A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
37 views

Active Directory clients performing slowly after HDD upgrade

I have a Windows 2008 R2 AD server operating on my network, it recently ran out of space and I upgraded to 2TB SATA drives instead of the 300GB SAS drives it came with, I configured my 4 drives in ...
0
votes
1answer
49 views

Admin shares not accessible on Windows 7 Pro machines

I've been trying to deploy out the SCCM client to a lab of computers for a test bed, but for some reason I am not able to access the c$ d$ etc... shares that are required for it to install through the ...
0
votes
1answer
42 views

Delegating AD permission to reset user passwords

I am trying to delegate permission to my helpdesk technicians to allow them to reset user passwords in our Win2008 R2 AD. I've used the delegate control wizard in ADUC and am delegating the ...
1
vote
2answers
42 views

Windows 2012: Managing Local Users with a Domain Admin Account

I have two machines with Windows 2012 r2. In one, under Computer Management->System Tools I see a "Local Users and Groups" submenu. In the other, I do not see it. How can two different machines in the ...
0
votes
0answers
37 views

Auto mount Windows shares using AD credentials

I´m currently setting up a Ubuntu Server, that will serve as development platform. The developers will access the server via rdp, using their windows active directory credentials. The first part ...
0
votes
1answer
27 views

What is the equivalent of a windows active directory user in Openldap?

If I want to maintain a sync between active directory users with unix attributes enabled, and openldap, what would be the user's type that I have to create in openldap? I could see that a user in ...
1
vote
1answer
59 views

Is there a generally consistent way of exporting AD users to XML across Windows Server versions?

I'm writing a user data synchronization service in go, which is supposed to consume CSV and XML files containing user data from customers. The CSV part is pretty straight-forward. Concerning XML, I'd ...
0
votes
0answers
16 views

External trusted domain not listed in locations

We have setup a one way external domain trust between domain1 (outbound) and domain2 (inbound). Conditional forwarders are present in both DCs routing to the other domain's DC IP address. The trust ...
1
vote
0answers
39 views

Changing DNS server timeout on Domain Controller fixed external DNS resolution failures--why?

I ran into a perplexing blocker at our main site this week, and I'd like to understand the root cause. Process-wise, my troubleshooting broke down and a confusing configuration change fixed my issue. ...
3
votes
2answers
108 views

Are SPNs specific to Windows and Active Directory?

Are Service Principle Names specific to Active Directory on Windows? Or do they exist in Linux OpenLDAP / Kerberos KDC servers too?
0
votes
1answer
111 views

Groupmapping does not work for AD groups

We have an ActiveDirectory where we get our users from. So authentication on the linux machine works over pam. We managed this part to work so far, but we need all users to be part of the local group ...
3
votes
2answers
77 views

Active Directory User Attribute List

I'm trying to find a list of Active Directory User Attributes that I can use for customization without having to extend the schema. We are using 2008R2 functional level. I exported a list with ...
0
votes
2answers
44 views

Windows server 2008 active directory user profile

I just wanted to ask about profile migration. There is Windows 2008 r2 server and people are working connected to this server through RDP. One user was deleted from active directory a long time ago ...
-1
votes
0answers
88 views

How do I migrate V2 roaming user profiles to V5 on Active Directory?

We recently switched from Windows 7 to Windows 10 clients, now I want to migrate the .V2 profiles to .V5. The USMT seems to work only for local accounts. It seems wrong to me to just copy/rename the ...
0
votes
0answers
42 views

Logging in after an Acronis Restore on Server 2003 with “Windows Cannot Connect to Domain…” msg

We have two machines both running Windows Server 2003. The AD Machine is the Active Directory. The CTX Machine is our Citrix File Server (this has a RAID Array). Recently we had a RAID problem and ...
0
votes
0answers
20 views

SRP whitelist allow java update

When I run latest java offline installer from allowed location, for example C:\UNRESTRICTED_INSTALLATION_DIR\ it is exctracted to user's AppData temp folder and then just stops. No app blocked by ...
2
votes
2answers
52 views

Is it possible to set up a web server on the same domain used by Active Directory? [duplicate]

