A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
0answers
209 views

pfSense: Captive portal auth via Active Directory (2003)

I'm trying to set up a new firewall server. We chose pfSense and it's working nicely so far. We managed to our Windows Server 2003 Active Directory as a user Authentication Server (System -> User ...
0
votes
1answer
48 views

Windows server private shared folders

What is the best practice for sharing private home folders with the users (Windows Fileserver with AD)? I was asked this question today after someone watched this video, and it got me thinking.. ...
1
vote
1answer
55 views

is active directory only for your employees [closed]

I've always thought of active directory as being a directory of employees, but is there any reason it cant be used as a directory of customers as well?
0
votes
1answer
97 views

Best way to restore a domain controller in windows server 2003 environment

We have 2 domain controllers, the primary DC is down and It cannot login to windows due to an error: “Security Accounts Manager initialization failed because of the following error: Directory ...
1
vote
1answer
811 views

Apache kerberos authentication to Active Directory not happening. (Is KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN related?)

My goal is to have Apache authenticate authenticate against AD, without prompting for a username and password, using Kerberos. It currently always shows "401 Unauthorized", and appears to be not ...
0
votes
1answer
10 views

Can the objectGUID be specified on creation or changed afterward?

Our system links users in an LDAP store to users in a SQL database. The database has been around longer than the LDAP store though, and we'd like to bring pre-existing users from the database into ...
0
votes
0answers
56 views

Using DSCONFIGAD to bind computer objects to a specific OU using a FQ LDAP DN

The DSCONFIGAD utility for OS X has a -OU parameter that allows one to generate and bind computer objects to a specified -OU via a FQ LDAP DN argument. This is taken directly from Apple's DSCONFIGAD ...
1
vote
2answers
106 views

Active Directory user rights

I'm currently working on a ASP MVC Website solution that I retrieved from a predecessor, and I had to create an active directory machine to support the login implementation using it. Upon a user's ...
2
votes
1answer
223 views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
0
votes
0answers
15 views

SVN server - User test.user1 not found: /SVN/testrepo

My subversion SVN is causing recently lots of troubles and I can't access any repository with the newly created AD account. Let me explain briefly how everything works or it used work. My SVN ...
0
votes
1answer
227 views

Windows Server Network Shares - Non-domain users have access

I have a server with Windows Server 2012 R2. I have a drive that I want to share with the "Domain Users" group. I have set that drive to share only with that group. From a different computer that is ...
1
vote
1answer
35 views

What do I need to ldapsearch AD?

I'm attempting to test LDAP for Moodle auth, by using LDAP search. When I run $ ldapsearch -H ldaps://totally.legit.hostname "(uid=jldugger)" -b dc=example,dc=org memberOf I get back: ...
0
votes
1answer
94 views

Linux Authentication by Active Directory without joining to domain

I have a Win 2008 AD based network. I want to setup a few boxes with dual boot Win/Linux. How can I achieve to authenticate the users with existing AD in Linux? All solutions - I have found yet - ...
2
votes
2answers
972 views

Desktop Wallpaper through group policy for Windows 8 client

I Have Windows 2008R2 server with active directory. All client systems are Windows 8/8.1 Pro. I need to push corporate wallpaper through AD GPO on client system, I have created a shared folder on ...
-1
votes
1answer
24 views

Set a GPO on all users from a trusted Forest

How do I set a GPO (such as desktop background) to work on users from Forest A when they connect to Computers on Forest B. There is a bidirectional Forest Trust between the two Forests.
3
votes
2answers
177 views

How do I make it as if I've never logged into a workstation with a Domain AD user profile?

I've been working on setting up OneDrive for Business with automatic syncing and folder redirection. I got everything working, but there were some issues along the way. In dealing with those issues ...
0
votes
0answers
78 views

Create active AD user with samba net rpc user add command

I have a mixed Windows and Linux Environment. I want to create new Active Directory users with Samba tools. This command will create a new AD user, but they aren't active: net rpc user add ...
0
votes
0answers
114 views

How can I resolve element not found in AD CA?

