A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
27 views

Upgrade AD FS 1.0 on Win 2008 R2 to 2.0

Since AD FS 2.0 is available for Windows 2008 R2, can i simply upgrade AD FS 1.0 to 2.0 just by installing AD FS 2.0 or uninstalling AD FS 1.0 then installing AD FS 2.0. Or is this too risky? I wonder ...
0
votes
0answers
36 views

Cannot add NT Authority login into SQL Server

I installed SQL Server 2014 on a Windows 2012 R2 instance. I named the instance SQLExpress. After installing SQL Server, I joined this machine to an Active Directory domain and logged in using the ...
2
votes
2answers
45 views

dns a records become static

So here's a weird one... I'm managing a Windows AD environment. For whatever reason, when it was built, DNS was not integrated with AD. A month or so ago I went ahead and integrated DNS with AD ...
0
votes
1answer
85 views

Windows Workgroup - Maximum Workstations before a Domain is needed?

Several years ago I installed a Windows 2008 server and 8 PCs in a workgroup. Since then the client PCs have all been upgraded to Windows 7 Pro and the network has grown from the original 8 PCs to 23 ...
1
vote
1answer
60 views

Password Expiration / DNS Issue

Our Windows 2008 Server has AD set to have users change their passwords every 30 days. When a password expires a user is not prompted to reset it. The user is allowed to login with their expired ...
1
vote
3answers
298 views

Stop Active Directory Users installing updates

We have multiple PCs running Windows 8 for testing on an AD. However, Windows update keeps pushing the Windows 8.1, but we need the PCs to strictly be on 8. How could I stop AD users from installing ...
0
votes
0answers
9 views

Group policy to Delete unauthorised software per logon

I have a group of on-site engineers (domain users but have local administrators rights) who are using laptops. They are required to install software occasionally when they travel, therefore I need a ...
4
votes
1answer
98 views

Add A record to Windows AD DNS remotely via cmdline?

I want to avoid rdesktop + clicking through DNS GUI, but would like to be able to push entries from some other host, preferebly any domain joined machine. Idea is to have post-join script for Samba ...
0
votes
1answer
40 views

AD keeps local accounts from timing out?

Currently, our customer requirements say that after 60 days, the local accounts on our devices are supposed to be locked. When AD is being implemented, the local accounts are not being used (everyone ...
2
votes
1answer
40 views

How can I recover an Exchange 2013 mailbox which I disabled?

My company has Exchange 2013 and I disabled a mailbox in the Exchange Admin Center under the presumption that this would work in the same way as disabling an account in Active Directory would. ...
0
votes
1answer
51 views

Office 365 DirSync Using Trial Domain

I've signed up for an Office 365 trial and have set up a test lab server functioning as a local DC with a fictitious domain -- basically the idea was that I wanted to set up a test domain/lab that's ...
0
votes
1answer
44 views

Need users to stay connected to the domain even if they temporarily lose Internet connection

We need to join our users to a domain but they are traveling a lot and often get disconnected from the Internet. I read about "offline domain join" to help them join without contacting a DC, but is it ...
1
vote
0answers
25 views

Active Directory windows 2012

I have problem with windows 2012 active directory. one of the client machine which is windows 8 could not login to active directory we need to close network connection to login windows 8 local and ...
0
votes
0answers
17 views

kerberos cross realm authentication

I want to do setup for kerberos cross realm service authentication using active directory. My question is that should I create a different domain (I read somewhere that realm is a domain) or should I ...
1
vote
0answers
30 views

Certain GPO settings are not taking effect on Clients

I've been trying to deploy a printer with Print Management on Server 2012 however it never appears on any of the clients after deployment. And this is not only the case with printers, the same thing ...
-1
votes
1answer
35 views

same DNS name internal and external server

My internal domain name with the same name as the external domain. when I'm tying to access to external domain from inside it is working properly with A record but my problem is the external IP ...
0
votes
1answer
44 views

Users Home drive given local admin permission by ADU&C when creating user

Sorry for the horrible title. So we have an issue, where the permissions on our file server are set as follows: D:\Data>cacls d:\data\mydocs\johnny.depp d:\data\mydocs\Johnny.Depp ...
1
vote
1answer
120 views

