Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

3
votes
4answers
19k views

Domain Admins vs. Administrators in Windows AD DC [closed]

Having read in [1]: "Domain Admins Members of this group have full control of the domain. By default, this group is a member of the Administrators group on all domain controllers, all domain ...
3
votes
2answers
3k views

AD DS or AD LDS

I need a suggestion about having AD DS or AD LDS for my infrastructure. I have a website which as of now do not have any log in facility for the visitors, now we are developing a new application so ...
3
votes
1answer
7k views

How can I override group policy using a local administrator account?

I have local administrator access on my machine but somehow still can't change the screensaver setting. I believe it is being disabled by group policy somehow, is there a way to override this?
3
votes
2answers
1k views

Retire a Dead Windows 2003 Domain Controller

I have a Windows 2003 Domain Controller that died (totally gone). We have decided not to replace it at this time (it was just a backup at a particular office). What do I need to do to remove the ...
3
votes
2answers
11k views

“Send As” Permission and “You do not have permission to send to this recipient” Error

I have an account on Windows Small Business Server 2003, for which several users have "send as" permission (not "send on behalf" but "send as"). Each of those users has "send as" enabled in active ...
3
votes
5answers
5k views

Multiple network connections on a Windows 2008 domain controller (private network for NAS)

I have a Windows 2008 server connecting to an iSCSI target on an OpenSolaris box (yay ZFS!). I'd like to create a private network between the 2 boxes that is totally separate of my Windows domain. ...
2
votes
2answers
5k views

Using Powershell to bulk change the Home folder path of AD objects - %username"?

I have done a lot of searching on this, and still cannot find the answer. I have created a script which will bulk move all user objects in one OU to another OU. This works fine. Now I am trying to ...
2
votes
1answer
699 views

Using PowerShell to create user accounts from a CSV

How can I create a domain user account and set the default password in PowerShell from a CSV? Note that I know how to do this, I'm writing this as a self-answered question to share this knowledge. ...
2
votes
1answer
988 views

Site-specific folder redirection through group policy

Suppose I have two sites - A and B - both with 5/5 Mbps WAN links that are connected via L2L VPN. Each Site is defined in AD Sites 'n Services with its own domain controllers, etc. The problem is that ...
2
votes
1answer
2k views

Outlook 2010 exchange setup prompts for username@domain.local rather than email@domain.com

We use a hosted exchange service. When users want to set up Outlook 2010 to access their account, they open Outlook and run through the configuration steps. Autodiscover is enabled, and in the ...
2
votes
3answers
3k views

Broken trust relationship not corrected even after leaving and joining domain with new computer name

I am having a problem with a recently reinstalled laptop with Win 7 Enterprise. The computer is complaining about a broken trust relationship when I try to grant domain users local access on the ...
2
votes
1answer
538 views

Error importing sudoers ldif schema to Active Directory

As per this question, we are on the process of migrating our sudoers file to Active Directory. As per the documentation, this requires importing the schema.ActiveDirectory LDIF which comes with the ...
2
votes
2answers
2k views

Child Domain Migration to Parent Domain

Our company is planning on moving from a single forest with multiple domains to a single forest with a single domain. This is my infrastructure: Forest Root ROOT-DC.techtunes.lan ...
2
votes
4answers
9k views

Can I prevent an Active Directory account from locking out?

Is there an ADUC setting that can prevent certain user accounts from locking out, particularly after x number of failed logon attempts? Oh and our DC is on Server 2003 at the moment, but we also use ...
2
votes
2answers
2k views

Authenticate CVS users against Active Directory

I have a mixed Linux/Windows software development environment where the Linux clients are migrating to a system where they are able to authenticate against Active Directory. (That part I figured out) ...
2
votes
2answers
155 views

What are the options for a temporary laptop within a work domain?

This is primarily a home laptop, which comes to work once in a while. Does the laptop have to join the domain absolutely, I thought there were different ways of handling this situation. From his ...
2
votes
3answers
4k views

Win2008 DC in a Windows 2000 domain: can I keep the old DC?

