A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
32 views

Active Directory Won't Authenticate

Something is really buggy with our Active Directory here at our company. We can query and ping everything just fine. The time is correct. We have restarted both of our Domain Controllers. We also use ...
3
votes
3answers
2k views

SQL Server Windows Authentication fails after tonight's security updates: The login is from an untrusted domain

We have the following setup: One Domain Controller (DC, Server 2003 R2 Standard x64) One SQL Server (SQL, Server 2008 R2 Standard x64) some clients. All machines are in the same domain. All user ...
0
votes
1answer
49 views

Using Administrator Credentials to login as a User to Their Desktop [duplicate]

Other than memorizing and documenting each user's credentials, is there way that I can use the Windows Domain Administrator credentials to login to a workstation-user's desktop as if I were them? I ...
0
votes
0answers
54 views

Samba AD DC Authentication Problems

I'm trying to setup an AD PDC using Samba4 on Ubuntu 14.04. My endgame here is to have an AD domain with users created by LDAP that can login to the domain and use roaming profiles, so that any users ...
1
vote
1answer
47 views

Remote location management copy and install large software updates to 50 LAN

Initially posted to Stack Overflow and was directed here. I'm new to programming and am trying to write a powershell script to manage software updates. I'm in a windows domain environment with over ...
-2
votes
1answer
100 views

The security database on the server does not have a computer account for this workstation trust relationship. Error in 1 PC [duplicate]

We have a small office with 9 PCs and a Windows Server. Today one PC, Cypher shows this when trying to log in: The security database on the server does not have a computer account for this ...
0
votes
0answers
32 views

Obtain krb ticket for another user

I have a system account in my domain (DOM\sys) and it has access to service cifs/server@DOM. I want to obtain a ticket for this service using my own account (DOM\user). In other words I need sudo-like ...
0
votes
1answer
22 views

Performing Nonauthoritative restore of AD on offline DC

I have a domain controller that's been offline for 3 months. If I bring it back online normally, it will cause issues due to the tombstone life now being over the 60 day expiry. What's the best method ...
1
vote
1answer
30 views

Windows AD to disable user after incorrect login

Pardon my naïveté. I am not a technical person. We are using Windows Active Directory for user authentication, for example to login to workstations (PCs), for Citrix, etc. There is a quality ...
0
votes
1answer
41 views

Set timezone in Active Directory

I have a script that we use to add new employees to our Active directory domain and groups. We are trying to see if there is a way that we can also add timezone with the script but I am not find ...
0
votes
1answer
70 views

Verify that users are required to change their password on their first login

Active Directory has a setting that forces a user to change his password upon his next login--visible in the AD Users and Computers applet, when right-clicking a user, selecting Properties, then ...
4
votes
1answer
191 views

New Domain Controller with DNS in Windows has forwarders setup

I just installed a new Windows 2012 R2 domain controller. I was looking in the DNS Server, and there were two DNS Forwarders setup, which were other domain controllers. "Forwarders are DNS servers ...
-1
votes
1answer
75 views

DFS Namespace inaccessible when PDC is unavailable or moved

Our current setup uses two DFS servers acting as referral servers for our DFS Namespace. The data is replicated from the Live server to the DR server at our second location. The aim is to have the ...
0
votes
2answers
68 views

New Domain Controller to combine two Domains into one: Domain replication or DNS?

Background We currently have two networks, one in London, and one in Brighton. We use Office 365 for email, Lync and Sharepoint, so there is no Exchange server. Both offices are connected by a VPN. ...
0
votes
1answer
47 views

Machine based group policy to change display setting

How to change display using computer group policy?
0
votes
0answers
54 views

DNS won't respond to one DC

I have a multi site AD setup and am having issues with trust/netlogon/dns on the DNS DC in site 2. Things were fine until a month or so ago, only discovered issues today by chance reviewing logs. ...
-1
votes
1answer
41 views

Main server 2008R2 crashed. Need to copy AD from another server in same IP range

Unfortunately the main server crashed and I have re-installed Server 2008 R2 Standard in it. The server had only ADDS, DNS Services and File Services. I have the AD on a desktop computer where Server ...
1
vote
2answers
62 views

Giving access to multiple users for remote desktop

I have 50+ users whom I want to give remote desktop access to multiple VM machines. Instead of adding each individual user to "Remote desktop users" I created a AD security group & added all the ...
6
votes
1answer
55 views

How to filter settings within a GPO that only applies to Windows XP?

