Tagged Questions

A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

2
votes
2answers
297 views

When should another AD domain be created purely to reduce replication traffic

I'm going over some hypothetical AD design scenarios for learning purposes. Lets say I have one domain and two physical locations, sites and DCs. The sites are connected via a limited bandwidth WAN ...
0
votes
0answers
95 views

Root and child domain authentication through one LDAP path

I have a webapp and in the web.config file, there is an LDAP path to allow AD token lookup for users to login. The app also requires users to be in a specific group to login. In my case red\appadmins ...
1
vote
1answer
42 views

How to make Group Policy to the same User Group at different Computer Groups? (VDI)

I made two Organizational Unit in my domain Thin Clients (there are the physical computer objects) Virtual Clients (there are the virtual computer objects) And I have the default Users (there ...
0
votes
0answers
69 views

Getting “Unknown username or bad password” error when trying to authenticate over a validating trust

I was trying to migrate users with ADMT, and then I faced the following issues: First of all, when I input the domain name in the appropriate field, ADMT does not automatically populate the Domain ...
1
vote
1answer
60 views

Openvpn authenticating to multiple AD domains

I've a site with openvpn server on linux authenticating users against Active Directory (domain A) everything working fine. Now company has a different AD domain (B) with "Trust" setuped to original ...
0
votes
2answers
45 views

How to manage third-party issued certificates in a Windows environment with Active Directory Certificate Services

I have a wildcard SSL certificate (*.ourdomain.com) + chain of trust that was issued from a public third-party CA that I have deployed on to all of our Windows servers in the domain. But our ...
1
vote
3answers
102 views

24 hour expiration of first password

EDIT** I'm thinking of running a scheduled task at the end of every workday to retrieve all accounts who have never logged on and disabling their accounts. Please excuse any syntax errors. I may very ...
0
votes
1answer
35 views

IIS Custom AD account for app pool and 500 for most static content

I just tried this morning to switch an old ASP.NET site's app pool to one that use an AD account for SQL access, upon doing so most of the static content on the site was unavailable (i.e. some images ...
-1
votes
1answer
52 views

Best practice for organisation wide user management [closed]

We have a green fields environment (kinda) in which our Active Directory is currently the most canonical source of people information. As our organisation grows to 400+ employees we need a way to ...
0
votes
1answer
43 views

Intranet AD login for External Website

Is it possible to setup a website on the internet such that it does a Single Sign for people coming from intranet Active Directory logins? If this is possible, are there any products/tools which help ...
2
votes
0answers
198 views

Authentication Microsoft AD Users with RSA SecurID

I have an integration problem between RSA SecurID and Microsoft AD described in the picture below: 1.The user needs to connect to private network via VPN and authenticates to the Firewall via its ...
7
votes
1answer
176 views

How do I remotely issue a CLI command to thousands of Windows domain computers at once?

I need to issue a CLI command (cmd.exe or PowerShell) to all of the thousands of computers on my domain. For obvious reasons, this is not going to involve doing the task manually, or physically ...
1
vote
1answer
43 views

DFS slowly and using a lot write speed on sender member

I am transferring 400gb of multiple files trough 2 server whit 10gb connection inside one VLAN. When I had 2 servers that were not in production the transfer was very quick using 100% of 1gb ...
-2
votes
1answer
50 views

Server 2012 active directory first login [closed]

I'm beginner with Windows Server 2012 and Active Directory I've got installed Active Directory remotely on my server and after the installation is finished and system restarted now I can't login into ...
1
vote
1answer
102 views

Server 2008 R2 ADUC - Naming information cannot be located

I'm having a very hard time with Active Directory. Brand new server with a fresh install of Windows Server 2008 R2 - SP1; Everything was fine until it restarted after installing updates. When I try ...
1
vote
1answer
42 views

WIndows Server 2012 R2 + Windows 7 Ultimate CD Burn Rights

H have recently installed a ADDC in my office to manage users. I have actually setup roaming profiles and everything is great apart from one little issue... On the PCs standard users are unable to ...
1
vote
0answers
38 views

WMI request (Wbemtest), access is denied to domain computer

let me explain our setup first! We have 2 site location with Cyberoam CR50ING Firewall, IPSec between the 2 Subnet. Cyberoam firewall has an AD authentication with their software linked to the ...
6
votes
2answers
257 views

Does the sAMAccountName rename practice based on employment status makes sense?

