A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

6
votes
2answers
425 views

Correct way to update Google Chrome MSI through Group Policy

I am deploying Chrome through group policy. This is working fine. Obviously Chrome has a pretty regular update cycle. I am not allowing Domain Users to install Chrome updates. Having subscribed to ...
6
votes
3answers
3k views

Number of Domain Controllers needed?

In the process of migrating 7 school site network from Server 2003/XP to Server 2012/7 and wanted to get some feedback on how many domain controllers would be optimal. Currently we have 4 DCs. All 7 ...
6
votes
1answer
5k views

Default full name format in Active Directory

When I create a new account in Active Directory, I enter the new user's first name and last name, and it auto-fills the full name in the form "First Last". Can I set AD to use "Last, First" instead? ...
6
votes
2answers
587 views

Does Active Directory on Server 2003 R2 support IPv6 subnets in Sites and Services?

I've been experimenting with IPv6 at our organization. The domain controllers (all 2003 R2) and most of the servers (2003 R2 / 2008 / 2008 R2) have IPv6 configured. We have a subnet assigned through ...
6
votes
2answers
1k views

What's the default hash format / algorithm of Active Directory?

I'm wondering what format I need to put hashes in to write to userPassword via LDAP. Apache Directory Studio gives me several options, but I don't think any of them are it. Can anyone document the ...
5
votes
4answers
2k views

Blocking EXE from executing in XP Domain environment

I was wondering if anyone could point me in the right direction on how to block specific exe files from executing on XP machines in a domain environment. I have active directory setup and working so ...
5
votes
2answers
4k views

How can I make my AD DNS server resolve requests for an internet DNS record to an internal IP address for internal clients?

I have the following situation: A web server that lives in our company intranet has an address in a private range. Certain license restrictions prevent us from changing the private address. Port 443 ...
5
votes
2answers
1k views

Windows Active Directory - Implement a password policy. What will happen to current passwords?

I want to implement a stronger password policy for our Windows 2003 domain. My question is, what will happen to the currently existing passwords that do not match the new policy: will the users be ...
5
votes
2answers
1k views

What are the advantages of adding a Mac to Active Directory?

I was surprised to learn (from this question: http://serverfault.com/questions/8006/how-to-add-a-mac-to-windows-active-directory) that you could add a Mac to AD. What are the advantages of doing ...
5
votes
3answers
485 views

Account lockout

I have an an account which is being periodically locked out on our network (once a day roughly). We use active directory, with multiple domains, spread across hundreds of servers. How can I find out ...
4
votes
6answers
1k views

Powershell assistance for Active Directory Cleanup

I just started a contract to clean up an Active Directory system for a large company. I was told it would be quite the busy work but after reviewing the system and seeing how disorganized and messy it ...
4
votes
4answers
2k views

Can you have multiple writable, authoritative BIND DNS servers for the same zone, like AD-integrated DNS?

In an AD-integrated DNS system, there really isn't a concept of one "Master" DNS server; all AD-integrated zones are authoritative and updatable across all DNS servers, and send updates to each other ...
4
votes
1answer
636 views

AD strategy for users in multiple departments

I work for a college with almost a thousand users (faculty and staff). Many staff members also teach part-time, and many faculty members teach in different departments. Knowing that a user and/or ...
4
votes
1answer
165 views

Samba capabilities & functionality

The company that I work for wishes to replace its windows servers with new linux servers but wants to keep Windows on employee desktops. The requirements are: The employee desktops should be able to ...
4
votes
2answers
187 views

Active Directory, control to users

I'm responsible by Active Directory (AD) where I'm working, and I'm trying to figure out, how can I allow, that sector managers of the company, may add and delete users from its departments ...
4
votes
5answers
6k views

Domain Admins group denied access to d: drive

I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01). The member server has a C: and a D: drive. Part ...
4
votes
3answers
303 views

One AD user Multiple Logins

I have a department of 20 users or so, which basically work in shifts but access the same desktop and settings, I am thinking to join these computers (15 computers) to AD and create only ONE account ...
4
votes
2answers
2k views

