Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

3
votes
1answer
59 views

FRSDIAG / NTFRSUTL looking for servers which don't exist

I am using the FRSDIAG room(from tech-net) to do diagnosis on FRS replication. The issue is its tying to check the DC's which no ,longer exist . Error being "missing server reference for the server ...
1
vote
1answer
65 views

How can I delegate “Attributes 1-15” in Exchange / AD?

The following attributes are present on an Exchange user, and this is what my colleague sees: (notice the locks) How can I properly delegate Read access (or Read write if it must be) to these ...
0
votes
1answer
98 views

Installing ADAM on Windows Server 2012

I'm currently tasked with moving a Web Application that uses Active Directory Application Management (ADAM) from a 2003 server to a 2012 Server. My question more about any references to install ADAM ...
1
vote
0answers
28 views

Where are the attributes for room mailbox stored?

I'm using Exchange 2007 and I've created a room mailbox. I want to know where the settings of the room mailbox are stored? What are the attributes used to store room mailbox information? Are they ...
1
vote
2answers
134 views

Windows Server 2012 R2 in a Windows Server 2008 R2 domain

Can a server running Windows Server 2012 R2 (file server, app server, etc.) exist on a network with Windows Server 2008 R2 domain controllers, or do the DC's need to be upgraded first?
0
votes
1answer
92 views

Domain controller is registering 2 IP addresses with DNS

Recently a DC was promoted and the IP was used from the old DC which was demoted and shutdown.How tostop this DC from registering 2 IP addresses with DNS? Please let me know if any questions.
0
votes
1answer
39 views

Can a Win2012 R2 domain controller be used as the AD FS host in Single Sign-On integration to Azure AD?

I have upgraded our Active Directory from Win2008 R2 to Win2012 R2 in preparation for an integration with Azure Active Directory. I know the integration can be done with Win2008 R2, but I figured ...
0
votes
1answer
40 views

Domain controller with new domain on my network

I am migrating my organization from one domain to another. The old domain can be referred to as X, and the new domain is Y. On domain X, I have created a VM that will act as a DC for domain Y. ...
4
votes
3answers
251 views

Can a user see the Active Directory computer description in the Windows network browser?

This may qualify as another Stupid Question from someone fairly inexperienced in Active Directory, but I've noticed a handy "Description" field for computers in the Active Directory Users and ...
1
vote
0answers
42 views

Sysvol Replication issue

I have read a lot about this recently and must say it is doing my head in. now what I did was 6 months ago we did a upgrade of our infrastructure. We had a 2008 R2 server for domain controller now I ...
0
votes
1answer
42 views

Get file access permission of a specific user on a server in a different domain

In my environment, there are 2 domains connected via WAN link. Please look at the image below for the system topology: I want to display the folder access permission of a user from one domain on a ...
1
vote
1answer
54 views

Do both Active Directory servers need to see each other for replication?

I'm trying to set up a remote DC for DR, and I've chosen to put it in AWS in a VPC with our other servers being backed up. I can restrict that with security groups to only accept traffic from the main ...
0
votes
0answers
61 views

samba4 DC distro with samba4 git DC

We have already Samba4 AD DC which is installed via git from sources (to Fedora), and it will work fine. Now I should add there a secondary DC to domain, but I would like to use (CentOS 6.5) distro ...
3
votes
1answer
36 views

Change service user password in AD running service

I have a running service with logon user credentials using a service account in AD. If I change the service account password in AD users and groups but not on the service startup/logon details would ...
1
vote
1answer
161 views

Can't delete Active Directory object

I've been trying to solve this mystery for a couple of days but I think I've reached a dead end. We have delegated user creation and administration to a group. This permissions are applied to a ...
0
votes
0answers
124 views

Authenticate Dovecot against Active Directory

I'm trying to authenticate Dovecot against a Microsoft Active Directory on a Windows 2008 R2 Domain Controller. Dovecot (Version 2.2.9) is running on Ubuntu 14.04 (3.13.0-30-generic). My Configs: ...
0
votes
0answers
65 views

