Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

1
vote
1answer
47 views

Lotus Domino Server Integrated with corporate ldap is fetching garbage values

I am using Directory Assistance (da.nsf) to use our corporate ldap for authentication and authorization. Also for sending emails. While sending emails, i will just give the common name and the server ...
0
votes
0answers
32 views

Why AD DS user is able to write to ADLDS(ADAM) container(user is neither imported nor added as foreignsecurityprincipal)?PS/dsacls cmd to fix it-DENY

I have installed 'AD LDS' instance on one of my windows server 2012 which is part of a domain. I brought few users (windows security principals to 'AD LDS') as 'ForeignSecurityPrincipals' from AD DS ...
2
votes
1answer
96 views

DSQuery to find systems running Windows XP that have connected to domain within last 26 weeks

I'm trying to write a single dsquery which will tell me what systems have connected to our domain within the last 26 weeks that are running XP so we can figure out what we need to phase out over the ...
2
votes
1answer
59 views

Cannot add Conditional Forwarder in Active Directory

Right now, I have three forests I'm trying to create trusts between. Let's call them hopelessn00b.local, hopelessn00b.com and internal.hopelessn00b.com. I got trusts configured between ...
2
votes
3answers
68 views

Windows Networking - Multiple SItes [closed]

I have 6 x sites located all around the land down under. All 6 sites are linked via a meshed VPN network and can see each other. Now, in Head Office i have 2 x AD Servers (1 backup) on the one ...
1
vote
2answers
213 views

DFS Replication failure

We have an active directory server as global catalog and DC, this one has operations master running. We have a second ADDC Global catalog and exchange server. I started getting the message below ...
0
votes
1answer
58 views

Radius Authentication

I will first tell you a little bit about how I am set up. I have wireless clients connecting to an ARUBA Mobility Controller using a RADIUS server for Authentication. I need to ensure I can get ...
0
votes
1answer
30 views

Windows Startup and Logon scripts proper permissions

I'd like to know what the appropriate permissions should be for Startup and Logon scripts that run for everyone. Should Startup scripts have System read and execute permissions and Logon scripts read ...
0
votes
2answers
38 views

Not able to rejoin an XP Pro PC to a windows 2008 Domain Endpoint mapper error

I know many people claim to get this error and that this could be caused by the RPC services or some other registry port limits, however I have spend hours trying to resolve an issue that all started ...
0
votes
0answers
29 views

How to integrate RSA with AS DS?

I have not been able to find anything online that isn't AD FS. Since I do not run AD FS, is there a way to integrate RSA Securid with just AD DS? Any online resources? Also, this is a 2012 server.
0
votes
3answers
79 views

Why is merging active directories so tough?

I'm not a network administrator; I have a totally different role in IT in my company. I however am becoming increasingly interested in the server admin side of things. I understand the basics of what ...
2
votes
2answers
55 views

Windows 8.1 a “.\” in remote desktop gives current computer not remote computer

We had some issues with our domain recently where we got the "trust relationship has failed" message on a server. Now normally I could just login with the local admin to fix this, however I had ...
1
vote
2answers
57 views

What do the “Read personal information” and “Write personal information” Active Directory permissions entail?

I have a user account in an Active Directory domain. Despite this user account having the Read personal information and Write personal information permissions set, when logged in as this user, I ...
5
votes
3answers
86 views

Workstations in remote site don't know about new AD realm

I've recently migrated a classical Windows Domain (samba3) to an Active Directory domain (samba4). Workstations in remote sites do not have a local DC so they are not aware of the transition, hence ...
2
votes
0answers
68 views

What are some good reasons to create a new forest, child domain, tree, site, or OU in Active Directory? [duplicate]

When is it worth it to create one of the above and when is it better to keep things in the same place?
0
votes
0answers
175 views

Configuring mod_auth_sspi to find remote user

I have been trying for a while now to get mod_auth_sspi up and running to help run a Drupal Intranet. The Drupal LDAP modul and the Drupal SSO instructions https://drupal.org/node/1371478 have been ...
2
votes
2answers
104 views

Can I replace my domain controller with Azure Active Directory?

