A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

6
votes
3answers
3k views

Add last user logged in into AD Users and Computers description field

The last place I worked had AD setup in a way that in the Description field of each computer account in the AD users and computers console, it would say who logged in last and when. How do you set it ...
4
votes
4answers
35k views

Diagnosing why a Group Policy Object is inaccessible

I have a Windows Server 2003 domain. One of the Group Policy Objects appears as a linked item in an OU but all I can see if the Unique ID and that the Link Status is Enabled. There is a red minus icon ...
3
votes
2answers
1k views

active directory + squid planning for a large network with over than 7000 users

We have about 1600 active nodes and 6000 students in our network and we have a great Cisco backbone, we have 8 faculties (they have sites and wireless access points) and 10 centers like hospital. We ...
3
votes
1answer
2k views

Single Sign On for intranet with Apache and Linux MIT Kerberos

EDIT: SOLVED! See my answer below. Greetings, I am looking for a way to do a single sign on to an intranet in the following manner: A Linux user logs on via a graphical frontend (for example, GNOME)...
1
vote
3answers
3k views

Integration of Active Directory, Squid and traffic shaper (like MikroTik)

We have a large network in our university with about 10000 users. We have an AD and wants to use a Squid server for caching and NTLM authentication. We have 40 Mbit/s Internet too, we are going to ...
14
votes
3answers
58k views

How do I bulk reset passwords for all users in an OU?

I'm a developer at my organization, but I've been tasked with resetting the passwords on 10k e-mail users in an OU in Active Directory. I was given the proper permissions, then sent the following ...
11
votes
3answers
52k views

User in domain admin group cannot access directory the group has permission to access

I've run into a rather interesting issue when playing with one of my domain labs. There's a directory on a 2008 R2 fileserver that's being used for folder redirection for all users in the "Staff" OU. ...
10
votes
3answers
4k views

Deploying Printers via GPO/GPP - is there a programmatic option?

For reasons beyond my control, I've been tasked with setting up GPO/GPPs to deploy our 100+ printers to our 1000+ clients. The good news is that we have over a dozen sites, and for the most part, I'm ...
8
votes
6answers
38k views

How do I find new Active Directory accounts that have been made in the last 90 days?

How do i find new Active Directory accounts that have been made in the last 90 days? does anyone know who to do this? I can't figure it out. Thanks in advance.
8
votes
3answers
5k views

Active Directory disaster recovery with DPM

I have a sort of catch-22 question here. Suppose I'm using Microsoft System Center Data Protection Manager (2010 or 2012, it works the same way) to backup, amongst various other things, my Active ...
7
votes
5answers
4k views

Debian 6.0 AD integration

Despite multiple questions already about this, e.g. Linux on Windows AD Domain I'd like to know how to get Debian 6.0 Squeeze integrated with AD using open source or otherwise free of charge for ...
7
votes
1answer
25k views

Give Local Admin privileges to AD user group for group of computer

I need to give administrative privileges to a group of user for a group of a PC in an Active Directory Enviroment. For Example i have : HelpDesk_User : Group of user HelpDesk_PC : Group of ...
6
votes
3answers
4k views

Mounting Linux user home directories on CIFS server

I was wondering about peoples experiences with mounting users home directories from an Active Directory authenticated CIFS server under Linux. Preferably the mount would be accomplished upon login ...
6
votes
1answer
3k views

Active directory with duplicate machine SIDs

I have a number of machines running Win2k3 and 2k8R2 that I would like to join to a domain. All the machines have been imaged from the same image, without using sysprep or anything similar. This ...
5
votes
3answers
25k views

How do you override a GPO with another GPO?

If there is a GPO which is applied to all Domain Computers which disables something, is there a way to re-enable the disabled thing for some hosts in the domain, without taking those hosts out of the ...
5
votes
5answers
69k views

How to speed up AD integrated DNS zone replication? Server 2008 r2

I have about a hundred DNS zones that I need to convert from being not AD integrated to be AD integrated. I want to do this with minimal downtime. So far, my process is: Change DNS zone on one DNS ...
4
votes
2answers
3k views

Running an Active Directory Primary Domain Controller as a virtual machine?