Kerberos and SSH login

I've just configured a RHEL 7 for windows authentication (idmap_ad). Every check works but if i try to ssh with a domain user i get the error: Connection closed by ::1 Here follows the ssh log in ...
2
votes
2answers
138 views

AD Group and Distribution Group with O365

I have a O365 with Exchange, and a local AD. I want to manage distribution groups and distribution groups members via PS scripts (that will run by scheduled task), that look users' AD attributes ...
0
votes
1answer
50 views

Service can't access a shared folder while the same console app can (FileSystemWatcher object)

i wrote a windows service that should monitor a folder and do stuff as soon as a file is copied/moved/created inside that specific folder. My problem is that while I execute the program in a console ...
0
votes
2answers
55 views

specify LDAP Query

When I ping 140West-dc it returns: Pinging 140West-dc.bvncap.local And my LDAP Query is as follows: LDAP://dc=bvncap,dc=local Is there anyway to pass "140West-dc.bvncap.local" to LDAP query ...
0
votes
3answers
108 views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
3
votes
2answers
278 views

Share folder with realmd / sssd and AD integration

I've setup a CentOS 7 machine, and joined it to our AD via realmd through: yum install realmd samba-common oddjob oddjob-mkhomedir sssd realm join --user=myuser@mydomain.local mydomain.local After ...
2
votes
1answer
90 views

Minimum permissions to send email through c#

In an web site, i've developed a function to send email (i.e. connect to exchange). I need to use a special user that in Active Directory has the permission to send mass email. On the other hand, this ...
-1
votes
1answer
64 views

Which attribute in Active Directory is used to store 'Outlook Anywhere' details?

I'm using Active Directory and Exchange 2010. I want to know which LDAP attribute in Active Directory will be affected if I enable or disable 'Outlook Anywhere' feature.
0
votes
2answers
43 views

Domain users in relation to local machine's settings

The lack of terminology's knowledge make's it difficult to find an answer with search engines for the following issue. Please excuse me. The problem is as follows: In a local windows network ...
2
votes
1answer
147 views

Search AD for empty sAMAccountName & userPrincipalName

I'm in the process of implementing a User privilege management solution and it needs to audit all users within our AD. It's currently falling over due to an account which has two blank attributes: ...
2
votes
2answers
270 views

Remove 'dead' server from Active Directory

My SQL server has catastrophically failed. Is it possible to remove its entry in the Active Directory completely so that another server can be added with the same name and IP address? If so, could you ...
0
votes
1answer
70 views

Windows 2008 r2 not using default security groups (ie Domain Admin) prevented from changing own password

Apologies if I did not find a question similar to mine but i have searched honest! Firstly we have undertaken a no default group approach to our security on active directory. This has been very ...
0
votes
1answer
58 views

Active Directory DNS probelm

I have following scenario. Windows 2008 R2 base Active Directory DC (DC1), which is hosting DNS+ DHCP too. (previously it was on windows 2003 32bit, i migrated it last year on 2008 r2 64bit). Also ...
4
votes
2answers
384 views

How to check if an AD username is already used

Thank you in advance for your help. I found something related at the following link but was unable to find the solution I was looking for through here. Check existance of domain accounts with ...
2
votes
1answer
42 views

New NTDS connections on a site: Need order of operations for local and remote sites

I have two AD sites: Hub and Spoke. ISTG is turned off for both of them, and a new DC is being placed in to the site with no ISTG enabled. What is the correct order of operations to set up manual ...
-2
votes
2answers
41 views

Active Directory. Two questions. Purpose of permissions and program to test AD [closed]

I'm new to AD and I'm learning with some books. I have two questions, being the first question the most important. 1) I have created an users OU under my DC. I created some test users. I can assign ...
3
votes
0answers
98 views

My two-way trust with selective auth seems to behave opposite to a one-way trust

I'm not sure why I'm the only one running into this, I think it's a larger problem with Server 2012 and RDS protocols... With 2008 machines, you can use utilize a one way trust to authenticate across ...
4
votes
3answers
272 views

If I join esxi to an Active Directory domain, how does it choose which DC to authenticate to?

