A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
14 views

Uid lookups from Isilon to Active Directory do not work

If I run id 1000001from an ssh session to an isilon node, configured to authenticate with Active Directory, it returns id: 1000001: no such user. Running id TESTDOMAIN\\user1 returns the info ...
1
vote
1answer
34 views

Secure AD Access

I was just trying to access and Active Directory-Server via php (ldap) to be able to use Windows credentials for a Website Login. I did this using xampp on my standard Windows connecting to a Windows ...
2
votes
1answer
123 views

Secondary domain controller not functioning when primary domain controller is not reachable

We are small business intelligence company and we have a head office and a branch office. I have active directory running on windows 2012 R2 in the head office and another active directory running on ...
0
votes
0answers
25 views

Unable to delete DNS forwarder in 2003 domain

I have an issue with deleting a forwarder in our Active Directory integrated DNS server, I get the following error: The server forwarders cannot be updated. Access was denied. When I go to he ...
2
votes
1answer
73 views

Where is the global address list stored in AD?

Where is the GAL actually stored in AD? I always assumed in was inside of the GC. Is this correct? I know clients must query the GC in order to access the GAL, but is the GAL inside of the GC? ...
1
vote
2answers
106 views

How to assign remote users from GPO/users not authorized

My account and my admins can remote into any machine on the network, but standard users get an "user not authorized" error. The only solution I've found is to manually add the users to the Approved ...
1
vote
1answer
32 views

Centrally deploying print drivers to Windows clients

I'm looking to set up a central print server to allow Windows 7 and 10 clients in remote offices without a local print server to have print drivers installed automatically when the printer is added ...
3
votes
1answer
141 views

What is the supported way to check where my managed service accounts are installed?

I created a managed service account (not a gMSA) and installed it on a 2012 server with Install-ADServiceAccount. Now I want to be able to check where my MSA are installed (throughout the domain) ...
1
vote
1answer
32 views

upgrade Active directory 2003 to 2012R2 profile user

I have problem about profile user I have a Domain with 2 domain controller (both of them is 2003) and install new domain controller (windows 2012R2) some user in domain when login to domain all of ...
0
votes
0answers
58 views

Creating & mapping user home folders on a network share using GPO

I have deployed a fileserver which has had its harddrive partioned to include a shared partition along with a shared folder within it. The fileserver has joined my domain, hosted on a Windows Server ...
0
votes
0answers
53 views

Newly created Windows Domain users can't log in to Samba share joined to Domain

I have a Debian 7.2 server running Samba 3.6.6 joined to a Windows Domain. It all works great, except within the last week, newly created Domain users can't log into the Samba share. Existing accounts ...
0
votes
1answer
45 views

Which server was logged into by specific user

How do I go about finding out which server was logged into last using a specific user account on the domain?
2
votes
2answers
154 views

deny access to file servers and PCs on a domain - guest user

We have 70+ PCs and servers, users access files by accessing the servers from their PCs. Is it possible to deny access to all PCs and servers on a network for a guest user (he should only have ...
16
votes
2answers
772 views

What are the implications of enabling the Recycle Bin feature in Active Directory?

An admin accidentally deleted the wrong OU and it removed several account and computer objects. The recycle bin optional feature was not enabled. We used adrestore from sysinternals to get the ...
1
vote
2answers
125 views

Windows Server 2008R2 not scavenging stale DNS records

We have Domain Controllers where our internal DNS runs on. 2 Windows 2008R2 and 2 Windows 2012R2. Our stale records are no longer removed for some time now, even when running the DnsCmd commands ...
1
vote
1answer
48 views

[Solved]Internal Error 500 occur when use apache 2.4 with LDAP Authetication

I have an CentOS 7 server with SVN server configured and I have another windows server 2012R2 with LDAP, that I use for domain controller. I can use ldapsearch communicate with windows server. Well ...
1
vote
0answers
44 views

Decrease Logon Timeout Seaching for Domain Controller

I've seen this same question asked on several other forums (and SE) with no definitive answer, so I'll try to explain as best I can so that anyone with info understands the problem: AD Server -...
0
votes
1answer
110 views