Should the Active Directory PDC always be a physical machine or would it be okay to run it in a VM? What are the implications/trade offs/gotchas? As a corollary to this, what about running a physical ...
3
votes
3answers
3k views

Is Active Directory Unreliable or is there Another Issue Here?

We have an organization of approximately 1200 Windows PC clients on an Active Directory network. We have noticed that there seems to be random systems that don't get policies set. For example, we ...
3
votes
1answer
9k views

What firewall ports need to be open for Active Directory?

I want to run DFS replication between a couple of servers. It's my understanding that the servers need to be part of a domain for this. Being able to give people a username and password that works on ...
3
votes
1answer
2k views

SSH from Windows to Linux with AD certificates

I have a Windows client machine connected to Active Directory and a Linux server also connected to Active Directory (through PAM w/ LDAP), and I want to be able to do password-less SSH from Windows to ...
2
votes
2answers
242 views

How to reduce our AD account creation and maintenance requests and work load

Where I work, almost 40% of our support requests are for account management tasks : Create new account and assign in groups Unlock an account Reset a password Change an account's groups following a ...
2
votes
2answers
2k views

Windows XP cant join Server 2008 Domain

I've setup a new Server 2008 box with a new domain. I've done all my testing with a Windows 7 laptop which is being deployed with the network. It joined the domain fine, and worked as expected. Now ...
2
votes
3answers
973 views

Are there any tools to do change management with Active Directory / Group Policy?

We seem to be having a lot of problems related to "forgetting some mundane detail" while managing our Group Policy settings in Active Directory, so I am curious as to whether there are any well-...
1
vote
3answers
5k views

Auto-mounting a windows share on Linux AD login

I've managed to configure my test Ubuntu 10.04 Beta 2 Server VM to accept logins (via ssh) from users who have domain accounts in active directory via Kerberos, nsswitch.conf and PAM configurations. ...
-1
votes
4answers
484 views

What do I do when I've locked my self out of a newly created Active Directory server?

I've just setup a Windows 2003 server as the DNS/AD for a replace of an old server. However, it appears that I don't know the password for the Administrator account. I entered the Restore Mode ...
10
votes
3answers
8k views

Domain rename with Exchange 2010

I have taken over all IT responsibilities for a company that is using Active Directory (2008 R2 native level) and Exchange 2010. I have come to find out that their internal Active Directory domain ...
7
votes
4answers
27k views

Active Directory Licensing [duplicate]

Possible Duplicate: Can you help me with my software licensing question? I can't seem to find a clear answer to this question. What type of licenses do I need to buy ensure that everyone in ...
7
votes
4answers
3k views

Unable to dcpromo new 2008 Server in 2000 domain

I'm trying to replace an old Windows 2000 domain controller with a new Windows 2008 Server. I have the Active Directory Domain Services role installed on the new server and joined it to the domain. ...
7
votes
1answer
12k views

Granting Domain Admin privileges to a cross-forest user account?

Does anyone know of a way to [effectively] have a user or group in one forest acquire the privileges of the Domain Admin group in another forest? The obvious approach of adding Domain Admins@...
6
votes
4answers
286 views

Using AD as a general purpose directory [closed]

Is there anyone using AD as a general purpose directory (meaning for uses other than domain authentication / authorisation and stuff) ?
6
votes
6answers
62k views

How can I export all group policies to a easily-parseable format?

I need to dump all the Group Policies within Active Directory to review offline at a later date. Is there a way I can easily export all the Group Policies to text or some other easily-parseable format?...
6
votes
4answers
3k views

Risks of having only one domain controller

Are there any risks besides downtimes, if there is only a single domain controller for a small company? I did some research and everyone recommends at least two domain controllers, but I can't find a ...
5
votes
3answers
15k views

Primary Domain Controller slow?