I currently have a small network with a few servers and about 25 client PCs. We are using Office365 and have AD synchronisation setup from our on-premise server. We also have single-sign-on setup ...
0
votes
1answer
25 views

Sites and services design for branches those having same subnet

I have 2012 domain and about 50 of workstation and servers together in it at branch (A) and now I get another branch (B) with about another 75 workstations and servers (domain 2012). I need to ...
1
vote
1answer
73 views

Include AD domain admins group in Linux sudoers?

I'm working in a company whose network is configured through a Win Server Active Directory, with hundreds Windows of computers connected to the local domain. We are doing some tests to start ...
0
votes
1answer
38 views

We're migrating everything to the cloud - is there a reason to keep Active Directory around? [duplicate]

We are "cloud-sourcing" all our services (web, databases, file storage, e-mail, print, DNS). As authentication is made on the could-provider side, I'm wondering about the pro and cons to keep our ...
2
votes
1answer
171 views

NPS - RADIUS - Active Directory Authentication

Is it possible to use NPS RADIUS as an intermediary between an application that only supports RADIUS authentication and an active directory server which is used for authentication across the network? ...
1
vote
1answer
31 views

Is it possible to create add people from outside the company inside AD mailinglists?

I would like to know if it is possible to add people from outside your company inside you AD so they can be added as members of different mailing lists. Clearly, I am looking for a safe way of doing ...
-4
votes
1answer
56 views

Why does second domain controller not display [closed]

We have 2 domain controllers DC1 and DC2, both sharing the same AD database The "Active directory users and computer" console of both DC1 and DC2 display DC1 only, under "Domain Controllers". what ...
1
vote
0answers
74 views

ADCS WebEnrollment : The context was acquired as silent

I have setup Active Directory Certificate Services with Web Enrollment and I have the following error when enrolling certificate on other computers that are in the same domain : Certificate ...
1
vote
1answer
84 views

Losing trust to domain after restart

Moving my post from stackoverflow : Hello I have a domain environment in which I have a domain controller named dc1.example.com and the domain network name is ms1.example.com . In this domain I have ...
25
votes
7answers
2k views

If a Windows shop moves “everything” to the cloud, does it still need Active Directory?

Taking a spin off of this question: Do I really need MS Active Directory? in a new direction for 2014. Taking into account a basic Windows infrastructure: domain controllers Exchange 2007/2010/2013 ...
3
votes
1answer
56 views

What happens when User's UPN Suffix is not Trusted in Active Directory

I have 1275 UPN Suffix in the AD. This is the maximum allowed in Windows Server 2012. $domain = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain(); $domaindn = ...
0
votes
1answer
23 views

2 NICS using Windows Server 2012 as “gate”

I want to use my windows server as a gateway and DHCP for my local network. It have 2 NICs where one will be connected to the internet and the other to my local network. There are no router on the ...
0
votes
1answer
64 views

Jenkins: LDAP username/email lookup

My Jenkins LDAP configuration works fine for the user login and user details. The user John Doe can login with his username jdoe and his password. His initial user information (user/jdoe/configure) ...
3
votes
1answer
52 views

Increasing lockout duration on active directory

Sun has a concept called Lockout Duration Multiplier; the more a user has been locked out during a certain period, the longer his lockout duration will be. This helps foil automated attempts to log in ...
3
votes
1answer
93 views

Why would an interdomain trust account not require a password?

I am trying to understand why and interdomain trust account would have an account value of 2080 (INTERDOMAIN_TRUST_ACCOUNT – PASSWD_NOTREQD). During a routine audit, after we had recently set up a ...
1
vote
1answer
55 views

User Permission Issues Within Domain

I have user that is in Domain Admins group. I am trying to access folder that has full permissions for Domain Admins group but for some reason I get "You don't currently have permission to access this ...
1
vote
2answers
421 views

'The'account is not authorized to login from this station' error while trying to acccess network share

Clients are getting this error when trying to access network shares on one of our 2008 R2 servers: The account is not authorized to login from this station. The problem started a few weeks ago. ...
1
vote
1answer
53 views

Why do I have to log into ssh with my password once per day?

