Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

2
votes
2answers
152 views

What are the options for a temporary laptop within a work domain?

This is primarily a home laptop, which comes to work once in a while. Does the laptop have to join the domain absolutely, I thought there were different ways of handling this situation. From his ...
2
votes
3answers
3k views

Win2008 DC in a Windows 2000 domain: can I keep the old DC?

Will be putting a new Windows 2008 R2 Server into a single domain network with two domain controllers, both running Windows 2000 Server. The functional level of the domain is mixed mode/2000. Until ...
2
votes
2answers
6k views

Time not propagating to machines on Windows domain

We have a two-domain Active Directory forest: ourcompany.com at the root, and prod.ourcompany.com for production servers. Time is propagating properly through the root domain, but servers in the child ...
2
votes
7answers
1k views

Naming Windows Server 2008 domains

I am setting up a new Windows Server 2008-based domain and I am thinking about the domain name. Some time ago I read some documentation from Microsoft where they advised to use a .local suffix for ...
2
votes
1answer
6k views

How can I override group policy using a local administrator account?

I have local administrator access on my machine but somehow still can't change the screensaver setting. I believe it is being disabled by group policy somehow, is there a way to override this?
1
vote
0answers
113 views

Slow first login to a AD-joined Samba box

I have joined my first Debian box to an Active Directory (2008 R2). It works, I can log in with AD credentials, browse Samba shares. There is just a problem with the time it takes for someone to log ...
1
vote
3answers
1k views

Querying AD for a service account's last authentication

I have a list of service accounts that I'm not familiar with. I'm trying to find out the last time anything has authenticated with this account before I disable or remove it. Is there a way to do this ...
1
vote
1answer
3k views

Error when adding bulk users in AD with PowerShell script

I'm trying to add users to AD using a PowerShell script that pulls info from a csv file. I've got it mostly working, in that users are created and they seem to work. However, I'm getting some ...
1
vote
2answers
2k views

Authenticate CVS users against Active Directory

I have a mixed Linux/Windows software development environment where the Linux clients are migrating to a system where they are able to authenticate against Active Directory. (That part I figured out) ...
1
vote
2answers
483 views

Server 2003 R2 Schema Update

I have some questions about updating our Active Directory Schema. Right now We have 4 Domain Controllers across 3 sites. They are all running Windows Server 2003 with SP1. None of them are R2. They ...
1
vote
1answer
315 views

Can a Windows Domain play along with a Hosted Exchange service?

I'm setting up a computer network for a small (10-20 people) company. They are currently using a Hosted Exchange service they are totally happy with. Other than that, they are starting from scratch ...
1
vote
1answer
985 views

Active Directory Partition Error

Right now my active directory is failing a dcdiag test. I can find no info online about this error. When I run dcdiag /test:crossrefvalidation, I get the output: .... Doing primary tests ...
1
vote
4answers
1k views

What alternatives are there to ActiveDirectory to administer a large number of computers?

I would like to know what the different options are or if ActiveDirectory is the only choice.
1
vote
3answers
2k views

What permissions are required for SQL Server to run as a (active directory) domain user

I wish to switch the SQL Server 2005 service from running as a local user to running under a domain user (mainly so I can make backups to domain-permissioned shares). I can't seem to find a ...
1
vote
3answers
2k views

Biometeric authentication with Active Directory

There has been various blogs, MSDN pages, posts, etc. about Windows 7 and Windows 2008 R2 supporting biometric authentication built-in (or so it seems). ...
1
vote
1answer
4k views

Using BIND9 and DHCPD to support a Windows Domain

We currently run two DNS systems. The Windows domain uses the Windows DNS for an internal domain. Our BIND9 installation serves our public domain DNS. Since we run BIND on Unix it has been dubbed ...
0
votes
1answer
176 views

Chrome Flash Updates in a Domain environment

One of the business critical applications for us is powered by Adobe Flash. Naturally, this comes with plenty of associated problems. The company wide browser in use is Google Chrome. We run a ...
0
votes
1answer
2k views

DFS: should I separate my home directories from my DFS root?

