A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

3
votes
3answers
3k views

Is Active Directory Unreliable or is there Another Issue Here?

We have an organization of approximately 1200 Windows PC clients on an Active Directory network. We have noticed that there seems to be random systems that don't get policies set. For example, we ...
2
votes
2answers
2k views

Windows XP cant join Server 2008 Domain

I've setup a new Server 2008 box with a new domain. I've done all my testing with a Windows 7 laptop which is being deployed with the network. It joined the domain fine, and worked as expected. Now ...
2
votes
2answers
241 views

How to reduce our AD account creation and maintenance requests and work load

Where I work, almost 40% of our support requests are for account management tasks : Create new account and assign in groups Unlock an account Reset a password Change an account's groups following a ...
1
vote
2answers
3k views

Convert local users to AD domain users Windows Server 2008 R2

I created a bunch of local accounts on machines at work before we had AD set up. Now I'd like to consolidate all the local accounts into domain accounts. For instance, I've got user "Fred Jones" on ...
1
vote
3answers
5k views

Auto-mounting a windows share on Linux AD login

I've managed to configure my test Ubuntu 10.04 Beta 2 Server VM to accept logins (via ssh) from users who have domain accounts in active directory via Kerberos, nsswitch.conf and PAM configurations. ...
-1
votes
4answers
481 views

What do I do when I've locked my self out of a newly created Active Directory server?

I've just setup a Windows 2003 server as the DNS/AD for a replace of an old server. However, it appears that I don't know the password for the Administrator account. I entered the Restore Mode ...
10
votes
3answers
8k views

Domain rename with Exchange 2010

I have taken over all IT responsibilities for a company that is using Active Directory (2008 R2 native level) and Exchange 2010. I have come to find out that their internal Active Directory domain ...
7
votes
4answers
3k views

Unable to dcpromo new 2008 Server in 2000 domain

I'm trying to replace an old Windows 2000 domain controller with a new Windows 2008 Server. I have the Active Directory Domain Services role installed on the new server and joined it to the domain. ...
6
votes
1answer
12k views

What does it mean to grant/set permissions for NETWORK SERVICE on a network share?

I'm confused about the NETWORK SERVICE account (group?) works on network shares: On one hand, NETWORK SERVICE is generally described as an account that's local to a given machine. (See, e.g., here on ...
6
votes
4answers
3k views

Risks of having only one domain controller

Are there any risks besides downtimes, if there is only a single domain controller for a small company? I did some research and everyone recommends at least two domain controllers, but I can't find a ...
6
votes
4answers
285 views

Using AD as a general purpose directory [closed]

Is there anyone using AD as a general purpose directory (meaning for uses other than domain authentication / authorisation and stuff) ?
6
votes
6answers
61k views

How can I export all group policies to a easily-parseable format?

I need to dump all the Group Policies within Active Directory to review offline at a later date. Is there a way I can easily export all the Group Policies to text or some other easily-parseable ...
6
votes
4answers
26k views

Active Directory Licensing [duplicate]

Possible Duplicate: Can you help me with my software licensing question? I can't seem to find a clear answer to this question. What type of licenses do I need to buy ensure that everyone ...
5
votes
1answer
3k views

How to do exceptions in Group Policy?

We're implementing Group Policy for the first time at our organization and have some questions about best practices and capabilities. We've already done some work and want to see if there is a better ...
5
votes
1answer
3k views

Can Amazon VMs be used as Active Directory domain controllers?

I've got a client who wants to move his companies servers off site. As he is only a 10 person company I'm looking for some pretty in-expensive options. One option is the smallest of the Amazon cloud ...
5
votes
3answers
14k views

Primary Domain Controller slow?

I seem to be experiencing a problem with a virtualized Windows 2008 domain controller. We are running Hyper-V on a powerful server (dual quad core Nehalem Xeon, 48 GB of ram), and all of the VMs are ...
5
votes
2answers
2k views

Migrate local profiles to roaming profiles

What are "things to think about" and best practices to migrate a large number of users from using local profiles to roaming ones?
4
votes
0answers
1k views

LSA SID cache keeps old entry for renamed domain user - why?

