Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

-1
votes
1answer
46 views

How do I create a read only user for LDAP queries in Microsoft Active Directory?

I want to create a user that can query LDAP on my Windows 2008 R2 Active Directory. It only works with Domain Admins. I read the Account Operators group will also work. Both these have write ...
2
votes
1answer
55 views

Use Active Directory Administrative Center outside domain

I'm setting up a Active Directory lab environment on a Windows 8.1 laptop. I now have a Windows Server Core 2012 domain controller running inside a VM. I installed Server Manager for Windows 8.1 and ...
0
votes
0answers
60 views

samba4 ADS no logon servers

I setup a samba4 test server on Debian Wheezy using the packages from sernet. Basic configuration was not too complicated and it seems to have set up a running server. I can successfully kinit ...
2
votes
1answer
35 views

Active Directory DNS not resolving ANY queries

I'm experiencing some weird behaviour with our AD Dns resolver. Our Windows network uses the AD as it's DNS resolver, which then in turn resolves queries like Google.com and so on. All fine and dandy ...
4
votes
1answer
158 views

Active Directory on Server 2012 - Proper set up to change passwords via programming

This Question was previously on StackOverflow, as I thought it was a programming issue. It seems it is more of an issue with setting up Active Directory properly, so I moved it here. Ok, I've been ...
-1
votes
1answer
62 views

What can a domain controller do? [duplicate]

In short: I do not know where to start reading so that I can understand how to configure a DC. The long question: In the environment I work, we use an outdated domain controller and I have to create ...
2
votes
2answers
89 views

Incomplete results when querying Active Directory for group members in a situation with trust relationships

We are attempting to query Active Directory for a list of all machines that are members of a group, along with information like OperatingSystem attributes. We can't get results for every member of ...
0
votes
1answer
52 views

What is the difference between Windows Azure Active Directory Sync vs Office 365 sync

My client has half deployed instances of Windows Azure Active Directory, and Office 365 synchronization technologies. I have yet to unravel how much is overlapping, or what isn't. Based on my ...
1
vote
2answers
60 views

sssd: Is there a way to force a specific shell for some group members?

The context I'd like to restrict some AD users to a specific script, limiting what they can do on this particular machine. So, instead of connecting them with /bin/bash (for instance), I'd like to ...
0
votes
1answer
30 views

Group policy access with active directory

Under Active Directory (Win2008-R2), I want all "authenticated users" be able to access the "Add/Remove windows components" menu But where do I have to go in group policy to set this grant ? In ...
1
vote
0answers
26 views

LDAP Integration with the firewall

I am trying to integrate Sonicwall NSA2400 with AD so users can VPN with their domain credentials and able to change password if it expires. Do i need to install ADLS role and configure LDAP, or LDAP ...
1
vote
1answer
48 views

Apache authenticate against AD - some use DOMAIN\\username, others username

I have Request Tracker setup on a Ubuntu 12.04 server. It is configured to authenticate against active directory through winbind. Here's the relevant portion of the apache2 configuration: ...
0
votes
2answers
40 views

Can't login to LDAP with current Windows user

I'm trying to connect to AD server with various tools under Windows. If I provide my domain\username and password, I have no problems If I don't provide credentials, I do connect, but I have very ...
0
votes
1answer
58 views

Powershell - query non-standard group members in an OU?

I am looking to create a script which will only show users in an OU who are members of "non-standard" groups. For example, all users in the "Accounting" OU will be members of at least one group with ...
2
votes
2answers
36 views

LDAP Breaking when moving user

Since I've been working at this company we've had a very basic AD setup. Users go in the user CN and there is a few OUs for computers, like desktops and servers. Recently I've been planning a more ...
13
votes
5answers
1k views

Does it make sense to use Windows Active Directory in a small group of say less than six users/ computers?

