A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
1answer
72 views

Script for user movement based on OU

Any script which will read the department attribute of users (under an OU and sub OU's) and move them to different OU named as department ( already created OU structure name same as their department ...
0
votes
0answers
122 views

Active Directory - map drive to all computers in specific OU

Having some problem in basic looking thing. Computers are above 150 PCs with differnt OS's (production area). Connected to one domain. I want to map drive (with domain credentials) to all computers in ...
2
votes
0answers
109 views

Why can't I remote manage a domain-joined Windows 10 computer?

I have a Active Directory domain of old Windows 7 computers and introduced a new Windows 10 computer. However, when I right-click the Win10 computer in AD Users & Computers, and select Manage, I ...
22
votes
6answers
2k views

What causes a workstation to lose trust with the domain controller?

I've received the error several times on Windows 7 Workstations and Laptops where it loses trust with the domain controller, and I know how to fix it, but why does it do that?
0
votes
0answers
37 views

Active Directory password policy for Business Days?

I don't think there's any way to do this after looking through Microsoft's password policy documentation, but on the off-chance that someone was particularly clever: Is it possible to create a policy ...
0
votes
0answers
63 views

Admin Users cannot write to New Custom AD Attribute, Normal Users can

I have extended our AD schema and added a field called TerminalName to the User Class. The logon script gets the ClientName environment variable and writes it to the field. Initially the script got an ...
3
votes
1answer
84 views

Error Creating OU: Name is Already In Use

I have an OU structure for computers that looks like this: Workstations |-- Building | |-- Floor, Department, or Approximate Location ... I want to create a child OU called "3 North" in ...
0
votes
0answers
41 views

Mounting samba directory changes all file permissions to user who mounted it

I have a xubuntu 14.04 client, a debian 8 Samba File server and an external Active Directory service. I log in as user1 on the client authenticating against the ADS with winbind. My home directory /...
2
votes
0answers
48 views

Why do Roaming User Profiles stay at home?

PREFACE: I am a helpdesk operator/student who has volunteered to work on local small business IT problems for experience. I apologize in advance if I have missed an obvious solution! I am attempting ...
0
votes
2answers
47 views

Restricted group local administrators can RDP into DC

I have added restricted groups to my Desktops OU and this adds the "Local Admins" security group to the Local Administrators group on workstations in that OU. The issue is, that after this GPO is ...
-1
votes
1answer
19 views

Increasing Size of VHD having DFSR Data

I have two file servers which are replicating files through DFSR across two different locations over WAN link. I want to increase one of partition size having replication group folders on it. I was ...
5
votes
1answer
133 views

LDAP not preventing disabled users from authenticating

I have an interesting situation where we have the exact same application running in a "Development" environment and another in a "Testing" environment behaving differently when authenticating with AD ...
2
votes
0answers
41 views

How can I change the default location of the Adobe Premiere Pro (creative cloud) media cache location?

Adobe Premiere Pro on Windows machines stores its 'media cache' files in the %appdata% directory. On our network, this is redirected to a server share, and consumes significant amounts of storage ...
0
votes
0answers
98 views

All options greyed out when trying to configure Active Directory Domain Services Windows Server 2012 R2

I am configuring the first domain controller for a new domain. The install of Active Directory Domain Services seemed to go ok, but when I attempt to configure the domain controller it gets stuck on ...
-4
votes
1answer
52 views

Change computer (AD member) password on second computer (VM with the same SID) [closed]

I have a laptop that is connected to an AD. It tends to be slow so I converted it to a VMWare virtual machine that I can run on my home office desktop. The VM has the same SID as the physical machine. ...
0
votes
0answers
19 views

Must change password during password change AD on SVR 2003

I have a Server 2003 AD (going to be replaced next quarter) with around 100 users, only around 50 or so are active. I've noticed that in the past month, any time a user password expires they are ...
2
votes
3answers
92 views

Store GPO Scripts in Netlogon or Policy Folder?

