A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
0answers
42 views

Set SPN for all users in domain

I have a Windows 2008 R2 domain controller with more than 60 user accounts. Each time one of these users tries to connect to the DC authentication "falls back" to NTLM. Kerberos authentication fails ...
0
votes
0answers
17 views

SQL Reporting Denying Access to User After Move to New Group

We have a SQL Server 2008 server setup with reporting services so that users can log in and run certain reports. I have a user that was granted browse permissions to this as we had their initial ...
0
votes
1answer
47 views

Will a Windows server 2003 operate on a domain functional level 2012 domain?

I have found plenty of articles that address Server 2012 R2 on a functional level 2003 domain. What I haven't been able to find is anyone addressing weather or not a 2003 server would be fully ...
2
votes
1answer
199 views

Sysvol replication broken between Server 2008 R2 DCs

We recently added a second DC to our network at a different site. The DCs do not appear to have any difficulty communicating via the network, and AD objects (users, computers etc) are synchronising ...
3
votes
0answers
166 views

Import Powershell AD Module during MDT Task Sequence

I have written this short powershell script to rename a computer as part of an MDT task sequence: Import-Module ActiveDirectory $AdminUsername = 'domain.com\administrator' $AdminPassword = ...
1
vote
3answers
293 views

Active directory rename computer that has been disconnected

We named a new computer on the domain USER-2014. The computer was for someone who already had a computer on the domain called USER. We discontinued the old computer with name USER and are now looking ...
1
vote
0answers
114 views

Account Operators built in group and “User Cannot Change Password” property

I have a question about configuring of "User Cannot Change Password" property. Does default "Account Operators" domain group has ability to change this property? If not can it be delegated via AD ...
0
votes
0answers
21 views

How do I use simple_allow_groups with AD groups that have no GID in CENTOS 7

We just built a few test CentOS 7 boxes, and the configuration that we were using for 6.5 is not working for us. As best we can tell, it comes down to using simple_allow_groups and using AD groups ...
1
vote
1answer
34 views

Replication Issues in Active Directory - Computer Objects showing up in multiple OUs

There seems to be replication issues in the domain , but there is a strange occurrence. Some computer objects are moved to a different OU ; after a day when i searched for those computer objects in ...
0
votes
1answer
474 views

Active Directory SQL Server Random Handshake Timeouts

We've installed active directory on a new server and joined our database server and web servers to this new domain. However, randomly, we'll get the following error. What would be the cause of the ...
0
votes
1answer
58 views

One Certificate to Rule them all [closed]

I'm looking to roll out Exchange 2013. We also have various web facing properties. We have an internal domain name of ourdomain.local and an external domain name of ourdomain.com. To keep things as ...
2
votes
1answer
70 views

Submit a certificate request file from a non domain computer. How to figure out policy server parameters

I'm trying to submit a certificate request. I'm trying to do it from command line so I can run it from code. Previously I have done it by using the Microsoft Active Directory Certificate Services for ...
1
vote
1answer
70 views

Exchange 2010 - Remove AD User, Keep Email

We have a normal active directory user synchronized with an exchange mailbox. Is there anyway to keep the mailbox & all the email, but remove the active directory account, or prevent the active ...
2
votes
3answers
548 views

Creating a multi-tenant AD environment

We currently have the following environment (hosted on server 2003 and terminals servers on 2008 R2) and we need to upgrade this to their 2012 versions. We will create a new environment from scratch. ...
1
vote
2answers
138 views

How to copy/export live domain controllers to a test environment?

Let me explain out scenario: We have a totally virtualized live production system running all the production VMs in a Microsoft Failover cluster. The interesting VMs for this questions are the Main ...
1
vote
1answer
95 views

All networks (public + private + domain) became domain networks

I set up a new environment on a dual-nic set of servers. One of the physical networks has access to the internet, and uses public IP addresses. The second network is an internal network, no internet ...
2
votes
1answer
64 views

Is there an easy way to add yourself to an Active Directory group, with only Add/Remove Self permission?

