A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

learn more… | top users | synonyms (2)

2
votes
1answer
71 views

Guidelines and Best Practice: Prep to Temporarily Shutting Down an Active Directory Domain Controller

1 AD domain. 3 total Domain controllers, all on 2008 R2 The primary DC (with FSMO roles) is being moved to a new office and it will be offline for a maximum of 3 days. This DC also serves DNS but ...
0
votes
0answers
36 views

Delegating authentication in Windows AD domain

In a Windows AD domain, when the client (user) authenticates against the Domain Controller, is it possible to delegate the authentication to another LDAP/RADIUS server? We have a ton of services in ...
0
votes
0answers
26 views

AD, Service Account, SQL Server DNS Issue

I have very very little experience with network admin and AD, so excuse my ignorance.. I am intermittently getting this error in a Windows Service and website running in IIS (both on the same Server ...
0
votes
2answers
47 views

Changing other user password from command line

I'm in an AD domain and I want to change someone's password (which is expired but I think it is irrelevant). I'm not a AD admin so net user <username> * /domain does not work. I can change it ...
0
votes
1answer
42 views

How to force an authoritative and non-authoritative synchronization for DFSR-replicated SYSVOL

I Got the answer that:- In the ADSIEDIT.MSC tool modify the following distinguished name (DN) value and attribute on each of the domain controllers that you want to make non-authoritative: CN=SYSVOL ...
-1
votes
2answers
228 views

What does “Administrator” have that allows them to RDP into a server?

I am trying to setup an Active Directory so that "Domain Users" can via RDP. If I assign the role "Domain Admin" to the user, they can login via RDP no problem but when I follow many tutorials (this ...
0
votes
0answers
40 views

Active Directory users on Multiple Domains

Hope someone can help me. I have a task to create a new active directory domain - which i have no issues doing. However those guys would like to get users from an particular OU from an corporate ...
1
vote
2answers
116 views

Allow remote desktop service to dc from specified computers

I'm planning an architecture of secure terminals only to access DC's. So i have 2 computers which are secure and if i want to connect to the dc's i will have to log into those computers So what i ...
-1
votes
1answer
45 views

How should I manage my cloud-hosted virtual networks/machines?

I am currently hosting multiple production projects in Microsoft Azure. Each project is configured with a separate virtual network with two Windows VMs to act as web servers, and one server to act as ...
0
votes
2answers
180 views

Virtual Machine with Two NIC's Losing Internet

Please Forgive my newbieness... I'm just a developer trying to learn a little of the hardware side. I've tried to look this question up but all results produce VMWare which I am not using. I've ...
0
votes
0answers
50 views

Outlook connectivity issues

It is Exchange 2013 environment with outlook 2016. Some computers are in domain some are not. Computers out of domain work just fine, but those in domain have this problem once a day at random time: ...
1
vote
1answer
33 views

Windows Server User Share Permissions

I've been attempting to setup the following on my new Windows Server AD setup: G:\Shares\_users (\\HS-W01\_users) = Listable by Domain Users, modifiable by Domain Admins. G:\Shares\_users\%username% ...
0
votes
1answer
78 views

Few Concern: Migration domain controller 2008 R2 to 2012 R2 Domain

My Topic is Migration of 2008 R2 domain controller to 2012 R2 (All domain Controllers.) Current Set-up. I have 3 Domain Controller. DC2008r201: Running As PDC and DNS Installed. DC2008r201. ...
0
votes
0answers
19 views

Folder Redirection on Mandatory profile fails

I am new to the forum. We are using server 2008 R2. Clients windows 7 professional 64 bit. We used to have roaming profiles with folder redirection for all the school students and staff. Its good. ...
0
votes
0answers
27 views

Windows Authentication Issues - Users required to authenticate multiple times daily

Our Company use Exchange 2010 servers with Clients Outlook 2007 and 2013 clients. Without any idea why, we have an Authentication request. The first Time is OK (for renew the kerberos tickets), but ...
0
votes
0answers
99 views

The schema master did not complete a replication cycle after the last reboot

I'm attempting to add a Windows Server 2012 Domain Controller to an Existing Windows Server 2003 network, and then following that, will migrate it to be the domain master. I'm following this tutorial ...
0
votes
2answers
32 views