Will be putting a new Windows 2008 R2 Server into a single domain network with two domain controllers, both running Windows 2000 Server. The functional level of the domain is mixed mode/2000. Until ...
2
votes
2answers
7k views

Time not propagating to machines on Windows domain

We have a two-domain Active Directory forest: ourcompany.com at the root, and prod.ourcompany.com for production servers. Time is propagating properly through the root domain, but servers in the child ...
2
votes
7answers
2k views

Naming Windows Server 2008 domains

I am setting up a new Windows Server 2008-based domain and I am thinking about the domain name. Some time ago I read some documentation from Microsoft where they advised to use a .local suffix for ...
1
vote
0answers
224 views

Slow first login to a AD-joined Samba box

I have joined my first Debian box to an Active Directory (2008 R2). It works, I can log in with AD credentials, browse Samba shares. There is just a problem with the time it takes for someone to log ...
1
vote
2answers
562 views

Linux nested groups with winbind

We have several RHEL6 servers connected to Active Directory using winbind. All servers are configured identically using a configuration management tool. Servers however produce different results when ...
1
vote
3answers
2k views

Querying AD for a service account's last authentication

I have a list of service accounts that I'm not familiar with. I'm trying to find out the last time anything has authenticated with this account before I disable or remove it. Is there a way to do this ...
1
vote
1answer
3k views

Error when adding bulk users in AD with PowerShell script

I'm trying to add users to AD using a PowerShell script that pulls info from a csv file. I've got it mostly working, in that users are created and they seem to work. However, I'm getting some ...
1
vote
2answers
518 views

Server 2003 R2 Schema Update

I have some questions about updating our Active Directory Schema. Right now We have 4 Domain Controllers across 3 sites. They are all running Windows Server 2003 with SP1. None of them are R2. They ...
1
vote
1answer
321 views

Can a Windows Domain play along with a Hosted Exchange service?

I'm setting up a computer network for a small (10-20 people) company. They are currently using a Hosted Exchange service they are totally happy with. Other than that, they are starting from scratch ...
1
vote
3answers
2k views

Check existance of domain accounts with Powershell script

Is there a Powershell cmdlet or script to query Active Directory if a given domain account (such as "myDomain\myUser") exists?
1
vote
1answer
1k views

Active Directory Partition Error

Right now my active directory is failing a dcdiag test. I can find no info online about this error. When I run dcdiag /test:crossrefvalidation, I get the output: .... Doing primary tests ...
1
vote
4answers
1k views

What alternatives are there to ActiveDirectory to administer a large number of computers?

I would like to know what the different options are or if ActiveDirectory is the only choice.
1
vote
3answers
2k views

What permissions are required for SQL Server to run as a (active directory) domain user

I wish to switch the SQL Server 2005 service from running as a local user to running under a domain user (mainly so I can make backups to domain-permissioned shares). I can't seem to find a ...
1
vote
3answers
3k views

Biometeric authentication with Active Directory

There has been various blogs, MSDN pages, posts, etc. about Windows 7 and Windows 2008 R2 supporting biometric authentication built-in (or so it seems). ...
1
vote
1answer
4k views

Using BIND9 and DHCPD to support a Windows Domain

We currently run two DNS systems. The Windows domain uses the Windows DNS for an internal domain. Our BIND9 installation serves our public domain DNS. Since we run BIND on Unix it has been dubbed ...
0
votes
1answer
201 views

Chrome Flash Updates in a Domain environment

One of the business critical applications for us is powered by Adobe Flash. Naturally, this comes with plenty of associated problems. The company wide browser in use is Google Chrome. We run a ...
0
votes
1answer
2k views

DFS: should I separate my home directories from my DFS root?

I am planning on setting up a DFS root to house all of our departmental shares, and I also plan on having Home directories that automatically mount through AD profile. We will be using a NetApp for ...
0
votes
1answer
4k views

WMI query between two different AD sites?

