A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
66 views

Active Directory inheritance not working as expected

The question So, I have setup a new domain with two DC's. I'm trying to remove the Authenticated Users group from the one of the OU's and that works fine, however child objects do not update (they ...
0
votes
1answer
52 views

Migration from server 2k3 to 2k12r2 [closed]

I recentely joined as System administrator. And I have to migrate server 2003 from 2012R2. What precations should be taken for this? And how to complete this process? Please guide stepwise as I m d ...
0
votes
1answer
88 views

Auto forward email for mail system use Postfix + Dovecot authenticate against Active Directory

I have a mail server with postfix + dovecot lookup to Active Directory for user authenticaiton and mailbox and deliver mail to virtual mailbox (dovecot) User authentication for IMAP/POP are working ...
1
vote
0answers
209 views

pfSense: Captive portal auth via Active Directory (2003)

I'm trying to set up a new firewall server. We chose pfSense and it's working nicely so far. We managed to our Windows Server 2003 Active Directory as a user Authentication Server (System -> User ...
0
votes
1answer
48 views

Windows server private shared folders

What is the best practice for sharing private home folders with the users (Windows Fileserver with AD)? I was asked this question today after someone watched this video, and it got me thinking.. ...
1
vote
1answer
55 views

is active directory only for your employees [closed]

I've always thought of active directory as being a directory of employees, but is there any reason it cant be used as a directory of customers as well?
0
votes
1answer
97 views

Best way to restore a domain controller in windows server 2003 environment

We have 2 domain controllers, the primary DC is down and It cannot login to windows due to an error: “Security Accounts Manager initialization failed because of the following error: Directory ...
1
vote
1answer
820 views

Apache kerberos authentication to Active Directory not happening. (Is KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN related?)

My goal is to have Apache authenticate authenticate against AD, without prompting for a username and password, using Kerberos. It currently always shows "401 Unauthorized", and appears to be not ...
0
votes
1answer
10 views

Can the objectGUID be specified on creation or changed afterward?

Our system links users in an LDAP store to users in a SQL database. The database has been around longer than the LDAP store though, and we'd like to bring pre-existing users from the database into ...
0
votes
0answers
57 views

Using DSCONFIGAD to bind computer objects to a specific OU using a FQ LDAP DN

The DSCONFIGAD utility for OS X has a -OU parameter that allows one to generate and bind computer objects to a specified -OU via a FQ LDAP DN argument. This is taken directly from Apple's DSCONFIGAD ...
1
vote
2answers
107 views

Active Directory user rights

I'm currently working on a ASP MVC Website solution that I retrieved from a predecessor, and I had to create an active directory machine to support the login implementation using it. Upon a user's ...
2
votes
1answer
224 views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
0
votes
0answers
15 views

SVN server - User test.user1 not found: /SVN/testrepo

My subversion SVN is causing recently lots of troubles and I can't access any repository with the newly created AD account. Let me explain briefly how everything works or it used work. My SVN ...
0
votes
1answer
227 views

Windows Server Network Shares - Non-domain users have access

I have a server with Windows Server 2012 R2. I have a drive that I want to share with the "Domain Users" group. I have set that drive to share only with that group. From a different computer that is ...
1
vote
1answer
36 views

What do I need to ldapsearch AD?

I'm attempting to test LDAP for Moodle auth, by using LDAP search. When I run $ ldapsearch -H ldaps://totally.legit.hostname "(uid=jldugger)" -b dc=example,dc=org memberOf I get back: ...
0
votes
1answer
96 views

Linux Authentication by Active Directory without joining to domain

I have a Win 2008 AD based network. I want to setup a few boxes with dual boot Win/Linux. How can I achieve to authenticate the users with existing AD in Linux? All solutions - I have found yet - ...
2
votes
2answers
977 views

Desktop Wallpaper through group policy for Windows 8 client

I Have Windows 2008R2 server with active directory. All client systems are Windows 8/8.1 Pro. I need to push corporate wallpaper through AD GPO on client system, I have created a shared folder on ...
-1
votes
1answer
26 views

Set a GPO on all users from a trusted Forest

How do I set a GPO (such as desktop background) to work on users from Forest A when they connect to Computers on Forest B. There is a bidirectional Forest Trust between the two Forests.
3
votes
2answers
177 views

How do I make it as if I've never logged into a workstation with a Domain AD user profile?

