A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

4
votes
1answer
131 views

ADFS - Restrict to AD Group

I just implemented an ADFS server to connect a third-party chat tool with our Active Directory via SAML 2.0. Everything works fine so far but there's a little problem: As soon as a user logs in, the ...
6
votes
1answer
247 views

Error adding child Active Directory domain to existing forest

I'm building a test environment containing multiple Active Directory domains in the same forest, but I'm having strange issues while trying to add a child domain to the forest root domain. All ...
0
votes
0answers
63 views

SharePoint 2013 User Profile Sync - Attributes Not Synced

I have a SharePoint 2013 farm that is utilizing SharePoint Profile Sync to import Active Directory user accounts. A handful of users are importing without the 'Manager' attribute populated. All ...
0
votes
0answers
15 views

dropped security events on PDC

Running a Windows 2008R2 Active Directory environment geographically dispersed over WAN links. Have used group policy to apply increased verbose security logging on domain controllers. Using ...
4
votes
2answers
98 views

Audit policy being overwritten by “something”

I'm installing vendor software which requires account auditing to be enabled on our DCs. The problem is Audit Policy is not being pushed. Checking secpol.msc shows Windows Settings->Security ...
1
vote
1answer
101 views

Make DNS server know of it's ADDC server

I have a problem and haven't been able to find an answer for it on the googles, so now I ask you I have 2 servers: Server A, ubuntu 14.04, running DNS/DHCP through bind9 and isc-dhcp-server Server ...
1
vote
2answers
32 views

View GPOs applied to a specific security group

A group was created in the Active Directory Users and Computers to give local admin rights to certain users on our domain. After taking over management of this system from a previous employee I am ...
0
votes
1answer
147 views

Domain Controller loses major functionality randomly

I have a weird scenario going on, 2 domain controllers at 2 different sites that communicate over a BOVPN. At random the main server (named SERVER) will no longer be able to resolve DNS and even ...
1
vote
0answers
70 views

Promote Windows Server 2012 to domain controller in an existing samba network

I have a Windows Server that I want to use as a domain controller to push gpo's to workstations that are on a samba 3 domain served from an Oracle Solaris server. If I were to promote this server to a ...
0
votes
0answers
30 views

Guest clients browsing very slow

I have AD, DHCP, DNS, RRAS, Print and File Services on my Windows Server 2003. I have a small network of 40 desktop computers and 10 guest laptop connecting cables for mobile staff. I have a Cisco CE ...
18
votes
1answer
1k views

How to time-bomb a GPO?

I am doing a lot of work in higher education where it is a rather common requirement to reconfigure a number of Windows domain members (e.g. PCs in a classroom) for the duration of a specific course ...
-2
votes
1answer
41 views

Create a backup domain controller, but don't want it to do anything [closed]

I set up a second domaincontroller fot backup, but if I take a look at he log files, I see that is manages logons for half of my computers, etc... Can I set it up that it actually does nothing, ...
3
votes
1answer
65 views

Can group managed service accounts be granted privileges such as “log on as batch job”?

I recently set up a group managed service account to ditch the headache of password rotation. The account creation went smoothly. I was able to set up a service to run as the gMSA, and the account ...
-1
votes
2answers
62 views

memberOf AD explorer search error

I'm using AD Explorer from Sysinternals. I'm performing a memberOf search against the container OU= Alaska Users for the following user: CN=Doe.John,OU=Alaska ...
0
votes
0answers
57 views

Allow access to a share on a workgroup using a user which is a part of a domain

There are 2 networks. Network A, which is domain controlled, and Network B, which is a small workgroup. A user from Network A accesses Network B using VPN (Network B is Checkpoint 600, office mode, ...
1
vote
1answer
76 views

saslauthd on Red Hat 6.5 NO “authentication failed”

I'm trying to authorize an user of an active directory in a red hat linux 6.5. To do that I am using saslauthd. This is its configuration: /etc/saslauthd.conf: ldap_servers: ...
3
votes
1answer
168 views

Check if a Domain Controller has been cloned

I have reason to believe that previous administrators cloned our Domain Controller at somepoint in its recent lifetime. The DC at one point was running on Server 2003 and has since been upgraded to ...
0
votes
1answer
300 views