For a (very) small company would using Windows server with AD be overkill - why not just use it as a file/ print server, administration server from which to access all machines on the network via ...
0
votes
1answer
53 views

Freenas and Active Directory

I'm trying to setup my Freenas server with Active Directory, it's connected fine and the following works: [root@storage01] /# wbinfo -t checking the trust secret for domain ISD via RPC calls ...
3
votes
2answers
239 views

Determine last time a computer powered up

Is there a way to determine by querying Active Directory when a computer was running? I want a quick way to exclude computers in the domain that have been off for (say) 7 days. The LastLogonTime ...
1
vote
1answer
58 views

Complex Group Policy Inheritance

I'm currently trying to design the OU and Group design for a new AD deployment. Firstly, taxonomy is hard. As a first guess attempt, we're trying to keep all User objects together in OU=Users, and ...
1
vote
1answer
36 views

limit user access in multiple RODC

I have a RODC and a RWDC.i prepopulate some password on RODC cache database. i already read this article How’s User Authentication Working In A Site With A RODC? I want to limit user access in ...
0
votes
3answers
60 views

GPO - Software restriction policy

I was trying to set up GPO - Software restriction policy, so i created the object on our Domain Controller. Fast forward the next day, everybody who turned off their systems at night could not login ...
-3
votes
2answers
65 views

How do you lookup a Windows user's DOMAIN\login based on their email address? [closed]

Most applications on our Windows network identify users by their email address (e.g. Outlook, Lync, Windows Security dialogs, etc.). However some tools, such as SQL Server Reporting Services, will ...
2
votes
0answers
59 views

vSphere 4.1 Client “Cannot complete login due to an incorrect user name or password” with new AD accounts

I've got a VMWare ESXi 4.1 server connected to a vCenter server, with an active directory domain. This has been in place for at least a couple of years, perhaps more. Using the vSphere client 4.1, ...
1
vote
1answer
53 views

Can I add a local linux user to a supplementary active directory group?

The Linux box in question is a CentOS 6.5 machine that is bound to active directory. I can change a local user's primary group to an active directory group. But i can't add the active directory group ...
0
votes
1answer
74 views

Mac OS X 10.8.5 adding to Windows Domain

I have a Mac that I joined to a Windows domain. While the machine is off the network and you connect to the terminal it shows the name of the machine as HD_MACPRO. When I connect it to the network ...
10
votes
3answers
327 views

Active Directory user names: why does the canonical name vary? Can I do something to make them uniform?

I am a self-taught administrator of a work Active Directory network used for Windows logins on ~30 PCs. I inherited the system from someone else who also didn't have any direct Microsoft training and ...
3
votes
3answers
142 views

How to combine Active Directory with Split-Horizon DNS?

I'm in a quandary. I need to implement Split-Horizon DNS in my office based on subnet. For example: Users in 10.170.0.0/16 need to resolve "srv01.extra.company.com" to 10.170.0.5 10.25.0.170 Users ...
10
votes
3answers
252 views

Deploying Printers via GPO/GPP - is there a programmatic option?

For reasons beyond my control, I've been tasked with setting up GPO/GPPs to deploy our 100+ printers to our 1000+ clients. The good news is that we have over a dozen sites, and for the most part, I'm ...
2
votes
1answer
46 views

How to force Samba to create directory

I need help with Samba configuration. What I want to achieve is configuration, where windows user on share see only his files. This is simply achived With configuration like this: Users are ...
-3
votes
1answer
44 views

Building a Windows Server 2008 R2 (DNS, DHCP, AD, etc…) [closed]

I'm looking forward to build my own Windows Server 2008 R2 machine for a company that is in the process of establishment. I have some questions regarding the Windows Server. I'm pretty new to it .. I ...
1
vote
1answer
39 views

Can you switch the domain of a 2012 R2 server with RDS installed?

We installed RDS, all roles, on a machine in one domain, DomainA. We've decided to move the machine to a domain in a different forest, DomainB. Our admins simply joined the machine to the new domain, ...
1
vote
2answers
402 views

Configuring vsftpd to authenticate with Active Directory

We are trying to give vsftpd access to some Active Directory users. Here are some configuration file contents: # egrep -v '^(#.*|)$' vsftpd.conf anonymous_enable=YES local_enable=YES ...
2
votes
1answer
126 views

New Domain Controller Cannot Enroll for KerberosAuthentication Certificate

I have an AD domain. 2003 FFL/DFL. The schema was upgraded to version 56 for Server 2012. The domain contains a mix of domain controllers from Server 2003, Server 2008, Server 2008 R2, and now Server ...
13
votes
3answers
628 views