We have several GPOs containing many settings that have accumluated over time. I have spot-checked some of them and stumbled over settings that only apply to Windows XP (we exclusively run Vista and ...
0
votes
2answers
40 views

Group Policy to force all web traffic to a specific page OR GPO to display unclosable popup to get users attention

We have a number of tasks users need to complete over the month (time sheets, reports, etc) and I am trying to think of the best way to force users to complete these tasks. Currently, we send ...
0
votes
1answer
191 views

ADSI Linked Server: Why can I query AD in VBA, but not as a Linked Server?

After all the reading and research I've done, this seems like the most logical place to post this question: Why can I query Active Directory using VBA, but not a Linked Server in SQL Management ...
4
votes
1answer
63 views

Event ID for an Active Directory Domain Rename

My Active Directory forest has 6 child domains. As part of a security control, we are required to get alerted (e.g. using SCOM) when someone triggers a change in the domain name. My question: Is ...
0
votes
0answers
31 views

Add a computer which is outside my LAN into my Active Directory

Is it possible to add a computer with public static ip address into my active directory? Do we need to use any vpn to bring the remote computer within the network to add that computer within active ...
0
votes
1answer
26 views

“Entire Directory” option missing from Locations in “Select Users, Computers, SrvAct, or Groups” dialog

I'm a very inexperienced server admin, so if fail to provide some important information I apologize in advance. I am doing some development for a very small software company and I'm having a bit of an ...
0
votes
1answer
58 views

AAD Sync not able to connect to online service using powershell

When trying to connect to my Office 365 tenant using connect-msolservice from powershell I get the following error: Connect-MsolService : The HTTP request was forbidden with client authentication ...
0
votes
0answers
22 views

Mac Maverrick AD binding

I have about 40 Macs on my AD Domain running OS X 10.9 (plus OD server). Recently the two MacPros (one aluminium case and one black shiny ash tray) have lost their binding to the AD, so I have unbound ...
0
votes
3answers
95 views

Prevent users from downloading certain files

I am working for an organization which helps people with mental disabilities. All of them have a user account in our AD. The client computers are running a mix of Windows 7 and 8.1, and the server is ...
2
votes
2answers
76 views

Windows Server Administration - which services are safe to run internet facing?

Coming from a Linux background and now having to manage some Windows servers (2008R2 & 2012R2) I'm wondering which services are safe to run directly over the internet. The servers are all internet ...
2
votes
0answers
59 views

Group Policy - Drive Mapping Preferences - slow login even if only using Computer Config side

We are having some users with very slow login times, up to 20 minutes, but only for a handful of users. I've narrowed it down to a particular GPO that does nothing but Drive Mapping Preferences. I ...
0
votes
1answer
41 views

Solutions for bridging Solaris/AIX to Active Directory?

I need to have Solaris and AIX systems obtain authentication and name services to AD. I have had some success with Solaris using OpenLDAP as a proxy for user authentication. I have also successfully ...
4
votes
1answer
277 views

Search-ADAccount :: Finding Inactive, Disabled or Expired Accounts

The Search-ADAccount cmdlet has switches -AccountDisabled, -AccountExpired and -AccountInactive; the results of which may not be mutually exclusive nor inclusive. i.e. an account which was disabled ...
0
votes
1answer
37 views

Folder redirection for multiple locations

I need to find a way to redirect a folder at one location to the file server at the same location and repeat this for all of the other sites. So all of the computers at SiteA will redirect to the ...
0
votes
0answers
69 views

Squid NTLM authentication started to fail

I have a squid server authenticating against a Win2k3 AD. The authentication is failing since today and I'm sure it is something on the windows side because on the linux machine there were no ...
0
votes
0answers
66 views

Is it possible to import a GPO into Samba 4 without the use of Windows tools?