Migrating Mailstore from Exchange 2003 to Exchange 2010 in a new domain

Proposed project ahead, and a whole lot of documentation and options out there, so I was looking for opinions or advice. I'm creating a brand new domain and installing Exchange 2010 in the ...
4
votes
5answers
3k views

How to bring another DC up with all roles when first DC is no longer available

I am so upset of this as i am not getting a proper answer anywhere. Let me make it clear the same scenario again. I have a DC named DC-1 & another DC named DC-2. both DC-1 and DC-2 are the name ...
4
votes
1answer
8k views

How can I override group policy using a local administrator account?

I have local administrator access on my machine but somehow still can't change the screensaver setting. I believe it is being disabled by group policy somehow, is there a way to override this?
4
votes
2answers
4k views

How do I migrate a Windows 2008 Domain Controller to another computer?

I have single server acting as a domain controller. It is running Windows 2008 Standard edition. What steps are required to migrate this domain to another computer running Windows 2008? I'd like a ...
3
votes
5answers
3k views

Restore “lost” user after Active Directory removal?

Is it possible to restore lost users after Active Directory unistallation ? (I forgot to switch users to local users) The computer run Windows Server 2008 R2 Entreprise, and all the registry linked to ...
3
votes
1answer
2k views

Outlook 2010 exchange setup prompts for username@domain.local rather than email@domain.com

We use a hosted exchange service. When users want to set up Outlook 2010 to access their account, they open Outlook and run through the configuration steps. Autodiscover is enabled, and in the ...
3
votes
3answers
561 views

Suggestions for transitioning to new GW/private network

I am replacing a private T1 link with a new firewall device with an ipsec tunnel for a branch office. I am trying to figure out the right way to transition folks at the new site over to the new ...
3
votes
1answer
2k views

Are there alternatives to Sysinternals ADInsight?

I had been using ADInsight from Sysinternals to trace Active Directory calls from my workstation, but the application has failed. Where previously the Active Directory events were traced and logged, ...
3
votes
2answers
3k views

How can I check access of a Group/User in AD before I delete it?

I'm cleaning up an inherited domain that is not well documented. How can I check that a particular group or user has no ACEs across the AD? Things like searching DACL/SACL for AD objects and file ...
3
votes
2answers
6k views

Need to force security inheritence in active directory on users

So I have a bunch of users in AD that for some reason, don't inherit permissions from the security applied to the OU they are in. This is problematic, because account operators can't unlock, change ...
3
votes
4answers
11k views

Can I prevent an Active Directory account from locking out?

Is there an ADUC setting that can prevent certain user accounts from locking out, particularly after x number of failed logon attempts? Oh and our DC is on Server 2003 at the moment, but we also use ...
3
votes
3answers
739 views

Multi-Role Domain Controllers for Small Offices (< 50 clients)

Warning: I'm a Linux/*NIX admin so this is all new to me. I understand that it's not considered a good idea to have only a single domain controller, and that it is also probably a good idea for a ...
3
votes
4answers
30k views

Domain Admins vs. Administrators in Windows AD DC [closed]

Having read in [1]: "Domain Admins Members of this group have full control of the domain. By default, this group is a member of the Administrators group on all domain controllers, all domain ...
3
votes
2answers
3k views

AD DS or AD LDS

I need a suggestion about having AD DS or AD LDS for my infrastructure. I have a website which as of now do not have any log in facility for the visitors, now we are developing a new application so ...
3
votes
2answers
1k views

Retire a Dead Windows 2003 Domain Controller

I have a Windows 2003 Domain Controller that died (totally gone). We have decided not to replace it at this time (it was just a backup at a particular office). What do I need to do to remove the ...
3
votes
2answers
11k views

“Send As” Permission and “You do not have permission to send to this recipient” Error

I have an account on Windows Small Business Server 2003, for which several users have "send as" permission (not "send on behalf" but "send as"). Each of those users has "send as" enabled in active ...
3
votes
5answers
5k views

Multiple network connections on a Windows 2008 domain controller (private network for NAS)

I have a Windows 2008 server connecting to an iSCSI target on an OpenSolaris box (yay ZFS!). I'd like to create a private network between the 2 boxes that is totally separate of my Windows domain. ...
2
votes
3answers
174 views

Pull Office 365 Users to Active Directory

I am currently working with an existing Office 365 subscription that needs to have a new instance of Windows Server 2012 R2 in Azure manage the users through Active Directory. The server 2012 VM is ...
2
votes
2answers
6k views

Using Powershell to bulk change the Home folder path of AD objects - %username"?