Assistance with writing PowerShell script to search Active Directory for a machine name

I'm writing a script to automate some AWS-launched Windows server instances. I've got the DNS changes, and the join-domain part okay, but I'm having trouble iterating the namespace...for example; ...
2
votes
3answers
306 views

Identifying certain Active Directory accounts as “IsHuman”

I'd like to flag certain Active Directory accounts to indicate that they represent individual, physical people as opposed to groups, service accounts, built-in accounts, etc. This could be via a ...
0
votes
2answers
62 views

Windows 2008 r2 RDP issues

I have machines on another network, I am finding some strange behavior. I can RDP onto some machines, other machines I receive this error. Logon: "You must be granted the Allow log on through the ...
-2
votes
1answer
92 views

Active directory 2012 password policy

I have a windows server 2012 R2 active directory environment running in my office. I have a primary domain and a child domain. Both the domains have password complexity enabled. Active directory ...
0
votes
0answers
69 views

AD GPO “User Configuration” shows up using “gpresult” but not working. Instead “Computer Conf..” is working smoothly. Why?

Problem: I want to restrict removable storage writing access of all users except admins, and restrict removable storage execute access of all computers even admins computer (forbidding unintentional ...
0
votes
1answer
37 views

Protecting Distribution Groups [closed]

Problem A number of our AD distribution groups have recently been receiving spam from outside our network. These distribution groups are open to receive mails from outside of our network as we work ...
0
votes
1answer
23 views

Mail Server Fails to Replicate Active Directory Users

My business recently made the jump to Active Directory, and wanted our mail server to replicate AD accounts. Both the domain controller and the mail server are running Windows Server 2012, and we're ...
0
votes
1answer
37 views

DirSync Between Existing On-Prem and Office 365

We are in the process of being divested from a large corporation. To get our business unit up-and-running as quickly as possible after the sale, I setup Office 365 and created accounts for all of our ...
0
votes
0answers
38 views

Design Recommendation to Future Proof Active Directory

We are currently setting up the first Active Directory for a business within a brand new private equity group. This private equity group owns 4 businesses and will be acquiring many more. I ...
3
votes
4answers
105 views

Windows bginfo to show A.D expiry date?

Is there anyway in bginfo to show the # of days before A.D. User password needs to be changed? E.g you must change your password in 10 days. A.D password are to be reset every 2 month or 60 days.
1
vote
0answers
34 views

network device enrollment service greyed out

I've recently installed AD Certification Authority on one of our DCs. It acts as a subordinate enterprise CA, the Root CA is a standalone offline root CA and there is no connection between those two ...
2
votes
1answer
23 views

Finding Certificate Template in Certificate Authority

I'm following this tutorial: https://technet.microsoft.com/en-us/library/dn781428(v=ws.11).aspx I am on this step: Click to select the Certificate Templates container (under the CA name, not the ...
0
votes
0answers
24 views

OSX clients showing incorrect owner on samba share

We currently have a NetApp SAN with a large volume set to NTFS security style, whose permissions are managed by our active directory server. This volume us then shared via a CIFS server built in the ...
-1
votes
2answers
48 views

can i use same server for Active Directory and Windows Deployment Service?

I've a problem, can i use same server machine for both Active Directory and Windows Deployment Service. I don't know the steps to do it both can someone please tell me how to do it.
1
vote
0answers
39 views

2008 R2 RDS, keeps saying user must change password at first logon

We have a 2003 domain with two 2003 domain controllers on 2008 R2 functional level. Over the past week, when a user's password expires, they attempt to change it when logging into a 2008 R2 remote ...
-1
votes
1answer
296 views

Wireless Client (Laptop) unable to connect to domain (windows server)

I have established a server in the office using Windows Server 2008 R2 and Active Directory. And then created several users in Active Directory Users and Computers. The PC users can successfully join ...
0
votes
0answers
25 views

Active directory login error :A network-related or instance-specific error occurred while establishing a connection to SQL Server

I have an unexpected error while login to the asp.net application through active directory (windows authentication).. I made hard search for this error and i didn't found any thing about SQL server ...
1
vote
1answer
35 views

AD Query: Disabled Accounts still in Groups

Is it possible to have a query that finds all users in Active Directory that are disabled, but are also members of ALL groups - or All groups except for 1? Tried the following: (&(objectCategory=...
0
votes
1answer
24 views

how to add my google apps accounts to Active directory Federation service?