Where I work there is a practice of adding a t_ prefix to all temporary employees logins (sAMAccountName). When someone switches from temp to perm or the the other way the prefix is add/removed. ...
10
votes
2answers
158 views

How to enable BitLocker with no prompts to the end user

I have configured BitLocker and TPM settings in Group Policy such that all the options are set and the recovery keys stored in Active Directory. All our machines are running Windows 7 with a standard ...
0
votes
2answers
43 views

Exchange 2013 & Active directory user details

I have a problem that is driving me nuts. We recently rolled out Exchange 2013 (coexisting with exchange 2007), and have a 2008R2 active directory. The problem we are facing is that when we change ...
1
vote
0answers
45 views

Configure the Routing and Remote Access Server for DirectAccess

I have 2 Windows Serer 2012 R2 DC machines. I am currently on my main which runs AD and has GUI. Number 2 is just server core and I want to setup Direct Access. However, I get this error when trying ...
3
votes
0answers
88 views

Cannot enable GSS-TSIG updates from Active Directory in BIND 9.10

I’m with a problem trying to enable GSS-TSIG with BIND 9.10. Before I start describing what I’ve done, I would like to say that I’ve already done this in in another domain without any problems. So I ...
0
votes
1answer
118 views

Querying for inactive users from a specific OU using powershell with the help of AD filter and LDAP filter

I am trying to get the list of all inactive members from a specific OU named inactive with the following queries: ...
0
votes
0answers
98 views

Network Drive Full Trust With Visual Studio 2010/2014

I'm managing 10 developer computers and I want to assign to each computer a Network Drive (Let's say X: drive) so the developer can map the TFS workspace to that drive. When the user tries to open ...
0
votes
2answers
43 views

prepare Active Directory for exchange 2010 [closed]

I am installing "Exchange Server 2010" on a "windows server 2012" system. As exchange installation prerequisites we have to prepare "Active Directory" but I already installed a Active Directory in ...
5
votes
1answer
46 views

Race conditions in account creation script with email account and Office 365 sync--any good way besides time delay to resolve?

I have a powershell script that I use to create new users. Every year we add hundreds of interns, so automation is crucial. Someone in HR runs the script, so the script is supposed to be foolproof. I ...
0
votes
0answers
48 views

Problems with AD login - Mac

So unfortunately, this problem occurs commonly, but not consistently enough to reproduce. We have Macs running 10.9 joined to a remotely managed Active Directory. However, it seems that every once in ...
2
votes
0answers
46 views

Samba: Authenticate only local accounts over AD?

I have a samba server where I create all the linux accounts and corresponding SMB accounts via a application I built. I manage all the permissions for all of our shares via ACL's also using the ...
1
vote
2answers
143 views

How can I log on my linux machine with my Active Directory credentials?

I'm on a windows computer RDPing to a RHEL 7 Server. I now want to be able to log into that server using my windows domain credentials(over SSH, preferably RDP too but not necessary). Here's what I ...
0
votes
0answers
14 views

AD U&C missing propertypage in search result

there is one thing thats been bugging me for a long time with active directory users and computers admin tool. if you do a search for something and then open the property page on one of the results ...
1
vote
2answers
133 views

vCenter SSO without AD?

I have an ESXi Server with a vCenter virtual appliance image and an image of a Windows 2008 TS. The Windows 2008 image has an external Ethernet connection configured to another network, so users can ...
3
votes
1answer
249 views

How can I create Organizational Units recursively on Powershell?