I have an Ubuntu 12.04 server which also includes a Samba 3 installation. Currently, I only use it to authenticate users who try to log on into Windows workstations and it works very well. Now, I ...
1
vote
1answer
72 views

Ldap+kerberos authentication through AD

Is it possible to configure ldap+kerberos authentication on a linux machine without joining it to windows domain? I have to create a pool of VMs using RHEVM with a pretty short lifetime and I do not ...
1
vote
0answers
19 views

Single Sign on for Virtual Machine

Does anyone know if it is possible for a Windows Virtual Machine on a Windows host to take advantage of Single Sign on? The objective is to only have to login once to the host machine and for the ...
0
votes
0answers
41 views

How to do when rename Domain Name in Active Directory

I installed a DC on Windows Server 2012 R2 over MS Azure. Now I see that the name of the domain what I use, isn´t so good, so I must change it. When I start Start the Active DIrectory users and ...
0
votes
1answer
24 views

If I apply local group policy for the first time why it is not taking effect untill I restart the machine?

I applied local group policy (Computer Configuration - Software Restriction Policy) but policy is not taking effect. I tried this on domain member (machine is in connection with Domain Controller) and ...
0
votes
1answer
32 views

What is the difference between Site Link Bridges and BASL?

I have a hub and spoke network where the spokes can't communicate with each other. I understand that BASL is what's responsible for making links to sites that are non routable. How does a Site Link ...
1
vote
0answers
265 views

Benign “The specified domain either does not exist or could not be contacted” error while using Active Directory Users and Computers

I have a single Windows Server 2012 R2 Active Directory Domain Controller for domain MYDOMAIN. I want to perform remote administration of the Active Directory from a workstation that is not joined to ...
1
vote
1answer
62 views

Kerberos, Active Directory, and Linux/Unix Servers

I have done some research on the topic, but I can't quite find a straight answer to my question. Please tell me if my understanding is correct. Kerberos can be used as the bridge between a ...
1
vote
0answers
73 views

Specify DNS/Domain Controller when authenticating against a different domain

Client has two domains residing on the same subnet/physical network. Essentially there's just a POP3 mail server (OLDSERVER) and one of the old DCs (OLDDC) on life support to keep OLDSERVER happy. ...
1
vote
2answers
53 views

How to find potential AD-groupname and OU-structure dependencies of eco-systems?

Currently we are in the process of redesigning our AD infrastructure. I am pretty concerned about the possible impact a change of several group- or OU-names might have to our eco-systems (like IAM ...
1
vote
0answers
42 views

Windows Server 2003 Active-Directory migration

I am going to migrate my windows server 2003 active directory to a windows server 2008. Nearly everthing works fine now but I can't set the operations masters. I am logged in as Administrator on my ...
0
votes
1answer
475 views

The user name or password is incorrect error while joining Windows domain

I am trying to add an second domain controller (DC) to my domain. The server is running Windows Server 2012 R2. After getting the error when promoting it to an domain controller I tried uninstalling ...
0
votes
0answers
37 views

PHPPGAdmin on Windows - authenticate users against Active Directory

I installed PHP, Apache 2.4, and PostgreSQL 9.4.1 on Windows machine which belongs to Windows domain. My pg_hba.conf: hostnossl all postgres 127.0.0.1/32 md5 hostnossl all all ...
1
vote
0answers
27 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
2
votes
5answers
132 views

Pursuit of True Active Directory Integration

Before you laugh at me and say, "If you want Active Directory, use Windows" or tell me to use Google, hear me out. My company relies very heavily on AD. Nay, we are married to it at this point, and ...
-4
votes
2answers
63 views

Possible to name a computer the same as a domain? [closed]

If I have a domain called "HOUSE" with user "JOHN", would it be possible to rename a PC to "HOUSE" with a local user called "JOHN"? So both would then be HOUSE\JOHN. Edit: I should add, the PC is on ...
0
votes
0answers
47 views

Redirect DNS-Queries in Samba4 AD of local domain

I am running an Ubuntu 14.04 Samba4 AD Server and I control my networks DNS via a different server. I am using the samba version served by ubuntu which is 4.1.6. Is it possible to configure the ...