closed]

When a DC fails, it loses the privilege to authenticate and so client will find for secondary DC closest to its site. In another scenario, client has selected a DC closest to its site by using subnet ...
2
votes
0answers
40 views

doing ODBC System DSN's from Active Directory

2008R2 Active Directory, workstations are Win7 Ent, Office/Excel 2013, Oracle 11.2. Excel fetches data from Oracle using System DSN's. Where can I put ODBC System DSN's in Active Directory? Do I ...
4
votes
1answer
101 views

AD migration from SBS2011 to 2012 R2 and new domain

We have an existing SBS2011 server, and would like to migrate to a new 2012 R2 server. Ideally, we'd like to do this in a new domain - 1. we'd like to reorganize the OUs to remove the "SBS" named ...
2
votes
1answer
72 views

Retreive the current Kerberos KVNO from Active Directory

I have a Kerberos problem with a Linux host connecting to a Windows KDC. I suspect that Kerberos key with the wrong version is to blame. One way to be shure would be to delete the SPN and create it ...
3
votes
1answer
126 views

How can I trace the source of repeated account lockout against Exchange server?

I have an AD user account that is being repeatedly and frequently locked out, I have been able to trace the lockout to the Exchange server CAS array. However I am at a loss as to how to continue the ...
0
votes
1answer
60 views

Powershell - check if all users in a specific OU are disabled, disable if not

I tried to search for it but I didn't find anything. Could someone help me out with an example of a script that would do this?
2
votes
2answers
89 views

How to have your DNS servers forward queries for internet names

I have 2 Domain Controllers / DNS servers on Windows 2012, their IPs are 10.0.1.10 and 10.0.1.11 Another server acts as the DHCP server for clients, and sets their primary and secondary DNS to the IP ...
0
votes
1answer
58 views

Folder Redirection won't load on Windows 7 Machine in Windows 2008 R2 Network

Okay so redirected profiles don't load exactly, but the computer is joined to the network and it won't display any of the users files on their desktop that are in their redirected profile. I know ...
7
votes
1answer
380 views

Reset users password in Active Directory by Domain Admin account or other service account

In Active Directory you can set and enforce rules where users have to use strong password, can't use last 5+ passwords they already had, enforce password complexity. Is there a way to enforce such ...
3
votes
1answer
266 views

How to integrate Active Directory with FreeBSD 10.0 using security/sssd?

What are the required steps to authenticate users from an Active Directory running on Windows Server 2012 R2 in FreeBSD 10.0 using sssd with the AD backend with Kerberos TGT working?
3
votes
1answer
82 views

Linux - How to control Winbind Authentication cache timeout

I have configured my linux machines (running CentOS 5.2) to authenticate against a Windows server running Active Directory. I have even enabled winbind offline logon. Everything works as expected, ...
1
vote
0answers
34 views

Windows 2012 Master & Ubuntu Bind 9 Slave & SOA

I'm kinda like the maid... I don't do Windows. But thanks to new things we're implementing, I'm now attempting replicating a single zone from our AD cluster. We had this working just fine but ...
1
vote
0answers
12 views

A linux server can identify windows AD login? [duplicate]

I have a linux server where my intranet is located. I would like that when an user on windows / linux log in the company domain (Active Directory), my linux system already identify the user login. Is ...
1
vote
1answer
17 views

dsget error probably because of users with “-” in their name

I'm trying to run a dsquery/dsget that will result in users that weren't active for a month and that are not disabled: dsquery user -inactive 4 -limit 0 | dsget user -samid -disabled ...
1
vote
1answer
54 views

How to logon with local account? RODC “There are no logon servers to process your request”

I have a site-to-site VPN, writeable DC in main office, Read-only DC in branch office. Today the VPN went down, but i couldn't log in to the read-only DC - the error message came up There are no ...
1
vote
0answers
18 views

How to setup a sharing folder with specific user accounts? [closed]

I'm looking for a step by step plan to setup my old Windows 7 laptop as a sharing center. The following features must be implemented: Access is granted, when a user succesfully logs in. Active ...
4
votes
1answer
74 views

How to remotely generate Windows AD Kerberos keytab from a Unix machine?

I would like to know if it’s possible to create a keytab file direct from a client machine without using the ktpass utility in the Windows Server side. The main reason I would want this, is to ...
2
votes
1answer
92 views

Login with Enterprise Principal Name using sssd AD backend in Ubuntu 14.04 LTS

I’m running sssd version 1.11 with the AD backend in Ubuntu 14.04 LTS (1.11.5-1ubuntu3) to authenticate users from Active Directory running on Windows Server 2012 R2, and I’m trying to achieve logins ...
2
votes
1answer
759 views

How to use realmd in Ubuntu 14.04 LTS to join an Active Directory domain?

I want to use realmd to join an Active Directory domain from Ubuntu 14.04 LTS. To do that I just installed realmd and some dependencies with this command: aptitude install realmd sssd sssd-tools ...
0
votes
1answer
71 views

how to expose Domain Controller on public IP address, and make other DC talk to it?

basically we have 2 DC servers which used to have site-2-site VPN but it's not working anymore. So we started to get various errors, DNS stopped working, etc, etc. As a last resort attempt (before ...
18
votes
3answers
339 views

How do I delete this orphaned Active Directory computer object (preferably with PowerShell)?

I'm working from a Windows 7 workstation, with PowerShell v2.0, and trying to delete a particular (orphaned?) object from the LostAndFound container in a 2008 R2 FL forest and domain with the Active ...