Outlook won't open on new domain-joined computer. Exchange 2013 mailbox propably damaged

There's another interesting issue regarding Microsoft Outlook (Office 365 / 2013), Exchange 2013 SP1 and Active Directory. On a freshly installed Windows 7 x64 Professional computer I installed ...
0
votes
0answers
60 views

LDAP Query Of All Users In Various Groups In A Specific ActiveDirectory OU

I need to configure Atlassian Crowd to query all the users in my AD server that are in various groups in a top-level OU. The DN for the OU is "OU=Atlassian,DC=NNNN,DC=com". The various groups would ...
0
votes
2answers
48 views

Multi-Homed AD servers. 1 for production, and 1 for management

In a multi-tenant environment, we have a client that is running a couple of active directory servers on servers that we manage for them. The servers are multi-homed for a primary network which is ...
2
votes
1answer
101 views

How to reinstall AD DS for a domain

OLD SERVER: SERVER NEW SERVER: AUTHSRV I was playing around with my lab and I seem to have not correctly removed my old AD DS server when I added my new one so now I can't add new computers to the AD ...
0
votes
0answers
51 views

Acount Logon events not getting on domain controller

We have windows domain running with 2012R2 DC, We have enabled logging through GPO for all member servers and DCs, but I dont see any Account logon/logoff events (4624/4634) being logged, neither on ...
0
votes
1answer
41 views

Folder Permissions for AD Users

When giving users permissions to specific folders, it applies those permissions to every single file and folder. I do want this but it takes a while for these permissions to be applied to every single ...
1
vote
0answers
52 views

Sudo Access for Active Directory Groups

I have my Linux machine connected to AD but I am unable to get sudo privileges. I can sign on using AD credentials, but sudo doesn't work. I have looked at everything I can find and everyone says to ...
1
vote
2answers
35 views

Is is possible to apply a Group Policy for the same user logged-on to different computers?

I have a user (say, domain.local\admin) in my domain. When he logons to vpn.domain.local in group Servers I want to apply a policy. When he logons to laptop.domain.local in group Destop Computers I ...
0
votes
1answer
57 views

Why is LDAP using servers other than those specified?

I have a linux system that is using Active Directory (2012) for LDAP lookups of users and groups. It's in a network that is connected to our main site by VPN. When the VPN goes down, all ldap ...
0
votes
2answers
45 views

Why would you enumerate your OU container names?

OU=1.2.1 POS Checkout Line,OU=1.2 POS,OU=Testing,DC=contoso,DC=net My boss wants to have enumerated container names in active directory. I am opposed to it. While I suppose in theory this should ...
3
votes
0answers
70 views

LDAP over TLS fails to connect, Schannel Alert 48

I am trying to use PHP to edit users in active directory through LDAP. My test machine is using a simple WAMP setup and is NOT connected to the windows domain. This machine can connect to LDAP on the ...
0
votes
1answer
32 views

Make active directory available to remote users [closed]

I have an AD filled with test data. I have automated tests that query this AD. I would quite like to be able to run these tests from anywhere, including outside of the domain. I have seen the ...
0
votes
1answer
78 views

freebsd 10.x apache 2.4.12 and active directory auth

So I'm trying to get apache 2.4 talking to active directory running on a freebsd box with 10.x apache built from ports ... with the ldap turned on.... 2.4.12 Windows 2012 R2 active directory.... I ...
1
vote
0answers
31 views

Problems raising DFL from 2000 to 2003 with Exchange 2000 hosted on same machine? [closed]

We are migrating to new Active Directory servers. The current servers are Windows 2003/2003R2 SP2 and running under DFL Windows 2000 (mixed) Exchange is installed on our Primary DC, the Windows 2003 ...
3
votes
2answers
59 views

allow specific USB storage device in Active Directory

I need to allow only specific Authorized USB storage device to connect to client machine other USB storage device should get blocked. How I can set Group Policy for this configuration in Windows ...
0
votes
1answer
10 views

active directory dssite subnet for client natted network

I have an infra that has 3 networks: A, B, C : A can see B directly, but can only see C by its natted network (for ex: the natted network is D) B can see both A and C directly C can see A directly. ...
0
votes
0answers
19 views

Is there a required method for creating Computer records in AD DS when replacing a PDC?