I have done a lot of searching on this, and still cannot find the answer. I have created a script which will bulk move all user objects in one OU to another OU. This works fine. Now I am trying to ...
2
votes
1answer
828 views

Using PowerShell to create user accounts from a CSV

How can I create a domain user account and set the default password in PowerShell from a CSV? Note that I know how to do this, I'm writing this as a self-answered question to share this knowledge. ...
2
votes
1answer
1k views

Site-specific folder redirection through group policy

Suppose I have two sites - A and B - both with 5/5 Mbps WAN links that are connected via L2L VPN. Each Site is defined in AD Sites 'n Services with its own domain controllers, etc. The problem is that ...
2
votes
3answers
4k views

Broken trust relationship not corrected even after leaving and joining domain with new computer name

I am having a problem with a recently reinstalled laptop with Win 7 Enterprise. The computer is complaining about a broken trust relationship when I try to grant domain users local access on the ...
2
votes
1answer
617 views

Error importing sudoers ldif schema to Active Directory

As per this question, we are on the process of migrating our sudoers file to Active Directory. As per the documentation, this requires importing the schema.ActiveDirectory LDIF which comes with the ...
2
votes
2answers
3k views

Child Domain Migration to Parent Domain

Our company is planning on moving from a single forest with multiple domains to a single forest with a single domain. This is my infrastructure: Forest Root ROOT-DC.techtunes.lan ...
2
votes
2answers
2k views

Authenticate CVS users against Active Directory

I have a mixed Linux/Windows software development environment where the Linux clients are migrating to a system where they are able to authenticate against Active Directory. (That part I figured out) ...
2
votes
2answers
155 views

What are the options for a temporary laptop within a work domain?

This is primarily a home laptop, which comes to work once in a while. Does the laptop have to join the domain absolutely, I thought there were different ways of handling this situation. From his ...
2
votes
3answers
4k views

Win2008 DC in a Windows 2000 domain: can I keep the old DC?

Will be putting a new Windows 2008 R2 Server into a single domain network with two domain controllers, both running Windows 2000 Server. The functional level of the domain is mixed mode/2000. Until ...
2
votes
2answers
10k views

Time not propagating to machines on Windows domain

We have a two-domain Active Directory forest: ourcompany.com at the root, and prod.ourcompany.com for production servers. Time is propagating properly through the root domain, but servers in the child ...
2
votes
1answer
532 views

Organising users in a Windows Server 2008 domain

I am planning to create a Windows Server 2008-based domain for 70 computers and 50+ users, which will be distributed across two different buildings, which are connected by a dedicated 100 Mbps line. I ...
2
votes
7answers
2k views

Naming Windows Server 2008 domains

I am setting up a new Windows Server 2008-based domain and I am thinking about the domain name. Some time ago I read some documentation from Microsoft where they advised to use a .local suffix for ...
1
vote
1answer
1k views

Group Policy “Maximum password age” fails to apply

In my Windows network with all AD servers (still) running Windows 2003, I encounter the following problem: The "Maximum password age" policy apparently does not apply. Even though some of the users ...
1
vote
0answers
350 views

Slow first login to a AD-joined Samba box

I have joined my first Debian box to an Active Directory (2008 R2). It works, I can log in with AD credentials, browse Samba shares. There is just a problem with the time it takes for someone to log ...
1
vote
2answers
2k views

Linux nested groups with winbind

We have several RHEL6 servers connected to Active Directory using winbind. All servers are configured identically using a configuration management tool. Servers however produce different results when ...