I seem to be experiencing a problem with a virtualized Windows 2008 domain controller. We are running Hyper-V on a powerful server (dual quad core Nehalem Xeon, 48 GB of ram), and all of the VMs are ...
5
votes
2answers
2k views

Migrate local profiles to roaming profiles

What are "things to think about" and best practices to migrate a large number of users from using local profiles to roaming ones?
5
votes
1answer
3k views

How to do exceptions in Group Policy?

We're implementing Group Policy for the first time at our organization and have some questions about best practices and capabilities. We've already done some work and want to see if there is a better ...
5
votes
1answer
3k views

Can Amazon VMs be used as Active Directory domain controllers?

I've got a client who wants to move his companies servers off site. As he is only a 10 person company I'm looking for some pretty in-expensive options. One option is the smallest of the Amazon cloud ...
5
votes
5answers
7k views

OpenVPN with Active Directory integration

Is anyone successfully running OpenVPN with Active Directory integration? Are you using the openvpn.net or the openvpn.net/opensource version of OpenVPN? Any tips, tricks or gotchas or did it "just ...
4
votes
0answers
1k views

LSA SID cache keeps old entry for renamed domain user - why?

I have a question about LSA SID cache on a domain member server. Recently I run into the issue when some users after their name was changed in AD has difficulties accessing application I support, and ...
4
votes
2answers
4k views

How can I use a Linux BIND DNS server for my Active Directory forest?

I am trying to setup an Active Directory forest that uses a Linux BIND server for DNS. The goal is that the Domain Controller (DC) to be able to make entries in the /etc/bind/db.foresta.net file from ...
4
votes
2answers
2k views

Keep AD Group Synced in OpenLDAP with POSIX Account Augmentation

What's the most obvious way of achieving the following: The site has an working AD infrastructure and certain parts of the infrastructure are tightly coupled GNU/Linux machines where people from the ...
4
votes
5answers
5k views

Central Authentication For Windows, Linux, Network Devices

I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
4
votes
1answer
2k views

Active Directory / DNS naming design, multiple sites, single domain,

The network I currently manage will shortly be expanding to cover two sites, and due to the organisation of the company, I have already determined that a site-to-site hardware VPN will be implemented ...
3
votes
2answers
756 views

Active Directory Domain with SAMBA or Other Tool

Can I create a domain using SAMBA and set up Active Directory with SAMBA on it? And by this I mean no windows servers involved. I would also like to be able to log in from a Windows machine. ...
3
votes
4answers
1k views

Pull Office 365 Users to Active Directory

I am currently working with an existing Office 365 subscription that needs to have a new instance of Windows Server 2012 R2 in Azure manage the users through Active Directory. The server 2012 VM is ...
3
votes
7answers
46k views

What's the AD query syntax to enumerate all users for a particular group?

Here's what does not work so far; (&(objectCategory=Person)(objectClass=Group)(CN=group_in_question)) (&(objectClass=Group)(objectCategory=Group)(member=CN=group_in_question)) (&(...
3
votes
2answers
141 views

How can I correlate a wall jack to a user/machine on the domain?

After reading Valve's new employee handbook, I was really interested in setting up a company map like they described on page 6: "The fact that everyone is always moving around within the company ...
3
votes
0answers
320 views

Active Directory + Google Authenticator - Native support in Windows Server? [closed]

Use Case: 2FA to log in to Active Directory (such as logging into a corporate desktop computer that is on AD) Desired Solution: Google Authenticator, because it is RFC based, and widely used for ...
3
votes
2answers
2k views

Domain controller not advertising as time server / PDC role is down

In one of our domains, we have two Server 2003 servers (JUDY and ASTRO). We recently switched all the FSMO roles over to JUDY, from ASTRO. That seemed to work fine, and running "netdom query fsmo" ...
3
votes
4answers
6k views

How can I run a process as “NT Authority\NetworkService”?

I'm toying with an idea for a script that would update a computer's details in Active directory with its make and model information. Ideally, I'd like this script to access AD via its computer account,...
2
votes
3answers
14k views

SVN Authentication with LDAP and Active Directory

I am having a few problems getting SVN authentication to work with LDAP / Active Directory. My SVN installation works fine, but after enabling LDAP in my apache vhost, I just can't get my users to ...