I've been working on setting up OneDrive for Business with automatic syncing and folder redirection. I got everything working, but there were some issues along the way. In dealing with those issues ...
0
votes
0answers
78 views

Create active AD user with samba net rpc user add command

I have a mixed Windows and Linux Environment. I want to create new Active Directory users with Samba tools. This command will create a new AD user, but they aren't active: net rpc user add ...
0
votes
0answers
114 views

How can I resolve element not found in AD CA?

I had to move our AD CA from server 2008 32bit to server 2008r2 64bit, both domain controllers too! I now know this was BAD. Is there any way to resolve the "Element not found" in AD CA? Or do I ...
1
vote
1answer
39 views

Limit LDAP request to AD

Is there a way to limit requests from a specific user to the AD such that he can only ask if a username or an email address exists or not? The user should not be able to request other data from the ...
3
votes
1answer
134 views

Is it possible a remote active directory authentication from local without VPN

Can we authenticate to a remotely hosted DC from local machines without VPN connection to the server. Server have Public IP & Local machines are using NAT. Currently there is no any other ...
1
vote
2answers
45 views

ADFS Metadata with Active Directory Attributes

Using ADFS on Windows 2012 R2. I have created a Relaying Party Trust that has a claim rule defined that maps a Active Directory Attribute to a named attribute in the vendors system. When I view the ...
1
vote
1answer
39 views

My GPO only runs the first time it is linked to the OU

I am attempting to distribute a .msi file via GPO to Win7 machines from a Server 2008 R2 network. I am getting a funny result. The first time I link the GPO to a OU the program loads. I uninstall ...
3
votes
1answer
192 views

AD IT Helper Permissions

My apologies if this has been asked before. If I knew the proper search terms then google would be more effective. I would like to add a user that can join computers to the domain, Install software ...
1
vote
3answers
68 views

Active directory HyperV VM to VMware

we just copied an active directory VM from an Hyper-V VM to a VMware one. This Hyper-v VM is our second active directory server (the first one is a physical server). We used Symantec Backup Exec to ...
0
votes
1answer
31 views

Windows profile is deleted when user does not log in for several days

We use a Windows Server 2008 R2 Active Directory network with Windows 7 Professional clients. After logging in a profile gets created on the computer as normal with all the usual settings, such as the ...
1
vote
2answers
109 views

Newly promoted domain controller showing many errors but dcpromo didn't complain?

I have a domain separated into four sites. In one of my remote sites, I have promoted a new DC and will be decommissioning the existing DC in a few weeks. I didn't receive any errors when I did the ...
1
vote
1answer
233 views

How Do I Connect to Active Directory Server Behind a Firewall

I'm having trouble getting LDAP queries to reach my Active Directory running on Windows Server 2012 R2 behind a Cisco PIX 506E firewall. My goal is to create a SSO environment for some applications ...
0
votes
0answers
29 views

Cannot add Domain Users to SQLServer security

I installed a win2008 server (WSQL) Its has successfully joined another Win2008 server which is the domain controller. Now back to WSQL machine, I connect it to the domain... And I install ...
3
votes
1answer
87 views

New-ADUser ADException NotSpecified

I am receiving an error when I run this powershell command to add a new user: PS > New-ADUser -Name "user1" -GivenName "test" -Surname "User" -Path "ou=Users" The error returned when run is: ...
4
votes
3answers
314 views

AD does not unlock account - even after the Lockout duration is expired

I'm facing a strange problem - domain user accounts are not being unlocked. These are the Account Lockout Policy settings: Lockout duration: 30 minutes Account lockout treshold: 10 invalid logon ...
4
votes
1answer
46 views