I'm writing a Powershell script to populate all the company users to a Active Directory from a CSV file. The script uses the Powershell command New-ADUser and it should know, for every user, where is ...
1
vote
1answer
41 views

Setting up NPS with a certificate that is valid to both AD and non-AD machines

I'm trying to setup an AD server running the NPS service so that both AD and non-AD machines see the certificate as valid when authenticating to the wireless network. I picked up a cert from GoDaddy ...
0
votes
1answer
64 views

How to perform an assessment of an existing network? [closed]

I work as an IT guy for a small company with 2 offices. Currently we are in the process of moving our entire network infrastructure to a different host because we are running everything on extremely ...
0
votes
2answers
223 views

Can't add my Red Hat 7 machine to our company's Active Directory

I'm trying to join my RHEL 7 VM machine to our company's AD. I can validate my login credentials just fine with kinit (No return if I enter the correct password, error if I enter the wrong one), ...
0
votes
0answers
36 views

Multiple Domain Authentication for app with One LDAP path

I have a forest with a root and 2 child domains. main.com child1.com child2.com I have a third party application that has a web UI for users to login to. In the config files for this application, ...
0
votes
0answers
9 views

Tridion Unable to Query Active Directory

I am having an issue while adding users to Tridion CM from AD. My AD is having around 8000 users and Tridion says its not able Query AD because the no of users exceeds 1000. Please help...
-1
votes
1answer
73 views

Unable to mount cifs in redhat 6

I am relatively new to Linux, and I am trying to mount a CIFS filesystem from an openfiler instance I have on my network in Red Hat. The openfiler instance is authenticating using AD. I am able to ...
0
votes
1answer
127 views

Using New-ADComputer's -ServicePrincipalNames

I'm trying to use the New-ADComputer -ServicePrincipalNames parameter with no success. $comp = New-ADComputer -passthru -name "server1" -path "ou=Org2,ou=Org1,dc=mydomain,dc=com" -DNSHostName ...
0
votes
1answer
79 views

GPO backup fails

When trying to backup a GPO using the GP management console (choosing the GP to backup, right click, hitting backup, and choosing a target directory "c:\ADB"), the backup fails. In the Application ...
1
vote
1answer
45 views

Are there any ldap proxy servers that can supplement the results from the main ldap server?

We have a central ldap server that authenticates and provides authorization information about users in our institution. I am looking for a LDAP Proxy that supplement the central LDAP server to support ...
-1
votes
2answers
101 views

RHEL 6.5 and LDAP

I am trying to connect our Active directory server to brand new RHEL 6.5 server. I want to authenticate users using AD credentials, but I want to restrict that only certain users can login, I don't ...
0
votes
1answer
146 views

Regarding AD Domain controllers and remote branch offices

We have central HQ building and a lot of small branch offices connecting via VPN and want to implement AD (If you can believe we still haven't). We want everyone to log in using domain accounts and be ...
6
votes
2answers
155 views

Office365 DirSync Active Directory Integration

I am preparing to deploy Office365 for my organization. We have an on premise Active Directory Domain Controller (Windows Server 2012 R2). We would like to leverage our Active Directory for: automatic ...
0
votes
0answers
60 views

Way to authenticate against Active Directory but without direct access to it?

So I'm in an interesting situation. I have an application that only supports authentication via LDAP on my network and client with active directory on their network. We have a secure VPN tunnel ...
0
votes
2answers
53 views

How to import bulk data into specified field in active directory

I have about 500 users in my AD and I need to Modify an specified field data. But I don't want to do that one by one. How can I do that?
0
votes
1answer
284 views

Can't connect to DeploymentShare$ from PC attempting to MDT, but can other PCs on the network

I am in the process of setting up MDT and have run across a problem. MDT is installed on a Windows 2012 server, MDT version 6.2.5019.0. Using WDS as well. Active Directory domain, the server is up ...
0
votes
1answer
276 views

Configure FreeRADIUS with Active Driectory allow specific group of users to authenticate

In order to authenticate WiFi clients I use a FreeRADIUS server configured to check for user credentials in an Active Directory environment. Currently all users with a valid account are authenticated ...
0
votes
1answer
50 views

Can I use an RODC for Active Directory athentication if the writeable DC is not available for several months?

We are running an Read-Write DC at our home office which we are using for authentication when were are working there. It works fine as long as we are at the office, but we are going to be on the road ...
4
votes
2answers
323 views

Complete Active Directory redesign and GPO application

after much testing and hundreds of tries and hours invested I decided to consult you experts here. Overview: I want to apply some GPO to our users which will add some specific site to the Trusted ...