Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

4
votes
2answers
246 views

Remove Windows Server from Domain While it is Airgapped?

I am working on a scheme to clone a production, domain-joined virtual machine, bring that machine up off the network in order to prepare it to be converted to a template. One issue that comes to my ...
-5
votes
1answer
426 views

Migrating LDAP user and password to SAMBA4 AD

As title suggests. We are migrating from OpenLDAP as user authentication to Samba 4 AD Domain. But I can't find any information on how to transfer passwords and users to Samba 4 AD. How to migrate ...
0
votes
1answer
19 views

Reload VIAccounts list with PowerCli to select a newly created group

I'm using a script that creates groups in Active Directory, and links them to my vCenter server using New-VIPermission. The trick is that it doesn't find the groups created unless I restart the script ...
0
votes
2answers
104 views

Access denied for user who has full access to some files in their own folder

I have a very similar case as this user: Access denied on some files on Win2008R2 DC share This is on a windows 2008 R2. The user has Win7 pro. The user has their own home folder on the server. ...
0
votes
1answer
58 views

what happens to the local users and groups when promoting a server to a domain controller? [duplicate]

What happens to the local users and groups when promoting a domain member to a domain controller? I have a Windows Server 2008 that I have made to a domain controller by installing AD DS, but it was ...
1
vote
2answers
187 views

Password Changes and Exchange Activesync AD lockouts

Not sure how others are doing this but the main issue we are having arises when a user changes their password on a PC. When they change it the ActiveSync on the phone does not update automatically. It ...
2
votes
1answer
66 views

How do I set “CustomAttribute6” for a regular AD user?

I'm trying to set AD attribute 6 in Powershell to update a user who has no mailbox, and isn't an exchange contact; and is only an AD user ObjectClass : user The command I'm using is: get-adobject ...
2
votes
3answers
39 views

How do I assess the capacity of my link for Active Directory needs?

I'm working for a company that has a head office and some remote sites. We have an Active Directory server in the head office and we now want all of the users in the remote sites to join and work on ...
2
votes
1answer
40 views

Testing for Active Directory Schema modification (not upgrade)

I am trying to test a schema modification. That is i need to add one of the attributes to global catalog by modifying schema , initially in a lab which is exact replica.My questions are below; -> ...
3
votes
2answers
196 views

Windows Server 2012 Migration (DNS/AD DS Standard Eval to Essentials OEM) P2V -> Do I need a Secondary Domain Controller during migration?

This is my first post on this exchange (although not my first on stack exchange), so please have patience. I am a 3rd year student intern, and I have been tasked with virtualizing the server systems ...
0
votes
1answer
55 views

Migrating SBS 2003 to 2012 standard

My company is currently trying to migrate a Windows Small Business Server 2003 to Windows Server 2012. We know the general procedure, but we want to make sure we aren't going to mess anything up ...
3
votes
1answer
75 views

windows 2008 always keep local dns in first

I have a windows 2008 system and it always keep ::1 in first of the dns setting. I can see the following in "ipconfig /all": DNS Servers . . . . . . . . . . . . : ::1 ...
1
vote
1answer
96 views

gpupdate failing when using Samba 4 AD DC

I have a Samba 4 AD domain running with 2 DCs on Centos 6.5, with a named DNS backend. I have multiple Windows 7 machines joined to this domain, which is fine. However, I can't get GPOs to apply. ...
1
vote
1answer
1k views

Authenticating Active Directory Users to Mac OS X Mavericks Server L2TP VPN Service

We have a Windows Server 2012 Active Directory Infrastructure that consists of two domain controllers. Bound to the Active Directory Domain is a Mac OS X Mavericks Server 10.9.3. The server runs ...
2
votes
2answers
155 views

How can I set an arbitrary (non default) attribute for an AD user or AD Contact?

I have AD Users, or contacts that are not Exchange Mailbox users, or contacts. I also have a SSO system (Ping Identity... technology similar to Microsoft ADFS), where it leverages the AD Schema ...
-1
votes
1answer
36 views

Accessing objects across domain

lets say i have 2 domains say t1.com and t2.com I have a client in t1.com. I need to access objects in t2.com. for e.g. i need to access an user named test in t2.com. At the same time i have an ...
-3
votes
3answers
62 views

Remove attributes from AD schema?