Forcibly Split 2003 Active Directory Domain

I am currently trying to find the most efficient way to split a single domain into two, distinct, fully functional domains. We have two sites, and several DCs. The sites, Site A, and Site B, are ...
0
votes
0answers
42 views

Apache Webserver: Map ClientCertificate to Active Directory

Using Apache Webserver 2.4 and mod_ssl and mod_authzn_ldap I'm trying to Authenticate the user by a ClientCertificate (PKI smartcard) Authorize the user by membership of certain Active Directory ...
4
votes
1answer
74 views

Group Policy Files - Active Directory

I am having a whole lot of trouble getting some files distributed across the network. My settings are: Action: Replace Source: \\[fqdn]\Repo\sqljdbcl.jar Destination: ...
-1
votes
1answer
67 views

Clone VM connected to domain with CRM 2011 on Windows 2008 R2 SP1 [closed]

After copying VM with CRM 2011 I've changed server name, performed actions in this article: ...
6
votes
2answers
1k views

Reverse DNS records not registered when using DHCP

I've stumbled upon a strange behaviour with Windows machines, which seems to be fairly consistent between all Windows versions from Vista/2008 to 8.1/2012 R2; it doesn't happen instead when using ...
1
vote
1answer
27 views

How can I quickly check number of groups in my domain?

Probably this is simplistic question but it seems that off the top of my head I have no idea how to do this. How can I get number of groups in my domain? In all domains within the forest? What is the ...
4
votes
1answer
3k views

Java 8 Update 25 Install Via GPO Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using Group Policy. When attempting to add the jre1.8.0_25.msi package in the GPO at Computer ...
2
votes
1answer
45 views

Active Directory remove user from GroupA if member of GroupB

In Active Directory, how do I efficiently remove all users from GroupA who are members of GroupB? Basically I want to subtract B from A. Have now: AAA BBB --- --- Alice Alice ...
4
votes
1answer
70 views

What is MS-Membership Transitive.LDF?

When installing ad-lds, you have the option to import several LDF files. Some of them are described here: http://technet.microsoft.com/en-us/library/cc771943.aspx. Can anyone tell me what the ...
1
vote
1answer
47 views

How to set up an authentication system to authenticate users against an existing SQL Server database

I have a pre-existing SQL Server database with login information (user names, password hashes) for thousands of users maintained by an ASP.NET website. I would like to provide an authentication ...
0
votes
1answer
153 views

libnss-ldap getent passwd - AD replies correctly but output shows local /etc/passwd

I am trying to configure libnss-ldap to provide AD authentication to my Linux Debian servers. This is working fine if user exists locally, I want to make it work for Domain users. Here is my ...
0
votes
1answer
119 views

Debian Active Directory to LDAP migration

These days I am working on LDAP and Active Directory migration. I want to migrate to LDAP but I cannot get passwords from Active Directory. I want to seemlesly migrate to LDAP, and I want a solution ...
2
votes
1answer
207 views

dsadd run from batch file fails with “The specified account already exists” when there is no existing account with the same dn

I am programmatically creating thousands of test users from a txt file containing First Name, Last Name, Username, and Password using the following command (saved as a batch file, run in cmd, modified ...
0
votes
1answer
51 views

Amazon Zocalo with Active Directory - can't login

I just setup a Zocalo site for my company using the active directory connect option. The Domain Controller we are connecting to is in an AWS VPC. I setup the zocalo site fine and it says active, but ...
1
vote
0answers
128 views

AD Authentication with SAMBA, Winbind and SSS

I'm having trouble authentication with AD to a SAMBA share on a linux server. Authentication appears to be working, but only halfway... [root@myserver ~]# wbinfo -a my_ad_user%password123 ...
1
vote
1answer
26 views

How can I know where and how a security group is triggering a logon script for some users?

The organization I work for has implemented application access and scripts via Security Groups. This is, if a person needs to access some applications or have a script run when he logs on, we add ...
2
votes
1answer
30 views

Missing DomainControllers in Active Directory Object

We are setting up a new network environment that will have two domain controllers and ran into an issue with Windows not recognizing the existing domain controllers (DC-01 and DC-02) as Domain ...