AD DNS: Point subdomain to external shared hosting

When creating my domain I didn't realize until computers were joined to it that my AD domain is example.com and my organization's website is also example.com, but is hosted on a remote shared web ...
1
vote
2answers
44 views

Forest trust on the same subnet to migrate users

Wondering if anyone could offer some advice on something. I have a domain that desperately needs to be upgraded. Typically, one would add a new DC with a reduced functional level to the domain, ...
0
votes
0answers
19 views

LDAP filter alphanumeric

Does LDAP (precisely Active Directory) allow to filter out only alpha-numeric characters? Client app crashes on some non-printable characters (like vertical tab U+000B), when trying to get AD groups ...
1
vote
1answer
91 views

Control Windows permissions on Samba share from linux

I have a Debian 8 with Samba 4 as a AD domain member. The DC is Windows Server 2008. The shares are able to handle Windows permissions - I use IDMAP backend = rid, since I cannot add uidNumber and ...
1
vote
1answer
28 views

Find the users of Active Directory global group?

I am using following command to get the users of Active Directory Global Group. dsquery group -name "Groupname" |dsget group -members But, this is piped command and it's not working in Visual ...
0
votes
1answer
59 views

Getting Windows domain username in correct case (to match Active Directory)

How can I get a Windows 7 domain user's username in the case that it is stored in Active Directory (such as RoseRoss), rather than whichever case they happened to type it when logging in to their ...
0
votes
2answers
60 views

How to manage credentials/access to multiple remote windows servers

My company has numerous remote servers which we manage. These servers are all Windows Servers and a spread out across different hosting companies / data-centres. Their purpose is IIS Web hosting, SQL ...
0
votes
0answers
22 views

Trying to make Parse Server authenticate to Active Directory

We are developing a parse server app for students to use. We need to be able to authenticate at the Parse level (not the mobile app) to the school's AD. We looked at Auth0 but that looks like we ...
0
votes
0answers
20 views

What is the effect of provisioning the same active directory schema twice

if a domain has been provisioned once using samba-tool with the name, say 'MYDOMAIN', can this be repeated? If so will this result in an update of the existing records, or will a fresh domain with ...
0
votes
3answers
133 views

How to monitor software installation in AD DS?

I'm trying to choose software for monitoring installed software in Active Directory Domain. I thought to use SCCM services, but found it too complicated. Maybe did anybody use a suitable solutions for ...
0
votes
0answers
16 views

Uid lookups from Isilon to Active Directory do not work

If I run id 1000001from an ssh session to an isilon node, configured to authenticate with Active Directory, it returns id: 1000001: no such user. Running id TESTDOMAIN\\user1 returns the info ...
1
vote
1answer
36 views

Secure AD Access

I was just trying to access and Active Directory-Server via php (ldap) to be able to use Windows credentials for a Website Login. I did this using xampp on my standard Windows connecting to a Windows ...
2
votes
1answer
196 views

Secondary domain controller not functioning when primary domain controller is not reachable

We are small business intelligence company and we have a head office and a branch office. I have active directory running on windows 2012 R2 in the head office and another active directory running on ...
0
votes
0answers
29 views

Unable to delete DNS forwarder in 2003 domain

I have an issue with deleting a forwarder in our Active Directory integrated DNS server, I get the following error: The server forwarders cannot be updated. Access was denied. When I go to he ...
3
votes
1answer
95 views

Where is the global address list stored in AD?

Where is the GAL actually stored in AD? I always assumed in was inside of the GC. Is this correct? I know clients must query the GC in order to access the GAL, but is the GAL inside of the GC? ...
1
vote
2answers
110 views

How to assign remote users from GPO/users not authorized

My account and my admins can remote into any machine on the network, but standard users get an "user not authorized" error. The only solution I've found is to manually add the users to the Approved ...
1
vote
1answer
40 views

Centrally deploying print drivers to Windows clients

I'm looking to set up a central print server to allow Windows 7 and 10 clients in remote offices without a local print server to have print drivers installed automatically when the printer is added ...
3
votes
1answer
144 views

What is the supported way to check where my managed service accounts are installed?