At my work where there is an Active Directory / Exchange / Outlook setup (sorry I'm not a Microsoft pro), I'm trying to set up a distribution list to act like a mailing list. That means users should ...
0
votes
0answers
29 views

SSH from Windows to Linux with certificates generated by a central PKI stored in AD

I would like to have a central PKI where certificates are issued for all sorts of services and devices as well as users. I would like to push these certificates to one or more active directories. (so ...
0
votes
1answer
42 views

Active Directory User Not Seeing Public Folder

I'm putting shortcuts into the All User folder, and the Administrator of the PC can see it, but the AD user can't. Is there some setting I'm missing or what? Using Server 2012 Datacenter R2 and Win 7 ...
0
votes
0answers
33 views

RPC Ports getting reset to 5000-5002 on reboot

I've run into a very common issue with RPC Endpoint Mapper ports not being available. The default RPC ports are 5000-5002. When I edit the registry and set the ports to a wider range (say, xx100 - ...
1
vote
3answers
404 views

Batch script to export info from Active Directory (name, phone numbers, location, etc) into a csv file

The secretary at my work uses a spreadsheet that lists names, phone numbers, and locations of employees to look up info if someone asks. All this info is located in AD, but the problem is that we are ...
0
votes
0answers
41 views

EFS decrypt access denied

I have a very weird behaviour here on a Windows 7 box (in AD). The user has (good boy) stored the files encrypted with EFS on his local disk. When he wants to open a file, e.g. in Word, he receives ...
3
votes
0answers
127 views

How do I enable SAML Passive Authentication in ADFS 3.0?

For several years, I've used ADFS 2.x as a SAML IDP that works with SAML Passive Authentication. When the isPassive=true flag was set on the Request, the Response would include the following ...
0
votes
0answers
30 views

Strange behavior from demoted DC

We used to run our own domain (referred to as OLD) but are now in the process of completely removing it and using the campus wide domain (referred to as CAMPUS). We have 2 DCs still active for our ...
2
votes
4answers
75 views

Is there a shiny way to make Windows shares web accessible?

I'm new here, and I hope this isn't too much of a shopping question. I'm the under-qualified director of technology at a small college that may be acquired by a larger school. We have Office 365 ...
2
votes
1answer
92 views

Active Directory control client hyper-v permissions

I've done lots of googling and the only thing I find relates to, I believe, Hyper-V server and not client Hyper-V. The scenario is that we have a domain here at the college and we are trying to use ...
1
vote
1answer
453 views

Winbind Centos wrong UID/GID

Here's the scenario: I have two machine: Ubuntu, running ldap to authencticate users CentOs, uses winbind to authenticate users to mount homedirs I use fstab and nfs shares. The problem is this: ...
0
votes
2answers
50 views

Restore User or Backup exec settings after demoting

Just don't mess with a server when you're not feeling focused, because you can end up something like i did: I have a server (WS2003 R2) which acts as backup server (backup exec 2010). We needed a ...
1
vote
3answers
222 views

Office365 and Active Directory Integration (and On-premise Exchange Disintegration)

We used to have on premise exchange server which is integrated with active directory (the PDC and Exchange Server are all the same Windows 2008 small business server). We migrated our Exchange to ...
0
votes
1answer
65 views

How to add password authentication to working OpenVPN server?

I have already working OpenVPN server, which connects 25 branches. Config is below. Our company has outsourcing developers, and they need to access servers in DMZ. How do I add N number of ...
3
votes
1answer
161 views

How to authenticate a user from an external Windows Domain (Active Directory)

I have a service (AcmeService) running on a domain (ACME.COM) and a user running in another domain (DISNEY.COM). mickey@disney.com wants to authenticate with the AcmeService. The service knows about ...
0
votes
1answer
422 views

How do i get centos 7 to use uids and gids from active directory?

