A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
2answers
121 views

Active Directory Rebuild - User Login

I have around 100+ users in a windows 2008 active directory. There is only one active directory controller / server in the network. If the server hard drive crashed, and if I rebuild the active ...
-2
votes
1answer
35 views

Trouble Active Directory windows 2012

We are using a windows server 2012 and we have a problem. Our stations use windows 7 and windows 8. When we add a person in an access group in our Active directory, the user must restart their ...
0
votes
0answers
54 views

kdm and ssh detecting different fully qualified domain name when using kerberos authentication

I'm attempting to setup Kerberos login support (Windows AD domain providing the kerberos) for Kubuntu 12.04 Linux workstations at the company I'm at. It's almost completely working but I can't get ...
0
votes
2answers
46 views

Using Exchange 2013 with Samba as DC

I realize that Exchange relies heavily on AD, and I was wondering if it is possible install Exchange 2013 into an environment that is running Samba 4 as the DC?
1
vote
1answer
29 views

Active Directory 2008 multiple local user accounts

I have installed a new Active Directory 2008 Domain controller into my environment. We are currently running the 2008 AD server as a secondary. The primary AD server is a 2003 Domain Controller. We ...
1
vote
1answer
71 views

How to avoid frequent KVNO increases, when using Apache HTTPD with mod_auth_kerb talking to AD?

I've setup Apache HTTPD 2.4 with mod_auth_kerb, created a service account on Active Directory, added a SPN for my http hostname, created a keytab file on the linux machine, and had SSO start working ...
0
votes
1answer
46 views

User Unable To Login Remotly

When we configure a computers, we always connect it to our company domain after we add the user into our AD. So the next time we reboot the system we can login with the user credentials since we join ...
2
votes
5answers
253 views

How to prevent remote code execution from a domain member server?

Is there a way, using a firewall, Group Policy setting, or other control, to prevent someone logged into a domain member from being able to remotely execute code on a domain controller (that they ...
1
vote
1answer
79 views

Ubuntu 14.04 Failing to join domain for Integration with Active Directory (winbind & samba)

I've followed the tutorial at this link https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto Everything seems to be configured somewhat correctly, net rpc join worked and the realm is listed ...
0
votes
1answer
66 views

Forward Lookup Zone Domain, Name Server IP “Unknown”

I have added the first new 2012r2 DC to an existing domain, that is running on 2003 servers. After getting it all setup, ADDS replicating, DNS replicating, DHCP setup etc. Everything I think seems to ...
1
vote
1answer
42 views

Active Directory: Permissions to get Kerberos Service Ticket

I have an Active Directory with a KDC running on Windows Server 2012. At the moment, every user can request service tickets for every service from the TGS. I'm looking for a solution where the KDC ...
2
votes
0answers
176 views

How can the x-frame-options HTTP header of ADFS 3 be manipulated?

By default, ADFS 3 responses contain the "X-Frame-Options: DENY" HTTP header. This prevents ADFS from being run in an iframe, because this presents an opportunity for clickjacking attacks. At the ...
0
votes
0answers
27 views

How to sync Azure AD users to on-premise domain controller? [duplicate]

I have just setup a on-premise domain controller with Windows Server 2012 R2. I now need to add users to it. I want to use the list of users I already have in my Azure AD. My ultimate goal is to be ...
0
votes
0answers
53 views

(Windows 7) Have Log on screen show local user “Tiles” and “Other”

I have a domain running windows 2008 R2. In one lab (running Windows 7 SP1) I want to be able to manage them using Group policy for the machine, but don't want the users to have to type in a network ...
1
vote
1answer
28 views

Windows Authentification with IIS and domain groups

We have a web application (ASP.NET MVC) installed on IIS for one of our clients with Windows Authentication enabled. The authentication is working perfectly but the problem is at the authorization ...
0
votes
0answers
73 views

Unable to edit Account Options with Delegate AD access (Access Denied)

We allow the IT services in other countries to manage certain parts of their AD/OU via Delegate Control. Under one Country OU, the delegate rights to edit Account Options are no longer working. This ...
2
votes
1answer
40 views

2 different names in Microsoft Active Directory

Can you tell me, how I can keep a name in 2 different languages in Microsoft Active Directory? One name must be in native language (Russian or Chinese), second in English.
0
votes
2answers
45 views

Removed AD User, Need to Associate Existing Profile to New Account

Some details Server 2012 R2 (AD Server) Windows 7 (Users Computer) Accidentally removed an AD User, stupid mistake. Unfortunately it seems the user was permanently deleted (didn't make use of the ...
1
vote
4answers
98 views

How to access a machine with a wrong network address?