I am planning on setting up a DFS root to house all of our departmental shares, and I also plan on having Home directories that automatically mount through AD profile. We will be using a NetApp for ...
0
votes
1answer
4k views

WMI query between two different AD sites?

I'm having problem in querying WMI between two different AD sites that is not trusting each other What I have tried: Telnet between Windows Server 2008 using IP address and port 135 is all working ...
0
votes
1answer
148 views

Application Compatibility Clients do not show in MSSQL database, but do show in \AppCompat\

Application Compatibility Clients are denied access to the central MSSQL database, but are able to leave their own files in the \AppCompat\ share. The only computer that shows up in the "Microsoft ...
0
votes
2answers
2k views

Automatic failover for domain controller

I have domain controller installed in a network and another server which acts as a backup DC. When the primary DC fails, How does other objects in the network know to connect to backup DC to resolve ...
0
votes
1answer
853 views

How to use network fileshare as user's home, and not roaming profiles

Some of my users are very frustrated, because their login/logout times are reaching into the minute ranges. We have a few shift workers using the same machine, and invariably, the second shift has to ...
0
votes
2answers
455 views

How do I add a cloned VM to Active Directory without conflicting with other clones?

I'm not sure of the exact terminology here as I'm not a network pro but I've run into this issue a couple of times as a developer. Edits encouraged! If I create a virtual machine on a desktop and add ...
7
votes
4answers
11k views

How can I clear cached domain credentials?

Related: How can I enable domain authentication over wireless in Windows 7/2k8? To test the domain login over wireless connection feature I'm trying to set up in the above question, I need an ...
7
votes
5answers
18k views

How to change the current user's domain password without being domain admin?

I've seen plenty of documentation of how to reset a user's password by running net user <username> * /domain or locally net user <username> <new_password> But I am not domain ...
7
votes
3answers
627 views

Delete a windows group in Active Directory

I am doing a cleanup of some AD groups that are no longer used. One of the AD groups I could not delete because it seems that a member has this group set as the primary group (which I assume someone ...
6
votes
2answers
661 views

ServicePrincipleName setup for Web Service on IIS 7

I'm so confused. Consider the following: Active Directory environment with a domain called DOM An IIS 7 box with a NetBIOS name VS1 A DNS record providing an alias for VS1 as ...
6
votes
5answers
22k views

Push new registry keys via group policy

Recently I have added registry keys in active directory and I need to push them via group policy instead of going to each PC to apply the new ones. How can I push new registry keys (not modify ...
6
votes
6answers
7k views

Domain Controller time is incorrect

I have a domain controller running in VM on Hyper-V, the time seems to be steadily getting faster, over the X-mas period it's 5 faster, which seems odd! I know how to change the time and I belive we ...
6
votes
3answers
6k views

Set Default UPN Suffix for Creating New Users in Active Directory

Is there a way to set the default UPN suffix for creating new users an Active Directory? For example, if I have corp.mydomain.com as my AD domain, and I've added an alternate UPN suffix under Domains ...
5
votes
2answers
622 views

2003 DC AD upgrade to 2008 on second server migration plan

SUMMARY Writing a plan to prepare for a 2003 to 2008 active dir upgrade. 2003 AD exists on a single domain controller and has been upgraded to 2003 functionality. I have add a new 2008 Standard ...
5
votes
3answers
2k views

Can a windows 2008 R2 server join a 2003 domain?

I need to upgrade a windows server 2003 machine to at least 2003 R2. I'd like to upgrade it all the way to 2008 R2. I just wanted to verify, 2008 R2 can join 2003 domains right? The other servers are ...
5
votes
4answers
17k views

Active Directory Licensing [duplicate]

Possible Duplicate: Can you help me with my software licensing question? I can't seem to find a clear answer to this question. What type of licenses do I need to buy ensure that everyone ...
4
votes
3answers
856 views

When should you create additional domain in forest?