Is it best practice to store logon scripts centrally in \\DOMAIN\Netlogon or in the policy folder they get put in by default, eg. \\DOMAIN\SysVol\DOMAIN\Policies\{DE22B6FB-315E-4C55-BF06-A7709913CD9E}\...
5
votes
1answer
170 views

NTFS: User can edit/delete files without rights

I have a very strange NTFS rights phenomenon on a fileserver and I cannot find my mistake, pulling my hair out for hours now. What am I missing? My goal is: User from Group-A should be able to ...
2
votes
2answers
61 views

Permissions reset?

I am a developer and I have a Windows Server 2012 development environment. Nothing special, onlyAD and a WebServer are installed on it. Everything is configured with the default values. When I do the ...
0
votes
0answers
25 views

Find Active Directory Groups for a specific location

I am a system admin for a site that I inherited from a previous admin. I am currently trying to determine what AD Groups are associated with this site (access to servers, other resources) so I can do ...
2
votes
1answer
22 views

System State Backup on Domain Controller

I wanted to do a one-time full server backup of the Domain Controller. However, there was almost 1 TB of data to backup. So I am just doing a System State backup instead, which is less than 5 GB. At ...
0
votes
1answer
242 views

Samba file server on Windows Domain can't authenticate users - gives “credentials chain check failed”

I have two TurnKey Linux Fileserver 13 (basically Debian 7.3) running Samba to share folders on our mostly-Windows LAN. Samba is configured to authenticate users using Active Directory on our domain ...
1
vote
0answers
99 views

Windows Active Directory and Linux integration: new AD Group does not show up in Linux

In my organization, the support team has created a new AD group for me but it does not show up on any of the nodes in our cluster(using RHEL). I went through this article to understand Windows and ...
1
vote
1answer
59 views

Apache LDAP (Active Directory) not working

I've had some mixed success with Apache and LDAP. First, it is working.. but not entirely. So, a basic LDAP config, it looks like this: AuthLDAPBindDN "omitting this" AuthLDAPBindPassword "...
0
votes
1answer
68 views

Dsquery group –name A* --> dsquery failed:'A*' is an unknown parameter

From here: http://ss64.com/nt/dsquery-group.html Examples Find all groups on the current domain with a name that starts with 'Admin' C:\> dsquery group -name Admin* Find all groups in the '...
0
votes
1answer
81 views

How to secure AD administration with MFA

I'm evaluating an MFA solution such as Duo or Okta (any one have an opinion on that?). Adding MFA to web logins is straight forward but I want to add another layer of security to our Active Directory ...
0
votes
0answers
42 views

Active directory failed connectivity in dcdiag

I have been having some trouble with Active Directory on Windows Server 2012 R2. After doing a dcdiag I can see a fail at the top of the report. This dcdiag was run on the server itself, not a ...
0
votes
1answer
120 views

Server 2012 stopped accepting computers joining to our domain with error 53: the network path was not found

We have Windows Server 2012 R2 Standard as our DC. Several workstations were added to our domain successfully. But then (I cannot determine what exactly could be a show-stopper) it stopped accepting ...
0
votes
1answer
76 views

How do you get detailed information on Active Directory logon failures?

In my domain controller event log, I'm getting an account failure from a username of a service account. The info is: Security ID: DOMAIN\serviceaccount Account Name: serviceaccount Additional ...
0
votes
0answers
19 views

What is the use of recycled object in Active Directory?

After the deleted object lifetime period, the logically deleted object will become a recycled object (which is same as a Tombstoned object), remains in the "Deleted Objects" container until its ...
0
votes
1answer
34 views

Buffalo Linkstation(NAS) Joining Active Directory

I am using Windows Sever 2008. I have 2 Buffalo Linkstation and there are same problem. Cannot to join Active Directory Domain Failed to join Active Directory Domain. Please confirm the Active ...
-6
votes
3answers
191 views

How to set up Active Directory in windows 7? [closed]

I just installed Remote Server Administrative Tools (RSAT) on windows 7, and turned features on as mentioned in the installation guide. Now the Administrative Tools have been installed and ...
0
votes
1answer
40 views

Roaming Administrator Profile

I have a 2012 R2 AD server running 100%. A certain group of users need to be able to run programs that require elevation and install programs as needed. I have tried making the user a member of ...
0
votes
0answers
58 views

How to open FileZilla Client in windows explorer?