I have a Windows Active Directory network in a LAN of addresses 192.168.10.0/24. I have another site that has addresses of 192.168.11.0/24, where all AD servers are in the 192.168.10.0/24 site (I ...
-1
votes
1answer
29 views

Connecting an Azure VM to active directory domain behind ISP NAT

I have an active directory local domain set up with 2 DC's running DHCP and DNS. Because my ISP uses NAT there is no way to host services externally. How can I link an Azure VM into my local active ...
-2
votes
1answer
63 views

AD Best Practice for the connection specific DNS suffix network setting

What is best practice for this setting? It also goes by DNS Domain Name in DHCP scope settings. The only documentation I can find about these suffixes and domain name settings specifies the the ...
0
votes
0answers
48 views

How to add a domain user to passwd for OpenSSH in Cygwin?

I have OpenSSH installed on a Windows Server machine (package from MLS Software). I want to add some domain user to the passwd file. I do mkpasswd -d -u username, but the program just hangs because ...
0
votes
1answer
62 views

What user accounts are necessary on the domain controller pc?

2012 R2 environment When a server is created to be a domain controller, it can be setup using the domain\administrator account when is attached to the domain. The machine will also have the default ...
1
vote
1answer
86 views

Winbind not enumerating users and groups of trusted domain

I'm using Samba 4.1.6-Ubuntu in Ubuntu 14.04, for authenticating users from two domains with a one-way cross-forest trust between them. Samba machine is joined to DOMAINA, while DOMAINB is the trusted ...
1
vote
0answers
52 views

Changing login-formats for Linux and Active Directory

On CentOS, I run realm list and see login-formats: %U@mydomain.local I'd like to change login-formats: %U@mydomain.local to login-formats: %U How would I go about doing this? I'm assuming there is a ...
0
votes
1answer
34 views

Remembering homeMDB & msExchHomeServerName when disabling for later reconnecting

My environment requires me to be able to create Exchange mailboxes on existing users, disable those mailboxes and then, some time later, re-enable them and have Exchange reconnect them automatically ...
1
vote
0answers
44 views

Child server cannot detect parent server users

Good day! I have two Windows 2012 R2 servers in a Active Directory forest, one as parent with the domain local.test and another as a child with the domain child.local.test. The child server has been ...
5
votes
1answer
79 views

Windows 8.1 Pro migrating “Microsoft live” account to domain account

For a variety of reasons a significant number of our Windows PCs are not joined to our Windows 2012 R2 Active Directory domain. We are in the process of rectifying this, and are joining PCs on a ...
0
votes
0answers
37 views

How can I list all users in AWS Directory Service?

I'm looking for a way to list all users in an AWS AD (small), preferably with created date (of the user). Is there any way to do this? The AWS console functionality seem somewhat limited. Maybe via ...
0
votes
0answers
68 views

MultiOTP + FreeRADIUS + MS Active Directory

I am running a CentOS 6.6 64 bit Server with FreeRADIUS 2.1.12 installed from base repository. Additionally I am using MultiOTP (http://www.multiotp.net/) which is configured to connect to our Windows ...
-1
votes
1answer
84 views

give permission to Active directory user to enable/disable a device

In my network, one of users uses DOS application and he need the permission to enable and disable his graphic card using devcon command . this user is Active directory user . how can i give him a ...
2
votes
1answer
35 views

Active Directory Domains and Trusts wont start

I just installed Active Directory on Windows Server 2008, but when I tried to open Administrative Tools => Active Directory Users and Computers, it shows me this error meesage : How can I solve ...
2
votes
1answer
117 views

Linux AD integration, unable to login when using Windows Server 2012 DC

I am trying to integrate my CentOS 6.6 servers into Active Directory. I've followed this guide from Red Hat using configuration 3 (SSSD/Kerberos/LDAP). When using a Windows Server 2008 R2 server as ...
1
vote
1answer
22 views