I have a question about LSA SID cache on a domain member server. Recently I run into the issue when some users after their name was changed in AD has difficulties accessing application I support, and ...
4
votes
5answers
5k views

Central Authentication For Windows, Linux, Network Devices

I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
4
votes
2answers
2k views

Keep AD Group Synced in OpenLDAP with POSIX Account Augmentation

What's the most obvious way of achieving the following: The site has an working AD infrastructure and certain parts of the infrastructure are tightly coupled GNU/Linux machines where people from the ...
3
votes
0answers
150 views

Active Directory + Google Authenticator - Native support in Windows Server? [closed]

Use Case: 2FA to log in to Active Directory (such as logging into a corporate desktop computer that is on AD) Desired Solution: Google Authenticator, because it is RFC based, and widely used for ...
3
votes
4answers
974 views

Pull Office 365 Users to Active Directory

I am currently working with an existing Office 365 subscription that needs to have a new instance of Windows Server 2012 R2 in Azure manage the users through Active Directory. The server 2012 VM is ...
3
votes
4answers
15k views

Samba Winbind User Resolution

We have successfully deployed AD authentication using Samba and Winbind (idmap_ad) across six Centos 6 servers and have been running happily for a few months now. One of the servers has stopped ...
3
votes
1answer
2k views

Active Directory / DNS naming design, multiple sites, single domain,

The network I currently manage will shortly be expanding to cover two sites, and due to the organisation of the company, I have already determined that a site-to-site hardware VPN will be implemented ...
3
votes
2answers
141 views

How can I correlate a wall jack to a user/machine on the domain?

After reading Valve's new employee handbook, I was really interested in setting up a company map like they described on page 6: "The fact that everyone is always moving around within the company ...
3
votes
2answers
751 views

Active Directory Domain with SAMBA or Other Tool

Can I create a domain using SAMBA and set up Active Directory with SAMBA on it? And by this I mean no windows servers involved. I would also like to be able to log in from a Windows machine. ...
3
votes
2answers
717 views

Connecting to Exchange PowerShell from a Linux machine

We currently have a Python script that automates user creation tasks on our servers. This script provisions users in OpenLDAP and ActiveDirectory by using python-ldap. Now, I want to modify some ...
3
votes
4answers
6k views

How can I run a process as “NT Authority\NetworkService”?

I'm toying with an idea for a script that would update a computer's details in Active directory with its make and model information. Ideally, I'd like this script to access AD via its computer ...
3
votes
2answers
2k views

Domain controller not advertising as time server / PDC role is down

In one of our domains, we have two Server 2003 servers (JUDY and ASTRO). We recently switched all the FSMO roles over to JUDY, from ASTRO. That seemed to work fine, and running "netdom query fsmo" ...
3
votes
3answers
7k views

Who joined a computer to a domain

Is there an easy way to determine what user account was used to join a computer to a domain?
3
votes
5answers
4k views

Having a domain controller on the same network as a wireless router

I have a win server 2k3 machine as a domain controller and a dhcp server. All of the wired machines work fine connecting to the domain controller and authenticating but the users that connect to the ...
3
votes
7answers
45k views

What's the AD query syntax to enumerate all users for a particular group?

Here's what does not work so far; (&(objectCategory=Person)(objectClass=Group)(CN=group_in_question)) (&(objectClass=Group)(objectCategory=Group)(member=CN=group_in_question)) ...
2
votes
0answers
173 views

Strange Folder Redirection

I've recently inherited a client who has a folder redirection policy GPO and home paths specified through user attributes in AD. Now the strange thing is, I have literally no idea how it is working. ...
2
votes
1answer
3k views

How to integrate request tracker 4.0.8 with active directory 2008 server

I have installed request tracker v 4.0.8 and everything is working. Now I'm trying to integrate it with Active Directory 2008. I used this DOC: ...
2
votes
3answers
13k views

SVN Authentication with LDAP and Active Directory

I am having a few problems getting SVN authentication to work with LDAP / Active Directory. My SVN installation works fine, but after enabling LDAP in my apache vhost, I just can't get my users to ...
2
votes
1answer
504 views

Apache, SVN and Active Directory: how to avoid duplicate configuration?