I'm a web developer at a large-ish organization and our web site is hosted by our IT department. Our website will not load without the "www" subdomain in front of it and IT says that it's because ...
1
vote
3answers
64 views

roaming profiles for remote users [closed]

Is it possible to have roaming profiles for remote users? We have a number of people who work on different sites, and I want them to be able to share laptops. A lot of my research concludes that I ...
2
votes
1answer
70 views

Server Migrations

We are looking to relocate our office location to other location. Right now we have TWO 2008R2 servers. One is PDC & second is ADC. During office relocation process we can't shift everyone in one ...
2
votes
1answer
56 views

Change SQL Server user SID

I have SQL Server 2012 and I am using domain users (from Active Directory). By mistake users were deleted from AD, created new with identical logins and passwords (but with different SIDs), deleted ...
3
votes
1answer
93 views

RHEL 7.2: using realm to join AD domain

I have a fresh install of RHEL 7.2 server, and I'd like to join it to an AD domain. I have pre-staged the computer name in AD, and here's what happens when I follow the instructions in the Red Hat ...
0
votes
1answer
25 views

How to find active directory group status

I can find the status of active directory user using the below code. var response = (SearchResponse)ldapConnection.SendRequest(userReq); var result = response.Entries[0]; Convert.ToBoolean( ...
0
votes
1answer
41 views

Import sample Active Directory into LDAP [closed]

For development purposes so I can query and test a C# LDAP integration, I have set up an Active Directory Lightweight Directory Services (AD LDS) instance on my Windows 10 box. I need to populate ...
0
votes
0answers
32 views

AWS EC2 - Clone Windows Server Machines That Are Domain Joined

Firstly, I am using these as a base guide: http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ami-create-standard.html http://reduktor.net/2014/09/autoscale-ec2-instances-ad-aws/ Secondly, our ...
4
votes
0answers
45 views

GPO Settings on HKLM\Software\Classes Registry Keys [closed]

We are beginning to deploy a couple of Windows 10 systems into our environment for application compatibility testing. Currently, we are Windows 7 x64 across the board. We've begun noticing recently on ...
-4
votes
2answers
64 views

“Hide” an Active Directory domain in an open network [closed]

I would like to have a stand-alone Active Directory deployment within an open network in a way that it isn't visible as a logon option or a workgroup to other, non-joined computers. The plan so far ...
-1
votes
1answer
18 views

EventLog “Access Denied” after installing an additional DC in a 2012 environment

After promoting a new DC into an existing domain, Eventviewer shows the following: I might as well mention that the Installation itself did not experience any issues When looking at the ...
0
votes
1answer
62 views

AD automation setting home drive and logon script

I was able to set home drive and and logon script for each user but the problem is it doesn't creates home folder something looks wrong with get-aduser -filter * foreach {New-Item -ItemType Directory ...
-7
votes
1answer
31 views

If my server PDC Emulater is down then how to re up PDC again functioning? [closed]

My pdc emulater is down so plz guide me how to bring up pdc and it working fine. This question also asking many time from interviewer. so plz guide me all total way to solve this.
8
votes
2answers
129 views

Best Way to Track Brute-Force Username Enumeration / Failed Username Attempts AD

We have a Windows Server which has an application that resides on it, which uses domain credentials on login to the application. During a recent pen test, the testers were able to use the application ...
0
votes
1answer
19 views

ADUC object keeps returning

Within ADUC after turning on View -> "Advanced Features" and "Users [...] as containers" and clicking on a user, the right pane shows the users' objects. I am trying to delete one called "OTS ...
1
vote
1answer
22 views

Using group managed service accounts on OS version < Windows 2012

Trying to leverage benefit of Group-Managed Service Accounts (gMSA) but have a mixed environment. My guide was this blog post: ...
1
vote
1answer
49 views

Caspol deploy Group Policy

I have an application running on the network that uses a .net component that requires a CASPOL policy to be applied. The client machines are locked down and local users are not administrators. What is ...
1
vote
4answers
76 views

Will cached domain credentials stay working if machine never re-connects to domain?