An error occurred while using SSL configuration for endpoint 0.0.0.0:443

Based on information received from the network team. I have determined that the issue most likely rests with the application servers on the WAN. After replacing the certificate, I ran the ...
3
votes
0answers
105 views

Windows Server 2003 DC migration to 2 x 2012 R2 DCs - DCDiag error = Advertising: SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE

We are upgrading our single 2003 domain controller (DC1) to two 2012 R2 controllers (DC2 in Sevenoaks and DC3 in Manchester (different site in Sites and Services for Manchester)). DCpromo (the wizard ...
0
votes
1answer
31 views

Authenticate WLAN using Hostname in Access Group

The hardware is Cisco APs and Windows 7 Enterprise clients, which currently allows users to authenticate based on an Access Group in AD. We're looking at instead of users account, using the actual ...
-1
votes
2answers
142 views

Reuse old domain controller IP address

We currently have 2 Windows Server 2008 R2 domain controllers, and I want to replace one of them with a Server 2012 R2 DC. I also want to reuse the IP address after I demote the old DC. What is the ...
1
vote
0answers
79 views

Not able to RDP with any other users

I have a strange problem in my Active Directory using Windows Server 2008 R1. Only one of my users is able to make use of remote desktop functionality from the 50 users I have in my domain. The rest ...
0
votes
0answers
40 views

Can't Remote Desktop on LAN, Firewall Rules in Place, Yet Packets Dropped

I've banged my head for a few hours on this. I'm beginning to move several computers to a new subnet, all Windows 7, all domain joined. On the original subnet (192.168.145.X) everything works as ...
4
votes
1answer
334 views

Execute Powershell Add-Computer remotely via Invoke-Command

Scenario: When executed locally on the Azure VM, succesfully adds the machine to the AD, and restarts. $DomainName = "test.local" $AdminUserName = "sysadmin" $Password = <mypass> ...
0
votes
1answer
153 views

Windows 2008 Domain users can't logon even though Default Group Policy allows local logon

I've installed Windows 2008 Server Standard R2 and installed AD/DNS Server. After that, I'm not able to logon a local user which I've created. "You cannot log on because the logon method you are ...
0
votes
0answers
45 views

Active Directory Won't Authenticate

Something is really buggy with our Active Directory here at our company. We can query and ping everything just fine. The time is correct. We have restarted both of our Domain Controllers. We also use ...
3
votes
3answers
3k views

SQL Server Windows Authentication fails after tonight's security updates: The login is from an untrusted domain

We have the following setup: One Domain Controller (DC, Server 2003 R2 Standard x64) One SQL Server (SQL, Server 2008 R2 Standard x64) some clients. All machines are in the same domain. All user ...
0
votes
1answer
67 views

Using Administrator Credentials to login as a User to Their Desktop [duplicate]

Other than memorizing and documenting each user's credentials, is there way that I can use the Windows Domain Administrator credentials to login to a workstation-user's desktop as if I were them? I ...
0
votes
0answers
69 views

Samba AD DC Authentication Problems

I'm trying to setup an AD PDC using Samba4 on Ubuntu 14.04. My endgame here is to have an AD domain with users created by LDAP that can login to the domain and use roaming profiles, so that any users ...
1
vote
1answer
55 views

Remote location management copy and install large software updates to 50 LAN

Initially posted to Stack Overflow and was directed here. I'm new to programming and am trying to write a powershell script to manage software updates. I'm in a windows domain environment with over ...
-2
votes
1answer
212 views

The security database on the server does not have a computer account for this workstation trust relationship. Error in 1 PC [duplicate]

We have a small office with 9 PCs and a Windows Server. Today one PC, Cypher shows this when trying to log in: The security database on the server does not have a computer account for this ...
0
votes
0answers
37 views

Obtain krb ticket for another user

I have a system account in my domain (DOM\sys) and it has access to service cifs/server@DOM. I want to obtain a ticket for this service using my own account (DOM\user). In other words I need sudo-like ...
0
votes
1answer
26 views