Can we edit a scheme in Active Directory? Scheme cannot be deleted. But is there any possibility of editing? For e.g. If the user object schema has 30 attributes, but i need only 10 attributes in ...
0
votes
1answer
35 views

RODC password replication and A/D sites and subnets

I work at a school district with about 30 school sites. Windows 2008 A/D setup - all central at the district office. In A/D, all is under one site, and no subnets defined. One A/D forest and only one ...
-2
votes
1answer
40 views

Can a site contain domain controllers from multiple domains?

For e.g. I am creating a site with 2 clients and 1 DC in it. I am setting the subnet to cover these objects. So my site say SITE1 will have 2 clients and 1 DC. So when one of these clients tries to ...
1
vote
0answers
52 views

What's the Correct Way to Implement Certificates on an RDS Farm?

We currently deploying six terminal servers in a farm that will be accessed by thin clients running Windows Embedded. The idea behind the thin clients is to have a seamless single-sign on whereby as ...
1
vote
2answers
239 views

PowerShell - finding users who are Inactive AND not disabled

I wrote this cmdlet: Search-ADAccount -filter {(enabled -eq $true)} -Users Only -SearchBase "ou=FirstOU,dc=domain,dc=com" -AccountInactive -TimeSpan 30 But it outputs an error: Search-ADAccount : ...
3
votes
2answers
232 views

Why should I not run setspn.exe on the domain controller?

I found several references (see below) on blogs that the setspn.exe utility should be run from either a client or server machine in the domain, but not from the domain controller itself. ...
3
votes
1answer
585 views

PowerShell - Finding all of users' group memberships and kicking it out of them

as title says, I have to find all the groups that the user is a member of, and deleting its membership from all of them. I've tried this: get-adgroup -filter * | where {(Get-ADGroupMember $_ | ...
2
votes
2answers
332 views

PowerShell - Limit the search to only one OU

Ive got this cmdlet and I'd like to limit the results to only one OU: Get-ADUser -Filter {(Enabled -eq $false)} | ? { ($_.distinguishedname -notlike '*Disabled Users*') } Now Ive tried to use ...
3
votes
3answers
694 views

PowerShell script that should find disabled users that are not in a specific OU outputs users from that OU as well

Hey I've got this cmdlet here: Get-ADUser -filter {(distinguishedName -notlike "Disabled Users") -and (enabled -eq $false)} -searchBase "ou=FirstOU,dc=domain,dc=com" I've built it to find disabled ...
3
votes
1answer
79 views

what happens when a domain functional level is set lower than forest functional level?

For. e.g When a forest functional level is set to windows 2008, what happens if a domain functional level is set to windows 2003? My question is, why does the rule says domain FL should be >= forest ...
2
votes
1answer
32 views

Hudson with active directory error

first question here on superuser (i'm addicted on stackoverflow). So, I'm trying to configure the active directory plugin (1.31-h1 version) on Hudson (3.0.1-b2) but without success. On the security ...
0
votes
1answer
27 views

Powershell waiting for more parameters when asking for all users from a specific OU?

I want to get all the users from OU "myusers" so I have this cmdlet right here: get-aduser -filter * -searchbase"ou=myusers,dc=domain,dc=com" But when Im running it, powershell prints a >> ...
0
votes
1answer
48 views

Simulate a DFS share for a user not on domain with a folder in path

I have a consultant whose computer is not on the domain and needs to access various network resources. Unfortunately while adding a computer to the domain is a difficult bureaucratic process (and ...
1
vote
1answer
97 views

LDAP over SSL with an EFI Fiery printer

I've got a printer with a Fiery running 8e Release 2. I can authenticate users against AD using the LDAP configuration, but I can only get it to work if I don't use SSL/TLS, and only if I use SIMPLE ...
0
votes
1answer
62 views

Do I need a User CAL for a record in AD if the user is not authenticating? [duplicate]

We are considering expanding our user provisioning to cover a large portion of the workforce that does not currently exist in AD. Our understanding is that any named user in AD requires a User CAL. ...
4
votes
2answers
90 views

Service Accounts LastLogonTimestamp

In an Active Directory domain, if I configure a Windows service on a domain member computer to start with an AD user account (aka "ye olde service account",) and the then the service stays running but ...
1
vote
1answer
91 views

Migrating Gmail to Office 365

I have been setting up Office 365 for my organization. We are currently using Gmail. I have synced our local Active Directory server w/ Office 365, as well as our domains. The problem I am having has ...
0
votes
1answer
102 views