I'm having problem in querying WMI between two different AD sites that is not trusting each other What I have tried: Telnet between Windows Server 2008 using IP address and port 135 is all working ...
0
votes
1answer
151 views

Application Compatibility Clients do not show in MSSQL database, but do show in \AppCompat\

Application Compatibility Clients are denied access to the central MSSQL database, but are able to leave their own files in the \AppCompat\ share. The only computer that shows up in the "Microsoft ...
0
votes
2answers
3k views

Automatic failover for domain controller

I have domain controller installed in a network and another server which acts as a backup DC. When the primary DC fails, How does other objects in the network know to connect to backup DC to resolve ...
0
votes
1answer
987 views

How to use network fileshare as user's home, and not roaming profiles

Some of my users are very frustrated, because their login/logout times are reaching into the minute ranges. We have a few shift workers using the same machine, and invariably, the second shift has to ...
0
votes
1answer
2k views

SharePoint issues after account SID changed

I have a problem with SharePoint. Basically the SID of my Windows Account changed (not sure why, still investigating) and SharePoint simply doesn't know me anymore - I get access denied messages and ...
0
votes
2answers
470 views

How do I add a cloned VM to Active Directory without conflicting with other clones?

I'm not sure of the exact terminology here as I'm not a network pro but I've run into this issue a couple of times as a developer. Edits encouraged! If I create a virtual machine on a desktop and add ...
7
votes
5answers
20k views

How to change the current user's domain password without being domain admin?

I've seen plenty of documentation of how to reset a user's password by running net user <username> * /domain or locally net user <username> <new_password> But I am not domain ...
7
votes
3answers
663 views

Delete a windows group in Active Directory

I am doing a cleanup of some AD groups that are no longer used. One of the AD groups I could not delete because it seems that a member has this group set as the primary group (which I assume someone ...
6
votes
2answers
840 views

ServicePrincipleName setup for Web Service on IIS 7

I'm so confused. Consider the following: Active Directory environment with a domain called DOM An IIS 7 box with a NetBIOS name VS1 A DNS record providing an alias for VS1 as ...
6
votes
5answers
24k views

Push new registry keys via group policy

Recently I have added registry keys in active directory and I need to push them via group policy instead of going to each PC to apply the new ones. How can I push new registry keys (not modify ...
6
votes
6answers
8k views

Domain Controller time is incorrect

I have a domain controller running in VM on Hyper-V, the time seems to be steadily getting faster, over the X-mas period it's 5 faster, which seems odd! I know how to change the time and I belive we ...
6
votes
3answers
8k views

Set Default UPN Suffix for Creating New Users in Active Directory

Is there a way to set the default UPN suffix for creating new users an Active Directory? For example, if I have corp.mydomain.com as my AD domain, and I've added an alternate UPN suffix under Domains ...
5
votes
2answers
786 views

2003 DC AD upgrade to 2008 on second server migration plan

SUMMARY Writing a plan to prepare for a 2003 to 2008 active dir upgrade. 2003 AD exists on a single domain controller and has been upgraded to 2003 functionality. I have add a new 2008 Standard ...
5
votes
3answers
2k views

Can a windows 2008 R2 server join a 2003 domain?

I need to upgrade a windows server 2003 machine to at least 2003 R2. I'd like to upgrade it all the way to 2008 R2. I just wanted to verify, 2008 R2 can join 2003 domains right? The other servers are ...
5
votes
4answers
19k views

Active Directory Licensing [duplicate]

Possible Duplicate: Can you help me with my software licensing question? I can't seem to find a clear answer to this question. What type of licenses do I need to buy ensure that everyone ...
4
votes
2answers
4k views

Can I replace my domain controller with Azure Active Directory? [duplicate]

I currently have a small network with a few servers and about 25 client PCs. We are using Office365 and have AD synchronisation setup from our on-premise server. We also have single-sign-on setup ...
4
votes
3answers
2k views

When should you create additional domain in forest?

My company is opening a new site in a different country. We will be installing new servers there and I have a question I can't decide on. Should we create a new domain in the forest or should we just ...