Note - There are many discussions about syncing Google app accounts to Active directory. This is a different question - I would like my users (about 10) on google app to login to my local web apps i....
1
vote
1answer
127 views

Use Linux BIND DNS server for my Windows Active Directory 2008 R2

How can I use a Linux BIND DNS server for my Windows Sever 2008 R2 Active Directory? We are trying to avoid having to use the Windows Sever 2008 Server as a Domain Controller at all. We want to use ...
1
vote
1answer
72 views

Script for user movement based on OU

Any script which will read the department attribute of users (under an OU and sub OU's) and move them to different OU named as department ( already created OU structure name same as their department ...
0
votes
0answers
120 views

Active Directory - map drive to all computers in specific OU

Having some problem in basic looking thing. Computers are above 150 PCs with differnt OS's (production area). Connected to one domain. I want to map drive (with domain credentials) to all computers in ...
2
votes
1answer
104 views

Why can't I remote manage a domain-joined Windows 10 computer?

I have a Active Directory domain of old Windows 7 computers and introduced a new Windows 10 computer. However, when I right-click the Win10 computer in AD Users & Computers, and select Manage, I ...
22
votes
6answers
2k views

What causes a workstation to lose trust with the domain controller?

I've received the error several times on Windows 7 Workstations and Laptops where it loses trust with the domain controller, and I know how to fix it, but why does it do that?
0
votes
0answers
37 views

Active Directory password policy for Business Days?

I don't think there's any way to do this after looking through Microsoft's password policy documentation, but on the off-chance that someone was particularly clever: Is it possible to create a policy ...
0
votes
0answers
63 views

Admin Users cannot write to New Custom AD Attribute, Normal Users can

I have extended our AD schema and added a field called TerminalName to the User Class. The logon script gets the ClientName environment variable and writes it to the field. Initially the script got an ...
3
votes
1answer
81 views

Error Creating OU: Name is Already In Use

I have an OU structure for computers that looks like this: Workstations |-- Building | |-- Floor, Department, or Approximate Location ... I want to create a child OU called "3 North" in ...
0
votes
0answers
41 views

Mounting samba directory changes all file permissions to user who mounted it

I have a xubuntu 14.04 client, a debian 8 Samba File server and an external Active Directory service. I log in as user1 on the client authenticating against the ADS with winbind. My home directory /...
2
votes
0answers
48 views

Why do Roaming User Profiles stay at home?

PREFACE: I am a helpdesk operator/student who has volunteered to work on local small business IT problems for experience. I apologize in advance if I have missed an obvious solution! I am attempting ...
0
votes
2answers
46 views

Restricted group local administrators can RDP into DC

I have added restricted groups to my Desktops OU and this adds the "Local Admins" security group to the Local Administrators group on workstations in that OU. The issue is, that after this GPO is ...
-1
votes
1answer
18 views

Increasing Size of VHD having DFSR Data

I have two file servers which are replicating files through DFSR across two different locations over WAN link. I want to increase one of partition size having replication group folders on it. I was ...
5
votes
1answer
133 views

LDAP not preventing disabled users from authenticating

I have an interesting situation where we have the exact same application running in a "Development" environment and another in a "Testing" environment behaving differently when authenticating with AD ...
2
votes
0answers
36 views

How can I change the default location of the Adobe Premiere Pro (creative cloud) media cache location?

Adobe Premiere Pro on Windows machines stores its 'media cache' files in the %appdata% directory. On our network, this is redirected to a server share, and consumes significant amounts of storage ...