Force authenticated user immediate logoff (emergency case)

In Active Directory if you want to prevent a user from logging in you can either disable their account or simply reset their password. However, if you have a user who is already logged in to a ...
0
votes
1answer
159 views

Join Windows 2003 R2 guest to Windows 2012 R2 domain controller

I'm trying to join a Windows Server 2003 R2 guest to a domain with a Windows Server 2012 R2 Domain controller server. I get the error "The following error occured attempting to join the domain ...
0
votes
2answers
60 views

Robocopy not working for Active Directory snapshot backups

I am trying to automate backups of a Windows 2008 Active Directory database (ntds.dit). Mounted AD snapshots get created in C:\$SNAPxxxxxxxxxx\Windows\NTDS. The script below works for creating, ...
2
votes
0answers
32 views

Is it possible to add computers in a particular IP range to a particular Active Directory group?

I'm using AWS and have a VPC which is connected to the local network via a VPN. I can launch EC2 instances, put them in various subnets in various AZ's and connect to them via internal IP. I can also ...
1
vote
1answer
45 views

Domain admin accounts can do less than domain administrator account

On a Windows 2008R2 server, a domain admin account has lesser rights than the domain administrator account. For example, the domain admin account can't install a service or create a file on the root ...
5
votes
2answers
110 views

Delegating Control — Windows Active Directory

Attempting to make a site administrator user account for an Active Directory Domain. Using the Active Directory Delegate Authority Wizard. a user account has been grated rights in a OU. However, when ...
2
votes
0answers
272 views

Unable to join Fedora 20 machine to Active Directory with realmd

I don't know a lot about Active Directory, but I have some basic knowledge of what it does. I have been trying to join a Fedora 20 machine to the domain, and have been having some issues. I ran the ...
3
votes
1answer
43 views

“Deny Logon Locally” effects

I'm planning to harden my AD-based infrastructure. One privilege that I'm planning to limit is the "local logon" privilege. Now, if I push "Deny Logon Locally" through GPO, besides preventing ...
5
votes
1answer
61 views

Granting Domain Admin privileges to a cross-forest user account?

Does anyone know of a way to [effectively] have a user or group in one forest acquire the privileges of the Domain Admin group in another forest? The obvious approach of adding Domain ...
0
votes
1answer
31 views

Set Country / Region field Access via Active Directory Delegation

After creating a security group for special permissions (edit User Objects fields like Street, ZIP etc.) I have a problem of not being able to delegate permission for the field "Country/Region" on a ...
24
votes
7answers
2k views

Is it best practices to have separate login for a domain for domain admins?

I typically like to set up separate logins for myself, one with regular user permissions, and a separate one for administrative tasks. For example, if the domain was XXXX, I'd set up a XXXX\bpeikes ...
0
votes
1answer
17 views

Apache SSO for a service that runs as local user

I am trying to move the web layer of our app onto Apache on Centos and use mod_auth_kerb to authenticate AD users and automatically log them in the app. I have successfully joined the domain, and can ...
3
votes
1answer
31 views

Can a Server Foundation 2012 machine serve as a backup domain controller to a machine running Server Foundation 2008?

In this particular context we have a small business (10 user office) looking to establish a Domain setup. There is already one machine running Server Foundation 2008. If that machine is selected as ...
0
votes
1answer
31 views

Unable to update service communication certificate

We have added a self-signed certificate when setting up AD FS, and now want to update the service communications certificate to our domain's wildcard cert. Following these instructions: ...
2
votes
0answers
62 views

Diagnosing slow active directory logins

I'm having a hard time diagnosing intermittent slow logins on domain PCs. A bit of information about the network that has this problem: My domain spans 5 sites, all with VPN connections. DCs are ...
0
votes
3answers
76 views

REMOTE_USER variable without @DOMAIN suffix

I administer an application that enables single sign on with valid AD users and runs on IIS currently. For performance increase, I have a task to migrate the web layer to Apache/Php on Linux. I have ...
1
vote
0answers
27 views

How to prevent Microsoft Small Business Server Active Directory addresses showing up in OSX Address Book?

A client has MS Small Business Server installed and numerous iMacs and MacBooks in their office which staff use. They use Google Apps for Business for email not Exchange. Their IT guy needed to ...