I'm preparing for an eventual upgrade from CentOS 6 to CentOS 7. Right now, in version 6, we just use LDAP mapped to AD for authentication. This then uses the UID and GID from the Active Directory ...
1
vote
2answers
41 views

restrict media access by user

I recently took over a network and I'm still pretty raw in regards to AD and group policy. I've been trying to use group policy to restrict CD burning rights to only 3 users and only their 3 ...
0
votes
0answers
33 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...
0
votes
0answers
69 views

Restoring read only domain controller from VM checkpoint

I have several RODC on remote sites, and sometimes power failures corrupts ADDS database which takes some time to recover. I'd like to move RODC to virtual machine (on same server) to be able in case ...
6
votes
1answer
189 views

How can I generate a list of the security groups a set of users belong to?

I have been asked to generate a list of the security groups (so specifically not the distribution groups) that a list of approximately 50 users belong to. I have a list of users, users.txt that ...
0
votes
1answer
54 views

what happens to sql server if the active directory server goes down?

What happens to sql server if the active directory server goes down and the sql agent services is logged on as a windows user.
0
votes
1answer
173 views

Host (A) record (DNS) updated with wrong IP address

I recently installed a new Domain Controller running Windows Server 2012 (called "srv3") in a domain with two existents DCs that are running Windows Server 2003 (called "srv1" and "srv2"). All roles ...
3
votes
1answer
50 views

Is dual directory integrations possible with Windows?

In the Mac world, you can integrate OS X systems with dual directories so that OS X looks towards Active Directory for authentication and OpenLDAP for OS X managed preferences. Is the following ...
0
votes
1answer
16 views

How can configure IIS to service to AD users only?

I have an intranet in my company and I have a domain controller that users authenticate with this,I have an internal web site (IIS) I want limit this site that services only to my domain users.How can ...
1
vote
2answers
2k views

PBIS Open AD authentication stops working on ubuntu with errors: “user accout has expired” and “is your account locked?”

We have been using PowerBroker Identity Services Open to authenticate active directory users from ubuntu hosts successfully for six months. Recently AD authentication stopped working on several ...
0
votes
0answers
21 views

Priorities or ambiguos DNS reverse zone with Bind

In my internal DNS running on Bind9 all machines are available at up to 3 different domain names, i.e. all machines are listed as machine.legacy.domain and machine.new.domain. Some machines are joined ...
0
votes
0answers
120 views

Cannot configure Exchange Server 2010 on mobile device because of “the connection to the server failed” error

I have a server with Exchange Server 2010 in a Win2008R2 domain. The fact is that whenever I try to configure Exchange access from a mobile device I get the following error in the event viewer: Log ...
1
vote
1answer
61 views

Active Directory Sync to Remote Domain

I have a client that needs to sync certain object AD info from their secure domain to our domain. Something like the Windows Azure Directory Sync Tool, but just not for Azure. I would like to use ...
2
votes
2answers
286 views

Authenticated Users builtin group in AD deleted

I have a large-ish AD setup, where one of the already fired admins, for reasons unknown deleted the subject group. Been googling for a while, but besides explanations what the group is for and ...
0
votes
1answer
34 views

Multi-Site AD design

I have a new client with 3 sites and I want to join/combine/trust ADs. The setup is as follows: Site 1: No AD. Site 2: Hosted VMs on a dedicated local domain (for the 3 servers in the VLAN only). ...
0
votes
0answers
154 views

Site to site active directory for hyperv replication

We have two dedicated servers across two different sites. They host hyper v virtual machines for email hosting etc. I'd like to have hyper v do replication between them and so I have a copy elsewhere, ...
0
votes
1answer
136 views

SBS 2003 - Rename Domain Netbios Name Without Renaming Active Directory Domain Name

I have client running a Small Business Server 2003 R2 network with a strangely named domain. The fully qualified domain name is a straightforward contoso.local. The domain netbios name (shown as ...
0
votes
0answers
32 views

How to get free hours of a user using EWS?

I'm trying to find the free/busy information of a user in my Exchange Organisation. I'm using GetUserAvailability operation for this purpose. This method is returning only busy and tentative ...
3
votes
1answer
176 views

SID in AD - SID from psgetsid?

Wondering if anyone can shed some light on some SID confusion. Currently having an issue with some policy applying to a few machines that were all based off the same image. One of our admins, ran ...