I have researched this thoroughly, and cannot find the answer I am looking for. A company I recently left is going through a bankruptcy. They have already auctioned off most the IT equipment, ...
0
votes
1answer
32 views

Is it normal for Outlook to take 2 weeks or more to grab AD thumbnailPhoto?

I've been updating user images in AD over the last few weeks. For most users, that thumbnailPhoto attribute is pulled and viewed in Outlook correctly anywhere from an hour or so to 3 days after ...
0
votes
1answer
40 views

Safe to demote & rebuild AD replica running exchange?

We have two Windows 2008 r2 servers. One is located in house which runs all domain logins, resources, file sharing etc. The second server is a AD replica which is remotely hosted at our Datacenter ...
0
votes
1answer
20 views

How do I make a Query Based DL for Office 365 users?

I am migrating users to Office 365 and have some QBDLs for access control that reference on premise Exchange Servers. What is the correct way to reference a migrated account in a Query Based DL?
0
votes
0answers
9 views

SSPI Context not generated

I have migrated a SQL server from another server box that was decommissioned.They have the same name and also same IP address. I am however getting SSPI context error when I connect from an ...
0
votes
1answer
30 views

Apache not finding the kerberos principal in keytab file

Virtual host has been configured with these options; AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate On KrbMethodK5Passwd Off KrbAuthRealms EXAMPLE.COM KrbAuthoritative On ...
2
votes
1answer
143 views

w32time in domain polling from wrong Domain Controller

From the MS Documentation I can see that computers in a domain should get their time from the PDC domain controller, and if done right the PDC should get it's time from an external source. In my ...
0
votes
0answers
40 views

2 different gpo to set different setings to same registry key

Which of the GPO will take precedence? I have two policies now applied in my domain. One has a higher link than the other but the precedence ain't working as expected. Only the registry keys of one ...
3
votes
0answers
88 views

Active Directory + Google Authenticator - Native support in Windows Server? [closed]

Use Case: 2FA to log in to Active Directory (such as logging into a corporate desktop computer that is on AD) Desired Solution: Google Authenticator, because it is RFC based, and widely used for ...
2
votes
1answer
50 views

FQDN Domain Name

In Active Directory, I have a domain (dc=ABC,dc=DEF). I expect the domain to be ABC.DEF However, if I use the command nltest /dsgetdc:ABC Sometimes I get ERROR_NO_SUCH_DOMAIN (the expected ...
0
votes
1answer
26 views

OpenLDAP proxy AD showing empty tree

I'm using OpenLDAP (in a docker container) mainly for two purposes: 1.) Having a local tree which actually stores my technical users. 2.) Proxy specific queries to my corporate active directory just ...
-1
votes
1answer
24 views

Exchange server 2010 setup exits after copying setup files

I have a Windows 2008 R2 server which I have demoted from a domain controller because I wanted it to be part of another domain, which was looked after by another domain controller. I did this and then ...
0
votes
1answer
35 views

Removal of a non existent exchange server

I have come into the position of administering a network where there was once an exchange server, and that server is no more. The company has migrated to office 365 cloud based, and there has been no ...
1
vote
1answer
88 views

Issue with GPOs for home folder creation and drive maps

I am following a guide I've seen recommended on here for setting up home folders and drive maps for users and I am running into an issue despite the fact that I set it up exactly as illustrated here: ...
6
votes
2answers
450 views

Active Directory + Google Authenticator - AD FS, or how?

(Edited to match the understanding of the answer-writers -- New, fresh, clean question posted here: Active Directory + Google Authenticator - Native support in Windows Server?) Research Done So Far ...
0
votes
0answers
12 views

Set up trust on the external forest from the external forest

At one point in the document linked below it says "Set up trust on the external forest from the external forest" Inbound ports :N/A Outbound ports :LDAP (389 UDP and TCP)Microsoft SMB (445 ...
0
votes
0answers
35 views

Syncronise only one container between Active Directory

I have a Microsoft Exchange server off-site and a file server on-site (with their own separate AD environment). I want to synchronise AD so that new users and password changes are reflected on both ...