I had to move our AD CA from server 2008 32bit to server 2008r2 64bit, both domain controllers too! I now know this was BAD. Is there any way to resolve the "Element not found" in AD CA? Or do I ...
1
vote
1answer
39 views

Limit LDAP request to AD

Is there a way to limit requests from a specific user to the AD such that he can only ask if a username or an email address exists or not? The user should not be able to request other data from the ...
3
votes
1answer
134 views

Is it possible a remote active directory authentication from local without VPN

Can we authenticate to a remotely hosted DC from local machines without VPN connection to the server. Server have Public IP & Local machines are using NAT. Currently there is no any other ...
1
vote
2answers
45 views

ADFS Metadata with Active Directory Attributes

Using ADFS on Windows 2012 R2. I have created a Relaying Party Trust that has a claim rule defined that maps a Active Directory Attribute to a named attribute in the vendors system. When I view the ...
1
vote
1answer
39 views

My GPO only runs the first time it is linked to the OU

I am attempting to distribute a .msi file via GPO to Win7 machines from a Server 2008 R2 network. I am getting a funny result. The first time I link the GPO to a OU the program loads. I uninstall ...
3
votes
1answer
192 views

AD IT Helper Permissions

My apologies if this has been asked before. If I knew the proper search terms then google would be more effective. I would like to add a user that can join computers to the domain, Install software ...
1
vote
3answers
68 views

Active directory HyperV VM to VMware

we just copied an active directory VM from an Hyper-V VM to a VMware one. This Hyper-v VM is our second active directory server (the first one is a physical server). We used Symantec Backup Exec to ...
0
votes
1answer
31 views

Windows profile is deleted when user does not log in for several days

We use a Windows Server 2008 R2 Active Directory network with Windows 7 Professional clients. After logging in a profile gets created on the computer as normal with all the usual settings, such as the ...
1
vote
2answers
109 views

Newly promoted domain controller showing many errors but dcpromo didn't complain?

I have a domain separated into four sites. In one of my remote sites, I have promoted a new DC and will be decommissioning the existing DC in a few weeks. I didn't receive any errors when I did the ...
1
vote
1answer
230 views

How Do I Connect to Active Directory Server Behind a Firewall

I'm having trouble getting LDAP queries to reach my Active Directory running on Windows Server 2012 R2 behind a Cisco PIX 506E firewall. My goal is to create a SSO environment for some applications ...
0
votes
0answers
29 views

Cannot add Domain Users to SQLServer security

I installed a win2008 server (WSQL) Its has successfully joined another Win2008 server which is the domain controller. Now back to WSQL machine, I connect it to the domain... And I install ...
3
votes
1answer
87 views

New-ADUser ADException NotSpecified

I am receiving an error when I run this powershell command to add a new user: PS > New-ADUser -Name "user1" -GivenName "test" -Surname "User" -Path "ou=Users" The error returned when run is: ...
4
votes
3answers
313 views

AD does not unlock account - even after the Lockout duration is expired

I'm facing a strange problem - domain user accounts are not being unlocked. These are the Account Lockout Policy settings: Lockout duration: 30 minutes Account lockout treshold: 10 invalid logon ...
4
votes
1answer
46 views

Forcibly Split 2003 Active Directory Domain

I am currently trying to find the most efficient way to split a single domain into two, distinct, fully functional domains. We have two sites, and several DCs. The sites, Site A, and Site B, are ...
0
votes
0answers
42 views

Apache Webserver: Map ClientCertificate to Active Directory

Using Apache Webserver 2.4 and mod_ssl and mod_authzn_ldap I'm trying to Authenticate the user by a ClientCertificate (PKI smartcard) Authorize the user by membership of certain Active Directory ...
4
votes
1answer
74 views

Group Policy Files - Active Directory

I am having a whole lot of trouble getting some files distributed across the network. My settings are: Action: Replace Source: \\[fqdn]\Repo\sqljdbcl.jar Destination: ...
-1
votes
1answer
66 views

Clone VM connected to domain with CRM 2011 on Windows 2008 R2 SP1 [closed]

After copying VM with CRM 2011 I've changed server name, performed actions in this article: ...
6
votes
2answers
1k views

Reverse DNS records not registered when using DHCP

I've stumbled upon a strange behaviour with Windows machines, which seems to be fairly consistent between all Windows versions from Vista/2008 to 8.1/2012 R2; it doesn't happen instead when using ...
1
vote
1answer
27 views

How can I quickly check number of groups in my domain?