Server 2012 R2, Win 8/8.1 I experienced a total failure of my PDC, and in the process of trying to move the operations master role over to the secondary DC I messed it up as well; bummer. ...
0
votes
0answers
131 views

Join Ubuntu 14.04 LTS with Active Directory using realm, sssd and adcli

I'm setting up a new network with a Windows 2012 machine running AD DS. I have several Ubuntu 14.04 I want to join in the domain for authentication. I've managed to do so on one of these servers using ...
-1
votes
1answer
32 views

Migrating from external source to AD [closed]

I'm not even sure where to start so any info would be helpful. My organization uses AD for authentication... and that's about it. All users are stored in a single OU and then under a group OU when ...
1
vote
1answer
40 views

Creating Offline Test environment

So I'm trying to create a test environment that hosts a copy of one of the domain controllers in production and I was wondering if anyone has some insight on the best way to perform the "copying" of ...
0
votes
1answer
51 views

Best way to troubleshoot a GPO that is being applied but not working?

We are using GPO to push out proxy settings and it is applying and working for most users. There is a small group of users, admittedly in a separate OU, that it's just not working for. I can do a ...
3
votes
2answers
81 views

Windows AD: Find User Accounts by Password Length

I'm preparing to change the password requirements policy, and I want to find all the users this is going to affect. Is there a way to enumerate all AD accounts with a password with x characters? On ...
1
vote
1answer
28 views

Is it possible to sync Google Apps for Business accounts to an Active Directory server?

I'm familiar with "Google Apps Directory Sync" and "Google Apps Password Sync", but both only work one way - with the Active Directory being the authoritative source and the Google Apps consumes ...
0
votes
1answer
57 views

Wireless authentication with DD-WRT, Cisco and Microsoft

I'm looking for a way to authenticate my wireless users beyond them just knowing the wireless password. Ideally they would join the access point then get dumped to the login portal that they'd have to ...
0
votes
2answers
61 views

OpenLDAP proxy : caching credentials in case Active Directory master unreachable

I'm setting up a Debian server in my company where users are managed in an Active Directory. I'd like to authenticate users with AD but I'm thinking it would be better, if feasible, to have a local ...
0
votes
1answer
125 views

Migrate from MS Active Directory to Samba4

The target is to replicate a MS AD DC (Windows server 2012) to a new Samba4 AD DC, then migrate users to the new Samba domain. This is our first time, and the various documents on the Internet are not ...
-3
votes
1answer
53 views

Remove crashed SCCM 2012 from Active Directory 2008 R2 (schema version 69) [closed]

Our VM SCCM 2012 as been deleted by other administrator the last years and we haven't backup. I want remove all trace of SCCM from our Active directory and workstation but i don't know how to do this. ...
1
vote
0answers
20 views

Cygwin: Obtain comment field from Active Directory with mkpasswd

Running cygwin on W7x64. Since a generated /etc/passwd file is static, it has to be performed occasionally when new employees are hired. It polls Windows AD, and writes the passwd file. In the past, ...
0
votes
0answers
32 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
2
votes
3answers
71 views

Moving DNS and AD DS to their own servers

I have one WINDOWS SERVER 2012 running my DNS and AD DS on the same server. I am trying to move DNS to it's own server and ADDS to it's own server as well. What I have done so far is setup ADDS on ...
1
vote
1answer
29 views

Delegate permission to “Pre-create Read-only domain controller account”

Is it possible to delegate permission to "Pre-create Read-only domain controller account" (found on the context menu of the Domain Controllers' OU) to a non-domain admin account?
1
vote
0answers
26 views

userAccountControl property - delegate permission to set PARTIAL_SECRETS_ACCOUNT

I am needing to set the userAccountControl property of a user account to include TRUSTED_TO_AUTH_FOR_DELEGATION (0x1000000) and PARTIAL_SECRETS_ACCOUNT (0x04000000). To set ...
1
vote
1answer
118 views

How to work around a “logon workstations” restriction to the Domain Controller stopping authentication via LDAP

I am trying to allow users of an external linux based application server to authenticate with the service using their Active Directory credentials via LDAPS. It works well for admin accounts but fails ...