We have a shared drive (windows 7), and I want to set up a server-client FTP system on office local network, so that people can have access to different folders or sub-folders with permission. I ...
0
votes
1answer
37 views

Do i need a print server at each remote site?

I am planning a network for a project and am wondering how to proceed with print services. This topology has a main office with 2 remote branch offices. I plan to create one domain with 2 remote ...
0
votes
0answers
54 views

AD authentication on Centos7

I set my configuration on centos 6 and it works but when I pushed it on centos 7 it doesn't work. Here is my configuration : # authconfig --test caching is disabled nss_files is always enabled ...
4
votes
0answers
87 views

How to configure Windows to trust a network share using a GPO?

I keep getting the following warning whenever I try to open a share from my DFS. How can I configure Windows (10 in this case) to trust anything under the root of my DFS via GP? It seems odd that ...
0
votes
1answer
26 views

Cannot login anywhere on domain: Profile cannot be loaded

I'm having this issue with one of our users. This is a roaming profile, and I've tried logging in on a few machines, but we're still getting the same error. I did go through cleaning folders and the ...
0
votes
1answer
76 views

Bulk converting AD groupscope from domain local to universal

I have been testing the following command to convert individual "global groups" to "universal", it works fine. dsmod group <GroupDN> -scope {L|G|U} However, is there a way to convert a whole ...
0
votes
0answers
33 views

google chrome group policy locale

We currently have Google chrome deployed in the enterprise. We have an internal website that retrieves data from a database and people using chrome noticed the date and time format was in the US ...
5
votes
1answer
183 views

Get-ADGroupMember $Group fails when $Group contains principals from other domains

I've noticed that when I use Powershell to get the group membership of an Active Directory domain security group, the Powershell cmdlet Get-ADGroupMember $Group fails with the error message: PS C:\&...
1
vote
2answers
56 views

RPC Server is unavailable while trying to promote a domain controller. Open firewall

So I've been scratching my head around this problem for a few days now. This is a quick schema of our infrastructure : Our Primary Domain Controller is running in an hypervisor, in our datacenter. ...
2
votes
0answers
60 views

Is it possible to use Active directory without a trust relationship for FreeIPA passwords?

I am looking to integrate FreeIPA with an Active Directory environment that I do not have full control over and most likely will not be able to get a trust relationship setup with my FreeIPA install. ...
1
vote
1answer
135 views

Check If A Service Account Has Logon Interactive Privileges

I want to loop over all my domain service accounts and make sure that people can't log on the server using that account. How can I check if a service account has interactive logon privileges and/or ...
1
vote
1answer
287 views

how to create a folder on desktop everytime a new user is created?

How can I configure the system so that whenever I create a new user, and automatically available on her/his desktop a directory called "project"?. Is there something related to C:\Users\Default??
10
votes
1answer
103 views

How many FSMO roles are there?

I've always understood that there are five FSMO roles, but sometimes I see something that says there are seven. How many are there, really?
4
votes
2answers
76 views

every 5th AD query is very slow, why?

I’m binding a FreeNAS box to AD for student logins to SMB mounts. That all works fine. I have a bash script that runs on the FreeNAS to build an index.html page pointing to a subdirectory of each ...
2
votes
1answer
68 views

Manually (re-)create Active Directory schema objects msExchRecipientDisplayType and msExchRecipientTypeDetails from Exchange on Samba AD

Somehow, my Active Directory has "lost" (at least) 2 objects from the schema. msExchRecipientDisplayType and msExchRecipientTypeDetails are what I need to recreate. I believe they were lost, because ...
0
votes
1answer
30 views

Windows security event log showing lot of firewall rule changed alert

n my server i am getting lot of event id 4946. A change has been made to Windows Firewall exception list. A rule was added. i am getting this alert every day. can you help me to reslove this. Regards,...
1
vote
1answer
315 views

OmniOS r151018 file server visible in samba4 Active Directory but not in Windows Network Neighborhood

I have a test setup containing: 3 AD domain controllers (set up to replicate between them), all running Samba 4.3 on Univention Corporate Server 4.1 1 Windows 7 SP1 client joined to the domain 1 ...