I created a managed service account (not a gMSA) and installed it on a 2012 server with Install-ADServiceAccount. Now I want to be able to check where my MSA are installed (throughout the domain) ...
1
vote
1answer
32 views

upgrade Active directory 2003 to 2012R2 profile user

I have problem about profile user I have a Domain with 2 domain controller (both of them is 2003) and install new domain controller (windows 2012R2) some user in domain when login to domain all of ...
0
votes
0answers
60 views

Creating & mapping user home folders on a network share using GPO

I have deployed a fileserver which has had its harddrive partioned to include a shared partition along with a shared folder within it. The fileserver has joined my domain, hosted on a Windows Server ...
0
votes
0answers
58 views

Newly created Windows Domain users can't log in to Samba share joined to Domain

I have a Debian 7.2 server running Samba 3.6.6 joined to a Windows Domain. It all works great, except within the last week, newly created Domain users can't log into the Samba share. Existing accounts ...
0
votes
1answer
45 views

Which server was logged into by specific user

How do I go about finding out which server was logged into last using a specific user account on the domain?
2
votes
2answers
178 views

deny access to file servers and PCs on a domain - guest user

We have 70+ PCs and servers, users access files by accessing the servers from their PCs. Is it possible to deny access to all PCs and servers on a network for a guest user (he should only have ...
16
votes
2answers
773 views

What are the implications of enabling the Recycle Bin feature in Active Directory?

An admin accidentally deleted the wrong OU and it removed several account and computer objects. The recycle bin optional feature was not enabled. We used adrestore from sysinternals to get the ...
1
vote
2answers
128 views

Windows Server 2008R2 not scavenging stale DNS records

We have Domain Controllers where our internal DNS runs on. 2 Windows 2008R2 and 2 Windows 2012R2. Our stale records are no longer removed for some time now, even when running the DnsCmd commands ...
1
vote
1answer
60 views

[Solved]Internal Error 500 occur when use apache 2.4 with LDAP Authetication

I have an CentOS 7 server with SVN server configured and I have another windows server 2012R2 with LDAP, that I use for domain controller. I can use ldapsearch communicate with windows server. Well ...
1
vote
0answers
63 views

Decrease Logon Timeout Seaching for Domain Controller

I've seen this same question asked on several other forums (and SE) with no definitive answer, so I'll try to explain as best I can so that anyone with info understands the problem: AD Server -...
0
votes
1answer
117 views

Assistance with writing PowerShell script to search Active Directory for a machine name

I'm writing a script to automate some AWS-launched Windows server instances. I've got the DNS changes, and the join-domain part okay, but I'm having trouble iterating the namespace...for example; ...
2
votes
3answers
312 views

Identifying certain Active Directory accounts as “IsHuman”

I'd like to flag certain Active Directory accounts to indicate that they represent individual, physical people as opposed to groups, service accounts, built-in accounts, etc. This could be via a ...
0
votes
2answers
66 views

Windows 2008 r2 RDP issues

I have machines on another network, I am finding some strange behavior. I can RDP onto some machines, other machines I receive this error. Logon: "You must be granted the Allow log on through the ...
-2
votes
1answer
95 views

Active directory 2012 password policy

I have a windows server 2012 R2 active directory environment running in my office. I have a primary domain and a child domain. Both the domains have password complexity enabled. Active directory ...
0
votes
0answers
118 views

AD GPO “User Configuration” shows up using “gpresult” but not working. Instead “Computer Conf..” is working smoothly. Why?

Problem: I want to restrict removable storage writing access of all users except admins, and restrict removable storage execute access of all computers even admins computer (forbidding unintentional ...
0
votes
1answer
39 views

Protecting Distribution Groups [closed]

Problem A number of our AD distribution groups have recently been receiving spam from outside our network. These distribution groups are open to receive mails from outside of our network as we work ...
0
votes
1answer
37 views

Mail Server Fails to Replicate Active Directory Users

My business recently made the jump to Active Directory, and wanted our mail server to replicate AD accounts. Both the domain controller and the mail server are running Windows Server 2012, and we're ...