I'm familiar to vSphere and large installations, and not at all familiar with the free products. Topology & configuration We have some branch offices that use ESXi and have a DC resident on ...
1
vote
1answer
48 views

Windows 2K8 R2 in AD environment not allowing SMB connections

I've got 2 Windows2k8R2 VMs. One is the domain controller, the other one is a TS server. Both have network discovery and file sharing enabled. Currently the TS server is not allowing any SMB ...
3
votes
2answers
79 views

DFS and Replication mesh between 3 servers - How is a local server selected

As an example I have 3 DFS servers all on different sub-nets each with an authoritative initial share on each (\\svr1\accounts, \\svr2\sales, \\svr3\hr). I have enabled replication on all servers ...
2
votes
1answer
74 views

Active Directory backup/restore without DSRM

I'm trying to backup my local DC to AWS for DR. When running locally, a system state backup and a restore through DSRM works fine. Unfortunately, a server in DSRM fails to boot in AWS (a situation ...
1
vote
1answer
166 views

DFS Setup - The namespace server cannot be added. The system cannot find the path specified

I went to DFS Management and added a created a New Namespace. For the namespace server, I specified my Primary Domain controller (netbios name: primarydc). For the namespace, I enter Files. I use a ...
0
votes
2answers
70 views

Which Group Policy wins out of two enforced policies with similar settings?

I have a situation where I need to modify an enforced group policy object, however due to the sensitive nature I must test my results first to one test user. In order to do this I plan to create new ...
6
votes
1answer
306 views

Synology and Active Directory - “no logon servers available”

I have a Synology Diskstation DS412+ here configured for Active Directory authentication on the shared folders. I have a shared folder that our backup software writes backups to (so, CIFS). This all ...
2
votes
1answer
74 views

How to restrict the TCP listening address of a Windows 2003 AD DNS server

I have a Windows 2003 AD integrated DNS server which I want to listen for DNS traffic on adapter IP addresses only. I have followed the steps in the technet article, however. After I complete them ...
-1
votes
1answer
115 views

How can I check my permissions in Active Directory? [closed]

I have my virtual machine (Windows XP) and some user account assigned to me. I also belong to several groups. What I actually know is my user name, password and a couple of other things that I have ...
2
votes
0answers
114 views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
0
votes
1answer
41 views

Roaming Profile Control [closed]

I noticed that with Roaming Profiles enabled that even applications have been roaming. Is this normal? Is there a way to keep applications from roaming? I like how Firefox bookmarks move from machine ...
2
votes
0answers
56 views

Mavericks - APN Active Directory Users not being pushed

We have hit a problem with our current AD -> OSX Server integration project. We have our OSX server (mavericks) connected to our AD domain and running open directory/profile manager. AD users can ...
1
vote
1answer
184 views

How to determine the values for an LDAP bind to a Windows Server 2012 DC? [ldap_bind: Invalid Credentials (49)]

Sigh. I have been trying for nearly 6 hours to get my Gitlab deployment to authenticate via Windows Server 2012 Essentials Active Directory LDAP. I am running Ubuntu 14.04 for my Gitlab server. ...
1
vote
1answer
49 views

Is the Kerberos SPN FQDN significant to the server, or is the keytab enough?

I spend most of my time as a developer, so I'm not familiar with all the details... I have a service running on a linux host. I want to use Kerberos to transmit identity information to the service. ...
0
votes
0answers
53 views

SCCM 2012 R2 install: error with samba4 domain

Am attempting to install SCCM 2012 R2 onto a member server in a domain with a Samba4 DC. I have every reason to believe that AD is working: smbclient reports (what I believe) are the appropriate ...
1
vote
2answers
60 views

add exchange extensions to AD

we have a windows server 2012 with AD on it. we sync that to office 365 but a few of the options like moderated email groups are not present. I contacted Microsoft tech support about this and they ...
0
votes
1answer
159 views

Password reset fails for end users when minimum password age set for more than 0 days

Our Help Desk has been resetting user passwords with "user must reset password at next logon" for years. Recently reset default domain policy for "minimum password age" from 0 days to 5 days. Now ...