Using LDAP/Active Directory with PIN based authentication

We'd like to integrate our service with LDAP, but because of hardware constraints, we're only allow 4 digit user ids and passwords. What would be the best practice for performing such an ...
0
votes
2answers
57 views

what happens when a DC fails? How can the clients identify DC failure? [closed]

When a DC fails, it loses the privilege to authenticate and so client will find for secondary DC closest to its site. In another scenario, client has selected a DC closest to its site by using subnet ...
2
votes
0answers
90 views

doing ODBC System DSN's from Active Directory

2008R2 Active Directory, workstations are Win7 Ent, Office/Excel 2013, Oracle 11.2. Excel fetches data from Oracle using System DSN's. Where can I put ODBC System DSN's in Active Directory? Do I ...
4
votes
1answer
170 views

AD migration from SBS2011 to 2012 R2 and new domain

We have an existing SBS2011 server, and would like to migrate to a new 2012 R2 server. Ideally, we'd like to do this in a new domain - 1. we'd like to reorganize the OUs to remove the "SBS" named ...
2
votes
1answer
224 views

Retreive the current Kerberos KVNO from Active Directory

I have a Kerberos problem with a Linux host connecting to a Windows KDC. I suspect that Kerberos key with the wrong version is to blame. One way to be shure would be to delete the SPN and create it ...
3
votes
1answer
360 views

How can I trace the source of repeated account lockout against Exchange server?

I have an AD user account that is being repeatedly and frequently locked out, I have been able to trace the lockout to the Exchange server CAS array. However I am at a loss as to how to continue the ...
0
votes
1answer
203 views

Powershell - check if all users in a specific OU are disabled, disable if not

I tried to search for it but I didn't find anything. Could someone help me out with an example of a script that would do this?
2
votes
2answers
106 views

How to have your DNS servers forward queries for internet names

I have 2 Domain Controllers / DNS servers on Windows 2012, their IPs are 10.0.1.10 and 10.0.1.11 Another server acts as the DHCP server for clients, and sets their primary and secondary DNS to the IP ...
0
votes
1answer
87 views

Folder Redirection won't load on Windows 7 Machine in Windows 2008 R2 Network

Okay so redirected profiles don't load exactly, but the computer is joined to the network and it won't display any of the users files on their desktop that are in their redirected profile. I know ...
7
votes
1answer
1k views

Reset users password in Active Directory by Domain Admin account or other service account

In Active Directory you can set and enforce rules where users have to use strong password, can't use last 5+ passwords they already had, enforce password complexity. Is there a way to enforce such ...
4
votes
1answer
826 views

How to integrate Active Directory with FreeBSD 10.0 using security/sssd?

What are the required steps to authenticate users from an Active Directory running on Windows Server 2012 R2 in FreeBSD 10.0 using sssd with the AD backend with Kerberos TGT working?
3
votes
1answer
179 views

Linux - How to control Winbind Authentication cache timeout

I have configured my linux machines (running CentOS 5.2) to authenticate against a Windows server running Active Directory. I have even enabled winbind offline logon. Everything works as expected, ...
1
vote
0answers
50 views

Windows 2012 Master & Ubuntu Bind 9 Slave & SOA

I'm kinda like the maid... I don't do Windows. But thanks to new things we're implementing, I'm now attempting replicating a single zone from our AD cluster. We had this working just fine but ...
1
vote
0answers
12 views

A linux server can identify windows AD login? [duplicate]

I have a linux server where my intranet is located. I would like that when an user on windows / linux log in the company domain (Active Directory), my linux system already identify the user login. Is ...
1
vote
1answer
21 views

dsget error probably because of users with “-” in their name

I'm trying to run a dsquery/dsget that will result in users that weren't active for a month and that are not disabled: dsquery user -inactive 4 -limit 0 | dsget user -samid -disabled ...
1
vote
1answer
109 views

How to logon with local account? RODC “There are no logon servers to process your request”

I have a site-to-site VPN, writeable DC in main office, Read-only DC in branch office. Today the VPN went down, but i couldn't log in to the read-only DC - the error message came up There are no ...
1
vote
0answers
24 views

How to setup a sharing folder with specific user accounts? [closed]

I'm looking for a step by step plan to setup my old Windows 7 laptop as a sharing center. The following features must be implemented: Access is granted, when a user succesfully logs in. Active ...