Probably this is simplistic question but it seems that off the top of my head I have no idea how to do this. How can I get number of groups in my domain? In all domains within the forest? What is the ...
4
votes
1answer
3k views

Java 8 Update 25 Install Via GPO Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using Group Policy. When attempting to add the jre1.8.0_25.msi package in the GPO at Computer ...
2
votes
1answer
45 views

Active Directory remove user from GroupA if member of GroupB

In Active Directory, how do I efficiently remove all users from GroupA who are members of GroupB? Basically I want to subtract B from A. Have now: AAA BBB --- --- Alice Alice ...
4
votes
1answer
70 views

What is MS-Membership Transitive.LDF?

When installing ad-lds, you have the option to import several LDF files. Some of them are described here: http://technet.microsoft.com/en-us/library/cc771943.aspx. Can anyone tell me what the ...
1
vote
1answer
46 views

How to set up an authentication system to authenticate users against an existing SQL Server database

I have a pre-existing SQL Server database with login information (user names, password hashes) for thousands of users maintained by an ASP.NET website. I would like to provide an authentication ...
0
votes
1answer
150 views

libnss-ldap getent passwd - AD replies correctly but output shows local /etc/passwd

I am trying to configure libnss-ldap to provide AD authentication to my Linux Debian servers. This is working fine if user exists locally, I want to make it work for Domain users. Here is my ...
0
votes
1answer
117 views

Debian Active Directory to LDAP migration

These days I am working on LDAP and Active Directory migration. I want to migrate to LDAP but I cannot get passwords from Active Directory. I want to seemlesly migrate to LDAP, and I want a solution ...
2
votes
1answer
205 views

dsadd run from batch file fails with “The specified account already exists” when there is no existing account with the same dn

I am programmatically creating thousands of test users from a txt file containing First Name, Last Name, Username, and Password using the following command (saved as a batch file, run in cmd, modified ...
0
votes
1answer
51 views

Amazon Zocalo with Active Directory - can't login

I just setup a Zocalo site for my company using the active directory connect option. The Domain Controller we are connecting to is in an AWS VPC. I setup the zocalo site fine and it says active, but ...
1
vote
0answers
128 views

AD Authentication with SAMBA, Winbind and SSS

I'm having trouble authentication with AD to a SAMBA share on a linux server. Authentication appears to be working, but only halfway... [root@myserver ~]# wbinfo -a my_ad_user%password123 ...
1
vote
1answer
26 views

How can I know where and how a security group is triggering a logon script for some users?

The organization I work for has implemented application access and scripts via Security Groups. This is, if a person needs to access some applications or have a script run when he logs on, we add ...
2
votes
1answer
30 views

Missing DomainControllers in Active Directory Object

We are setting up a new network environment that will have two domain controllers and ran into an issue with Windows not recognizing the existing domain controllers (DC-01 and DC-02) as Domain ...
8
votes
2answers
418 views

Outline the quirks of Windows Small Business Servers (SBS)

I'm not much of a Microsoft administrator. However, I do work extensively with new and existing Microsoft Exchange deployments. That's just how the career-arc went. I'm working with a small customer ...
0
votes
0answers
22 views

Builtin group membership not updating on client machines

I have a small active directory setup which is semi-live (i.e. being used by only a few of the computers in the network), however when i try adding members to the builtin groups, and more specifically ...
-2
votes
1answer
49 views

Scripting command that can be executed on Macs to generate/remove (NOT SIMPLY BIND/UNBIND) those Macs as computer objects in Active Directory?

I have searched the stacks fairly thoroughly to find a scripting language-based command that can help me develop a script to be executed on Macs capable of actually generating (NOT SIMPLY BINDING) ...