Windows Server Domain User and Workstation Software

I have a new server with windows server 2012(domain) and want to add a few new users and workstations( with AD), so all user could login on all workstations. That is easy, but now I would like to add ...
0
votes
0answers
13 views

Outdated files after Server 2008 RAID1 failure

I have a server running Windows SBS 2008 with 2 HDDs in soft RAID-1. Today some kind of RAID crash occured - the server could not boot saying there're no bootable device. I removed both drives from ...
2
votes
0answers
41 views

Exchange 2013 and AD/GC issues

I have Exchange 2013 (minimal install and all roles are on a single server) on-premises running on a Windows 2012 R2 server (both Windows and Exchange are patched and up-to-date). Basically this ...
1
vote
1answer
37 views

Allowing Domain Group to Administer IIS Server

I have a Windows 2012 server with IIS 8 on it. I am trying to allow users within a IIS_ADMIN group on my Active Directory to be allowed to administer the server. The Problem When I log into my ...
0
votes
2answers
78 views

Connect PC to domain running on Azure Virtual Machine [closed]

This is my first time working with domains, and I was wondering how I would go about connecting a PC that runs on my home network to the domain controller that runs on a Azure Virtual Machine (eg in ...
0
votes
1answer
82 views

Windows Server 2003 AD Replication error 1864

Quick question on Active Directory replication. The AD topology is simple: Hub site and 10 Branch sites. I have one connection object between Branch "A" DC and Hub DC in Active Directory Sites and ...
3
votes
2answers
112 views

How do I properly backup AD Users, Groups and OUs?

At work, we have a Microsoft Small Business Server 2011 server that's doing AD for the company. There are multiple Windows client machines that are part of the domain, but that server is the only ...
1
vote
0answers
16 views

How to define a Management Role Scope which includes multiple OUs in Exchange 2013?

I need to define several custom Management Roles in an Exchange 2013 environment, whose scopes must be limited to recipients in specific OUs; however, these OUs are at the same AD level with other ...
0
votes
0answers
45 views

Can't ping domain controller from PC on a remote subnet

In trying to connect a PC from a remote subnet to our domain controller. Initally the domain controller couldn't contact the pc, but resetting the vpn connection resolved that. Currently the PC from ...
1
vote
0answers
33 views

Why is New-DSComputer failing to join an ec2 instance to the directory services domain?

I have a domain xyz.com in AWS Directory Service, and I am trying to join an EC2 instance to this domain using PowerShell. I can do it manually but I am trying to automate it so that when the next ...
4
votes
1answer
43 views

Issues with demoting a DC, remnants of failed SBS2011 DC still in directory

So, an environment I'm new to, is having some problems that I'm trying to correct. Old config: Single SBS2011 server, a second 2008 R2 DC was added at some point. SBS failed, roles were seized and ...
-4
votes
1answer
70 views

How to auto run a program on the client side after connecting to AD domain? [closed]

How to run a program on the client desktop after connecting to Active Directory domain ?
0
votes
0answers
62 views

Clean up AD References to now deleted mailbox Exchange 2013

We recently separated one of our mailbox databases into three databases to better manage its growing size. The migrations all went well, and the old database has been dismounted for some time. Today, ...
6
votes
1answer
392 views

Unable to move OU in Active Directory (Access is denied)

Background I tried moving an OU in Active Directory today and received an Access is denied error. Upon further inspection of my AD user account I had the necessary permission to move the object (I ...
0
votes
1answer
41 views

Weird authentication error from Active Directory Win 2008R2

I am trying to do a ldap query from a OpenBSD client to windows 2008R2 active directory and I am getting this error,"49: Invalid credentials". I don't understand why if I tried the same username and ...
1
vote
1answer
57 views

ADWS on Server 2003 Base

Got a hard one to deal with here. I am trying to install web services on Server 2003 SP2 (x86/ base NOT R2!) but when I install it I am getting errors with the resulting Log: 0.031: ...
0
votes
2answers
58 views

Active Directory 2003 32-Bit to 2012

We're moving from a Windows 2003 32-Bit AD setup to a 2012 R2 environment. My question is whether or not I need to do the upgrade in a step-wise fashion: first to 2008 and then to 2012. I've read ...