I'm trying to linking the SVN hosted on Apache on a Windows Server 2008 to the Active Directory. I understood what do I need to do to manage the groups of users on repository level: <Location ...
2
votes
4answers
762 views

Windows AD dcpromo /demote, who gets the roles?

I've got three Windows servers running Active Directory: Two Win2000 Servers and a Win2003 Server. For a long time there was only one Win2000 AD server, so it probably has all the roles (although I ...
1
vote
2answers
5k views

Linux nested groups with winbind

We have several RHEL6 servers connected to Active Directory using winbind. All servers are configured identically using a configuration management tool. Servers however produce different results when ...
1
vote
2answers
4k views

How to Force domain users to change password now

How can I force all domain users to change their password now? I want to do so before users next logon. Thanks
1
vote
3answers
15k views

How to massively create “home” folder for users in active directory?

I have 100 users in my forest. We never used 'home' folder capabilities of Active Directory, now i would like to use. The problem is that is less efficient to create manually 100 folders and assign ...
1
vote
4answers
346 views

Active Directory management tools for medium sized forest (less than 1000 users) [closed]

What are good AD management tools for AD forests with less than 1000 users and 3 domains across three locations? Specifically looking for: -Bulk users creation -Security groups management ...
18
votes
3answers
7k views

How do I delete this orphaned Active Directory computer object (preferably with PowerShell)?

I'm working from a Windows 7 workstation, with PowerShell v2.0, and trying to delete a particular (orphaned?) object from the LostAndFound container in a 2008 R2 FL forest and domain with the Active ...
14
votes
3answers
4k views

Windows 2008 R2 CA and auto-enrollment: how to get rid of >100,000 issued certificates?

The basic problem I'm having is that I have >100,000 useless machine certificates cluttering up my CA, and I'd like to delete them, without deleting all certs, or time jumping the server ahead, and ...
12
votes
3answers
10k views

What is Location field in Active Directory used for?

Is the Location field in Active Directory used for anything other than listing where objects are physically located? I am interested if this is just a user friendly field to help people find printers ...
9
votes
4answers
25k views

How to disable Tcp/Ip settings in windows 7 via GPO?

I have enabled following policies, "Prohibit TCP/IP advanced connection" "Prohibit access to properties of components of a LAN connection" "Enable Windows 2000 Network Connections setings for ...
9
votes
3answers
1k views

What good Active Directory + Exchange competition is there?

Based on this question regarding enhanced permission support in filesystems, what is the best permissions + directory and mail stack to compare against Active Directory on NTFS with Exchange? I'm ...
7
votes
2answers
2k views

ServicePrincipleName setup for Web Service on IIS 7

I'm so confused. Consider the following: Active Directory environment with a domain called DOM An IIS 7 box with a NetBIOS name VS1 A DNS record providing an alias for VS1 as ...
6
votes
1answer
2k views

Child Domain Logons to Cross Forest Trust Domains

I have a cross forest trust between two Windows Server 2008 R2 domains/forests (domain and forest functional levels at Windows Server 2008 R2). Domains A and B are the forest root domains in their ...
6
votes
2answers
28k views

Can I override domain group policy with local group policy as a local admin?

I am trying to provision a few special case laptops. I would like to create a local guest account. That's fine but when I try to create it I prompted that my guest password does not meet the ...
6
votes
2answers
966 views

Correct way to update Google Chrome MSI through Group Policy

I am deploying Chrome through group policy. This is working fine. Obviously Chrome has a pretty regular update cycle. I am not allowing Domain Users to install Chrome updates. Having subscribed to ...