My company is opening a new site in a different country. We will be installing new servers there and I have a question I can't decide on. Should we create a new domain in the forest or should we just ...
4
votes
1answer
667 views

Exchange 2010 Auto-mapping mailboxes feature doesn't work when groups grant permissions

I have a shared mailbox that I need to deploy to one of our departments in an Exchange 2010 SP2 environment with Outlook 2010 clients. I'm trying to rely on the auto-mapping feature introduced by ...
4
votes
2answers
2k views

Copying OU permissions from an existing security group to a new security group

Currently we have a security group named: Limited_IT_Admins that has special permissions (restricted to only certain tasks they can do) on ~7 City OUs within a Country OU. [Country] <- top level ...
4
votes
2answers
1k views

What are all the possible causes of the “An Active Directory Domain Controller (AD DC) for the domain …” error message?

Earlier I was having issues connecting one of my workstations (client) to my domain, and I thought it was because the domain was not in my possession yet (reference: this question). But, due to the ...
4
votes
1answer
4k views

Microsoft DNS - Access is Denied. Event log: The DNS server was unable to open Active Directory

I've just had an issue arrise that I cannot seem to solve. I recently set up a Windows Server 2008 DC with DNS and DHCP and all has been working fine, but I discovered today that when I go into the ...
4
votes
4answers
5k views

Adding a Windows Server 2012 Essentials server to an existing domain, without migrating the AD

I have an existing Active Directory in house, a mix between a Win2K8R2 and Win2K3 domain, and i would like to test out Windows Server 2012 Essentials BETA on the network. When walking though the ...
4
votes
1answer
3k views

Delegate user permission to move users/computers between OU's in Active Directory

I would like to Delegate User to be able to cleanup AD by allowing him to move users between couple of OU's (and doing only that). How can I achieve that? I want to extend user permission that I've ...
4
votes
3answers
7k views

Windows 7 slow logon to domain on branch office

So we have a branch office that is connected via 10Mb fiber to the main office. Logging on a Windows 7 (pro, 32 bit) domain pc is very slow. The first time it takes up to 7 minutes. After that, it ...
4
votes
3answers
1k views

SID changed on exchange, trust is broken between AD and exchange

I V2V a Hyper-V guest in production running Exchange 2007 to ESXi 4.1 last night. Today I discovered that while the exchange works, I am not able to add new organizations and mailboxes to it. Been ...
4
votes
5answers
1k views

Active Directory with public unix dns (no MS DNS)

I'm setting up a new Active Directory instance for my department at a university. I have some experience managing domains at previous jobs (NT4/2k/2003), but there are two unique things about our ...
4
votes
1answer
5k views

What does the user icon with the little red up arrow in AD mean?

When looking at the members of a group in AD there are normal members (singe head icon) groups (two heads icon) and then Anonymous Logon / Authenticated Users and Everyone which share an icon which is ...
4
votes
4answers
2k views

Wrong SID for Administrator account

In researching my problem for this question, I discovered that the SID for the account in the domain named "Administrator" account is: S-1-5-21-2025429265-492894223-1708537768-1124 That's got to be ...
3
votes
1answer
161 views

Seamless authentication for corporate users on an external website

Background: Global company with multiple locations and disparate networks and IT systems. The majority of the networks are Windows based and running Active Directory and some are connected via ADFS. ...
3
votes
1answer
178 views

Demoting a DC which also runs Exchange 2010

Initially when setting up Exchange 2010 CAS I ran into problems with permissions. I got around them by promoting the server to be a DC with a GC. The Server was initially installed with 2008 R2 ...
3
votes
1answer
920 views

How do I stop DFSR replication preventing a Domain Controller from advertising Domain Services?

I had set up a 'test' domain with two Windows 2012 AD domain controllers (DC1 & DC2), both virtual machines. Unfortunately, DC1 (the FSMO holder) became completely corrupted. While I could start ...
3
votes
1answer
3k views

Impact of increasing the MaxTokenSize for Kerberos Tickets

Recently by migrating form Netware to Windows file servers we have ended up creating a boat load of AD groups. We have now run in to some problems with authenticating and gaining access to resources. ...
3
votes
1answer
503 views

View parents of many nested sub groups in Active Directory

Using Exchange 2007 on a Windows 2003 Server, how can we view the parent of a nested sub group that is nested many levels deep? For example, I created a Group named "Baseball". Then, I created a ...