Performing Nonauthoritative restore of AD on offline DC

I have a domain controller that's been offline for 3 months. If I bring it back online normally, it will cause issues due to the tombstone life now being over the 60 day expiry. What's the best method ...
1
vote
1answer
36 views

Windows AD to disable user after incorrect login

Pardon my naïveté. I am not a technical person. We are using Windows Active Directory for user authentication, for example to login to workstations (PCs), for Citrix, etc. There is a quality ...
0
votes
1answer
53 views

Set timezone in Active Directory

I have a script that we use to add new employees to our Active directory domain and groups. We are trying to see if there is a way that we can also add timezone with the script but I am not find ...
0
votes
1answer
75 views

Verify that users are required to change their password on their first login

Active Directory has a setting that forces a user to change his password upon his next login--visible in the AD Users and Computers applet, when right-clicking a user, selecting Properties, then ...
4
votes
1answer
363 views

New Domain Controller with DNS in Windows has forwarders setup

I just installed a new Windows 2012 R2 domain controller. I was looking in the DNS Server, and there were two DNS Forwarders setup, which were other domain controllers. "Forwarders are DNS servers ...
-1
votes
1answer
103 views

DFS Namespace inaccessible when PDC is unavailable or moved

Our current setup uses two DFS servers acting as referral servers for our DFS Namespace. The data is replicated from the Live server to the DR server at our second location. The aim is to have the ...
0
votes
2answers
91 views

New Domain Controller to combine two Domains into one: Domain replication or DNS?

Background We currently have two networks, one in London, and one in Brighton. We use Office 365 for email, Lync and Sharepoint, so there is no Exchange server. Both offices are connected by a VPN. ...
0
votes
1answer
48 views

Machine based group policy to change display setting

How to change display using computer group policy?
0
votes
0answers
63 views

DNS won't respond to one DC

I have a multi site AD setup and am having issues with trust/netlogon/dns on the DNS DC in site 2. Things were fine until a month or so ago, only discovered issues today by chance reviewing logs. ...
-1
votes
1answer
42 views

Main server 2008R2 crashed. Need to copy AD from another server in same IP range

Unfortunately the main server crashed and I have re-installed Server 2008 R2 Standard in it. The server had only ADDS, DNS Services and File Services. I have the AD on a desktop computer where Server ...
1
vote
2answers
71 views

Giving access to multiple users for remote desktop

I have 50+ users whom I want to give remote desktop access to multiple VM machines. Instead of adding each individual user to "Remote desktop users" I created a AD security group & added all the ...
6
votes
1answer
56 views

How to filter settings within a GPO that only applies to Windows XP?

We have several GPOs containing many settings that have accumluated over time. I have spot-checked some of them and stumbled over settings that only apply to Windows XP (we exclusively run Vista and ...
0
votes
2answers
42 views

Group Policy to force all web traffic to a specific page OR GPO to display unclosable popup to get users attention

We have a number of tasks users need to complete over the month (time sheets, reports, etc) and I am trying to think of the best way to force users to complete these tasks. Currently, we send ...
0
votes
1answer
441 views

ADSI Linked Server: Why can I query AD in VBA, but not as a Linked Server?

After all the reading and research I've done, this seems like the most logical place to post this question: Why can I query Active Directory using VBA, but not a Linked Server in SQL Management ...
4
votes
1answer
73 views

Event ID for an Active Directory Domain Rename

My Active Directory forest has 6 child domains. As part of a security control, we are required to get alerted (e.g. using SCOM) when someone triggers a change in the domain name. My question: Is ...
0
votes
0answers
33 views

Add a computer which is outside my LAN into my Active Directory

Is it possible to add a computer with public static ip address into my active directory? Do we need to use any vpn to bring the remote computer within the network to add that computer within active ...
0
votes
1answer
39 views

“Entire Directory” option missing from Locations in “Select Users, Computers, SrvAct, or Groups” dialog

I'm a very inexperienced server admin, so if fail to provide some important information I apologize in advance. I am doing some development for a very small software company and I'm having a bit of an ...
0
votes
1answer
77 views

AAD Sync not able to connect to online service using powershell

When trying to connect to my Office 365 tenant using connect-msolservice from powershell I get the following error: Connect-MsolService : The HTTP request was forbidden with client authentication ...