When I try to ssh using an encrypted key held in ssh-agent, I get the following (using ssh -vvv): debug1: Next authentication method: publickey debug1: Offering RSA public key: ...
1
vote
2answers
212 views

Routing to Remote Desktop Gateway on internal network

I have a single physical host that I am using as a virtualization lab and a number of VM's on Hyper-V that are connected to the host via an internal network. I had it working so that the physical host ...
2
votes
0answers
38 views

Windows Server 2008 R2 Terminal Server - Providing Single Sign On to Windows 7 Clients

I've inherited a system that may have never been fully integrated as it could have been. We have a simple setup - A Windows 2008 R2 Server being used for Remote Desktop and Remote App access by users ...
0
votes
1answer
21 views

Active Directory Web Services update will not get installed when it should

I'm attempting to install Active Directory Web Services on a Windows 2008 64-bit server (No, not R2). I'm getting the download from the Microsoft download centre here: ...
0
votes
1answer
90 views

Managing inherited mailbox permissions in Exchange 2007

Reviewing the Full Access permissions on a mailbox using Exchange Management Console (EMC) does not show you the whole picture. Example - EMC shows no permissions for the account Domain\administrator ...
0
votes
1answer
31 views

Linux service account management

We use Windows Active Directory for account management. As a security policy, we need to change password for service accounts at least every six months. What we are experiencing is, when we change the ...
0
votes
2answers
28 views

Can't login with another domain credentials even when a trust exists

I have a domain named A; it has 2 AD servers and some web servers. And this is configured to have a one way trust with a domain named B. In short, A trusts B, but B doesn't A. Also, the users of ...
0
votes
0answers
33 views

Tomcat application can't connect to Active Directory when running as a Windows service

I have a strange scenario that I haven't been able to find any details on anywhere. I have an application running in tomcat that connects to an Active Directory server that works perfectly when I ...
4
votes
3answers
307 views

When should you create additional domain in forest?

My company is opening a new site in a different country. We will be installing new servers there and I have a question I can't decide on. Should we create a new domain in the forest or should we just ...
8
votes
1answer
291 views

Can I create the active directory forest corp.domain.com without creating domain.com first?

Is there any way which I can create the active directory domain corp.domain.com without first creating domain.com AD DCs? Or to put another way, can corp.domain.com be the root of the forest?
0
votes
1answer
50 views

Can I have a machine in a DNS subdomain, but Active Directory main domain?

I've just started virtualising some Linux servers, and want them to have DNS names like this: name.vm.company.internal Our DNS is hosted on Windows 2003 Active Directory, so most machines are ...
7
votes
1answer
125 views

one of the single dc per domain DCs has suffered USN rollback

I've inherited an Active Directory forest that is laid out very badly. It has a single forest with a domain tree for each site, each with a single domain controller. No domain is a child of any ...
5
votes
2answers
135 views

Will GPO Software Installation re-install already installed applications from a different policy?

I'm looking to install our latest AV suite through a GPO Software Installation policy. (As in the below screenclip.) Unfortunately my request to use DFS has been denied and I'll need to create a ...
0
votes
2answers
26 views

Migrating server local groups (currently workgroup) to domain?

I have about ~30 workstations that I administer, plus a fileserver, all of which I inherited when I took this net admin job. The previous guy had been around forever from when the company was far ...
0
votes
2answers
136 views

Windows Clients connecting to DC in wrong site?

Ok so Sites are separated by WAN Domain : production.contoso.local SITE A Site network: 192.168.0.0/16 Site DCs : DC1-SiteA, DC2-SiteA Client : serverA ...
1
vote
1answer
27 views

How do I audit where security groups are applied in my domain? [closed]

I've been asked to find out how and where specific security groups are being used in my organizations AD domain. I know what the groups are and where to find them in the directory, but I don't know ...
1
vote
0answers
19 views

Oracle Identity Manager and Microsoft Read-Only Domain Controllers

Is Oracle Identity Management 11g (OID) compatible with Microsoft Active Directory Read-Only Domain Controllers? (RODC) My setup has OID importing users from AD RODC. Is this configuration ...